Managing personal Outlook.com account settings, security, and privacy
Yes. The supported path is to treat this as a compromised Microsoft/Outlook.com account and secure it immediately.
- Check whether the account shows suspicious access.
- Open the Recent activity page and review sign-ins from the last 30 days.
- Look for unfamiliar locations, devices, or security challenges.
- If suspicious activity appears, change the password and update security settings.
- Scan the PC for malware before changing the password.
- Open Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This matters because changing the password before cleaning the device can let an attacker capture the new password again.
- Change or reset the Microsoft account password.
- After the malware scan, sign in and change the password.
- If sign-in fails, use the password reset path.
- Use a strong, unique password.
- Check Outlook.com account settings that attackers commonly change.
- Review connected accounts.
- Review forwarding.
- Review automatic replies.
- If anything is unfamiliar, remove it.
- Add or review security information.
- Add an alternate email address and mobile phone number so account recovery is easier if access is lost again.
- If the account may already be hacked, use the hacked-account recovery flow.
- The sign-in helper can guide to self-help options or offer the chance to talk to an agent.
- Be cautious with future messages.
- For Microsoft account emails, messages from @accountprotection.microsoft.com are safe to trust.
- In Outlook.com, suspicious messages should be checked for the trusted sender icon and warning bars.
- When signing in, if the address bar does not include
login.live.com, do not enter the password.
Based on the symptoms described, there is no need to abandon the address immediately. First verify recent activity, clean the device, change the password, and review forwarding/account settings. If recovery tools show the account cannot be recovered, then contact Microsoft Support through the official support flow.
References: