Locked out of account, 2FA failing, unknown phone number added, verification email also inaccessible, and recovery ignored due to 2‑step verification

Hultman, Patric 0 Reputation points
2026-03-05T17:44:18.6166667+00:00

Hello, I urgently need help regaining access to my Microsoft account. I am now completely locked out and suspect unauthorized changes to my security information. Both my two‑step verification and my recovery email are affected.

Here is what has happened:


1. Two‑step verification blocks all recovery attempts

When I try to reset my password, I am required to verify using Microsoft Authenticator. Entering the code results in the error: "There's a temporary problem with the service. Please try again. If you continue to get this message, try again later." This aligns with known cases where two‑factor verification fails due to backend/service issues. [learn.microsoft.com], [learn.microsoft.com]

Other verification methods (SMS or email) also fail with messages such as: "That verification method isn't working right now." [learn.microsoft.com]

I received an email saying that my recovery request was ignored because two‑step verification is enabled, meaning normal recovery is not possible for my account. [learn.microsoft.com]


2. Possible unauthorized activity (phone number changed)

At 04:31 I received an SMS saying that my phone number was removed from my Microsoft account. I did NOT remove it.

When I use the password‑reset page and choose “Use a different verification option” → SMS, I now see a phone number ending in two digits that I do not recognize.

This indicates that someone may have replaced my trusted number with a new one, preventing me from using SMS verification.


3. My recovery email is also affected

My verification email uses the same phone number that was removed.

Because the phone number tied to my verification email was also changed or removed, I cannot sign in to that email account either, and I receive the same error messages when trying to verify access.

So both:

  • my Microsoft account and
  • my recovery email account are now inaccessible due to the same issue.

4. I am stuck in a complete catch‑22

  • I cannot sign in.
  • I cannot verify identity because 2FA fails on all methods.
  • My phone number was removed without my action.
  • An unknown phone number is now listed.
  • My recovery email is inaccessible for the same reason.
  • Account recovery is ignored because of 2FA. [learn.microsoft.com]
  • I cannot reach support without signing in.

5. I need help from a Microsoft support agent

Because both my account and my recovery email appear affected, and because 2‑step verification is blocking all self‑service recovery options, I need a Microsoft agent to:

  • Manually verify my identity
  • Remove the unauthorized phone number
  • Restore my legitimate security information
  • Allow me to access my account again

I have important data associated with this account and cannot proceed without direct assistance.

Thank you.Hello,

I urgently need help regaining access to my Microsoft account. I am now completely locked out and suspect unauthorized changes to my security information. Both my two‑step verification and my recovery email are affected.

Here is what has happened:


1. Two‑step verification blocks all recovery attempts

When I try to reset my password, I am required to verify using Microsoft Authenticator.
Entering the code results in the error:
"There's a temporary problem with the service. Please try again. If you continue to get this message, try again later."
This aligns with known cases where two‑factor verification fails due to backend/service issues. [learn.microsoft.com], [learn.microsoft.com]

Other verification methods (SMS or email) also fail with messages such as:
"That verification method isn't working right now." [learn.microsoft.com]

I received an email saying that my recovery request was ignored because two‑step verification is enabled, meaning normal recovery is not possible for my account. [learn.microsoft.com]


2. Possible unauthorized activity (phone number changed)

At 04:31 I received an SMS saying that my phone number was removed from my Microsoft account.
I did NOT remove it.

When I use the password‑reset page and choose “Use a different verification option” → SMS, I now see a phone number ending in two digits that I do not recognize.

This indicates that someone may have replaced my trusted number with a new one, preventing me from using SMS verification.


3. My recovery email is also affected

My verification email uses the same phone number that was removed.

Because the phone number tied to my verification email was also changed or removed, I cannot sign in to that email account either, and I receive the same error messages when trying to verify access.

So both:

  • my Microsoft account and
  • my recovery email account
    are now inaccessible due to the same issue.

4. I am stuck in a complete catch‑22

  • I cannot sign in.
  • I cannot verify identity because 2FA fails on all methods.
  • My phone number was removed without my action.
  • An unknown phone number is now listed.
  • My recovery email is inaccessible for the same reason.
  • Account recovery is ignored because of 2FA. [learn.microsoft.com]
  • I cannot reach support without signing in.

