Independent guide - not affiliated with or endorsed by Microsoft. We never ask for your password, codes or account details. For official help use Microsoft's account recovery form or support.microsoft.com.
Microsoft Account Locked for Suspicious Activity: How to Unlock It
Published October 16, 2026. Updated October 16, 2026.
Seeing "your account has been temporarily suspended" or "we noticed some unusual sign-in activity" is alarming, but in most cases it is Microsoft's security working as intended rather than a sign that your account is gone. This independent guide explains the two different kinds of lock, how to unlock each one, what to do when the security code will not arrive, and how to tell a genuine Microsoft warning from a scam that copies the same wording.
Why Microsoft locks an account
There are two separate situations that people both describe as being "locked", and they are resolved in different ways.
- A temporary block after unusual sign-in activity. Microsoft's support page on unusual sign-ins explains that a sign-in from a new location or device, a newly installed app that uses your account, or travelling can trigger a block, and that Microsoft sends an email and SMS alert. The block is there "to protect you from fraud or abuse".
- A lock for a possible Terms of Use violation. Microsoft's "Microsoft account has been locked" article describes this case, which can follow activity such as spam or automated account creation. It is cleared through a reinstatement form rather than a simple code.
Knowing which message you are seeing tells you which path below to follow.
Unlock after an unusual sign-in
This is the common case. Microsoft's guidance is:
- Go to account.microsoft.com and start to sign in.
- Follow the instructions on the sign-in screen and choose where to send a security code - to your email address or phone number on file.
- Enter the code to confirm it is you, then finish signing in.
- If you cannot sign in at all, use the Microsoft account sign-in helper, which Microsoft links from its support pages and which can identify most sign-in problems.
If you are travelling without access to your usual email or phone, Microsoft suggests signing in from a trusted device you set up earlier, or signing in later from a location you normally use, because the extra check may not be needed there.
Unlock a Terms of Use lock (reinstatement form)
If the message says your account was locked and points you to a link beginning with aka.ms/, Microsoft's instructions are to go to account.microsoft.com, and if you do not see the option to prove you are human, open the reinstatement form from that aka.ms link and follow it. Microsoft stresses that you should submit the form only once; a reviewer reads it and replies by email, and sending repeat requests can slow the response. Microsoft also notes that its support agents can only send password reset links or change account details after you submit that form.
When the security code will not arrive
A missing code is the most common sticking point. Points from Microsoft's own pages:
- Check your junk or spam folder. Legitimate codes are sent from account-security-noreply@accountprotection.microsoft.com, so you can confirm the sender.
- When an account is flagged or locked for security reasons, verification messages may not be delivered until the underlying issue is resolved, so follow Microsoft's verification-code troubleshooting article if nothing comes through.
- Signing in from a device or network you have used before can remove the need for a fresh code.
If you still cannot pass the check and have genuinely lost access, the next step is the account recovery form; our page on what to do when the recovery form is not working covers that route in detail.
Check recent activity and secure the account
Once you are back in, Microsoft recommends reviewing the Recent activity page, reached from the Security basics page at account.microsoft.com/security. Expand any sign-in you do not recognise and choose This wasn't me under unusual activity, or Secure your account under recent activity. If you think someone else reached your account, change your password from the Security basics page. Our guide to recovering a hacked Microsoft account walks through the full clean-up.
Tell a genuine lock from a scam
Scam emails and pop-ups deliberately reuse phrases like "account locked" and "unusual activity" to panic you. Microsoft's guidance makes the differences clear: Microsoft does not send unsolicited messages or make unsolicited calls asking for personal information, its error and warning messages never include a phone number to call, and it will never ask for payment in gift cards or cryptocurrency. If a message pressures you to call a number or install remote-access software, treat it as a scam, close it, and open account.microsoft.com yourself. You can report scams at microsoft.com/reportascam. Our page on why warnings appear on Windows explains which prompts are real.
Reduce the chance of future locks
Keeping your security info current is the best prevention. Add an up-to-date phone number and a second email so Microsoft always has a way to reach you, turn on two-step verification using our MFA setup guide, and keep a printed account recovery code somewhere safe. With more than one way to verify on file, an unusual sign-in is far more likely to be a quick code prompt than a drawn-out recovery.
Frequently asked questions
Why is my Microsoft account locked for no reason?
A lock is usually automatic. Microsoft temporarily blocks an account when it notices unusual sign-in activity, such as a sign-in from a new device, a new location or while travelling, to protect you from fraud or abuse. It does not mean you did anything wrong.
How do I unlock my Microsoft account?
Sign in at account.microsoft.com and follow the on-screen instructions to receive a security code by email or text, then enter it. If you cannot sign in, use Microsoft's sign-in helper. A separate type of lock for a possible Terms of Use violation uses a reinstatement form instead.
The security code is not arriving. What can I do?
Check your junk folder. Genuine codes come from account-security-noreply@accountprotection.microsoft.com. If a flagged account is blocking messages, follow Microsoft's verification-code troubleshooting article, or sign in from a device or location you normally use so the extra check is not needed.
Will I lose my emails and files if my account is locked?
No. A security lock pauses access; it does not delete your mailbox, OneDrive files or Xbox profile. Once you verify your identity and unlock the account, your data is still there.
Is the "your account has been locked" message always genuine?
No. Scammers copy these messages. A real Microsoft warning never includes a phone number to call and never asks you to pay in gift cards or cryptocurrency. Open account.microsoft.com yourself rather than clicking a link in an unexpected email or pop-up.