Use this recovery path immediately:
- Run a full malware scan on the PC before changing anything.
- Open Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- Try the Microsoft account sign-in helper.
- It asks for the email address or phone number and then shows the correct recovery steps or offers the option to talk to an agent.
- Change or reset the password.
- If sign-in still works, change the password.
- If sign-in does not work, use the password reset flow.
- If the hacker changed the sign-in details, submit the Microsoft account recovery form.
- Use a working email address so the result can be sent there.
- Results are sent within 24 hours.
- If Microsoft cannot verify the account, the form can be retried up to two times per day.
- Support agents cannot send password reset links or directly change account details.
- If the account is blocked because of unusual sign-in activity, reset the password to unblock it.
- If that still fails, use the “When you can't sign in to your Microsoft account” path from the unblock article.
- After access is restored, review account settings that are commonly changed during account takeover:
- connected accounts
- forwarding
- automatic replies
- Then secure the account:
- add another way to sign in or verify identity in Advanced security options
- consider Microsoft Authenticator or going passwordless
- review recent sign-in activity for the last 30 days and remove trusted devices if needed
If the account was locked and the sign-in page shows an aka.ms/ reinstatement link instead of Let’s prove you’re human, submit that reinstatement form and wait for the Microsoft Online Safety review. Do not submit multiple requests, because that can slow the response.
References:
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support
- Unblock my Outlook.com account | Microsoft Support
- Microsoft account has been locked | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support
- Check the recent sign-in activity for your Microsoft account