5. I need help from a Microsoft support agent

Because both my account and my recovery email appear affected, and because 2‑step verification is blocking all self‑service recovery options, I need a Microsoft agent to:

  • Manually verify my identity
  • Remove the unauthorized phone number
  • Restore my legitimate security information
  • Allow me to access my account again

I have important data associated with this account and cannot proceed without direct assistance.

Thank you.

Outlook | Outlook for mobile | Outlook for iOS | For home
0 comments No comments

2 answers

Sort by: Most helpful
  1. Darhyl Amizola 49,915 Reputation points Independent Advisor
    2026-03-05T18:32:11.45+00:00

    Hey there! Nice to meet you!

    I'm sorry you are experiencing this.

    The only way to recover a hacked account is through the official Microsoft troubleshooter guide:

    https://support.microsoft.com/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

    But since the two-factor authentication has been enabled by the hacker, I'm afraid there is no other working method to recover the Microsoft account, and Microsoft Support cannot help either.

    However, kindly reach out to Microsoft Support immediately, as they can possibly "Suspend" the account permanently once they have confirmed that the account can no longer be recovered in order to prevent the hacker from using it:

    https://support.microsoft.com/home/contact?SourceApp=smc2&ContactUsExperienceEntryPointAssetId=S.HP.SmcContactUsLanding

    Type "Microsoft 365 sign-in problem" > Click "Get Help" > Scroll down and select the option "Sign in to contact Support" > Microsoft 365 and Office > Billing and Account Profile Questions > Confirm > then select "Chat with a support agent in your web browser"

    Thank you for your understanding.

    Best regards,

    Darhyl

    Was this answer helpful?

    0 comments No comments

  2. AI answer

    2026-03-05T17:44:57.7133333+00:00

    For consumer Microsoft accounts with two-step verification enabled, support agents cannot bypass 2FA, manually verify identity, or change security info. Recovery is fully automated and depends on having access to at least one configured verification method.

    Based on the documented behavior:

    1. Two-step verification and recovery form
      • If two-step verification is turned on and none of the alternate methods to get a verification code are accessible, support cannot help recover the account or turn off 2FA.
      • The Microsoft account recovery form cannot override two-step verification in this case.
      From the guidance: if two-step verification is on and there is no access to any alternate method, support agents are not allowed to send password reset links or access/change account details.
    2. When security info (phone/email) is lost or changed
      • If the password is known but access to all security info is lost, the documented path is:
        1. Begin sign-in to the Microsoft account.
        2. At the “Verify your identity” prompt, select “I don't have any of these”.
        3. Follow the instructions to replace security info.
        4. After replacement, there is a 30-day wait before sign-in is allowed. During those 30 days, using the old security info (if it becomes available) cancels the update.
      • If the password is not known and there is no access to any security info, the only option is to follow the account recovery guidance and submit the account recovery form, but this does not override 2FA if 2FA is enabled.
    3. If verification codes are not being delivered
      Documented reasons and mitigations include:
      • Temporary blocks due to unusual or excessive verification attempts. In this case, it is necessary to wait for the block/lockout to clear before trying again.
      • Regional SMS issues, phone blocking unknown numbers, full SMS inbox, or junk email filtering for verification emails.
      • VOIP numbers are not supported for verification codes.
      • If still not receiving codes, another method must be used, or it is necessary to wait until access to the listed phone/email is possible. Support agents cannot send codes or change account details.
    4. If the account appears compromised
      • If sign-in becomes possible at any point, immediately go to Advanced security options and:
        • Add a new, trusted phone or email via Add a new way to sign in or verify.
        • Remove any unknown phone numbers or email addresses from security info.
        • Avoid changing all security info at once, as this can trigger a 30‑day restriction.
    5. Contacting support
      • For technical issues such as repeated “temporary problem with the service” errors, the documented path is to use the general support channel via Contact Microsoft Support and select Get Help, then Contact Support if needed.
      • However, even through support, agents are explicitly not allowed to send password reset links or directly modify security info for consumer accounts.

    Given the constraints in the documentation, if two-step verification is enabled and none of the verification methods (phone, email, authenticator) are accessible, there is no manual override path; recovery depends on regaining access to at least one verification method or successfully completing the automated flows when available.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.