How to Fix: Someone Created a Microsoft Account Using My Email Address
Question details
An unauthorized person used the user's personal email address to create a Microsoft account.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- The user discovered a Microsoft account linked to their email but cannot access it because the two-factor authentication (2FA) is controlled by the unauthorized creator.
- Observed behavior
- The user is unable to sign in, reset the password, or use standard support options to recover the account due to the attacker's 2FA settings.
Verify that your primary email account (the one used to create the Microsoft account) is fully secure and has not been compromised by the unauthorized user.
Secure Your Primary Email Inbox
Protect the actual email address that was used so the attacker cannot intercept password reset emails or access your personal data.
Before attempting to recover the fraudulent Microsoft account, you must ensure that the email inbox itself is completely secure. If the attacker has access to your actual email, they can undo any recovery efforts.
Navigate to the website of your email provider (such as Gmail, Yahoo, or Outlook) and sign in to your personal email account.
Go to your account security or profile settings and change your password to a strong, unique combination that you have never used before.
Find the Two-Factor Authentication or Multi-Factor Authentication (MFA) option in your security settings and turn it on using a mobile authenticator app or SMS text messages.
Use the Automated Microsoft Account Recovery Form
Submit an official recovery request to Microsoft to prove ownership of the email address since community support cannot manually recover it.
Try WPS Office as a Secure and Free Alternative
If you are struggling with Microsoft account security issues or simply want to avoid mandatory online accounts, WPS Office provides a robust, free, and secure alternative. You can create, edit, and save documents locally without needing to link an online account, while maintaining complete compatibility with all major document formats.
- 1. Visit the WPS Office Website: Navigate to the official WPS website to download the free office suite safely.
- 2. Install the Software: Run the downloaded installer and follow the on-screen instructions to set up WPS Office on your computer.
- 3. Save and Edit Offline: Open your documents directly in WPS Office without ever needing to sign in to a Microsoft account.

Frequently Asked Questions
Can I just call Microsoft support to delete the fraudulent account?
No. Due to strict security policies, Microsoft support agents cannot manually delete or recover accounts over the phone or through community forums. You must use the automated online recovery form.
What if the attacker set up their own two-factor authentication (2FA)?
If the attacker enabled 2FA on the Microsoft account, standard password resets will not work. You will need to use the Microsoft Account Recovery form (account.live.com/acsr) and indicate that you do not have access to those verification methods.
Can the attacker read the emails in my personal inbox?
Creating a Microsoft account with your email address does not automatically give the attacker access to your personal inbox. However, to be absolutely safe, it is highly recommended to change your email password and enable 2FA on your email provider immediately.
How did someone create an account without confirming my email?
Sometimes a Microsoft account can be provisionally created before the email address is fully verified by clicking a confirmation link. If the attacker cannot access your actual inbox, they cannot click the verification link, which limits what they can do with the Microsoft account.




