Managing personal Outlook.com account settings, security, and privacy
Hello,
If you have not set up two-factor authentication, the following method may be effective.
Help with the Microsoft account recovery form
If you still cannot recover your account after trying this method, it is possible that the hacker has enabled two-factor authentication.
If contacting Microsoft Support does not resolve the issue, please explain the situation to your credit card company and request that they stop any withdrawals.
In addition, if you have suffered financial loss, you may also file a cybercrime report with the police.