Share via

My account has been hacked

Sean Linzey 0 Reputation points
2026-03-21T04:32:42.7933333+00:00

I was away for a couple months and my Microsoft email was changed to a different email ending in itmail something. When i requested to retrieve information by filling the form out to the best of my ability it said Unofortunatly there was not enough information to validate your account. and it was locked

Microsoft Security | Microsoft Identity Manager
0 comments No comments

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-21T04:33:00.2233333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    When a Microsoft account is hacked and the sign‑in email and security info are changed, recovery is only possible through the official automated processes. If those systems cannot verify ownership, support cannot override them for consumer accounts.

    Follow these steps:

    1. Secure devices first
      • Run a full antivirus/malware scan on every device used to access the account (PC, phone, tablet) before attempting more recovery steps, as recommended in the hacked‑account guidance.
      • If malware is found, remove it and consider resetting heavily compromised devices.
    2. Use the official hacked/compromised account flow
      • Follow the steps in How to recover a hacked or compromised Microsoft account: scan devices, then try to change or reset your password using the normal sign‑in and “Forgot my password” flow.
      • If sign‑in is still possible at all, immediately change the password and then review account settings (connected accounts, forwarding, automatic replies) for malicious changes.
    3. Use the Microsoft Account Recovery form (ACSR) carefully
      • Go to the Microsoft account recovery form and submit it for the hacked address.
      • Provide as much accurate detail as possible: old passwords, approximate account creation date, frequently emailed contacts, typical subject lines, and any other info requested.
      • Submit the form from a device and location commonly used with the account; this improves the automated checks.
    4. If the recovery form is rejected
      • If the form response says there is not enough information to validate ownership, and the hacker has replaced the sign‑in email and security info, there is no alternate manual method for Microsoft to restore access to that consumer account.
      • Microsoft Support and forum moderators cannot bypass or override the automated recovery decision.
    5. Contain damage and protect other assets
      • If the same password was used on other services, change those passwords immediately and enable multi‑factor authentication (MFA) where available.
      • Inform important contacts (from another email or channel) that the old Microsoft address is compromised so they can ignore suspicious messages.

    If the account is also tied to specific services (for example, Minecraft or Xbox purchases), contact that service’s support separately to ask about options tied to purchase proof, as suggested in similar hacked‑account cases.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.