Hacked and Verification Email Changed

Use the Microsoft Sign-in Helper first. It is the primary recovery path for a hacked Microsoft account and can either provide self-help steps or offer the option to talk to an agent.

If access is still blocked, follow this order:

1. Scan the PC for malware before changing anything
   • Open Windows Security.
   • Go to Virus and threat protection.
   • Select Scan options > Full scan > Scan now.
   • This matters because Microsoft recommends a full scan before changing the password.
2. Try to change or reset the password
   • If sign-in still works anywhere, change the password immediately.
   • If sign-in does not work, use the password reset flow.
3. If the verification options are no longer recognized, use the account recovery path
   • If two-step verification is not turned on and the listed recovery email or phone is not recognized, use the Sign-in Helper.
   • If completing the Microsoft account recovery form, a working email address is required so Microsoft can respond about the request. Microsoft states it can be any active email account that is accessible.
4. If two-step verification was turned on and none of the alternate verification methods are accessible
   • Microsoft states support agents cannot send password reset links or access and change account details.
5. After regaining access, review account settings
   • Check connected accounts, forwarding, and automatic replies, because Microsoft may reset some settings after compromise.

For suspicious Microsoft account emails, messages from the domain @accountprotection.microsoft.com are valid Microsoft account notifications.

• How to recover a hacked or compromised Microsoft account
• Help with the Microsoft account recovery form
• Can I trust email from the Microsoft account team?
• How to help keep your Microsoft account secure