In This Guide
The calls usually start the same way: "I've tried everything, and there's no one at Microsoft to talk to." A code that never arrives. A passkey screen with no way past it. A recovery form that comes back rejected within a day.
We want to be straight with you about what's possible, because there's a lot of bad advice — and some outright scams — around this.
1. Why So Many People Are Getting Locked Out Right Now
Several changes have landed close together:
SMS is being phased out
Microsoft says it will "start phasing out SMS" for sign-in and recovery on personal accounts. Many accounts can no longer add a new phone number at all.
Passkeys by default at work
Since 1 September 2026, work and school accounts set up for SMS have passkeys turned on and a registration prompt. From 1 February 2027 that prompt can't be skipped for SMS-only users.
Device-bound passkeys
Passkeys in Microsoft Authenticator stay on one phone. Replace the phone without a second method and the way in goes with it.
Windows passkey loops
Since July 2026, some people report a Windows 11 sign-in loop: "Something went wrong", then straight back to the lock screen. There's no confirmed fix from Microsoft yet.
None of these is a bug as such — they're the security working as designed. The problem is that the designs assume everyone has a spare device and an up-to-date recovery email. A lot of people don't.
2. Is There Really No Human Support?
It's more precise to say: there are humans, but they're not allowed to unlock your account.
Microsoft's own help pages say: "To protect your account and its contents, our support agents are not allowed to send password reset links, or access and change account details." You can reach chat or phone support for many problems, but when it comes to getting into a personal account, everything goes through an automated recovery process that no agent can override.
And if two-step verification was on and every backup method is gone, Microsoft's recovery page puts it plainly: "we cannot help you, sorry."
| Account type | Who can help | What they can do |
|---|---|---|
| Personal (Outlook.com, