Share via

Someone stole my account, changed my email address, and changed my password. Please help me recover it.

Themy Gitersos 0 Reputation points
2026-04-01T14:10:50.5566667+00:00

My son was playing a game and someone coaxed him into giving him the security code for my account, then Someone stole my account, changed my email address, and changed my password. Please help me recover it. I have the email proving someone changed my security information and when I try and login, it's showing someone else's email to send the code to, which is not me. How do I get my account back? I've also gone through the online forms to verify my account but apparently I am not able to pass those verification questions well enough. I'd like to pass on the email I received proving my account was taken over by someone, but have no clue where or who to contact. It seems nearly impossible.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

2 answers

Sort by: Most helpful
  1. DaveM121 863.2K Reputation points Independent Advisor
    2026-04-01T14:44:02.81+00:00

    This is a widely reported scam on Discord where they ask you for that code to join their server, that code gave them full access to your account and they immediately change the recovery details like the associated Email to block you from accessing the account.

    I wish I had better news, but when a Microsoft account is hacked, if the hackers change the associated Email, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered.

    https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

    0 comments No comments

  2. Q&A Assist
    2026-04-01T14:11:09.4966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Because the email and password have been changed and the security code now goes to someone else, the account is treated as hacked/compromised and must go through Microsoft’s official recovery process. No forum or support agent can bypass this.

    Follow these steps in order:

    1. Use the hacked/compromised account troubleshooter
      • Go to the official guide: How to recover a hacked or compromised Microsoft account.
      • Select Start to open the sign‑in helper tool.
      • Enter the affected Microsoft account (the original email address) and follow the prompts. The tool will either show self‑help steps or offer a way to talk to an agent, depending on eligibility.
    2. Complete the Microsoft account recovery form as accurately as possible
      • If sign‑in or normal reset fails, fill out the account recovery form (linked from the hacked-account article and from the verification-code troubleshooting article).
      • Before submitting, review the guidance in Help with the Microsoft account recovery form to understand what information helps (old passwords, subjects of recent emails, contacts, etc.).
      • Submit the form from a device, browser, and location that were regularly used with this account.
      • If the request is denied, update any answers that can be improved and resubmit. The form can be submitted multiple times per day.
    3. If security info is lost and password is unknown
      • Because the code is now going to an attacker’s email and the password was changed, treat this as having lost access to all security info and not knowing the password.
      • Follow the steps under If you don't know your password in the verification-code troubleshooting article:
        1. Read all details on Help with the Microsoft account recovery form.
        2. Submit a request via the Recover account link.
    4. If recovery succeeds
      • As soon as access is restored, follow the hacked-account steps:
        1. Run a full antivirus/malware scan on all PCs and devices used to sign in, before changing the password.
        2. Change the Microsoft account password to a strong, unique one.
        3. Review and fix account settings such as connected accounts, forwarding, and automatic replies to remove anything the attacker configured.
        4. Update security info (phone, alternate email) and remove any methods that do not belong.
    5. If recovery continues to fail
      • If the recovery form is repeatedly declined, the guidance in the Q&A references is that there is no other method to regain access once the attacker has fully replaced the security info and password. Microsoft Support cannot override the automated recovery process.

    The email showing that security information was changed is useful evidence for filling in dates and details on the recovery form, but it cannot be sent to a special address to force recovery; it must be used within the official recovery workflow described above.


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.