My 25+ years Microsoft account got hacked by someone with bibimail, and I can't recover it

Raznaak 10 Reputation points
2026-09-09T15:48:49.02+00:00

My main account got hacked this morning. I have been using it since about 2000 and it is the account I've used for almost every log-ins for sites since then.

User's image

They changed my password and my recovery address (a gmail address), and they added a passkey and a new authenticator to it. I've tried the recommended method to recover my account, but it states that since two-factors authentication is activated, nothing can be done to recover it.User's image

And along the way, I've seen this, address:

User's image

I've looked and dozens of people had the same problem sharing their experience on these forums and others such as Reddit, and ALL of them since the beginning of summer 2026 have been hacked by that bibimail address. I tried to connect to bibimail.net, but it's always down (except probably when they want to hack someone...), and every verification site says it's a high-risk address and almost certainly a scam, and I've been able to see that it has been created in June 19th 2026. I don't understand how Microsoft would accept something from such a sketchy site...

How could it be possible for a hacker to bypass and change all my security setting, and Microsoft having no problem with them doing so, but now they bar me from trying to recover it???

Please, I've been using my main address for EVERYTHING online, I have close to a hundred sites connected with this address, I've spent thousand of dollars and hours spent on these sites (all of which I will probably lose access soon), and I also don't want to lose more than twenty years of mails, including some from my dead relatives.

I only made this account to speak here, I've tried to call Microsoft, but the answering bot tells me to go to the exact site I've used that doesn't work as they've enabled two-factors authentication to block me off, and now the bot refuses to say anything else than "go to this site, bye" (it probably recognizes my phone number). I also have Microsoft 365 Family, and I don't want my family to have problems with that either...

Please, I just want to talk to a human so I can get my account back.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Chloe-V 14,125 Reputation points Microsoft External Staff Moderator
    2026-09-10T01:53:51.1533333+00:00

    Hi @Raznaak

    I’m truly sorry this happened, especially after you have used the account for more than 25 years.

    Unfortunately, if two-step verification has been enabled and you cannot access any of the verification methods associated with the account, the account cannot be recovered. Microsoft Support agents and forum moderators cannot remove the authentication methods, bypass two-step verification, or manually restore access.

    Please note that this is a user-to-user support forum. Moderators, contributors including external Microsoft employees cannot directly intervene in Microsoft product features or access back-end systems. Our role is limited to providing technical guidance on reported issues, requests, or ideas only.

    In this situation, you will need to create a new Microsoft account. Please also change the passwords for any other services connected to the compromised email address and secure them with unique passwords and two-factor authentication.

    I understand this is not the outcome you were hoping for, and I’m very sorry that there is no alternative recovery method available.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.