Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
- Run a full malware scan on the PC before changing anything. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
- Use the Microsoft sign-in helper. It asks for the account email address or phone number and then either shows the correct self-help path or offers the chance to talk to an agent.
- If sign-in is still possible, go to the Microsoft account Security basics page and select Review activity. For any sign-in that was not authorized, select This wasn't me or Secure your account.
- Change the password immediately from Security basics > Change password. If sign-in is no longer possible, use Forgot my password and choose I think someone else is using my Microsoft account.
- Check account settings that attackers commonly change: connected accounts, forwarding, and automatic replies.
- Add another way to sign in or verify identity on Advanced security options by selecting Add a new way to sign in or verify. Keep phone numbers and email addresses up to date.
- If recovery keeps failing, use the account recovery help and contact support path. Support can route the case to the best support option, but support agents are not allowed to send password reset links or access and change account details.
The supported facts do not confirm the claimed 30-day hold behavior, the stated expiration date, that the attacker is blocked from reading email, that the account can still be used normally, or that recovery decisions are made by an AI bot. The reliable next step is the official sign-in helper and recovery flow.