Managing personal Outlook.com account settings, security, and privacy
The account should be treated as compromised.
- Do not use the text option for that phone number.
- Go to the Microsoft account Security basics page and select Review activity. If the sign-in or purchase was not yours, mark it as This wasn't me or select Secure your account.
- If access is still possible, change the password immediately from Security basics and create a strong password.
- If sign-in is blocked or the security info shown is not recognized, select I don't have any of these during sign-in and follow the prompts.
- Use the hacked account recovery flow: Start. This tool can provide self-help steps or the option to talk to an agent.
- Before changing the password, run a full malware scan on the PC used with the account: open Windows Security → Virus and threat protection → Scan options → Full scan → Scan now.
- After access is restored, check account settings that attackers often change, including connected accounts, forwarding, and automatic replies.
Important points:
- If a verification code was received but not requested, it can mean someone is trying to access the account.
- Do not respond to codes that were not requested.
- If the phone number offered for verification is not recognized, confirm the sign-in email address is typed correctly. If it is correct and the security info is still unfamiliar, account recovery is required.
References: