Account with 2 step verification has been hacked

I wish I had better news, but when a Microsoft account is hacked, if the hackers change the associated recovery options like the Email or if 2FA is enabled on the account, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered.

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

For a personal Outlook.com / Microsoft account that has two-step verification enabled and is now locked after a phishing scam, only the official automated recovery paths can be used.

Key points from Microsoft’s guidance:

1. When two-step verification is turned on and no verification method is accessible
   • If two-step verification is enabled and none of the alternate methods (phone, email, Authenticator, security key, etc.) can be used to receive or approve a verification, Microsoft support cannot override this.
   • Support agents are not allowed to send password reset links, change security info, or bypass verification for security reasons.
   • This is explicitly stated in the account recovery documentation: if two-step verification is on and no verification method is available, the account cannot be recovered by support.
2. Account recovery form behavior
   • The Microsoft account recovery form is the only self-service option for locked or hacked consumer accounts.
   • The documentation notes that the form does not work for accounts where two-step verification is enabled and the user cannot access any verification methods.
   • Submitting the form multiple times will not change this limitation; the system will continue to reject recovery if it cannot verify identity with the configured 2-step methods.
3. What can still be done
   • Use the Sign-in Helper tool first to confirm the available options and see if any recovery path remains: Sign-in Helper.
   • If the account is considered hacked or compromised, start from the hacked-account helper: Start. This may route to self-help or a chance to talk to an agent, but the agent still cannot bypass two-step verification.
   • If any old device, phone number, or email that was ever set up as a verification method is still accessible (even if forgotten), attempt sign-in and choose “I don’t have any of these” only after exhausting all options; if one method works even once, immediately:
     • Change the password.
     • Review and remove any unknown security info, sign-in aliases, and devices.
     • Turn on safer methods such as Microsoft Authenticator or passkeys.
4. If no verification method is available at all
   • If two-step verification is on and every verification method (phone, email, app, security key) is either lost, compromised, or unreachable, Microsoft’s documentation indicates there is no supported way to regain access.
   • In that case, the practical steps are:
     • Treat the old account as permanently lost.
     • Inform contacts (from another email, phone, or social channel) that the old address is compromised and should be ignored.
     • Update email addresses on banks, services, and subscriptions to the new account.
5. Preventive measures for the new account
   • Enable two-step verification but ensure multiple, independent methods are configured (e.g., Authenticator app on a secured device plus a different phone number or email).
   • Consider going passwordless using methods like Microsoft Authenticator, Windows Hello, or security keys as described in the two-step verification guidance.

References:

• Help with the Microsoft account recovery form
• How to recover a hacked or compromised Microsoft account
• Common problems with two-step verification for a work or school account
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• My account got hacked. - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A