Hi Aaron Yau,
Thank you for posting your question in the Microsoft Q&A forum
Here are a few things you might try:
1. Immediately report the breach to Microsoft
- Go here right now: https://support.microsoft.com/security
Then choose “Get help with a hacked account” —> it will walk you through securing and reporting the breach directly to Microsoft’s account recovery and security teams.
- Or go directly to: https://account.live.com/acsr
This is the official account recovery form Microsoft uses when an account may still be under attacker control.
2. Use a clean device
Make sure you are not using the same device that may have been compromised.
If possible:
- Use a different computer or phone that you know is secure.
- Run a malware scan (Windows Defender or another trusted antivirus) on the device you usually log in from.
3. Secure your account settings manually
While waiting for Microsoft to respond:
Check account recovery settings:
- Go to https://account.live.com/proofs/manage
- Remove any unfamiliar email addresses or phone numbers.
- Add only yours.
Check for forwarding rules in Outlook Web:
- Go to Settings > Mail > Rules — delete any suspicious rules.
- Check Mail > Forwarding — disable any automatic forwarding.
Recheck sign-ins:
- Visit https://account.live.com/activity
- See if there are logins you do not recognize. You can “Secure this account” from that page directly.
Important: I do not have the right or ability to access your account or recover it for you. Microsoft will only restore access through official recovery and verification If that fails, go straight to Microsoft Support again with proof of ownership (purchase receipts, screenshots of Xbox/Skype activity, billing info). However, if recovery attempts continue to fail, it typically means the account is considered unrecoverable. At that point, creating a new Microsoft account might be the only viable solution.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please feel free to let me know if you have any further updates, thanks.