How do you recover a hacked account?

Question

My account was hacked and I filled out the forms and they said they cant give the account back because of strict rules. The hacker changed the email and activated an authenticator app making it impossible for me to get the account back. And now I have to wait 24 hours just to fill another form.

Answer 1

Hi Xavier Acosta Castro,

Welcome to the Microsoft Q&A forum.

I understand how stressful this situation can be, especially when the account was compromised and the usual recovery options no longer work. Based on the scenario you described, this behavior is expected when two-step verification is enabled and the security information has been changed.

When two-step verification (2FA) is turned on and the attacker has changed the security info such as the authenticator app, the automated account recovery form (ACSR) is no longer sufficient to verify ownership. In this situation, the form may consistently be rejected even if the information is correct. This is due to stricter security enforcement to prevent further unauthorized access.

Please note that contributors on this forum do not have access to Microsoft account systems and cannot override security decisions or recover accounts directly. Therefore, contacting Microsoft Support via live chat is the appropriate next step for further guidance. Please follow these steps carefully:

1, Visit the Microsoft Support contact page: Contact - Microsoft Support  

2, In the search bar provided on the page, type "Account recovery" and press Enter.  

3, Click on the "Get Help" button that appears.  

4, Scroll down the page until you see and click on the "Contact Support" option.  

5, When prompted to select your product or service, choose "Other Products".  

6, For the category, choose "Manage account security".  

7, Look for and click on "Chat with a support agent in your web browser".  

8, Confirm your personal email when prompted - this is the email Microsoft will use to communicate with you during and after the support session.  

9, When connected, clearly explain your situation. Be concise but include all relevant details.  

I hope this clarifies the situation and helps you move forward.

Answer 2

For a hacked Microsoft account where the email and authenticator have been changed, only the official automated recovery process can be used. Human support cannot override it or manually return access.

Follow these steps:

1. Use the official hacked-account troubleshooter
   • Go to How to recover a hacked or compromised Microsoft account and start the sign-in helper: Start.
   • The tool will ask for the account email/phone and then guide through self-help or offer a chance to talk to an agent, depending on the situation.
2. Keep using the Microsoft account recovery form (ACSR)
   • If access is already lost and security info (email, Authenticator, 2FA) was changed, the account recovery form is the only method.
   • When a submission is rejected, it is allowed to try again after the waiting period (up to two attempts per day). This 24‑hour wait is by design.
   • Each time the form is submitted, provide as much accurate detail as possible (old passwords, contacts, subject lines, regions of use, etc.), from a device and location normally used with the account.
   • If the form result email says the account could not be verified, it is allowed to keep trying as many times as needed (within the daily limit) until enough matching data is provided.
3. Understand the limits
   • If the hacker has replaced the security information and the recovery form cannot verify ownership, there is no alternative method to recover the account.
   • Support agents are not allowed to send password reset links or change account details for security reasons.
4. After successful recovery
   • Once the form is accepted and instructions are received at the working email, sign back in and immediately:
     • Run a full antivirus/malware scan on all devices used with the account (for example, using Windows Defender on Windows 10/11).
     • Change the password to a strong, unique one.
     • Review and fix account settings such as connected accounts, forwarding, and automatic replies.
     • Follow the guidance in How to help keep your Microsoft account safe and secure to harden the account going forward.

If the recovery form continues to fail and ownership cannot be verified, the account cannot be restored under Microsoft’s security rules.

---

References:

• How to recover a hacked or compromised Microsoft account
• Hello , welcome to Account help & learning
• Help with the Microsoft account recovery form
• My account got hacked - Microsoft Q&A
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A