Account Hacked, recovery email changed, cannot log in any way

Use Microsoft’s Sign-in Helper with the original account email or phone number; it can diagnose the account and may offer an option to speak with a support agent.^1^

Contact Microsoft and protect the subscription

1. Open the Microsoft Sign-in Helper.
2. Enter the original email address or phone number for the inaccessible account—not the unfamiliar recovery address.
3. Complete the prompts and select the agent/contact option if offered.
4. If no contact option appears, open Microsoft customer support:
   • Under Personal account, select Get help.
   • Sign in with the new Microsoft account you created.
   • Describe the issue as: “Personal Microsoft account compromised; security email changed; cannot access paid Microsoft 365/OneDrive subscription.”
   • Select chat or another contact method offered for your region.

Ask the agent to:

• Advise on account-recovery routing.
• Investigate the Microsoft 365/OneDrive charges associated with the inaccessible account.
• Advise how to cancel that subscription or turn off recurring billing so that you are not paying for both accounts.

Human support can help with routing and account/billing questions, but for security reasons agents cannot send a password-reset link or manually access and change the account’s credentials.^2^ Payment from the same bank account can support a billing investigation, but it does not by itself bypass identity verification.

One improved recovery attempt, if applicable

Since the recovery process already failed, do not simply repeat it with the same information. If you had not enabled two-step verification yourself, and the Sign-in Helper does not restore access:

1. From a device and location previously used with the old account, open the Microsoft account recovery form.
2. Enter the original account address and provide a working contact email.
3. Include as much historical evidence as possible:
   • Previous passwords.
   • Microsoft 365 or OneDrive purchase and billing details.
   • Specific Microsoft services used.
   • Exact Outlook contacts and subject lines, if applicable.
   • Xbox or Skype details, if those services were linked.
4. Microsoft sends the result to the contact address, normally within 24 hours. If verification fails, the form permits up to two attempts per day.^3^

If two-step verification had been enabled by you and none of its verification methods remain accessible, Microsoft states that support cannot override it or modify the account details.^3^

Secure everything else now

• Run Windows Security → Virus & threat protection → Scan options → Full scan → Scan now before changing passwords. Microsoft recommends scanning first in a compromised-account situation.^1^
• Change the password on the email account and any other account that reused the old Microsoft password.
• Enable two-step verification on the new account and its recovery email.
• Review recent bank charges. If any are unauthorized, contact the bank promptly; for legitimate recurring Microsoft charges, first ask Microsoft billing support to investigate and advise on cancellation.

Do not post the old account address, unfamiliar recovery address, card details, or recovery-form answers in this public forum.

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Contact Microsoft customer support | Microsoft Support
3. Help with the Microsoft account recovery form | Microsoft Support