what can i do if my account gets hacked

If the sign-in email was changed by the attacker, act in this order:

1. Run a full malware scan on the PC before changing anything.
   • Open Windows Security.
   • Go to Virus and threat protection.
   • Select Scan options > Full scan > Scan now. This helps prevent the attacker from capturing the new password again.
2. Use the Microsoft account recovery flow.
   • Start with the sign-in helper.
   • If the account’s email address was changed by the attacker, use the recovery form at https://aka.ms/recovermyaccount.
3. If access is restored, immediately change the password.
   • Use a strong, unique password.
4. Review account changes made by the attacker.
   • Check connected accounts.
   • Check forwarding.
   • Check automatic replies.
5. Check the account’s recent activity.
   • Review the Recent activity page and report any sign-ins that were not done by the account owner.
6. Add or update security verification methods.
   • Go to Advanced security options.
   • Select Add a new way to sign in or verify.
   • Make sure phone numbers and email addresses used for verification are current.
7. If the account is blocked because of unusual sign-in activity, use the Sign-in Helper to unblock it.

Important:

• Microsoft may send unusual sign-in alerts by email or text and may require a security code.
• A legitimate unusual sign-in email comes from ******@accountprotection.microsoft.com.
• Support agents cannot send password reset links or directly change account details.

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• How to help keep your Microsoft account secure
• Unblock my Outlook.com account
• What happens if there's an unusual sign-in to your account