How to Fix Unauthorized Microsoft Account Created With Your Email
Question details
An unknown individual registered a Microsoft account using the user's personal email address and locked it by setting up unauthorized two-factor authentication.
- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- A malicious actor has hijacked the user's email identity to create a Microsoft account and secured it with their own 2FA, preventing the rightful email owner from recovering or deleting the account.
- Observed behavior
- The user is completely locked out of the Microsoft account associated with their own email address and cannot reset the password because the 2FA prompts go to the malicious actor's devices.
Before attempting to address the Microsoft account issue, you must urgently verify that your primary email inbox itself is secure and hasn't been compromised.
Secure Your Primary Email Provider Account
Since the Microsoft account was created using your email address, the immediate priority is to ensure the malicious actor does not have access to your actual email inbox.
If someone successfully created and verified a Microsoft account using your email address, there is a possibility they temporarily gained access to your inbox to click a verification link. Securing the host email prevents further unauthorized activities.
Navigate to the official login page of your email service provider (such as Gmail, Yahoo, or Outlook) and sign in.
Access your email account's security settings and change your password to a strong, previously unused combination of letters, numbers, and symbols.
In your email security settings, locate the Two-Factor Authentication or 2-Step Verification option and link it to your personal mobile device.
Attempt the Automated Microsoft Account Recovery
Use Microsoft's official online recovery form to try and reclaim ownership of the account registered under your email address.
Avoid Microsoft Account Hassles by Switching to WPS Office
If you are locked out of Microsoft services due to unauthorized account creation or complex recovery loops, WPS Office provides a lightweight, highly compatible, and free alternative. You can easily edit your documents locally with a familiar UI without being forced into an unavoidable Microsoft account ecosystem.
- 1. Download WPS Office: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the software: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup.
- 3. Edit your documents instantly: Launch WPS Office and directly open your existing Microsoft Office files from your local drive to begin working immediately.

Frequently Asked Questions
Can Microsoft Support delete the unauthorized account for me?
No. For security and privacy reasons, Microsoft support agents do not have the authority to manually delete, modify, or bypass the security of any account. Recovery is handled strictly through their automated online system.
How was an account created with my email without my permission?
Anyone can type an email address into a registration form. If the account was successfully verified, the malicious actor may have temporarily compromised your email inbox to click a verification link, which is why changing your email provider password is the top priority.
Will this unauthorized account affect my primary email inbox?
The Microsoft account and your actual email inbox (e.g., Gmail or Yahoo) are separate entities. As long as you secure your primary email inbox by changing its password and enabling 2FA, the malicious actor cannot read your personal emails.
Do I need to recover this Microsoft account to use Office software?
Not necessarily. If you simply need to create or edit documents, you can use alternative software like WPS Office. WPS Office is fully compatible with Microsoft formats and can be used without requiring a Microsoft account.




