If the sign-in email and security methods were changed, use Microsoft’s official recovery flow immediately:
- Start the Microsoft Sign-in Helper. It asks for the account email or phone number and then either provides self-help steps or offers the option to talk to an agent.
- Before changing or resetting anything, run a full malware scan on the PC:
- Open Windows Security
- Go to Virus and threat protection
- Select Scan options > Full scan > Scan now
- After the scan, try to change the password if sign-in still works anywhere. If sign-in does not work, use the password reset path.
- If Microsoft shows unusual activity on the account, go to the Security basics page and review recent sign-ins. For activity that is not recognized, select This wasn't me or Secure your account.
- If recovery requires the account recovery form, provide as much accurate information as possible, such as previous passwords and other account details.
- If the self-help flow does not restore access, use the support option offered by the Sign-in Helper or the customer support contact page.
If the account is temporarily blocked because of unusual sign-in activity, use the Outlook.com Sign-in Helper unblock flow first.
After access is restored, check account settings that attackers commonly change, including connected accounts, forwarding, and automatic replies.