account hacked recovery forum non functional

recoveryaccount 0 Reputation points
2026-07-31T23:17:49.28+00:00

my Microsoft account was just hacked and all log in info changed, I am still actively logged in on some Microsoft apps and have much evidence of this but the recovery forum doesn't let me put the right card info or prove I have used my Xbox account without an Xbox itself. I need into my account I use Microsoft authenticator for many of my accounts. I also get inconsistent feedback from different Microsoft tools like the Sign-in helper saying no issues detected but any other log in saying no account exists from that same email. Need help filling these recovery forums out properly. Please note I am not asking customer service to side step the recovery forum but need help with the clarity of what it is requesting from me and how to submit that correctly.

Microsoft Security | Microsoft Authenticator

1 answer

Sort by: Most helpful
  1. AI answer

    2026-07-31T23:18:03.0466667+00:00

    Use the official recovery path immediately:

    1. Start the Microsoft account hacked-account flow: Start. This guides to self-help steps or an agent option.
    2. Before changing anything, run a full malware scan on the PC from Windows Security:
      • Open Windows Security
      • Open Virus & threat protection
      • Select Scan options > Full scan > Scan now
    3. After the scan completes, try to change the password if access is still possible from a signed-in session. If sign-in no longer works, use the password reset path in the hacked-account article.
    4. After access is restored, review account settings that attackers commonly change:
      • connected accounts
      • forwarding
      • automatic replies
    5. If the account is blocked because of unusual activity, use the Outlook.com unblock flow: Sign-in Helper.

    Important limits from Microsoft support:

    • Account recovery is handled through the automated recovery process.
    • Support agents are not allowed to send password reset links or access and change account details.
    • If the recovery request is denied, it can be retried up to two times per day.
    • If the recovery form cannot be used because the security information is no longer recognized, use the Sign-In Helper.

    Since the attacker changed the sign-in information, the best supported path is the hacked-account recovery flow and Sign-In Helper rather than trying to prove ownership through unsupported evidence in a forum.


    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.