Unauthorized Outlook Access

Question

I have someone in Nigeria accessing my account, each time I reset the password, they request and receive a new password. This is a continuous battle several times a week and they are stealing passwords for other accounts, security codes, and private information from my accounts.

Answer 1

The attacker is inside your computer. A clean install will remove them.

Answer 2

@Ray D said

I have someone in Nigeria accessing my account

One way to stop them from even being able to try to access your account is to setup a Login Only Alias and disable Sign-In for your current email address (the one that they know). See the Answer "Login Only Alias" by "Hornblower409 on Feb 27, 2026" in
https://learn.microsoft.com/en-us/answers/questions/5789093/i-get-a-few-2fa-notifications-from-canada-daily-us

This provides all the steps required to ensure you setup your new alias correctly and the crucial step of changing your Default Send From address so that your new alias isn't leaked into the wild and becomes an attack target.

Answer 3

Hi. I'm Brian.

In addition to what Bence says, after changing your password and adding two-factor verification or passkeys, immediately click the "Sign out everywhere" link found on https://account.live.com/proofs/manage to force invalidation of all login cookies.

Answer 4

Dear @Ray D

If you still have access to your account, I would first change the password and enable two-step verification. You can do this from your Microsoft account security settings under Security --› Manage how I sign in. I would also check your authentication and recovery methods, as well as your account aliases. Make sure there are no unfamiliar email addresses, phone numbers, Authenticator methods, passkeys, or other security methods. Also check your aliases and remove or disable sign-in for anything you don't recognize.

Then check your Recent activity and go through the sign-ins from the last 30 days. Pay particular attention to anything you don't recognize, especially successful sign-ins or changes to your security information: https://account.live.com/Activity

I would also check your authentication and recovery methods, as well as your account aliases. Under account.microsoft.com --› Security --› Manage how I sign in, make sure there are no unfamiliar email addresses, phone numbers, Authenticator methods, passkeys, or other security methods. Also check your aliases and remove or disable sign-in for anything you don't recognize.

If you're using Outlook.com, check the mail settings for any forwarding that you didn't configure. Go to Settings --› Mail --› Forwarding and make sure forwarding is either turned off or only points to an address you recognize. Also check your Rules for anything that forwards or redirects your emails. https://support.microsoft.com/en-us/outlook/mail/use-rules-to-automatically-forward-messages

Finally, I would run a full scan on the Windows PC you use to access the account. Open Windows Security --› Virus & threat protection --› Scan options and run a Full scan.

Best regards,

Bence