Security info being changed by someone else

If the change was not requested, report it from the pending security change screen immediately.

1. Sign in to the Microsoft account Security page.
2. On the Your security info change is still pending window, select let us know.
3. Follow the prompts to report that the change was unauthorized.

Key points:

• The 30-day process cannot be expedited unless the request is canceled.
• If all security info was removed and replaced, the account is put into a restricted state for 30 days.
• Microsoft sends notifications during that 30-day period to the original security info to alert about the change.
• If 2-factor verification was turned on, access is more limited during the pending period. In that case, the options are to wait 30 days or cancel the request if that option is available.
• If the change was made personally, the pending window also has cancel this request. That option is only for changes initiated by the account owner.

Additional checks:

• Review recent sign-in activity on the account to see whether there were unfamiliar sign-ins in the last 30 days.
• If there is concern that the account was accessed by someone else, change the password and update security settings from the Security settings page.

• What does “Security info change is still pending” mean?
• Check the recent sign-in activity for your Microsoft account
• Why is Microsoft texting me?