my account has been hacked

1. Start with the Sign-in Helper tool. It can guide the recovery steps for a hacked Microsoft account and may offer the chance to talk to an agent: Start.
2. Before changing or resetting anything, run a full malware scan on the PC that was used with the account:
   • Open Windows Security
   • Go to Virus and threat protection
   • Select Scan options > Full scan > Scan now
3. If access is still possible anywhere, immediately change the password from the Security basics page and review recent sign-in activity. On the activity page, use This wasn't me for unusual activity or Secure your account for recent activity that was not authorized.
4. If sign-in no longer works, use Forgot my password and select I think someone else is using my Microsoft account during recovery.
5. If the attacker replaced all security info, the account can enter a restricted state for 30 days. During that period, changes cannot take effect immediately.
6. If the normal reset path does not work, use the Microsoft account recovery form guidance. Microsoft reviews the answers and responds within 24 hours. A working contact email is required for that process.
7. If the account is also blocked because of unusual sign-in activity, use the Outlook.com Sign-in Helper: Sign-in Helper.
8. If recovery tools do not restore access, contact Microsoft Support through Contact Microsoft Support and select Get Help. Support agents can route the case, but they cannot send password reset links or directly change account details.

If the email change was already completed and the verification window was missed, the remaining supported options are the Sign-in Helper, password recovery flow, the account recovery form, and Microsoft Support routing.

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• What does “Security info change is still pending” mean?
• Unblock my Outlook.com account
• Help with the Microsoft account recovery form
• Microsoft account has been locked