How Do I Recover a Microsoft Account Taken Over via Verification Code Phishing When the Recovery Form Keeps Getting Denied?

Question

How Do I Recover a Microsoft Account Taken Over via Verification Code Phishing When the Recovery Form Keeps Getting Denied?

Emīls Roze 20

My Microsoft account [Moderator note: PII removed]@outlook.com was compromised through a real-time verification phishing scam. I was tricked into entering my email and Minecraft username on a fake verification page and unknowingly shared a legitimate one-time Microsoft security code. The attacker used it immediately to take over the account. Within minutes, my secondary recovery email was changed to [Moderator note: PII removed]@celune.icu, my phone number was removed, and that same number was added to a completely unrelated email address ([Moderator note: PII removed]@stockholmhealth.com). I do not live in Sweden—I am Latvian. The attacker then changed all recovery options and locked me out completely. I never shared my password. Everything connected to that Microsoft account is affected, including email and Minecraft/Xbox services. I am still securing everything linked to that email, but this is difficult without access to it. Microsoft’s automated recovery form keeps denying my requests due to “insufficient information,” even though I still have access to the original email used to create the account and can provide proof of ownership. I am currently trying to get this escalated for a manual account takeover review.

User's image

I created a new email, [Moderator note: PII removed]@outlook.com, solely to post this and communicate while trying to recover the compromised account.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Hello Emīls Roze,

Welcome to the Microsoft Q&A forum.

I understand how distressing this situation is - having your Microsoft account taken over and then being unable to recover it despite multiple attempts is extremely frustrating, especially when verification codes are being sent to an address you no longer control.

When an attacker intercepts a real‑time verification code and replaces the recovery email or other security information, Microsoft’s systems treat all future recovery attempts with extreme caution to prevent further abuse. In these takeover scenarios, it’s common for the automated account recovery form to be denied, even when submitted by the legitimate owner. The form is fully automated and requires strong historical ownership signals; if the recovery information has already been changed, repeated submissions usually result in the same outcome.

The following article provides additional context and may help clarify why repeated recovery attempts are not successful: Account recovery unsuccessful - Microsoft Support

Please also be advised that forum moderators and agents do not have access to Microsoft’s internal systems and cannot reset or recover accounts directly. At this point, the only official path to have your situation reviewed further is to contact Microsoft Support directly through their account security channel:

1, Visit the Microsoft Support contact page: Contact - Microsoft Support

2, In the search bar provided on the page, type "Account recovery" and press Enter.

3, Click on the "Get Help" button that appears.

4, Scroll down the page until you see and click on the "Contact Support" option.

User's image

5, When prompted to select your product or service, choose "Other Products".

6, For the category, choose "Manage account security".

User's image

7, Look for and click on "Chat with a support agent in your web browser".

User's image

8, Confirm your personal email when prompted—this is the email Microsoft will use to communicate with you during and after the support session.

User's image

9, When connected, clearly explain your situation. Be concise but include all relevant details

I hope this clarifies why the recovery form is failing and guides you to the correct next step.

Since this is a public forum, we will hide your personal identifiable information, and I have sent that image of yours containing your personal identifiable information in a private message so we can work together to resolve the issue. Also, please check your private message in case you want to share another screenshot to avoid leaking your PII by click on the Private Message button.