Subscription disabled for suspicious activity – production down – tickets 2610310030000406 / 2610310050000431

Only Azure Support’s Subscription/Account Review team can review and reactivate a subscription disabled for suspicious activity; immediately update the existing requests and call Microsoft customer support to request correct routing, while recognizing that Basic-plan severity limits cannot be overridden by a Q&A moderator.

Immediate actions

1. Update both existing requests
   • Azure portal → Help + support → All support requests.
   • Open each request → New message.
   • State:
     • Complete production outage since 31 October 2026, 07:06 UTC.
     • Exact error: ReadOnlyDisabledSubscription.
     • Billing balance is $0.00.
     • Request routing to the Subscription/Account Review team for a suspicious-activity suspension.
     • Identify one request as the primary case and cross-reference the other, so the teams can avoid parallel investigations.
     • Ask whether an exception allowing temporary access or data export is available if immediate reactivation cannot be approved.
   Microsoft documents this message workflow for existing requests. Managing a request requires Owner, Contributor, or Support Request Contributor at subscription scope.^1^
2. Call Microsoft customer support now For the United Arab Emirates, the published numbers are:
   • 800 020 00132 — toll-free
   • +971 4 391 7000
   Ask the representative to locate the existing requests and help route the primary case to the Azure Subscription/Account Review team. A closely matched Q&A case recommends customer service when portal ticket handling is blocked, with the representative escalating to that review team.^2^ The UAE numbers are listed by Microsoft Support.^3^
3. Check whether “Change severity” is available
   • Open the primary request under All support requests.
   • Select Change severity.
   • If no engineer is assigned, select any higher level actually offered and choose Change.
   • If an engineer is assigned but unavailable, send a message requesting a severity change. Microsoft specifically documents calling customer service for an urgent severity change in that situation.^1^
   The maximum selectable severity depends on the support plan, so customer service cannot be assumed to override the Basic plan’s entitlement.^4^

What not to do

• Do not use the portal’s self-service Reactivate action. That documented path applies when an Account Administrator or Owner canceled a pay-as-you-go subscription; it is not the documented process for a security suspension.^5^
• Do not publish the subscription ID, tenant ID, identity documents, or contact details here. Supply them only through the support request or a Microsoft-authenticated support channel.
• Do not open more duplicate requests. Continue adding timestamps and impact updates to the designated primary case unless Support instructs otherwise.

Temporary access and export

There is no published self-service procedure in the cited documentation for temporarily enabling resources or exporting data while a subscription is security-disabled. Put that request directly to the Account Review team as a proposed exception; only that team can determine whether it is available.

The Q&A forum cannot itself change the subscription state or guarantee escalation of the two existing case numbers. Priority Community Support can create a support ticket for some complex Azure questions, but you already have tickets, so the useful action is correct routing and urgent case management rather than another case.^6^

After reactivation

Most resources should resume automatically. Check every production service and restart resources where necessary. If resource creation or management remains unavailable for more than 30 minutes after reactivation, contact Azure Billing Support through the case.^5^

References

1. Manage an Azure support request
2. Unable to create a new support request - Microsoft Q&A
3. [Personal account](https://support.microsoft.com/support/#microsoft-sales-support)
4. Create an Azure support request
5. Reactivate a disabled Azure subscription
6. Q&A FAQ