my account got hacked and idk what to do

If the account remains signed in on any phone, PC, Outlook app, Microsoft Store, or Xbox, do not sign out—use that session immediately to restore trusted sign-in and recovery information.

1. Protect the account from an existing session

On a device that is still signed in:

1. Open account.microsoft.com.
2. Go to Security → Manage how I sign in.
3. Add a trusted recovery email address or phone number.
4. Re-add your original sign-in alias if it is missing.
5. If permitted, remove any unfamiliar alias or security information.

Adding new security information may start a 30-day restriction, which cannot be expedited. During that period, an attacker who retains control might cancel the change, so monitor the account closely.^1^

2. Contact the card issuer now

Because payment-card details were stored on the account, call the bank or card issuer using the number printed on the card:

• Report the card as potentially compromised.
• Ask them to block or replace it.
• Review recent transactions and dispute anything unauthorized.
• Enable transaction alerts if available.

Microsoft specifically recommends contacting the payment provider to prevent further charges; disputing an existing charge alone does not stop new ones.^2^

3. If there is no active signed-in session

The “We couldn't find a Microsoft account” message can occur when a username is no longer recognized. It does not, by itself, prove exactly what was changed.

1. Check that the complete address and domain are correct—for example, .com rather than another domain.
2. Try any other alias, phone number, or Skype name previously connected to the account.
3. If those are also unrecognized, use Microsoft’s compromised-account Sign-in Helper. It asks for the original email address or phone number, then presents available self-service recovery options or an opportunity to contact an agent.^3^
4. Tell the support advocate: “My username has stopped working and Microsoft says the account cannot be found.” Microsoft’s username guidance directs users who continue seeing that message to contact support.^4^

4. Submit the recovery form when offered

Use a working email address where Microsoft can contact you. Complete the form from a familiar device and location, and gather:

• Old passwords
• Exact Outlook contact names and email subject lines
• Previous recovery email addresses or phone numbers
• Xbox console hardware ID, if used
• Skype contacts or purchase information
• Microsoft purchase and billing details

Microsoft normally sends the result to the contact address within 24 hours. If verification fails, the form can be resubmitted up to twice per day.^5^

Support must verify ownership and cannot manually alter account details or issue a password-reset link to bypass that process.

5. Secure the devices and related accounts

Before changing recovered credentials, run a full malware scan on Windows:

Windows Security → Virus & threat protection → Scan options → Full scan → Scan now.^3^

Also change the password for the Gmail account and any other account that reused the same password, then enable two-step verification. Do not post the full address, card details, passwords, recovery codes, receipts, or unfamiliar attacker address in this public forum.

References

1. how to recover a microsoft account which was hacked, and the email was changed by the hacker. - Microsoft Q&A
2. How to investigate a billing charge from Microsoft | Microsoft Support
3. How to recover a hacked or compromised Microsoft account | Microsoft Support
4. My username and password have stopped working | Microsoft Support
5. Help with the Microsoft account recovery form | Microsoft Support