Have i been hacked?

If you did not remove the passkey shown in the email, treat the account as compromised: do not send information to msaccountsafety.com, scan the PC, and start recovery only through Microsoft’s official sign-in helper.

The “username has been turned off” message specifically means that your email address is an account alias that has been blocked from signing in; it does not by itself prove that the account was deleted. An unauthorized passkey removal, however, is evidence that someone may have changed the account’s security information.

Do this now

1. Do not use the msaccountsafety.com prompt.
   • The available Microsoft documentation does not identify that domain as an official recovery destination.
   • Do not send it a code, password, or personal information.
   • Close that page. Open Microsoft recovery pages by typing the address yourself rather than following links in an email or message.
2. Scan the Windows 11 PC before changing passwords.
   • Open Windows Security.
   • Select Virus & threat protection → Scan options → Full scan → Scan now.
   • Microsoft recommends completing the full malware scan before changing the password, in case credential-stealing malware is present. ^1^
3. Use Microsoft’s hacked-account sign-in helper.
   • Open Microsoft’s official compromised-account page directly: ^1^
   • Start the sign-in helper and enter the Microsoft account email or phone number.
   • Follow the recovery option it provides. The tool may offer self-help steps or the opportunity to contact an agent.
4. Resolve the turned-off username.
   • At Microsoft’s sign-in screen, select Forgot your username?
   • Enter the Gmail address producing the error.
   • Microsoft should send a code to the account’s current primary alias.
   • After verification, it displays aliases that can still be used to sign in. Use one that is not blocked. [^2^](https://support.microsoft.com/accounts-billing/manage/how-to-fix-this-username-has-been-turned-off-error "How to fix "This username has been turned off" error | Microsoft Support")
   • If the masked destination is completely unfamiliar and you cannot obtain its code, continue through the compromised-account helper rather than entering information elsewhere.

If you regain access

Immediately:

1. Change the Microsoft account password to a new, unique password.
2. Open Security → Review activity.
3. Expand anything you do not recognize and select This wasn’t me or Secure your account.
4. Remove unknown aliases, recovery addresses, phone numbers, passkeys, devices, and app permissions.
5. Add your own recovery information and enable Microsoft Authenticator or another strong sign-in method.
6. Change the password anywhere else that reused the old password, especially the Gmail account connected to Microsoft.

Microsoft’s Recent activity page covers the previous 30 days and can show alias changes, deleted security information, passkey/security changes, and successful sign-ins. ^3^

About the email screenshot

The displayed sender, [Email], uses the domain Microsoft documents as trusted for Microsoft account notifications. ^4^

Still, do not use the email’s button. Sign in through a Microsoft address entered manually and review activity there. If the passkey deletion was not yours, do not ignore the notification.

If recovery fails because the attacker replaced all aliases and security information, support agents cannot manually change account details or simply send a reset link; use the contact option presented by the official sign-in helper. ^5^

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. How to fix "This username has been turned off" error | Microsoft Support
3. What is the Recent activity page? | Microsoft Support
4. Can I trust email from the Microsoft account team? | Microsoft Support
5. How to help keep your Microsoft account secure | Microsoft Support