Account Stolen Despite 2FA - Completely locked out of account - Silence from Microsoft

Cristobal Martinez 0 Reputation points
2026-08-11T18:02:47.6533333+00:00

I will be clear and try to keep my anger out of this. My account, despite having 2FA attached, was stolen from someone in spain last week. They managed to login, DESPITE me having 2FA on my account....they also managed to change the primary account information, remove security checks, removed secondary recovery email and removed the useless 2FA all within the span of about 5 minutes according to the email threads I got. They managed to do all of this and locked me out of saying No to ANY of it when I woke up the next morning. I tried to get my account back and of course the person who stole it declined the request I made....Microsoft gladly complied and rejected my attempt to get it back.

So I pushed through account recovery...it was successful after 48 hours. I had the account for less than 10 minutes before it was disabled. After it was disabled, my request to change the contact information back was all rejected. My synced accounts on 2 devices ceased to work properly. All the Microsoft stuff I paid for of course stopped working. My m365 stopped working. I lost access to my onedrive. I lost access to EVERYTHING. Meanwhile every attempt to regain control of my account was denied and finally the FINAL insult. I followed the sign in helper and followed the prompts and filled out the account recovery...I got an email saying "Because the contact is the same as the sign in, it may not work"...I had access to the email address in question so I didn't think much of it. I waited 2 DAYS! No word...my machines barely work. Constant crashes because of the attempts of trying to sign in nonstop. Unable to swap it over to a new account. Lost all my data....etc. So i had to go out and setup a new M365 so I can ACTUALLY WORK. More money spent..

So today I try AGAIN to recovery the account and look at that! It was BLOCKED. I have ZERO RECOURSE HERE. What the ACTUAL HECK AM I SUPPOSED TO DO! You all let this person login without the 2FA, you let them strip EVERYTHING from the account without so much as a pause. A pause I WILL REMIND YOU that I WAS FORCED TO DO when I recovered the account! Then on top of it all you DISABLED MY ACCOUNT despite admitting in the recovery that it appears to have been compromised. And now you are blocking my absolute last recourse of account recovery. Leaving me utterly SCREWED.

What the heck Microsoft. Seriously WHAT THE HECK ARE WE SUPPOSED TO DO HERE. You let them in W/O NEEDING THE MFA. What is the POINT OF HAVING IT!?

Microsoft Security | Microsoft Authenticator

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.