Someone is trying to hack my email account

Alex 0 Reputation points
2026-04-27T14:25:27.61+00:00

I have been being asked to login to my email account repeatedly this morning. When I click on methods to login, I notice the phone number for verification is completely different than any line I use. I am suspicious this is because someone is trying to get into my account. How can I flag wherever these login attempts are coming from and prevent whoever this is from getting into my account?

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  2. IGYQ 22,340 Reputation points Independent Advisor
    2026-04-27T15:19:11.9266667+00:00

    Hi!

    Welcome to Microsoft Q&A forum.

    According to your information, there is already an attack on your account (if you verified another number showing on sign in method)check as well if this is an old number that you own. You have to take immediate action and verify your account through the Microsoft Security page: https://account.microsoft.com/security

    Once logged in check for anyecent activity (look for unfamiliar locations/devices), security information like a unfamiliar phone number.

    Once you have validated the details, Immediately change your password (from a safe device using your own home internet) use a strong, unique password( don’t reuse an old one). Next, remove unknown security information, go to: Security → Advanced security options and check phone numbers or recovery addresses, REMOVE anything that you don't recognize.

    For extra information, check “Recent activity” and you might see the following:

    IP location (approximate)

    Device/browser

    Success/failed attempts

    Was this answer helpful?

  3. AI answer

    2026-04-27T14:25:46.4433333+00:00

    Unusual sign-in prompts and an unrecognized verification phone number strongly suggest suspicious activity. Take these steps to protect the Outlook.com / Microsoft account and review where the attempts are coming from:

    1. Secure the account immediately
      • Change the password to a strong, unique one that is not used on any other site.
      • Make sure two-step verification (2FA) is enabled and that only phone numbers and email addresses owned are listed as security info.
    2. Verify the sign-in alerts are legitimate
      • Microsoft sends unusual sign-in alerts from the Microsoft account team at ******@accountprotection.microsoft.com. If alerts come from other senders or domains, treat them as suspicious.
    3. Check recent sign-in activity and flag unfamiliar attempts
      • Go to the recent activity page at https://account.live.com/activity.
      • Review the list of sign-ins (time, location, device, and app).
      • For any activity that is not recognized, mark it as “This wasn’t me” (or the equivalent option). This helps Microsoft treat those attempts as unauthorized and can trigger additional protection on the account.
    4. Review and correct security contact info
      • Go to the Microsoft account Security basics page (for example via the links in the articles) and review all security info (phone numbers, alternate email addresses).
      • Remove any phone number or email address that is not recognized.
      • Add a trusted mobile number and alternate email address that are controlled, so security codes and alerts go only to those.
    5. Watch for blocks or code-delivery issues
      • If many verification requests are made in a short time, Microsoft may temporarily block sending codes as a protection measure. Avoid repeatedly requesting codes.
      • If verification codes are being emailed, ensure messages from @accountprotection.microsoft.com are not going to junk, and mark that domain as a trusted sender.
    6. Continue monitoring
      • Periodically re-check the recent activity page to ensure no new unfamiliar sign-ins appear.
      • If there is evidence that someone has accessed the account, follow the guidance for compromised accounts in the referenced articles and complete any recommended recovery or security-hardening steps.

    These steps both flag the suspicious sign-in attempts to Microsoft and reduce the chance that an attacker can successfully access the account.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.