Did I get hacked?

Yes—account activity can be checked, and suspicious access can be reported and blocked.

1. On the phone, open the Security basics page for the Microsoft account and select Review activity.
2. Check the Recent activity page for unusual sign-in attempts. If an entry is not recognized:
   • In Unusual activity, expand it and select This wasn't me.
   • In Recent activity, expand it and select Secure your account.
3. Change the account password from Security basics and use a strong password.
4. If access to the account is still available, review account settings that attackers commonly change:
   • connected accounts
   • forwarding
   • automatic replies
5. Add or verify security info such as an alternate email address and mobile phone number so account recovery is easier if access is lost.
6. On the desktop PC, run a full antivirus scan before changing the password:
   • Open Virus and threat protection
   • Select Scan options > Full scan > Scan now
7. If the email that was clicked claimed to be from Microsoft, a legitimate Microsoft account security email uses the domain @accountprotection.microsoft.com. The sender can also be checked in the message headers.
8. If sign-in stops working, use Forgot my password and choose I think someone else is using my Microsoft account.

Important: support agents are not allowed to send password reset links or change account details.

• What happens if there's an unusual sign-in to your account | Microsoft Support
• How to recover a hacked or compromised Microsoft account | Microsoft Support
• Help protect your Outlook.com email account | Microsoft Support
• Can I trust email from the Microsoft account team? | Microsoft Support
• Check the recent sign-in activity for your Microsoft account