My other microsoft account has been hacked and i need access to it

Use Microsoft’s Sign-in Helper with the original email address or phone number; it can identify the account issue, present the available recovery options, or offer contact with an agent. ^1^

1. Start account recovery

1. Open the hacked-account support page above and select Start under the Sign-in Helper.
2. Enter the original Microsoft account email address or phone number, not the replacement address shown in the attacker’s notification.
3. Follow the route for a compromised account. If prompted on a normal sign-in page, select:
   • Forgot my password
   • I think someone else is using my Microsoft account
4. Provide a separate working email address where Microsoft can contact you.

Since several recovery attempts have already failed, prepare stronger ownership evidence before submitting another recovery form:

• Previous passwords.
• Original name, birth date, address, and other information entered when the account was created.
• Exact Outlook email subject lines and contacts, if applicable.
• Purchase or subscription details.
• The hardware ID of an Xbox console frequently used with the account—preferably the older console if it was used longer.
• Submit from a familiar device and location previously used for the account.

Microsoft normally sends the recovery result to the working contact email within 24 hours. If verification fails, the form can be attempted up to twice per day. ^2^

If two-step verification was enabled and none of its verification methods are accessible, the recovery form cannot bypass it. Microsoft support agents also cannot manually send a reset link or directly change the account’s security information. ^2^

2. Check whether the unauthorized change is still pending

Because you received emails saying that personal information changed, inspect those messages now:

• A legitimate Microsoft account-security message should come from an address ending in @accountprotection.microsoft.com. ^3^
• Do not follow links in messages from other domains. Instead, open Microsoft’s support or account pages directly.

If signing in displays “Your security info change is still pending”, Microsoft places the account in a restricted state for 30 days after all security information is replaced. On the account’s Security page, select let us know at the bottom of that pending-change window and follow the prompts to report that you did not make the change. Microsoft cannot expedite the 30-day process. ^4^

That option applies only if a pending-security-change window appears; an email-alias change alone does not establish that the 30-day security-info process is active.

3. Protect the cards immediately

Do not wait for account recovery:

1. Contact each bank or card issuer and report that the card details are exposed through a compromised Microsoft/Xbox account.
2. Ask them to block or replace the card and prevent further transactions.
3. Review recent transactions and dispute anything unauthorized.

Microsoft specifically advises contacting the payment provider because disputing an existing charge alone does not prevent further fraudulent charges. ^5^

Also secure the email account that originally received the Microsoft notifications: change its password, sign out unknown sessions, and enable two-factor authentication. Before changing recovered Microsoft credentials, run Windows Security → Virus & threat protection → Scan options → Full scan → Scan now so malware cannot capture the new password. ^1^

Do not post the replacement email address, card details, notification screenshots, or other account-identifying information in this public forum.

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Help with the Microsoft account recovery form
3. Can I trust email from the Microsoft account team? | Microsoft Support
4. What does “Security info change is still pending” mean? | Microsoft Support
5. How to investigate a billing charge from Microsoft | Microsoft Support