My verification email has been changed.

If Microsoft shows “Your security info change is still pending,” select “let us know” immediately to report and reverse the unauthorized change; if you cannot reach that page or the change has completed, submit the Microsoft account recovery form.

If the security-information change is still pending

Microsoft places an account in a restricted state for 30 days when all security information is removed and replaced, and it sends notifications to the original email address or phone number. During that period:

1. Open the Microsoft account Security page:
   https://account.live.com/proofs/Manage
2. Try signing in with the affected account.
3. On Your security info change is still pending, select let us know near the bottom.
4. Follow the prompts to report that you did not make the change.

Do not select cancel this request—that option is intended for someone who made the change themselves. Microsoft documents let us know as the route for an unauthorized change.^1^

Also check the original verification mailbox, including Spam/Junk, for Microsoft’s notification about the security change.

If you cannot sign in

Submit the Microsoft account recovery form:

1. Go to https://account.live.com/acsr.
2. Enter the affected account and provide a different, working email address where Microsoft can contact you.
3. Complete the form from a device and location previously used with the account, if possible.
4. Supply as much accurate historical information as available, such as:
   • Previous passwords.
   • Earlier account/security details.
   • Outlook contacts and recent subject lines, if applicable.
   • Xbox, Skype, purchase, subscription, or billing information associated with the account.
5. Watch the working contact email for the result. Microsoft says the response normally arrives within 24 hours.
6. If verification fails, improve the information and try again; submissions are limited to two per day.^2^

Microsoft Support agents cannot manually change account details or send password-reset links, so recovery depends on successfully proving ownership through the recovery process.^2^

After access is restored

Before changing the password, run a full malware scan on the Windows device:

1. Open Windows Security.
2. Select Virus & threat protection.
3. Select Scan options → Full scan → Scan now.
4. Change the Microsoft account password to a new, unique password.
5. Review connected accounts, forwarding rules, automatic replies, aliases, recovery methods, and recent activity.
6. Remove unfamiliar verification methods only after adding and confirming your own replacement methods.

Microsoft recommends scanning first because malware left on the device could expose the new password as well.^3^

If the recovery form repeatedly fails, use the sign-in helper on Microsoft’s compromised-account support page; it can provide the applicable self-help route or an option to contact an agent.^3^

References

1. What does “Security info change is still pending” mean? | Microsoft Support
2. Help with the Microsoft account recovery form | Microsoft Support
3. How to recover a hacked or compromised Microsoft account | Microsoft Support