Locked out of personal Microsoft account – security email belongs to a defunct company domain, ACSR rejected

gaetano cutrona 0 Reputation points
2026-10-24T23:36:13.76+00:00

Hello,

I’m locked out of my personal Microsoft account and would appreciate advice on the best way forward.

Background

  • The account was created on 8 May 2018 using my former company email address (++++@aw+++.it).
  • The same day I purchased an Office 365 Personal subscription, which ended on 8 May 2019.
  • On 9 May 2019 I added my personal Gmail (******@gmail.com) as an alias. I now use it as the sign-in name.
  • The company no longer exists, and the old company mailbox and domain are no longer active.

The problem

  • When I try to sign in or reset the password, Microsoft only offers to send a security code to the old company address, which I can no longer access.
  • I don’t see a phone number or authenticator option, and I don’t have a recovery code.
  • I cannot add my Gmail to another account because it is already registered to this one.

What I’ve tried

  • I submitted the account recovery form (account.live.com/acsr) from my usual device and home network, using a separate Gmail as the contact address.
  • The request was rejected for insufficient information, and the account is now blocked pending verification.
  • I’m preparing a new submission with more details (creation date, original email, Office 365 purchase, older passwords).

My questions

  1. Is there any other legitimate way to verify ownership besides the ACSR form, given that the security email belongs to a defunct domain?
  2. Which details carry the most weight in the form for an account mainly used for an Office 365 purchase?
  3. If I re-register the expired company domain and recreate the mailbox, would Microsoft’s security codes be delivered there?

Thank you for any help. Hello,

I’m locked out of my personal Microsoft account and would appreciate advice on the best way forward.

Background

  • The account was created on 8 May 2018 using my former company email address ([email protected]).
  • The same day I purchased an Office 365 Personal subscription, which ended on 8 May 2019.
  • On 9 May 2019 I added my personal Gmail (******@gmail.com) as an alias. I now use it as the sign-in name.
  • The company no longer exists, and the old company mailbox and domain are no longer active.

The problem

  • When I try to sign in or reset the password, Microsoft only offers to send a security code to the old company address, which I can no longer access.
  • I don’t see a phone number or authenticator option, and I don’t have a recovery code.
  • I cannot add my Gmail to another account because it is already registered to this one.

What I’ve tried

  • I submitted the account recovery form (account.live.com/acsr) from my usual device and home network, using a separate Gmail as the contact address.
  • The request was rejected for insufficient information, and the account is now blocked pending verification.
  • I’m preparing a new submission with more details (creation date, original email, Office 365 purchase, older passwords).

My questions

  1. Is there any other legitimate way to verify ownership besides the ACSR form, given that the security email belongs to a defunct domain?
  2. Which details carry the most weight in the form for an account mainly used for an Office 365 purchase?
  3. If I re-register the expired company domain and recreate the mailbox, would Microsoft’s security codes be delivered there?

Thank you for any help.

Microsoft 365 and Office | Subscription, account, billing | For home | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-10-24T23:36:42.9933333+00:00

    For a personal Microsoft account in this situation, the main recovery path is the account recovery form. If the password is known but all security info is lost, the supported path is to start sign-in, select I don't have any of these at Verify your identity, replace the security info, and then wait 30 days before sign-in is allowed. If the password is not known and there is no access to any security info, the guidance is to use the recovery form.

    For the recovery form:

    1. Use the current sign-in alias and also any other alias or phone number previously attached to the account if available.
    2. Provide a working contact email address.
    3. Include as much accurate detail as possible. The documented guidance specifically calls out remembered old passwords as helpful.
    4. Results are sent to the working email address provided at the start of the form within 24 hours.
    5. If verification fails, the form can be retried up to two times per day.

    On whether there is another legitimate verification path besides ACSR:

    • If any other sign-in or verification method is still attached, use Sign in another way or another verification method.
    • If no security methods are accessible but the password is known, use I don't have any of these to replace security info and wait 30 days.
    • If the password is not known and no security methods are accessible, the recovery form is the supported path.
    • Support agents cannot send password reset links or change account details.

    On which details matter most for a form tied mainly to an Office 365 purchase:

    • The supported documentation only explicitly identifies remembered old passwords as useful and says to provide as much accurate information as possible.
    • The Microsoft Q&A guidance in similar cases also recommends including billing-related details for purchases, such as prior purchase information, along with old passwords and other account-specific details.

    On repeated attempts and the current block:

    • Avoid excessive or repetitive verification requests, because that can trigger temporary blocks.
    • If blocked during verification, try another verification method if one exists, try another network, and wait. A day may be enough; if not, wait longer, up to 1 week.

    No supported guidance confirms that re-registering an expired company domain and recreating the mailbox will work for Microsoft security code delivery, so that should not be relied on as a recovery method.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.