email hacked

Question

email hacked

rob murray 0

i need help urgently as my account has been hacked

i have managed to get it back and changed password but the recovery email is still the hackers.

0 comments

2 answers

Your answer

Answer 1

John Jefferson Doyon 86,625 Independent Advisor

Hi, @rob murray

First, just to be safe, I’d recommend to sign out everywhere. Visit: https://account.live.com/proofs/manage/additional Scroll down to Sign me out and select "Sign me out".

Also check the account aliases here: https://account.live.com/SignInPreferences check the recovery email addresses or other verification methods listed there. If possible, add your own recovery method first, then remove the hacker's email address. Microsoft may place the security changes into a 30-day pending period if the security information has to be replaced.

Also check "Manage how you sign in to Microsoft" under your account information and make sure the hacker has not added or changed an account alias.

To help narrow this down:

Can you edit or remove the hacker's email address there so the security change can start the 30-day pending period?
Is the hacker's email shown as an account alias, a recovery/security method, or both?
Do you see any message saying a security information change is still pending?

Click "Add comment" to let me know.

Thanks!

rob murray 0 Reputation points

2026-09-04T20:24:42.51+00:00

I can’t access any of that. I have changed the recovery email back from the hacker. It now says I have to wait 30 days for it to change. So now the hacker has that access for 30 days unless they block it
John Jefferson Doyon 86,625 Reputation points Independent Advisor

2026-09-04T20:30:25.5866667+00:00
Thank you for letting me know.

Please follow the steps in https://support.microsoft.com/en-us/accounts-billing/manage/what-does-security-info-change-is-still-pending-mean in "You didn't make the security info changes to your account" section.

The steps mentioned:

Go to https://account.live.com/proofs/Manage

On the Your security info change is still pending window, select the link, "let us know" towards the bottom of the window and follow the prompts.
rob murray 0 Reputation points

2026-09-04T20:37:42.93+00:00

So I changed the alternative email back to my email I use for this. That’s why it is now saying have to wait 30 days. So the alternate email is stuck on the hackers email. Do I still cancel the change?
John Jefferson Doyon 86,625 Reputation points Independent Advisor

2026-09-04T20:42:00.1933333+00:00

Great!

If you successfully changed it back to your alternative email, there is nothing to do but to wait for 30 days. Unfortunately, there’s no way to speed this up, even Microsoft Support can’t bypass it. This waiting period is part of Microsoft’s account security design to protect accounts from potential unauthorized access.

I know it’s inconvenient, but once the 30 days are completed, you’ll be able to update your verification email and regain full access.

Let me know if you have any further questions or concerns.

Thanks!
rob murray 0 Reputation points

2026-09-04T20:47:33.4433333+00:00

Yes I have changed it but if I try to acces some security settings it showing his email for the code to sent to
rob murray 0 Reputation points

2026-09-04T20:48:46.1566667+00:00

This what I get on some pages
John Jefferson Doyon 86,625 Reputation points Independent Advisor

2026-09-04T20:52:29+00:00

These needs to be checked by Microsoft Support, can you contact them using this link using another Microsoft Account you have access to or one you can create?

Here’s the link: https://support.microsoft.com/home/contact

Answer 2

If access has already been regained and the password has been changed, the next priority is securing the account settings and stopping verification codes from going to the attacker.

Go to the Microsoft account Security basics page and review recent sign-in activity. If any activity is not recognized, select This wasn't me or Secure your account for those entries.
Change the password again if there is any chance the attacker still has access, and use a strong password.
Check account settings that attackers commonly change:
- Connected accounts
- Forwarding
- Automatic replies
Add new security info to the account, such as an alternate email address or mobile phone number, so account recovery no longer depends on the attacker-controlled address.
If the account shows that a security info change is pending, use the built-in options on that screen such as Let us know if the change was unauthorized.
Run a full malware scan on the PC before making further security changes:
- Open Windows Security
- Open Virus and threat protection
- Select Scan options > Full scan > Scan now

Important: support agents are not allowed to send password reset links or directly change account details, so the supported recovery and security flows must be completed through the account security tools.

If the account becomes blocked during this process, use the Sign-in Helper to unblock it.

References: