My email account has been hacked

Evangelos Nichlos 0 Reputation points
2026-09-18T16:28:57.2133333+00:00

My Hotmail account has been hacked. I received a sextortion email containing an old password and I need Microsoft to investigate my account and sign-in activity. I also see repeated suspicious emails returning to my mailbox after deletion. I need to speak with a support agent.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Thomas4-N 21,930 Reputation points Microsoft External Staff Moderator
    2026-09-20T10:10:25.79+00:00

    Hello Evangelos Nichlos,

    The old password in the extortion email is concerning, but by itself it doesn't necessarily mean your Hotmail account was recently accessed. An old password can come from an earlier credential leak.

    I would first check your Microsoft account's Recent activity and look specifically for a successful sign-in you don't recognize.

    • If you find one, select This wasn't me or Secure your account, then change your password and review your security information.
    • If you don't find any unknown successful sign-ins, that would make the old password alone much less useful as evidence that the Microsoft account itself was accessed.

    Since messages are also returning after you delete them, I would check your Outlook Rules and Forwarding settings and remove anything you don't recognize.

    For Microsoft to review the account further, you can also use the Microsoft account Sign-in Helper.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-09-18T16:29:14.29+00:00
    1. Start with the Microsoft account Sign-in Helper. It can guide the recovery flow for a hacked account and may offer the chance to talk to an agent: Start.
    2. Before changing the password, run a full malware scan on the PC:
      • Open Windows Security
      • Go to Virus and threat protection
      • Select Scan options > Full scan > Scan now
    3. After the scan, sign in and change the password. If sign-in fails, use the password reset flow.
    4. Review account activity and security:
      • Go to Security basics and select Review activity
      • On unusual entries, select This wasn't me or Secure your account
      • If access is still possible, select Change password from Security basics
    5. Check Outlook.com mailbox settings that are commonly changed after compromise:
      • Connected accounts
      • Forwarding
      • Automatic replies
    6. If suspicious messages keep reappearing after deletion, review mailbox rules and forwarding-related settings as part of the account settings check, because unauthorized changes can redirect or restore mail behavior.
    7. To speak with support, use Contact Microsoft Support. Enter the problem, select Get Help, and then Contact Support to reach the best support option.

    Important: support agents are not allowed to send password reset links or access and change account details.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.