Managing personal Outlook.com account settings, security, and privacy
The screenshots show the account is now protected by the attacker’s verification methods. In that state, the supported recovery path is limited.
- If the PC used for this account may have been infected, run a full antivirus or Windows Defender scan before changing anything else.
- Start with the Microsoft Sign-in Helper for hacked accounts. It can guide to the correct self-help path and may offer the chance to talk to an agent: Start
- If a 25-character Microsoft account recovery code was previously created for this account, use it at the Do you have an account recovery code? prompt. After entering a valid recovery code, the password can be updated.
- If no recovery code is available and two-step verification is turned on with only the attacker’s methods listed, Microsoft states support agents cannot send password reset links or access and change account details.
- If two-step verification was not turned on by the legitimate owner and the listed verification email or phone options are not recognized, use the Sign-in Helper first, then the account recovery form: Account recovery form
- If access is regained, immediately change the password and then review account settings such as connected accounts, forwarding, and automatic replies.
Important points for this case:
- Proof of purchase, card details, or screenshots do not override the account recovery process described in Microsoft support content.
- If two-step verification is enabled and no alternate verification method or recovery code is available, Microsoft support cannot manually reset the account.
- If security info changes are made using a valid recovery code on an account with two-step verification, changes may take 30 days to take effect.
For general technical support, Microsoft also provides Contact Support, but account security limits still apply: Contact Microsoft Support
References: