Use the Microsoft account recovery process immediately.
- Go to the Microsoft hacked account recovery guidance and use the sign-in helper tool.
- Before changing the password, run a full malware scan on the PC. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
- If access is still possible, change the Microsoft account password from the Security basics page and create a strong new password.
- On the Recent activity page, review sign-in activity. If suspicious activity appears under Unusual activity, select This wasn't me. If it appears under Recent activity, select Secure your account.
- Check account settings that may have been changed, including connected accounts, forwarding, and automatic replies.
If sign-in no longer works because the attacker changed the password or security details, use Forgot my password and select I think someone else is using my Microsoft account.
If the attacker changed the associated email or enabled their own verification methods, the available path is still the official hacked-account recovery flow. The context does not provide a supported method to remotely delete the account so the attacker cannot use it.
For suspicious messages in the future, do not click links or call numbers in the message. Open a new browser tab and sign in through the official site instead.
References:
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- What happens if there's an unusual sign-in to your account | Microsoft Support
- How to spot a "fake order" scam | Microsoft Support
- Microsoft account compromised, account email changed, account blocked – cannot recover - Microsoft Q&A
- MIcrosoft account compromised, MInecraft account stolen, email alias changed. - Microsoft Q&A
- My microsoft account was hacked, they changed the email, password, and turned on 2 factor authentication - Microsoft Q&A