Were they able to solve it?

There is no confirmed outcome from the earlier user, but an unfamiliar verification address means you should stop that sign-in attempt and use Microsoft’s compromised-account recovery process for the account you intended to access.

Recover the intended Microsoft account

1. Open Microsoft’s Sign-in Helper directly at https://aka.ms/sign-in-helper.
2. Enter the email address or phone number belonging to the Microsoft account whose OneDrive files you need.
3. Follow the compromised-account options offered. The tool may provide self-service recovery or an opportunity to contact an agent. ^1^
4. Do not enter, confirm, or disclose the unfamiliar mcbotmfa.club address. Also do not post the complete address, passwords, verification codes, receipts, or recovery codes publicly.

An unfamiliar verification address can indicate that the account’s security information or sign-in alias was changed without authorization. Microsoft’s hacked-account procedure also recommends running a full malware scan before changing the password; after recovering access, change the password and review the account settings. ^2^

If the screen says “Security info change is still pending”

This branch applies only if that exact message—or “You can’t access this site right now”—appears:

1. Sign in to the Microsoft account Security page.
2. In the pending-change window, select let us know near the bottom because you did not make the change.
3. Complete the prompts to report the unauthorized replacement of the security information.

Microsoft places an account in a restricted state for 30 days when all previous security information is removed and replaced. The waiting period cannot be expedited, but an unauthorized change should be reported using let us know rather than cancelled as though you made it yourself. ^3^

If recovery routes you to support, describe the issue specifically as a possible account takeover where the verification information or primary alias was replaced. Support must verify ownership and cannot directly change account details or send a password-reset link. ^4^

Find the files after access is restored

Sign in to the OneDrive website with the recovered account and:

1. Use Search everything to search by filename, description, date, place, or tag.
2. Check Recycle bin and Personal Vault.
3. If the files are absent, repeat the search under any other personal or work/school account you may have used.
4. Search local storage with File Explorer, Finder, or the mobile Files app.

Microsoft specifically recommends checking other Microsoft accounts because files may have been saved to a different OneDrive than expected. ^5^

References

1. Microsoft account sign-in helper
2. How to recover a hacked or compromised Microsoft account | Microsoft Support
3. What does “Security info change is still pending” mean? | Microsoft Support
4. How to help keep your Microsoft account secure | Microsoft Support
5. [Personal](https://support.microsoft.com/onedrive/find-lost-or-missing-files-in-onedrive)