Account comprimised, email changed, account recovery no help, savings at risk.

Indy 0 Reputation points
2026-08-11T05:48:09.1833333+00:00

I had the unfortunate experience of having a piggyback Trojan on my PC, which resulted in all my accounts being compromised. Luckily I have gotten most of them back, however recently my Microsoft account was taken over. The email was changed, along with my password, and I only noticed when I had tried to log in on my phone(I had changed the password after they attempted to log in before). I am still logged into my PC, as of right now the email is a morotufu.live account, which is not in fact mine. Morotufu is a Nigerian email, I am American.

I am running on a time limit. After a singular attempt of recovering my account, I received an email stating that "Unfortunately, there have been too many requests in a 24 hour period" and to "wait for 24 hours before attempting to make a new request." It is really not a good idea to wait 24 hours, as my debit card is linked to that account, of which I had JUST replaced after my last one was compromised by the Trojan.

Please, for the love of god, anyone, please help me, I have been dealing with this for months, I just want all of it to be over. I want to be able to not panic after every account recovery email I see, even if I am ACTIVELY making changes.

Microsoft Security | Microsoft Identity Manager

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-08-11T05:48:30.0866667+00:00
    1. On the PC that was infected, run a full antivirus scan before changing anything else. Microsoft’s guidance is to clear malware first, then change the password. On Windows 8.1 or Windows 10/11, Windows Defender is available from Start and can be used to run the scan.
    2. If access is still available anywhere, immediately review recent sign-in activity and mark anything unrecognized:
      • Go to the Security basics page for the Microsoft account.
      • Select Review activity.
      • On the recent activity page, use This wasn't me for unusual activity or Secure your account for suspicious recent activity.
    3. Change the password from the Security basics page if access is still possible. If sign-in no longer works, use Forgot my password and select I think someone else is using my Microsoft account.
    4. Check account settings that attackers commonly change:
      • connected accounts
      • forwarding
      • automatic replies
    5. If the account is blocked because of unusual sign-in activity, use the Sign-in Helper. If that does not work, use the When you can't sign in to your Microsoft account path from the Outlook.com unblock guidance.
    6. If the automated recovery flow is failing or rate-limited, use the official Microsoft support path from a different account:
      • Go to Contact - Microsoft Support.
      • Select Get Help.
      • Scroll to Contact Support.
      • Choose Other Products.
      • Choose Manage account security.
      • Use chat or callback if available.
    7. If the account is still signed in on another device, check whether that trusted session can still be used to verify identity and update security settings.
    8. Because a payment method is linked, remove or protect the card outside the Microsoft account immediately through the bank or card issuer.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.