i accidentally gave a hacker a verification code and they changed the email is there any...

Dear varialedeer854



Thank you for posting to Microsoft Community



Based on your description, I understand that you accidentally gave the verification code for your Microsoft account to a hacker and that the hacker changed the security email in the account, so please point me in the right direction if I'm misunderstanding you.



I need to know what error you are getting when you try to log in now?



There are three steps that a user can take to recover his/her account by himself/herself, resetting the password, a recovery code that needs to be generated manually in the web login, and a recovery form to fill in the information in the account to verify the identity of the owner of your account.



Recovery Code

Have you logged into your Microsoft account https://account.microsoft.com/ on this page and generated a security recovery code in the [Security] - [Manage Security Authentication Methods] screen? If you have generated this code, after you click [Show more authentication methods] and then click [I don't have the above information], a text box will appear, you can fill in the recovery code, after verification, a recovery email will be sent to any of your designated email accounts, you can change your account security information through this link (need to wait for 30 days to change completely).



Recovery Form

If you are unable to get your account back by resetting your password and recovery code, you can try filling out the account recovery form. You will be redirected to the account recovery form when you click on [I don't have the above information] or possibly when you click on [more verification methods]. You can also click on this link to go directly to the Account Recovery Form screen (https://account.live.com/acsr ). You will need to prove the identity of your account owner by filling out questions that only the account owner will know about.

Please note: Microsoft's account recovery process is controlled by a fully automated server and we do not and cannot access or have any information about you. Provide an email address that can receive messages from the Microsoft team and complete the account recovery form on the page. You will receive the verification results within 24 hours of submitting the form.

If you receive a ‘We were unable to verify your account’ result, you will need to submit the form again, answering as many questions as possible on the next form and filling in as much information as possible when you get to the ‘Add More’ question. You can only use a maximum of two recovery forms per day. Recovering your account is a time-consuming process, so submitting as much information as possible will increase the pass rate of automatic verification.

If the result is ‘We verified your account’, Microsoft will send instructions on how to log back into your account to the email address you provided on the recovery form.



I wish you all the best

Carmid.L-MSFT | Microsoft Community Support Specialist

Hey, thanks for the help guys but also what I forgot to say is that I have 2-step verification on the account but the hacker has changed my phone number but not my alternative email, is there any chance I can get a recovery code even if my account got
hacked?

We did as you said and were able to access the Microsoft account and Minecraft with the email of the hacker and the new password. We tried to change the email of the hacker but it requested us to send a code to the security email that the hacker put there. So we click 'we didn't have any' way of receiving the code and followed the instructions. So now we have to wait 30 days for the verification and replace of the security information.

She is accessing, as I said the Minecraft and other things with the hacker's email and the new password we created. My question is, what if the hacker enters the Microsoft account again and changes again the email? Is it possible that they do that?

We are feeling so insecure now.

Another question, how can the person change their role to an administrator in our Family Safety in their desktop (the hackers's desktop information appears in our Family Safety) so that some resources of the Family Safety do not work? How can this happen as my child is under age? She shouldn't be able to do that as the age is state as 17, right?

Should we remove her from the family security while the email is the hacker's?

Are you still able to go to
https://account.live.com/Proofs/Manage and sign into your account?

If you are signed in on the account security proofs page, please change your password again.

After changing the password, check your security information (i.e. secondary emails and phone numbers that are used to recover your account in case you forget your password).

Make sure that there are no unknown emails or phone numbers present. A hacker that added their own email and phone number could then recover your account again with the provided email and phone number.

And MOST IMPORTANTLY: Scroll down on the page and enable Two Step Verification.

After enabling Two Step Verification, set up the free authenticator app on your smartphone.

With that app and Two Step Verification, the Live service will ask for a secret code whenever someone tries to sign in to your account from a new device.

Unless the hacker physically steals your phone, the hacker can't get the code and will be unable to get into your account to change the password.

Also change the passwords of your email accounts that are in your account's security information.

If the hacker managed to get access to your recovery email account, they can again reset your password, and confirming the reset through your hacked email.

If possible also enable Two Step Verification with your email account, if you are using Gmail or Outlook.

[mod removed]

My Microsoft account got hacked. The hacker was baiting me to get him verification codes of changing the security info of my account, then got raid of my account.

He deleted the original email of my account which is "*** Email address is removed for privacy ***" then somehow changed the account email to another one named
"*** Email address is removed for privacy ***" (These info is shown in first image, check attachments).
After doing so, he got raid of all my security stuff like verify phone number and email.He was clearly hacking my account. He literally deleted my original email of this account "*** Email address is removed for privacy ***", if he is not hacking this account, he has no need to do it...

I really need help!

"My Microsoft account got hacked. The hacker was baiting me to get him verification codes of changing the security info of my account, then got raid of my account."

You didnt actually give him the verification codes did you? If so this would've been what allowed everything else that happened afterwards to occur.