Share via

deal with hack

karen brown 0 Reputation points
2026-05-18T20:34:34.8666667+00:00

Yesterday I was notified that I had accessed my Microsoft account, and that a numeric code had been sent. Except I had been sleeping at the time. Tried all day to reach you all, without sucess. Trying again

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-05-18T20:34:54.7466667+00:00

    An unexpected verification code or sign-in alert usually means either someone else tried to access the account or a delayed code has just arrived.

    Do not use any code that was not requested. Without that code, an attacker cannot complete sign-in.

    To deal with a possible hack and secure the account:

    1. Check for unusual or unauthorized access
      • Go to the Recent activity page from a trusted device and network.
      • Review sign-ins and mark anything that was not done by the legitimate owner as “This wasn’t me.”
    2. Treat the account as potentially compromised
      • Follow the official guidance in How to recover a hacked or compromised Microsoft account. Start with the sign-in helper tool: Start.
      • The tool will ask for the account email/phone and then either show self-help steps or offer a way to talk to an agent.
    3. Strengthen sign-in and verification
      • After regaining access, update security info (phone, alternate email) and remove anything not recognized.
      • Consider going passwordless using methods like Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys. See How to go passwordless with your Microsoft account.
    4. If verification codes keep arriving without being requested
      • Ignore them and do not share them with anyone.
      • This can happen if someone repeatedly types the email/phone by mistake or is trying to break in. The account remains safe as long as the codes are not used.
    5. If sign-in is blocked or too many attempts were made
      • If messages like “Try another verification method” or lockouts appear, wait at least 24 hours without repeated attempts, then try again.
      • Use a different verification method (alternate email, different network) if available.

    If access to the account cannot be restored using the automated recovery and helper tools, there is no additional manual override path; support agents cannot bypass security, send codes, or change account details.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.