account hacked and no sucess using automated recoevery

Because the recovery form has already failed, check whether the security-information change is still pending and report it through “let us know”; otherwise use Microsoft’s hacked-account sign-in helper to request agent assistance.

1. Check whether the unauthorized change is still pending

Keep the messages you found as evidence, but do not reply to them or follow links until verifying that they are genuine. Microsoft identifies legitimate account-security alerts as coming from [Email].^1^

If you can still reach the account’s Security page:

1. Open the Microsoft account Security page: https://account.live.com/proofs/Manage
2. Sign in using the compromised account.
3. If “Your security info change is still pending” appears, select “let us know” near the bottom.
4. Follow the prompts to report that you did not make the change.

When all security information is replaced, Microsoft normally places the change in a 30-day pending state and sends notices to the original contact information. The documented response for an unauthorized pending change is “let us know,” not “cancel this request”—the latter is intended when the account owner made the change.^2^

If the message does not appear, you cannot sign in, or the change has already completed, continue below.

2. Use the hacked-account sign-in helper and request support

Open Microsoft’s official hacked-account page and start its sign-in helper. Enter the affected address or phone number. Depending on the result, the tool provides the applicable recovery steps or an opportunity to speak with an agent.^3^

If you need the contact route:

1. Sign in with a different, working Microsoft account.
2. On Microsoft Support, search for Account recovery.
3. Select Get Help, then scroll down and select Contact Support.
4. Choose Other Products.
5. Choose Manage account security.
6. Select Chat with a support agent in your web browser, if offered.
7. State that:
   • the Outlook.com account was taken over;
   • all contact/security information was changed;
   • the automated recovery form was already rejected;
   • you possess the original security-change emails;
   • you need assistance with an account-takeover case.

This is the escalation route reported for the same scenario where recovery information was replaced and the automated form was repeatedly denied.^4^

Support availability and the options shown can vary. Outlook.com support itself cannot restore sign-in access; Microsoft directs users who cannot sign in to the Microsoft account sign-in helper.^5^

3. Protect everything connected to the account now

While recovery is being handled:

• Run an updated antivirus full scan on every device used with the account. In Windows Security, open Virus & threat protection → Scan options → Full scan → Scan now.^3^
• Change passwords for other accounts that used the same or a similar password, starting with the alternate email account.
• Secure that alternate email with a unique password and two-step verification.
• Check financial accounts and Microsoft billing for unauthorized activity.
• Do not publish the compromised address, attacker’s address, screenshots, recovery codes, or email headers containing personal information in this public forum.

If access is restored, immediately change the password and inspect Outlook.com connected accounts, forwarding, and automatic replies, since an attacker may have changed those settings.^3^

References

1. What happens if there's an unusual sign-in to your account | Microsoft Support
2. What does “Security info change is still pending” mean? | Microsoft Support
3. How to recover a hacked or compromised Microsoft account | Microsoft Support
4. How Do I Recover a Microsoft Account Taken Over via Verification Code Phishing When the Recovery Form Keeps Getting Denied? - Microsoft Q&A
5. How to get support for Outlook.com | Microsoft Support