Forum Discussion

Kdrfthozd's avatar
Kdrfthozd
Copper Contributor
Oct 21, 2026

Microsoft Account Stolen

Hello. Two or three days ago, a hacker managed to change the email address associated with my Microsoft account and added an authenticator app—all without any security codes being triggered. The password was also changed. I am currently unable to access the account, and I cannot reset the password. Furthermore, I am receiving no response to my account recovery form submissions. How is it possible for someone to add a new email address and an authenticator app to my account without any security codes, especially when my payment methods and games are linked to it? Also, why are the forms left unanswered for days on end? It’s absolute nonsense.

2 Replies

  • hi Kdrfthozd​ That sounds really frustrating, especially when your payment methods, games, and other purchases are linked to the account.

    There are several possible reasons this can happen. If someone obtained your password and gained access to an existing trusted session, or compromised a recovery method, they may have been able to change the account’s security details. Without access to the account’s sign-in and security logs, it’s difficult to determine exactly how the attacker bypassed verification

    Microsoft’s account recovery process is designed to protect accounts from unauthorized takeover, but that can also make recovery difficult when an attacker has replaced the original security information. Microsoft says recovery-form results should normally be sent to the alternate email address within 24 hours, so check your spam folder as well.

    I’d recommend starting with Microsoft’s official Sign-in Helper and hacked-account recovery guidance. If you see a notice that your security information is being replaced, follow the instructions for reporting changes you didn’t make.

    https://support.microsoft.com/en-us/accounts-billing/manage/how-to-recover-a-hacked-or-compromised-microsoft-account

    • Kdrfthozd's avatar
      Kdrfthozd
      Copper Contributor

      I have checked all the folders, and there is no response. You also suggest that the process will become more difficult. In that case, we will hand over all our information—that is what your view implies.