I'm really concerned about my child's Microsoft account being overtaken by a scammer. This is a child's account, and I'm the admin on it. It has two-factor authentication set up with a phone number, yet I never received any alerts from Microsoft saying that a family member changed the email, password, name, or phone number. How could this happen?
1 Answer
First off, you should definitely contact Microsoft. When an account is compromised, their usual procedure is to permanently suspend it. It might be frustrating, but that’s what they do.

It's baffling why they can't just backup the account! They have the history and should know all accounts are linked to the same area. The scammer must be using a different country, and this is definitely a school email.