Microsoft account hacked and Email changed

Use the hacked-account recovery flow immediately.

1. First, scan the PC for malware before changing anything. Microsoft’s guidance says to run a full antivirus scan before changing the password.
2. Start the Microsoft hacked-account recovery process and enter the original email address. The Sign-in Helper can show the available recovery options and may offer the chance to talk to an agent.
3. If sign-in still fails, use Forgot my password on the sign-in page and select I think someone else is using my Microsoft account.
4. If prompted to review security activity, go to the Security basics page and use Review activity. For any sign-in that was not authorized, select This wasn’t me or Secure your account.
5. If the recovery flow allows access again, immediately change the password and then review account settings such as connected accounts, forwarding, and automatic replies.

Important limits from Microsoft:

• If two-step verification was turned on by the attacker and none of the alternate verification methods are accessible, support agents cannot send password reset links or change account details.
• The account recovery form is the next path when normal reset options do not match the account, and Microsoft reviews the submitted answers and responds within 24 hours.
• Old receipts, gamertag details, old password knowledge, and Microsoft emails can help when answering recovery questions, but they are not a direct override by support.

For the recovery form, gather as much exact account history as possible, especially:

• old passwords used on the account
• Outlook/Hotmail contact names and exact email subject lines, if applicable
• Skype or Xbox details if the account used those services
• a working contact email to receive the recovery result

Do not post screenshots, purchase details, codes, or personal account information publicly.

References:

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• Help with the Microsoft account recovery form
• I can't sign in to my Microsoft account