Because this is not an account owned or controlled, it cannot be “recovered,” but it can be reported and blocked.
To report and limit damage in Outlook.com and Microsoft 365 Outlook:
- Ask friends and family to report the messages as phishing
- In Outlook.com or Outlook on the web:
- Select the suspicious message in the message list.
- Above the reading pane, select Report > Report phishing.
- This reports the sender to Microsoft and helps improve filters so fewer such messages get through.
- Ask them to block the sender
- After reporting, they should also add the sender to their blocked senders list so future messages from that address go straight to Junk or are blocked. (See “Block senders or mark email as junk in Outlook.com” in the linked article.)
- If they use another email client
- They can attach the phishing message as an attachment in a new email to ******@office365.microsoft.com instead of forwarding it. This preserves headers so Microsoft can investigate.
- If any of them clicked links or opened attachments
- They should run a full antivirus scan on their devices and change passwords on important accounts (email, banking, social media) as a precaution.
- If the scam involves a malicious website
- While on the suspicious site in Microsoft Edge, select Settings and More (… ) > Help and feedback > Report unsafe site to report it to Microsoft.
If any of the targeted people have Microsoft accounts that might have been compromised, they should follow the hacked-account recovery process at How to recover a hacked or compromised Microsoft account.
References: