My son provided a one time code of my microsoft account to a hacker

Eliza Giner 0 Reputation points
2026-09-14T21:53:13.04+00:00

My son provided a one time code to enter in my microsoft account to someone unknown as he though he was going to help him with some games, and now my account has a different email to recover the password. We have been able to get inside of the account using my telephone number, but we cannot see where is the email included from the hacker. When we try to add original email, it says that the account already exist but we cannot change the email from the hacker by ours.

How can we solve the problem?

Microsoft 365 and Office | Subscription, account, billing | Other | Other
0 comments No comments

1 answer

Sort by: Oldest
  1. Jeronimo Fuerte 46,090 Reputation points Independent Advisor
    2026-09-14T23:34:44.61+00:00

    Sorry to hear that you’re having trouble with this situation. Since you have already been able to regain access to the Microsoft account using your phone number, I recommend securing the account immediately.

    First, change the account password and review the recent sign-in activity to make sure there are no sessions or activities that you do not recognize.

    Then, check both the aliases associated with the account and the security information. These are two different settings in a Microsoft account.

    If the attacker changed the primary alias, you can add a new email address as an alias, make the new address the primary alias, and then remove the attacker’s alias.

    However, there is an important limitation regarding your original email address. If your original address was a Microsoft address such as @outlook.com, @hotmail.com, @live.com, or @msn.com and the attacker removed it from the account, Microsoft states that the address is permanently deleted as an alias and cannot be associated with a Microsoft account again.

    Also check the account’s security information and remove any recovery email address, phone number, or verification method that you do not recognize, but make sure you add and verify your own security method first.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.