Help!!! Security Info Deleted and Original Email Address No Longer Exists

hplim 0 Reputation points
2026-10-19T08:25:59.23+00:00

I need help recovering my personal Microsoft account because I believe it may have been compromised.

At approximately 5:00 AM, I received a security notification from Microsoft stating “Security info was deleted.” I did not request or authorize this change.

After receiving the notification, I tried to sign in to my Microsoft account, but I received a message saying that an account with my original email address could not be found.

I tried using the Microsoft account recovery form, but I was unable to recover my account because the original email address was not recognized.

I am concerned that my Microsoft account may have been compromised and that someone may have changed my account information without my permission. However, I cannot confirm whether these incidents are connected.

What I have tried so far:

  • Attempted to sign in using my original Microsoft email address.
  • Tried the Microsoft account recovery form.
  • Checked the security notification I received at approximately 5:00 AM.

My questions:

  1. Is it possible for someone to remove my security information and change my Microsoft account's sign-in email address without my permission?
  2. If my original email address now returns “account not found,” is there another official way to verify ownership and recover the account?
  3. How can I contact Microsoft support for assistance with a potentially compromised personal account when the recovery form does not recognize my email address?
  4. Is there anything else I should do immediately to protect my account and personal information?

I did not authorize the security information deletion. I would appreciate guidance from a Microsoft moderator or someone familiar with Microsoft account recovery.

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-10-19T08:26:51.6366667+00:00

    Because the recovery form no longer recognizes the original address, contact Microsoft Support from another working account and report an account takeover in which the primary alias may have been replaced, while also checking whether the security-info change is still in its 30-day pending period.

    1. Check for a pending security-info change

    Microsoft distinguishes between:

    • Security information: alternate email addresses, phone numbers, or other methods used to verify identity.
    • Aliases: email addresses or phone numbers used to sign in to the same Microsoft account.

    Removing all security information places an account in a restricted state for 30 days. Changing or removing an alias is separate and can make the former address stop identifying the account.^1^ ^2^

    If the account remains signed in anywhere—an existing browser, Windows profile, Xbox, Office app, or Outlook session:

    1. Do not sign out or remove the account from that device.
    2. Open the Microsoft account Security page from that session.
    3. If Your security info change is still pending appears, select let us know near the bottom and follow the prompts. That is the documented path when someone else initiated the change.^1^
    4. Preserve screenshots of the pending-change screen and the security notification, but do not post them publicly if they contain addresses, codes, or identifiers.

    If no signed-in session can reach that page, proceed to support.

    2. Contact Microsoft Support from another account

    Since the recovery form already rejected the original address, use another working personal Microsoft account—or create a temporary one—to contact support:

    1. Open Contact Microsoft Support.
    2. Enter Microsoft account compromised – primary alias changed and original username not recognized.
    3. Select Get Help, then Contact Support.
    4. Describe the issue as an account takeover, not merely a forgotten password.
    5. Ask whether the case qualifies for an account-takeover review. A closely matching Microsoft Q&A case recommends this route when an unauthorized primary-alias replacement prevents the original address from being recognized.^3^

    Have these details ready, and provide them only through the private support channel:

    • The original sign-in address and approximate account-creation period
    • Date and time of the security notification
    • Previous passwords—never the current password in a public post
    • Previous security email addresses or phone numbers
    • Microsoft order numbers, subscriptions, or billing records
    • Xbox console information, Skype details, or devices commonly used with the account
    • Any existing support case number

    Support agents cannot manually change account details or bypass the ownership-verification process, and they are not permitted to send password-reset links solely on request.^4^

    3. Use the Sign-in Helper—not the same recovery form again

    Microsoft directs an “account doesn’t exist” error to its Sign-in Helper. The compromised-account tool may offer relevant self-help or an opportunity to speak with an agent.^5^ ^6^

    Use the Sign-in Helper at:

    https://go.microsoft.com/fwlink/?linkid=2214157

    This is distinct from repeatedly submitting the normal recovery form with an address it cannot locate. If two-step verification was enabled and no verification method remains accessible, Microsoft documents that the recovery form cannot bypass it.^7^

    4. Protect other accounts immediately

    Before changing passwords from an affected computer:

    1. Update its antivirus protection.
    2. Run Windows Security → Virus & threat protection → Scan options → Full scan → Scan now. Microsoft recommends scanning first in a compromised-account situation.^6^
    3. From a trusted device, change the passwords of:
      • The email account that received the notification
      • Any account that reused the Microsoft password
      • Banking, shopping, gaming, and social accounts linked to the Microsoft address
    4. Enable multifactor authentication on those accounts and review their recovery information.
    5. Check payment cards and Microsoft-related transactions for unauthorized charges.
    6. Do not approve unexpected Authenticator prompts or share verification/recovery codes.

    The notification and missing username are consistent with security information and possibly the sign-in alias having been altered, but only Microsoft’s account systems can determine whether the alias was changed, the account was closed, or another account state applies.


    References

    1. What does “Security info change is still pending” mean? | Microsoft Support
    2. Change the email address for your Microsoft account | Microsoft Support
    3. Microsoft account compromised: primary alias changed and original email no longer recognized - Microsoft Q&A
    4. How to help keep your Microsoft account secure | Microsoft Support
    5. I can't sign in to my Microsoft account | Microsoft Support
    6. How to recover a hacked or compromised Microsoft account | Microsoft Support
    7. Help with the Microsoft account recovery form | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.