Use Microsoft’s hacked-account sign-in helper immediately; if the landline is your only registered verification method and it cannot receive the offered code, replacing it triggers the 30-day security hold, which Microsoft Support cannot bypass.^1^^2^
Recover and secure the account
- Scan the Windows 10 PC before entering a new password.
- Open Windows Security.
- Select Virus & threat protection → Scan options → Full scan → Scan now.
- Wait for the scan to finish and address anything detected. Microsoft recommends doing this before changing the password so malware cannot capture the replacement.^1^
- Open Microsoft’s hacked-account recovery page and run its sign-in helper.
- Enter the affected Outlook.com address or phone number.
- Follow the route it presents for a compromised account. Depending on the account state, it will provide self-service recovery or an option to contact an agent.^1^
- At the verification screen, look for another method already registered.
- Select options such as Other ways to verify, if shown.
- Use an existing alternate email, authenticator, passkey, or other accessible method.
- If one works, change the password immediately to a new, unique password.
- If the landline is the only method and cannot receive the offered verification code, select I don’t have any of these and replace the security information. When access to all existing security methods has been lost, Microsoft requires 30 days before the replacement becomes usable. Support agents cannot send a code, issue a password-reset link, or change the account’s security details for you.^2^
Avoid repeatedly requesting codes, because excessive attempts can cause a temporary block. If another verification option exists, use that instead.^2^
If a security change is already pending
If “Scheduled for removal” appears:
- If you initiated it, the old method remains usable until its scheduled removal date, if you can still access it.
- If you did not initiate it, open Additional security options, expand the affected method, select Cancel removal, and remove any verification methods you do not recognize.^3^
After regaining access, inspect connected accounts, forwarding, and automatic replies for unauthorized changes.^1^ Add more than one recovery method—preferably a verified email plus an authenticator or passkey rather than relying only on SMS.
Do not close the account as a workaround
Closing the account will not bypass verification: you must be able to sign in, and an account with recently replaced or removed verification information remains subject to the waiting period. Closing also affects services connected to that Microsoft account.^4^
If the sign-in helper cannot restore access, use the Contact Support option offered through it. Support can guide the recovery process, but cannot override the security hold or manually change the account.
References