I guess my account is hacked

Follow these steps to regain access and secure the account.

1. Check common Authenticator issues
   • Make sure Microsoft Authenticator is unlocked on the phone.
   • Confirm notifications are enabled for the app and not set to silent.
   • Ensure the phone has a working internet connection (try switching between Wi‑Fi and mobile data).
   • Verify the date and time on the device are correct.
   • Update to the latest version of Microsoft Authenticator.
   • If still unable to approve, use any SMS or email code options shown during sign‑in instead of the app.
   See: Troubleshoot problems with Microsoft Authenticator.
2. If the password is known but security info is the problem
   • Sign in to the Advanced security options page if possible.
   • Select Add a new way to sign in or verify and add a new phone, email, or Authenticator method.
   • Confirm the code sent to the new method.
   • Remove any unrecognized or attacker‑added phone/email from the security info.
   Steps are in: Troubleshoot Microsoft verification code issues.
3. If all security info is lost or controlled by someone else
   • Start sign‑in and when asked to verify, choose I don't have any of these.
   • Follow the flow to replace security info.
   • After replacement, there is a 30‑day wait before full sign‑in is allowed. During this time, if old security info is found and used, it cancels the change.
4. If the account is likely hacked
   • First, scan all PCs/phones used with the account for viruses or malware and clean them.
   • Then change or reset the password using the official flows:
     • If sign‑in works, change your password.
     • If sign‑in fails, reset your password.
   • After regaining access, review:
     • Connected accounts
     • Forwarding rules
     • Automatic replies and remove anything unfamiliar.
   Full guidance: How to recover a hacked or compromised Microsoft account.
5. If username/password no longer work at all
   • Use the Recover your account page: Recover your account.
   • Enter the email/phone/Skype name.
   • Choose where to get a security code and complete verification.
   • Set a new password.
   • If the message “We couldn't find an account with that username” appears, use any other alias/phone on the account or contact support from there.
   Details: My username and password have stopped working.
6. When nothing works (codes not received / form failing)
   • Try password reset or recovery in InPrivate/Incognito mode, a different browser, and a different network.
   • If still blocked, complete the account recovery form at https://account.live.com/acsr using the guidance in Help with the Microsoft account recovery form (linked from the verification issues article).
   • If the form repeatedly fails and security info was replaced by an attacker, there may be no additional method to recover the account beyond that automated process.
7. If verification codes are going to a hacker’s alias
   • If access is still possible, go to Manage how you sign in and remove any unknown email aliases.
   • Then add a new secure verification method (Authenticator, SMS, or email) and use it going forward.
   A similar scenario and steps are described in: My account got hacked. - Microsoft Q&A.
8. If still unable to sign in or unblock
   • Use the Sign-in helper: Sign-in helper.
   • If that fails, go to Contact Microsoft Support, sign in with another Microsoft account, and choose a category such as “Manage account security” to start a chat with a support agent.

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• How to recover a hacked or compromised Microsoft account
• Unblock my Outlook.com account
• Troubleshoot problems with Microsoft Authenticator
• My username and password have stopped working
• My account got hacked. - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• I need to speak with a real person and it seems impossible. - Microsoft Q&A