The supported recovery path is limited to Microsoft’s account recovery tools.
- First, make sure the PC is clean before changing anything else:
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- Microsoft recommends doing a full malware scan before changing passwords.
- Use the Microsoft Sign-in Helper for a hacked account. It can show the available self-help options and may offer the chance to talk to an agent.
- If sign-in is still possible anywhere, go to Security basics and review recent activity:
- Select Review activity.
- For suspicious entries, choose This wasn’t me or Secure your account.
- Then change the password from Security basics.
- If sign-in is not possible, use Forgot my password and select I think someone else is using my Microsoft account.
- If two-step verification was turned on and none of the alternate verification methods are accessible, Microsoft states that support agents cannot send password reset links or change account details.
- If two-step verification was not turned on and the normal reset options no longer match, use the Sign-in Helper first, then the Microsoft account recovery form. Microsoft reviews recovery-form answers and responds within 24 hours.
- After recovery, check account settings that are commonly changed after compromise:
- connected accounts
- forwarding
- automatic replies
- Add another way to sign in or verify identity in Advanced security options so future recovery is easier.
Important limitation: Microsoft’s published guidance says support agents are not allowed to send password reset links or access and change account details. If the attacker replaced the sign-in and verification methods, recovery depends on the available recovery options shown by the Sign-in Helper or recovery form.
References:
- How to recover a hacked or compromised Microsoft account
- Help with the Microsoft account recovery form
- What happens if there's an unusual sign-in to your account
- How to help keep your Microsoft account secure
- Unblock my Outlook.com account
- My account got hacked and the hacker changed the email. How can i get it back? - Microsoft Q&A
- Microsoft Account got hacked. - Microsoft Q&A
- My Microsoft account was hacked and they changed my password and email. - Microsoft Q&A