Microsoft account compromised: primary alias changed and original email no longer recognized

Question

Microsoft account compromised: primary alias changed and original email no longer recognized

Twinkle Sharma 20

My personal Microsoft account appears to have been compromised within the last 2 hours.

An unauthorized person changed my account's primary alias to an unfamiliar email address and deleted my original email address from the account's security information. I did not make or authorize these changes.

I received a Microsoft security notification confirming that the primary alias was changed and that my original security information was deleted.

The problem is that my original email address now shows “We couldn't find an account with that username” when I try to sign in. Because the primary alias has been changed, the Microsoft Sign-in Helper also cannot recognize my original email address, so I cannot use it normally to recover the account.

I have already contacted Microsoft Support, but I was directed back to the Sign-in Helper, which does not work because the original username is no longer recognized.

Could someone please advise me on the correct recovery process for an account where:

The primary alias was changed without authorization;
The original email was removed from the security information; and
The original email now reports that the account does not exist?

This happened very recently, so I would appreciate guidance on the appropriate recovery/escalation process.

I will not post my password, verification codes, recovery codes, or other private security information here.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Hi @Twinkle Sharma

I’m sorry this happened. Because the primary alias was replaced, your original email may no longer identify the account, so repeatedly entering it in the recovery form is unlikely to move the case forward.

Please contact Microsoft Support again from another working account and describe the issue specifically as an account takeover where the attacker replaced the primary alias. Provide your existing case number and ask whether the case qualifies for account-takeover review. Keep the Microsoft security notification, previous account details, purchase history, and device information ready, but submit them only through a private support channel.

Microsoft documents that support agents cannot directly reset passwords or change account details, and forum contributors cannot access the account. Meanwhile, scan the affected devices for malware and secure any other accounts that used the same password

Thank you for your understanding