My Microsoft account has been hacked. Money stolen!

Take these actions immediately:

1. Secure the device first.
   • Run a full malware scan before changing the password.
   • In Windows Security, open Virus and threat protection → Scan options → Full scan → Scan now.
   • This matters because changing the password on an infected PC can expose the new password again.
2. Start Microsoft account recovery.
   • Use the sign-in helper.
   • It asks for the email address or phone number and either provides self-help steps or offers the option to talk to an agent.
3. Change or reset the Microsoft account password.
   • If sign-in still works, change the password immediately.
   • If sign-in does not work, use the password reset flow.
   • Use a strong password.
4. Check for account changes made by the attacker.
   • Review connected accounts, forwarding, and automatic replies and remove anything unfamiliar.
   • Also review recent sign-in activity on the recent activity page to see where the account was accessed.
5. Protect the payment method.
   • Contact the bank or payment provider immediately and report the card or payment information as stolen or compromised.
   • Ask them to prevent further charges. The guidance specifically says that only disputing charges does not prevent more fraudulent charges.
   • Request a new card, because a compromised card number increases the risk of more fraud.
   • Update any legitimate automatic payments after the card is replaced.
6. Investigate and dispute suspicious charges.
   • Check account statements for unknown transactions.
   • If fraudulent transactions are found, initiate a dispute with the bank or card company.
7. If identity theft is suspected, act beyond the Microsoft account.
   • Close any accounts accessed fraudulently.
   • Put a fraud alert on credit reports.
   • File a police report and keep records of calls, emails, and letters.
8. If more help is needed.
   • Use Contact Microsoft Support or the support option offered by the sign-in helper.
   • Support agents cannot send password reset links or change account details for security reasons.

References:

• How to recover a hacked or compromised Microsoft account
• How to investigate a billing charge from Microsoft
• What to do if your credit or debit card info is stolen
• Protecting yourself from identity theft online
• What happens if there's an unusual sign-in to your account
• Help protect your Outlook.com email account