How to Fix Microsoft Two-Step Verification and Investigate Incorrect Charges

Losing access to your Microsoft account because of a missing authenticator app or outdated phone number is highly stressful. When that authentication lockout is paired with unexplained billing charges on your credit card, the situation requires immediate, sequential action. You cannot cancel auto-renewing subscriptions or dispute unrecognized purchases through standard account settings if you are blocked by a login prompt. If you are locked out while actively being billed, working to fix Microsoft two-step verification and investigate incorrect charges is the only way to stop the financial drain and secure your personal data.

Overriding the Authentication Lockout

The first step in Understanding the process of fixing Microsoft Two-Step Verification and Investigate Incorrect Charges is regaining access to the account dashboard. If your secondary email is closed or your phone is lost, you must trigger Microsoft’s automated 30-day security information replacement process. This is the only official mechanism to bypass a lost two-step verification method.

1. Navigate to account.microsoft.com in your web browser and click Sign in.
2. Enter your Microsoft account email address and your password.
3. When the Verify your identity screen appears, ignore the default prompt and click the link labeled I don't have any of these or Show more verification methods.
4. If prompted for an account recovery code, and you do not have the 25-character string saved offline, click No.
5. The system will direct you to a page titled Recover your account. Enter a new, accessible email address where Microsoft can contact you.
6. Follow the prompts to add a new phone number or authenticator app.

Expected Result: You will receive an email stating your security info will be replaced in 30 days. During this 30-day waiting period, you cannot access security settings or payment options, but you can still use your devices that are already logged in.

Tracing and Identifying Microsoft Billing Charges

Once you initiate the recovery wait time, the next phase of fixing Microsoft Two-Step Verification and Investigate Incorrect Charges involves tracing the financial transaction itself. Because you cannot view your Microsoft account Order History during the 30-day lockout, you must perform diagnostic checks using your bank statement.

Open your recent bank or credit card statement and locate the specific transaction descriptor. Microsoft uses standardized billing codes that reveal exactly what subscription or service is generating the charge.

If the charge matches an ongoing subscription, you must wait for the 30-day security lockout to end. Once access is restored, navigate to the Services & subscriptions tab on your Microsoft account dashboard, click Manage next to the active product, and click Cancel subscription. Select the option to request a prorated refund if the system offers it based on your usage history.

Alternative: Stopping Charges via Your Financial Institution

If waiting 30 days is financially damaging, working to fix Microsoft two-step verification and investigate incorrect charges requires moving outside the Microsoft ecosystem and contacting your bank directly. This alternative is necessary when you suspect the account was compromised by a third party making unauthorized purchases.

• Call the fraud or dispute department using the phone number on the back of your credit or debit card.
• Inform the representative that your Microsoft account is locked and you cannot halt the recurring charges internally.
• Request to file a Regulation E dispute for unauthorized transactions or ask the bank to place a merchant-specific block on all future charges from "Microsoft" or "MSFT".

Verify this step by checking your pending transactions over the next 48 hours to ensure the bank has issued a provisional credit for the disputed amount.

Working Locally with WPS Office During Account Recovery

While you navigate fixing Microsoft Two-Step Verification and Investigate Incorrect Charges, your daily document tasks must continue without access to cloud-based Microsoft 365 apps. Because your OneDrive and web-based Word applications are locked behind the authentication barrier, shifting your workflow to a capable desktop suite is highly recommended.

WPS Office functions entirely independently of Microsoft servers, allowing you to maintain productivity while waiting out the 30-day security hold. You can use it to securely review downloaded PDF bank statements or compile dispute evidence locally.

1. Open WPS Office and click Open on the left sidebar to locate your locally saved `.docx` or `.xlsx` files. WPS opens these natively without requiring a cloud login.
2. If your bank statements are in PDF format, click the PDF tab in WPS Office to open the file.
3. Use the Highlight and Text Box tools under the Comment ribbon to mark the exact unrecognized Microsoft charges on your statement.
4. Save the annotated PDF locally so you can easily upload it to your bank's secure dispute portal.

Use Word, Excel, and PPT for FREE

Free Download

Frequently Asked Questions

Why am I being billed if I am locked out of my Microsoft account?

Microsoft subscriptions, such as Xbox Game Pass or Microsoft 365, are tied to automated billing agreements that execute at the server level. The billing system does not check whether you have actively logged in recently or whether your two-step verification methods are functioning. Subscriptions will continue to auto-renew until explicitly canceled from within the account or blocked by your credit card issuer.

Can Microsoft Support bypass the 30-day wait time for security info replacement?

No. The 30-day waiting period is a hardcoded security feature designed to prevent hackers from instantly taking over an account by deleting valid two-step verification methods. Microsoft customer support agents do not have the administrative tools or permissions to expedite this process, cancel the timer, or manually update your phone number over the phone.

Does the Account Recovery form work if two-step verification is turned on?

The standard Account Recovery form (ACSR) is automatically disabled and ignored by the system if you have previously enabled two-step verification. If you attempt to fill it out, you will receive an automated email stating that your request was rejected because 2FA is active. You must exclusively use the "I don't have any of these" workflow described earlier to trigger the 30-day replacement.

How can I tell if a Microsoft charge is legitimate or fraudulent?

Review the descriptor on your bank statement. Legitimate charges usually align with annual or monthly renewal dates for software you previously purchased. Fraudulent charges often appear in rapid succession, feature unusual amounts, or reference products you do not own (like Xbox games when you only own a Mac). If you see multiple rapid charges of identical amounts, it strongly indicates your payment method was compromised and linked to a separate, unauthorized Microsoft account.