Share via

My account was compromised.

san kuwa 25 Reputation points
2026-03-05T08:32:02.4966667+00:00

My Microsoft account that I always used has been hacked. The hacker changed the email address and password, so I cannot sign in anymore. I also cannot access the recovery email linked to the account. Does anyone know if there is a way to recover my account?

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

2 answers

Sort by: Most helpful
  1. Winnie-B 7,180 Reputation points Microsoft External Staff Moderator
    2026-03-08T02:16:16.33+00:00

    Hi san kuwa

    Thank you for reaching out to Microsoft Q&A Forum. I’m really sorry you’re dealing with this and I understand how stressful it is. When the attacker has changed the sign‑in email/password and you no longer have access to the recovery email, the recovery process is (unfortunately) very strict to protect the account owner.

    Please kindly note that this is a public user-to-user forum, I do not have the ability, tools to unblock, recover accounts or bypass security. Only Microsoft’s official recovery process can restore access.

    I can see that the Q&A Assist reply already outlines the two supported recovery paths. Before adding anything further, could you please confirm:

    • Have you already tried those steps? (Sign‑in Helper and/or the Account Recovery Form)
    • If yes, where did the process stop or fail (for example: recovery form rejected, account not found, verification codes inaccessible)?
      • If the recovery form was accepted and is still under review, the only correct action is to wait for the decision email from Microsoft (and check Junk/Spam as well).
      • If the recovery form was rejected: You can submit it again using the most accurate historical details you can recall (old passwords, approximate creation date, services used). Submitting multiple times with the same information will not improve the outcome.

    Also, could you please let me know what’s the exact message you see when you try to sign in (e.g., account doesn't exist, security info change is still pending, etc.)?

    In case you’re still signed in to the account on any device/app, you can immediately sign out everywhere to cut off the attacker’s sessions (it can take up to 24 hours).

    Contact Microsoft Support directly

    If none of the above works, you can reach out to Microsoft Support team directly for further assistance. For personal account/product, it mainly offers live chat and, depending on your subscription/region, an option to request a callback:

    • Go to Contact - Microsoft Support
    • In the search box, type the issue keyword related to Microsoft account recovery or compromised account.
    • Click "Get Help", then scroll to the bottom and select "Contact Support”.
    • When prompted to select Products & Services, select "Other Products"; Under Category, select "Manage account security".
    • Look for and select "Chat with a support agent in your web browser" (during business hours) or a similar callback option (if available). Explain your situation clearly.

    User's image

    Please feel free to let me know how it goes. I truly appreciate your precious time and understanding.

    0 comments No comments

  2. Q&A Assist
    2026-03-05T08:32:17.2433333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    There are only two supported ways to try to get a completely compromised Microsoft account back when the email, password, and recovery options have been changed:

    1. Use the Sign‑in Helper / hacked-account flow
    2. Use the Microsoft Account Recovery form (ACSR)
      • If the account still exists but cannot be accessed, submit the recovery form at Recover your account or directly via the ACSR link referenced in the guidance.
      • Provide the hacked email address and a different working email where Microsoft can contact.
      • Fill in as many accurate details as possible (old passwords, approximate creation date, contacts, subject lines, services used, etc.).
      • For detailed tips, see: Help with the Microsoft account recovery form.

    If the hacker has fully replaced the security information and the automated recovery form cannot verify ownership, there is no alternate manual override for consumer Microsoft accounts. Support agents are not allowed to bypass the automated security checks or forcibly reset the account in that situation.

    For future protection once access is regained (or on any new account):


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.