Managing personal Outlook.com account settings, security, and privacy
If the Outlook.com account has been taken over, the supported next steps are:
- Run a full malware scan on the PC before making further account changes. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
- Change or reset the Microsoft account password again after the scan, and keep a strong password in place.
- Review account settings that attackers commonly change:
- Connected accounts
- Forwarding
- Automatic replies
- Check recent sign-in activity on the Microsoft account. The Recent activity page shows sign-ins from the last 30 days and can help confirm whether unfamiliar access is still happening.
- If suspicious Microsoft account emails are being received, messages from the domain @accountprotection.microsoft.com are legitimate Microsoft account notifications. If a verification code was not requested, that can indicate someone is trying to access the account.
- If the account is blocked or still cannot be secured by changing the password, use the Microsoft sign-in helper and recovery flow. That process can either provide self-help steps or offer the chance to talk to an agent.
- For direct support, use Contact Microsoft Support and select Get Help, then Contact Support.
Important points:
- Microsoft support agents are not allowed to send password reset links or directly change account details.
- If the email address has been exposed, keep multi-factor authentication enabled and continue reporting spam or phishing messages so filtering improves.
References:
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Can I trust email from the Microsoft account team? | Microsoft Support
- Check the recent sign-in activity for your Microsoft account
- How to help keep your Microsoft account secure | Microsoft Support
- What to do if your email address is leaked | Microsoft Support
- Unblock my Outlook.com account | Microsoft Support