My account has been taken over.

OceanBreezeRock 0 Reputation points
2026-10-07T22:16:29.2233333+00:00

My personal Microsoft account was hacked. The attacker changed my password and changed the security/recovery email address. I still have the original Microsoft security email from October 5 saying that my password was changed. When I try to recover the account using my original Gmail address, Microsoft says “The Microsoft account you've entered does not exist.” When I try signing in another way, it wants to send a verification code to an email address I don't recognize. I have screenshots of these messages and need help recovering my account. What do I do.

Microsoft Security | Microsoft Authenticator
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-10-07T22:16:45.43+00:00
    1. Start with the hacked-account recovery flow. Use the sign-in helper for compromised accounts. It asks for the account email address or phone number, then shows the available self-help options or offers the chance to talk to an agent.
    2. If the original Gmail address now returns “The Microsoft account you've entered does not exist”, that matches a takeover scenario where the sign-in alias was changed. In that case, submit the Microsoft account recovery form with the account details that were previously associated with the account and provide as much accurate information as possible.
    3. After submitting the recovery form, the result is sent to the working contact email entered at the start of the form within 24 hours.
      • If Microsoft verifies the account, instructions to sign back in are sent to that contact email.
      • If Microsoft cannot verify the account, the form can be retried up to two times per day.
    4. If sign-in now offers a verification code to an unfamiliar address, do not use that address and do not share screenshots publicly. That unfamiliar address can indicate the attacker changed the sign-in alias or security information.
    5. Secure the devices and accounts that still have access:
      • Run a full antivirus scan on the PC before changing any passwords.
      • If Microsoft Defender is being used: open Virus and threat protection > Scan options > Full scan > Scan now.
      • Secure the Gmail account that still works by changing its password and reviewing its security settings.
    6. If access is regained, immediately:
      • Change the Microsoft account password.
      • Review connected accounts, forwarding, and automatic replies.
      • Add another way to sign in or verify identity in Advanced security options.
      • Consider enabling passwordless sign-in with Microsoft Authenticator.
    7. If self-service recovery does not work, use Microsoft Support contact flow:
      • Go to Contact Microsoft Support.
      • Enter the problem and select Get Help.
      • If needed, select Contact Support to be routed to the best support option.

    Important: Microsoft support agents are not allowed to send password reset links or access and change account details, so recovery still depends on account verification.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.