A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because the recovery form no longer recognizes the original address, contact Microsoft Support from another working account and report an account takeover in which the primary alias may have been replaced, while also checking whether the security-info change is still in its 30-day pending period.
1. Check for a pending security-info change
Microsoft distinguishes between:
- Security information: alternate email addresses, phone numbers, or other methods used to verify identity.
- Aliases: email addresses or phone numbers used to sign in to the same Microsoft account.
Removing all security information places an account in a restricted state for 30 days. Changing or removing an alias is separate and can make the former address stop identifying the account.^1^ ^2^
If the account remains signed in anywhere—an existing browser, Windows profile, Xbox, Office app, or Outlook session:
- Do not sign out or remove the account from that device.
- Open the Microsoft account Security page from that session.
- If Your security info change is still pending appears, select let us know near the bottom and follow the prompts. That is the documented path when someone else initiated the change.^1^
- Preserve screenshots of the pending-change screen and the security notification, but do not post them publicly if they contain addresses, codes, or identifiers.
If no signed-in session can reach that page, proceed to support.
2. Contact Microsoft Support from another account
Since the recovery form already rejected the original address, use another working personal Microsoft account—or create a temporary one—to contact support:
- Open Contact Microsoft Support.
- Enter Microsoft account compromised – primary alias changed and original username not recognized.
- Select Get Help, then Contact Support.
- Describe the issue as an account takeover, not merely a forgotten password.
- Ask whether the case qualifies for an account-takeover review. A closely matching Microsoft Q&A case recommends this route when an unauthorized primary-alias replacement prevents the original address from being recognized.^3^
Have these details ready, and provide them only through the private support channel:
- The original sign-in address and approximate account-creation period
- Date and time of the security notification
- Previous passwords—never the current password in a public post
- Previous security email addresses or phone numbers
- Microsoft order numbers, subscriptions, or billing records
- Xbox console information, Skype details, or devices commonly used with the account
- Any existing support case number
Support agents cannot manually change account details or bypass the ownership-verification process, and they are not permitted to send password-reset links solely on request.^4^
3. Use the Sign-in Helper—not the same recovery form again
Microsoft directs an “account doesn’t exist” error to its Sign-in Helper. The compromised-account tool may offer relevant self-help or an opportunity to speak with an agent.^5^ ^6^
Use the Sign-in Helper at:
https://go.microsoft.com/fwlink/?linkid=2214157
This is distinct from repeatedly submitting the normal recovery form with an address it cannot locate. If two-step verification was enabled and no verification method remains accessible, Microsoft documents that the recovery form cannot bypass it.^7^
4. Protect other accounts immediately
Before changing passwords from an affected computer:
- Update its antivirus protection.
- Run Windows Security → Virus & threat protection → Scan options → Full scan → Scan now. Microsoft recommends scanning first in a compromised-account situation.^6^
- From a trusted device, change the passwords of:
- The email account that received the notification
- Any account that reused the Microsoft password
- Banking, shopping, gaming, and social accounts linked to the Microsoft address
- Enable multifactor authentication on those accounts and review their recovery information.
- Check payment cards and Microsoft-related transactions for unauthorized charges.
- Do not approve unexpected Authenticator prompts or share verification/recovery codes.
The notification and missing username are consistent with security information and possibly the sign-in alias having been altered, but only Microsoft’s account systems can determine whether the alias was changed, the account was closed, or another account state applies.
References
- What does “Security info change is still pending” mean? | Microsoft Support
- Change the email address for your Microsoft account | Microsoft Support
- Microsoft account compromised: primary alias changed and original email no longer recognized - Microsoft Q&A
- How to help keep your Microsoft account secure | Microsoft Support
- I can't sign in to my Microsoft account | Microsoft Support
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support