My hotmail account has been hacked

Question

My hotmail account ([Moderator Note: Personal Info Removed]@hotmail.com) was hacked yesterday. My contacts are receiving emails from me that I did not send. Two of my friends have been duped into sending real money to the hacker. I tried logging in to reset my password, but the recovery phone number I saw during that process is not my phone number, so I can't complete the process.

Furthermore, when I log into my email account, all of my contacts are missing, my inbox is empty, and my sent mail is empty. I need to have my email restored to the way it was on March 14, 2026.

Answer 1

Hi Pamela Beggan,

Welcome to Microsoft Q&A forum. 

Please note that our forum is a public platform, and we will modify your question to hide your personal information in the description. Kindly ensure that you hide any personal or organizational information the next time you post an error or other details to protect personal data.

To help move this forward, could you please confirm whether you’ve completed the steps suggested by Q&A Assist?

• If yes, please share the outcome for each step.
• If not, please let me know and I will provide the next steps right away.

Thank you for your time and understanding.

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

The account is compromised and the recovery data has been changed, so only Microsoft’s automated recovery and security tools can be used; support agents cannot directly reset the password or restore content for a consumer Microsoft account.

Follow these steps in order:

1. Secure devices first

• Run a full antivirus/malware scan on every device used to access the Hotmail/Outlook.com account (PC, phone, tablet).
• If malware is found, remove it and reboot. Do not reuse the account on infected devices.

2. Use the Sign‑in Helper to recover or unblock the account

• Go to the Sign‑in Helper: Sign-in Helper.
• Enter the hacked Hotmail address and follow the prompts. The tool will:
  • Guide through password reset and account unblocking, or
  • Offer a path to contact support if applicable.

3. If normal reset options show an attacker’s phone/email

• Do not use the attacker’s phone/email.
• Use the account recovery path instead:
  • If two-step verification is not enabled or the verification options are not recognized, use the Sign‑in Helper link above or the account recovery form guidance in “Help with the Microsoft account recovery form.”
  • Ensure there is a working alternate email (can be a new Outlook.com address) where Microsoft can contact about the recovery request.

4. Complete the Microsoft account recovery form (if prompted)

• Follow the guidance in “Help with the Microsoft account recovery form”:
  • Use a device and location commonly used to sign in to this account.
  • Provide as many accurate details as possible (old passwords, typical contacts, subject lines, etc.).
  • Submit and wait for the response (typically within 24 hours); resubmit only as allowed.

5. After regaining access

• Immediately change the password to a strong, unique one: use the change your password page.
• Ensure malware protection is active (Windows Defender on Windows 10/11 or another up‑to‑date antivirus) and run a full scan again.
• Check and clean Outlook.com settings as recommended for hacked accounts:
  • Rules: remove any suspicious rules that move, delete, or auto‑send mail.
  • Forwarding: remove any unknown forwarding addresses.
  • Automatic replies: turn off or edit any replies the attacker configured.
  • Connected accounts: remove unknown connected accounts.
• Use Microsoft account security options to:
  • Sign out of all sessions.
  • Review and remove any suspicious app permissions.
• Turn on two‑step verification and configure Microsoft Authenticator or trusted phone/email that is under control.

6. About restoring mail and contacts to a past date

• The provided context does not describe a user‑initiated way to roll back a consumer Outlook.com/Hotmail mailbox to a specific past date (such as March 14, 2026).
• After access is restored, check:
  • Deleted Items and Junk folders for messages or contacts that can be recovered.
  • Any rules or forwarding that may have moved mail to other folders.

7. Damage control

• From a different, secure email or communication channel, inform contacts that the Hotmail account was compromised and that any recent money requests or suspicious messages should be ignored.
• Advise affected contacts to contact their bank or payment provider regarding the fraudulent transfers.

If the account cannot be recovered even after following the Sign‑in Helper and recovery form guidance, the context indicates there is no additional manual override path for consumer Microsoft accounts beyond these automated processes.

---

References:

• How to recover a hacked or compromised Microsoft account
• Help with the Microsoft account recovery form
• Unblock my Outlook.com account
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A
• Need to speak to a agent I am getting pop up draft scam emails - Microsoft Q&A