Microsoft 30 day pending security details loop

Question

Microsoft 30 day pending security details loop

Ibrahim siddiqui 20

Hi,

Hope you're doing well.

Ok so on the 5th of August I got an email stating that an email was added to my security settings and that my previous security settings were removed including my email, passkeys and my authenticator login. This was an email that I hadn't recognized so I knew that my account was compromised.

I first went through the account recovery loop where i'd get I'd have to put in my previous passwords and other details and such for me to reset my password. That went unsuccessfully however as the hacker had disabled sign in with password.

I then went through the contact us loop multiple times and finally got to speaking to a live agent. They then sent me to the account recovery page again which i filled out again, then I got another email from support asking me to do another different account recovery form which I filled in (for the second time that day, I didn't know there was a limit to how many I could send), I then got an email telling me to wait 24hrs and fill it again.

After waiting the requisite time I filled it in again, then got a reset password email for the second time. I then reset my password and tried logging in which worked. Now As I tried to change my security settings again to try to get back my account, the account is put into the 30 day delay and an email is sent to the hackers email stating that there is a change to security settings. Now they can just cancel my request and I'd have to go through this loop again and again.

My first question is that why wasn't the account put into the 30 day security delay when my details were removed by the hacker and their account added ?

My second question is why was the 30 day security delay thing triggered when I changed my security settings back to how they were ?

My third question is how can I get out of this loop of the hacker just being able to cancel my request to change security details?

Note I have purchases on the hacked account, not via a card but codes that I redeemed.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

@Ibrahim siddiqui

I am sorry that you lost access to your account and are having to go thru the Microsoft Security Maze with no clear results.

why wasn't the account put into the 30 day security delay when my details were removed by the hacker and their account added ?

Because the hackers had control of your account. To Microsoft Security it just looked like the legitimate owner of the account was making changes. This does not trigger a Pending Request.

why was the 30 day security delay thing triggered when I changed my security settings back to how they were ?

Because at that time you were not the current owner of the account. i.e. You were attempting to take back ownership.

how can I get out of this loop of the hacker just being able to cancel my request to change security details?

If you have gained temporary control of the account (it sounds like you have) then even if the hackers get a notification about a Pending Request, they will not be able to cancel it. Only the person who initiated the Security Change can cancel it.

https://support.microsoft.com/en-us/accounts-billing/manage/what-does-security-info-change-is-still-pending-mean