My account was stolen

If the Microsoft account email address was changed by the attacker, take these steps immediately:

1. Run a full malware scan on the PC before changing anything else.
   • Open Virus and threat protection.
   • Select Scan options > Full scan > Scan now.
   • This helps prevent the attacker from capturing new passwords again.
2. Start the Microsoft sign-in helper tool.
   • It checks the account email address or phone number and either gives self-help steps or offers the chance to talk to an agent.
3. Try standard account recovery.
   • If the password no longer works, use Forgot my password or Recover your account.
   • If the username is no longer recognized, check for typing mistakes, the correct domain such as .com vs .co.uk, and try any other alias or phone number that was on the account.
4. If the account shows “does not exist”, use the Microsoft account recovery form.
   • Submit the form carefully with as much accurate ownership information as possible.
   • Results are sent to the working contact email provided in the form within 24 hours.
   • The form can be submitted up to two times per day.
5. If access is restored, immediately:
   • Change the password.
   • Review Recent activity and mark suspicious sign-ins with This wasn't me or Secure your account.
   • Check account settings such as connected accounts, forwarding, and automatic replies, because those may have been changed.
6. Important limitation:
   • Microsoft support agents cannot send password reset links or directly change account details.

• How to recover a hacked or compromised Microsoft account | Microsoft Support
• I can't sign in to my Microsoft account | Microsoft Support
• Help with the Microsoft account recovery form | Microsoft Support
• My username and password have stopped working | Microsoft Support
• What happens if there's an unusual sign-in to your account | Microsoft Support
• Check the recent sign-in activity for your Microsoft account