We have detected unusual activity on your Microsoft account

Microsoft does not document a printed-form or postal recovery option for personal Outlook.com accounts, and mailing a driver’s license is not an accepted substitute for the online ownership checks.

Best recovery path

1. First check whether the alert is genuine.
   A legitimate Microsoft account-security message comes from an address ending in @accountprotection.microsoft.com. Avoid clicking links in a suspicious message; start the sign-in process directly from Microsoft’s account site instead. ^1^
2. Try signing in from his normal computer and usual location.
   Microsoft states that an unusual sign-in can be triggered by a new device or location. A previously trusted device or usual location may allow him back into the account. ^2^
3. If he knows his current password but cannot access any listed security email or phone:
   • Begin signing in.
   • At Verify your identity, select I don’t have any of these.
   • Supply a working alternative email address and follow the instructions to replace the security information.
   • After replacement, Microsoft requires a 30-day wait before sign-in. ^3^
4. If he does not know the password, use the online Microsoft account recovery form.
   Start with Microsoft’s Sign-in Helper, which directs the user to the available recovery option. The recovery form must use an alternative email address that he can currently access; this may be a trusted friend’s or family member’s address. Microsoft sends the result there. ^4^

Completing the form with limited information

Old passwords and email subject lines are helpful, but the form also accepts other account-history information. Enter only accurate information and use approximate dates where the form permits them. Useful details include:

• The exact first and last name and birth date used on the account.
• The country or region where the account was created.
• An approximate date of the last password change; leave it blank if the password was never changed.
• Any alternate email addresses, aliases, or phone numbers previously associated with it.
• Any linked Xbox Gamertag or device information, if applicable.
• An alternative contact email that is not the locked account.

Microsoft’s detailed guidance explains these fields and says that more information improves the chance of validating ownership. Responses can take up to five working days under that guidance, so check the contact address’s Junk or Spam folder as well. ^5^

Possible places to find missing information include:

• Another computer or email application where old messages remain cached.
• Messages he sent to relatives or friends, who may be able to provide exact subject lines and recipient addresses.
• Browser or password-manager records containing an older password.
• Microsoft purchase receipts, bank statements, or Xbox records, if those services were used.

If recovery is rejected

Review the form guidance and resubmit only when additional or corrected information is available. Microsoft allows up to two recovery attempts per day, but support agents cannot bypass verification, issue a reset link, or change account details on the user’s behalf. ^6^

A crucial limitation applies if he personally enabled two-step verification and has lost access to every configured verification method: Microsoft states that the recovery form and support cannot restore access in that situation. ^4^

Do not send a driver’s license or other identity document to an address supplied by an email sender or third party. Microsoft’s documented personal-account process verifies control through security methods and account-history information, not an unsolicited postal identity submission.

References

1. Can I trust email from the Microsoft account team? | Microsoft Support
2. What happens if there's an unusual sign-in to your account | Microsoft Support
3. Troubleshoot Microsoft verification code issues | Microsoft Support
4. Help with the Microsoft account recovery form | Microsoft Support
5. Guidance notes for the Microsoft account recovery form
6. Account recovery unsuccessful | Microsoft Support