My Microsoft account was hacked and the password and recovery information were changed

pezh sharafi 0 Reputation points
2026-09-17T10:32:58.8766667+00:00

My personal Microsoft account has been compromised by an unauthorized person.

The attacker changed my password and also changed the recovery information associated with the account. I no longer have access to the recovery method that is currently shown, so I cannot complete the normal sign-in or password-reset process.

I am the original owner of the account and need help understanding the correct official process for recovering it after the security information has been changed.

I have already tried the standard account recovery options, but I am unable to regain access.

Could someone please explain the appropriate Microsoft account recovery procedure for a compromised account when the attacker has changed both the password and recovery information?

I can provide ownership verification privately through Microsoft's official recovery process if required.

THIS IS URGENT

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

2 answers

Sort by: Oldest
  1. AI answer

    2026-09-17T10:33:18.77+00:00

    The official recovery path is:

    1. Start with the hacked account recovery flow using Microsoft’s sign-in helper tool. It asks for the account email address or phone number and then either provides the correct self-help path or offers the option to talk to an agent.
    2. Scan the PC for malware before changing anything else. In Windows Security, open Virus and threat protection → Scan options → Full scan → Scan now. This matters because changing the password on an infected device can expose the new password again.
    3. Try to reset the password. If sign-in is still blocked because the attacker changed the password and recovery details, use the Microsoft account recovery form.
    4. Submit the recovery form with a working contact email. Microsoft sends the result to that working email address within 24 hours.
      • If Microsoft verifies the account, instructions to sign back in are sent to that same working email.
      • If Microsoft cannot verify the account, the form can be retried up to two times per day.
    5. If access is restored, immediately review account settings that are commonly changed after compromise, especially:
      • connected accounts
      • forwarding
      • automatic replies
    6. If there was an unusual sign-in alert and the account is still accessible anywhere, go to Security basics → Review activity and mark suspicious events as This wasn't me or Secure your account. Then change the password from Security basics.
    7. If the account is blocked, use the Sign-in Helper for Outlook.com account unblocking. If unblocking by security code or password change does not work, continue with the Microsoft account sign-in recovery guidance.
    8. If self-service does not restore access, use Contact Microsoft Support and select Get Help, then Contact Support for the best support option.

    Important limits in the official process:

    • Microsoft support agents cannot send password reset links.
    • Microsoft support agents cannot access or change account details.
    • Recovery depends on successful verification through the official recovery process.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. DaveM121 935.1K Reputation points Independent Advisor
    2026-09-17T11:04:49.0633333+00:00

    I wish I had better news for you, this forum is just a user to user forum, for security purposes, no-one here has any account access, when a Microsoft account is hacked, if the hackers change the associated data like the recovery Email... etc., then that account is usually no longer recoverable, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered.

    https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.