Tag not monitored by Microsoft.
Based on the provided information and the referenced guidance, the only supported path to recover a hacked personal Microsoft account is:
- Use the official hacked/compromised account troubleshooter
- Go to How to recover a hacked or compromised Microsoft account and start the Sign-in Helper tool. It will ask for the account’s email/phone and then guide through the appropriate self‑help or offer a way to talk to an agent.
- Follow every step in that article carefully: change the password if still possible, review recent activity, and remove any unknown security info or aliases if access is regained.
- Use the Microsoft account recovery form (ACSR) as many times as allowed
- If already submitted the recovery form three times and it was rejected as “not enough information,” it is still possible to retry up to two times per day.
- Before trying again, review the detailed guidance on Help with the Microsoft account recovery form. That article explains exactly what kind of information increases the chance of success (old passwords, devices, services used, billing info, etc.).
- After submitting, the result is sent within 24 hours to the working email address specified on the form. If the result says the account could not be verified, the only supported option is to keep trying, up to the daily limit.
- When the recovery form is unsuccessful
- If the recovery form continues to fail and the hacker has already replaced the security info (email/phone) on the account, the referenced guidance states there is no other working method to recover that Microsoft account. Support agents are not allowed to override this, send password reset links, or change account details manually.
- This remains true even if there is strong personal evidence of ownership or if Microsoft Authenticator is still signed in but cannot be used to pass the automated verification.
- If security info was changed and a 30‑day restriction applies
- When all previous security info is removed and replaced, the account can enter a 30‑day restricted state (“Your security info change is still pending” / “You can’t access this site right now”). During this period, most changes are blocked to protect the account.
- If that message appears, use only the built‑in options on that screen (such as “Cancel this request” if the change was self‑initiated and the old security info is still accessible, or the flow for reporting an unauthorized change). Otherwise, the account must wait out the 30‑day period.
- If the account ultimately cannot be recovered
- If, after repeated attempts following the official guidance, the recovery form never verifies the account and the security info has been fully replaced by the attacker, the account is treated as unrecoverable under the documented policies.
- In that case, the only remaining practical step is to create a new Microsoft account and secure it with strong security info (multiple recovery methods, Microsoft Authenticator, and up‑to‑date contact details) to avoid similar issues in the future.
References:
- How to recover a hacked or compromised Microsoft account
- Account recovery unsuccessful
- Help with the Microsoft account recovery form
- What does “Security info change is still pending” mean?
- Troubleshoot Microsoft verification code issues
- My account got hacked.
- Need help with hacked microsoft account
- my microsoft account has been compromised
- Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A