I keep getting emails that say I am trying to login but this is not the case. Am I getting hacked? PLEASE HELP!

Those emails usually mean someone (or an automated system) is repeatedly trying to sign in using the account name, not that they have successfully hacked the account.

Key points and checks:

1. Confirm the email is really from Microsoft
   • Legitimate verification-code emails come from the @accountprotection.microsoft.com domain.
   • For unusual sign-in alerts, the sender is typically ******@accountprotection.microsoft.com.
   • If the sender is anything else, treat it as phishing and ignore/delete it.
2. Why you are getting codes when you did not try to sign in
   • Someone may be trying to access the account.
   • Someone may have mistyped their own email/phone and accidentally entered yours.
   • A code that arrives late could be from a request made some time ago.
   • As long as no code is entered by an attacker, the account remains protected.
3. What to do right now
   • Do not respond to or use any verification codes you did not request.
   • Immediately sign in to the Security basics page and:
     • Review the Recent activity to see if there are unfamiliar sign-ins. If you see activity that is not yours, mark it as This wasn’t me or Secure your account where available.
     • Change the password to a strong, unique one if there is any doubt.
   • Check that the security info (alternate email, phone) is correct and belongs only to you.
4. If you keep getting unrequested codes
   • Consider going passwordless (for example, using Microsoft Authenticator, Windows Hello, SMS/Email codes, or a security key) as described in the passwordless guidance. These methods are more secure and can reduce reliance on passwords that can be guessed or phished.
5. If you suspect the account is already compromised
   • Follow the hacked/compromised account recovery guidance and complete the account recovery form with as much accurate information as possible.
   • After regaining control, remove any unknown aliases or security info and add trusted alternate email/phone.

As long as the codes are not being used to complete sign-in, the repeated emails alone do not mean the attacker has access, but they are a strong signal to secure the account immediately and review recent activity.

References:

• Can I trust email from the Microsoft account team?
• Troubleshoot Microsoft verification code issues
• What happens if there's an unusual sign-in to your account
• Help protect your Outlook.com email account
• My account got hacked. - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• Is this legit email also? - Microsoft Q&A
• My account got hacked - Microsoft Q&A