My account has been taken over.

OceanBreezeRock 0 Reputation points
2026-10-07T22:16:29.2233333+00:00

My personal Microsoft account was hacked. The attacker changed my password and changed the security/recovery email address. I still have the original Microsoft security email from October 5 saying that my password was changed. When I try to recover the account using my original Gmail address, Microsoft says “The Microsoft account you've entered does not exist.” When I try signing in another way, it wants to send a verification code to an email address I don't recognize. I have screenshots of these messages and need help recovering my account. What do I do.

<Microsoft Security | Microsoft Authenticator>

Windows for home | Other | Security and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lychee-Ng 29,075 Reputation points Microsoft External Staff Moderator
    2026-10-08T08:46:58.0966667+00:00

    Sorry to hear about your situation, OceanBreezeRock.

    I know how frustrating and worrying it is that your Microsoft account has been compromised, with all the verification methods and security information seemingly replaced. However, I must be honest here so you can get the correct expectation moving forward:

    • Microsoft Q&A is a user-to-user support forum. Contributors here can help giving you guidance, but we cannot review account information or restore a Microsoft account.
    • Even if you contact Microsoft Support, they cannot directly get your account back. Microsoft prohibits its customer service representatives from sending links to reset passwords or change information.

    User's image

    For compromised accounts, Microsoft explicitly guides users who cannot log in to use the Sign-in Helper. The login assistant can identify your account issues and, based on detected situations, offer options to contact support staff. You may also be presented with verification forms where you can provide your evidence:

    User's image

    The recovery system is automatic and can only proceed to the next stage after account ownership is confirmed. I know this isn't the answer you want, but I don't want to give you unrealistic hopes that someone could unlock an account or override Microsoft's security decisions, because we don't have that capability.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-07T22:16:45.43+00:00
    1. Start with the hacked-account recovery flow. Use the sign-in helper for compromised accounts. It asks for the account email address or phone number, then shows the available self-help options or offers the chance to talk to an agent.
    2. If the original Gmail address now returns “The Microsoft account you've entered does not exist”, that matches a takeover scenario where the sign-in alias was changed. In that case, submit the Microsoft account recovery form with the account details that were previously associated with the account and provide as much accurate information as possible.
    3. After submitting the recovery form, the result is sent to the working contact email entered at the start of the form within 24 hours.
      • If Microsoft verifies the account, instructions to sign back in are sent to that contact email.
      • If Microsoft cannot verify the account, the form can be retried up to two times per day.
    4. If sign-in now offers a verification code to an unfamiliar address, do not use that address and do not share screenshots publicly. That unfamiliar address can indicate the attacker changed the sign-in alias or security information.
    5. Secure the devices and accounts that still have access:
      • Run a full antivirus scan on the PC before changing any passwords.
      • If Microsoft Defender is being used: open Virus and threat protection > Scan options > Full scan > Scan now.
      • Secure the Gmail account that still works by changing its password and reviewing its security settings.
    6. If access is regained, immediately:
      • Change the Microsoft account password.
      • Review connected accounts, forwarding, and automatic replies.
      • Add another way to sign in or verify identity in Advanced security options.
      • Consider enabling passwordless sign-in with Microsoft Authenticator.
    7. If self-service recovery does not work, use Microsoft Support contact flow:
      • Go to Contact Microsoft Support.
      • Enter the problem and select Get Help.
      • If needed, select Contact Support to be routed to the best support option.

    Important: Microsoft support agents are not allowed to send password reset links or access and change account details, so recovery still depends on account verification.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.