Share via

Got an alert about an unusual sign-in to my Microsoft account but can't find that account!

Jason Wong 10 Reputation points
2026-01-12T23:22:56.4066667+00:00

Hi,

I'm having a really weird issue with a Microsoft account belonging to me. I got an alert from Microsoft to one of my personal gmail accounts that there was an unusual sign-in to a Microsoft account of mine from an IP from Brazil but it said that account was "ja*****" with no domain name listed. I have a university e-mail account that's registered to a Microsoft account but when I signed in (after changing the password) it didn't show that sign in attempt in the history.

I remembered that years and years ago (I got this e-mail address 19 years ago) I registered this university e-mail account with Microsoft as both a work/university account and a personal account accidentally and I could access both accounts (I confirmed this used to be possible with my university IT dept) but now I can only access the work/university account. I'm worried that someone was able to get into that personal account and I feel like that makes sense considering that 1) the alert said the account was "ja*****" without the domain name and when I use hotmail, gmail, or protonmail accounts it shows the whole domain name so maybe university domains aren't recognized by automated microsoft emails 2) my microsoft university work account doesn't show a recent sign in from an IP in Brazil, and 3) Microsoft verified that my microsoft work account doesn't have the personal gmail account where I got the alert listed as the primary or secondary e-mail address so I wouldn't have gotten an email alert to that email in the first place so I'm thinking the personal account did have that e-mail listed. 

I contacted both my university IT dept and microsoft directly but so far no one is able to help. Microsoft couldn't even tell me which account "ja*****" is even referring to because apparently they have limited access on their end. I escalated it to a supervisor at Microsoft and they said my only options were to ask the community hub (and my post seemingly disappeared) or to go to the police to ask them to track the IP. It's kinda freaking me out because I remember using microsoft onenote on the personal account and as an undergrad I could totally see myself putting sensitive information on there.

Does anyone know anything about this or have a suggestion where to go from here? Is it even possible to still access my university microsoft personal account? It's a little out there but it really feels like someone is accessing an account that is difficult but not impossible to access after system changes and might have access to sensitive personal data without me being able to verify it.

Thanks!

Microsoft 365 and Office | Subscription, account, billing | For education | Windows

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. AlexDN 11,425 Reputation points Microsoft External Staff Moderator
    2026-01-13T05:21:24.7766667+00:00

    Dear @Jason Wong,
    Thank you for posting your question in the Microsoft Q&A forum. I understand how stressful it can be to receive a security alert for an account you cannot locate, especially when older university‑linked accounts and past OneNote data may be involved. Your concern is completely valid. I’m really sorry you’re going through this.

    From what you’ve described, it’s very likely the alert was triggered by an old personal Microsoft account originally created with your university email. Years ago, Microsoft allowed both personal and work accounts to exist on the same address, and as systems evolved, some of those older personal accounts became difficult to surface or recover. Unfortunately, because of privacy and security restrictions, Microsoft support agents are not able to view or disclose masked aliases (like “ja*****”), nor can they access legacy personal accounts that are no longer tied to an active domain. This is a system limitation rather than a lack of willingness to help.

    Then, I recommend:

    1. Verify the alert by going directly to: https://account.microsoft.com/security
    2. Attempt to recover the account using the username recovery tool and account recovery form:
    3. Try signing in as a personal account using your university email in a private browser session.
    4. Secure all active accounts, including your Gmail, by updating passwords and enabling MFA.

    If you’re unable to recover the legacy account and there’s no sign of ongoing misuse, the most effective step is ensuring that all your active accounts, Microsoft and Gmail are fully secured. Law enforcement typically becomes necessary only if there is confirmed identity theft or misuse of personal data.

    Please understand that our initial response does not always resolve the issue immediately. However, with your help and more detailed information, we can work together to find a solution.

    I truly appreciate your patience and understanding. If you have any further questions or need further clarification, please feel free to reach out. I'm looking forward to hearing from you. 

    Thank you for your cooperation.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

  2. Q&A Assist
    2026-01-12T23:23:10.7566667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    It sounds like you're dealing with a complex situation regarding your Microsoft account. Here are some steps and considerations that might help you:

    1. Verify Account Ownership: Since you have multiple accounts associated with your university email, ensure that you are trying to access the correct account. You may want to try signing in with different variations of your email address that you might have used in the past.
    2. Check for Account Recovery Options: If you suspect that your personal account has been compromised, use the Microsoft account recovery options. You can try to recover the account by following the prompts at the Microsoft account sign-in page. This may include verifying your identity through other email addresses or phone numbers you may have associated with the account.
    3. Monitor for Unusual Activity: Keep an eye on any unusual sign-in attempts or alerts. If you receive further alerts, take note of the details (like IP addresses) and report them to Microsoft.
    4. Contact Microsoft Support Again: Since you have already escalated the issue, consider reaching out again and providing them with all the details you have gathered. They might have additional resources or advice based on your situation.
    5. Consider Security Measures: If you regain access to your account, consider enabling two-factor authentication (2FA) for added security. This can help prevent unauthorized access in the future.
    6. Data Protection: If you believe sensitive information is at risk, it may be wise to consult with a professional about data protection and what steps you can take to secure your information.

    Unfortunately, without direct access to your account details, it's challenging to provide a specific solution, but following these steps may help you regain control or at least clarify the situation further.

    References:

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.