Recovering Account

Laith Yousef 0 Reputation points
2026-08-09T17:06:24.2066667+00:00

I recently had my Microsoft account hacked, the primary email was changed and whenever I would try to log into my account it would say that it doesn't exist, then when I clicked on create account and added that email, it would say account already exists. I contacted Microsoft support and they found that there was indeed suspicious activity and they suspended the account, they then wrote me an email saying "If you have an XBOX profile associated with this account, you may submit a new case with your Gamertag and XBOX network device ID so the information can be reviewed" but whenever I did submit my case it would resend the exact same email. What can I do to regain access to my data? I have years of data on it and I would really like to get it back. If they need evidence I would be glad to give it to them.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

1 answer

Sort by: Oldest
  1. AI answer

    2026-08-09T17:06:42.58+00:00

    The supported recovery path is limited to Microsoft’s account recovery process.

    1. Start with the compromised-account flow and review account activity if access is still possible. On the Security basics page, select Review activity. If suspicious sign-ins appear, use This wasn’t me or Secure your account.
    2. If sign-in no longer works, use Forgot my password and choose I think someone else is using my Microsoft account.
    3. If the sign-in alias was changed and the account appears not to exist, use the Account recovery form and enter the original account details. Complete it from a device and location previously used for that account if possible.
    4. Include as much accurate information as possible in the recovery form. Helpful details can include old passwords, Outlook/Hotmail contacts and exact email subject lines, Skype details, and Xbox console hardware ID if that account used Xbox.
    5. If verification options shown during password reset are unfamiliar, use the Sign-in Helper tool.
    6. After submitting the recovery form, results are sent to the working contact email provided in the form within 24 hours. If verification fails, the form can be retried up to two times per day.

    Important limits:

    • Support agents are not allowed to send password reset links or access and change account details.
    • If two-step verification was enabled and none of the alternate verification methods are accessible, recovery cannot be completed through support.
    • If Microsoft already suspended the account because of suspicious activity, the recovery form and sign-in recovery flow are still the documented path.

    If access is regained, immediately:

    1. Run a full malware/antivirus scan on the PC before changing the password.
    2. Change the password to a strong new password.
    3. Review account settings such as connected accounts, forwarding, and automatic replies.

    If a Microsoft security email was received, messages from the Microsoft account team using the @accountprotection.microsoft.com domain are legitimate.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.