Why do I need to wait a month to remove a hacker's email from my account after I recover it ?

Question

I recently recovered my microsoft account from a hacker.
Hacker: ******@semiautml.ru

I am try to delete that email from my user profile .
I was able to recover my account through the recovery form but why do I have to wait one month to remove this a**hole from my own account.
Why was this person able to remove my email and phone number access without having to wait,
But now I have to wait to remove his access ?

Answer 1

Hello,

The 30‑day waiting period is a security protection built into Microsoft accounts. When recovery information such as the backup email or phone number is changed, Microsoft delays the update to prevent a hacker from locking out the real owner.

I understand this feels frustrating, especially if someone else changed your recovery email without your permission. But the waiting period is there to protect your account from being taken over permanently.

During these 30 days, Microsoft cannot shorten or remove the waiting time, even through support, because doing so would allow attackers to bypass the protection.