A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
My main Microsoft account has been Compromised and each time i try to login the sends the Recovery Routes to Unknown Email (the hacker's email)
I am seeking help regarding my Microsoft account "****@gmail.com"** that appears to have been compromised.
For years I used this account for Microsoft services, recently I lost access to the account. When I attempt to sign in or recover it, I encounter the following issues:
- Microsoft says "We couldn't find an account with that username" when I enter ******@gmail.com.
- In some recovery flows, Microsoft attempts to send a verification code to an email address that does not belong to me: ******@dsdnamyrrh.com
- I have never owned, created, or had access to that email address.
- I am no longer able to sign into any Microsoft service using ******@gmail.com.
Find below an example of me trying to login and getting that hacker's email shown:
I searched my Gmail account and found legitimate Microsoft security emails sent from ******@accountprotection.microsoft.com. Find below images of the emails I recieved. These emails show that security information on the account was modified. Specifically:
- "Microsoft account security info was added"
"Microsoft account security info was deleted"
Additionally, this Microsoft account was configured in Microsoft Authenticator on my iPhone. Before losing access, I do not recall receiving any unexpected sign-in requests, approval prompts, MFA requests, or security warnings through the Authenticator app. Because of this, I am confused as to how the security information on the account could have been modified without my knowledge. If the account was compromised, I would appreciate any clarification regarding whether an attacker could have changed the account's recovery information, aliases, or passkeys without triggering a notification through Microsoft Authenticator.
The emails reference the Microsoft account associated with my Gmail address and indicate that passkey/security information was changed.
Because:
- My original email is no longer recognized,
- Recovery now points to an unknown email address,
- Microsoft security notifications show security changes,
I believe the account may have been taken over and that the original sign-in alias or recovery information may have been changed without my authorization.
I can provide:
- Screenshots of the Microsoft security emails
- Information about the Minecraft account associated with this Microsoft account
- Additional ownership details if required
Has anyone experienced a situation where a Microsoft account alias was changed or removed after a compromise? Is there a Microsoft team that can investigate unauthorized alias changes or account takeovers when the original email is no longer recognized?
Thank you.The emails reference the Microsoft account associated with my Gmail address and indicate that passkey/security information was changed.
Because:
- My original email is no longer recognized,
- Recovery now points to an unknown email address,
- Microsoft security notifications show security changes,
I believe the account may have been taken over and that the original sign-in alias or recovery information may have been changed without my authorization.
I can provide:
- Screenshots of the Microsoft security emails
- Information about the Minecraft account associated with this Microsoft account
- Additional ownership details if required
Has anyone experienced a situation where a Microsoft account alias was changed or removed after a compromise? Is there a Microsoft team that can investigate unauthorized alias changes or account takeovers when the original email is no longer recognized?
Thank you and please respond to me as fast as possible because this is taking a heavy toll on me.