Follow these steps immediately to secure the Outlook.com account and then deactivate it if desired.
- Recover and secure the Microsoft/Outlook.com account
- Use the official Sign-in Helper to start hacked-account recovery and unblocking: Sign-in Helper.
- If sign-in is still possible, go to the Security basics page and:
- Select Review activity and check the Recent activity page for sign-ins that are not recognized. Mark unknown activity as This wasn’t me or Secure your account as described in the unusual sign-in guidance.
- Change the password immediately to a strong, unique one.
- If the account is blocked due to unusual activity, use the Sign-in Helper from the “Unblock my Outlook.com account” article to complete verification and unblock.
- Check for ongoing hacker access Once signed in again:
- In Outlook.com on the web, check:
- Settings → Mail → Rules and delete any suspicious rules (for example, rules that move mail to hidden folders or create drafts).
- Mail → Forwarding and remove any unknown forwarding addresses.
- On the Microsoft account side, sign in to the security page and:
- Use Sign out everywhere (or equivalent sign-out controls) to end active sessions.
- Review and remove any unrecognized app permissions or connected apps.
- Handle the threatening email
- Do not reply, click links, or open attachments in the threatening message.
- Delete the email after taking screenshots or copies if needed for law enforcement.
- Inform contacts from another email or channel that the account was compromised so they can ignore suspicious messages from the hacked address.
- Fix language and security info
- After regaining access, change the display language in Outlook.com and the Microsoft account settings back to the preferred language.
- Add or update security info (alternate email and phone) so recovery is easier in the future, as recommended in the Outlook.com protection guidance.
- Deactivate/close the Outlook.com/Microsoft account (if no longer wanted)
- If the account is accessible and secured, follow the “How to close your Microsoft account” process referenced from the Outlook.com close-account article.
- Be aware that closing the Microsoft account will affect all connected services (Outlook.com email, OneDrive, Xbox, purchases, etc.).
- Protect devices and other accounts
- Run a full antivirus scan on all devices used with this account and install all OS security updates.
- Change passwords on any other services that used the same or similar password.
If sign-in is no longer possible even after using the Sign-in Helper and recovery flows, the automated recovery system is the only supported path; if it fails, the account may not be recoverable and should be treated as permanently compromised while securing other accounts and devices.
References: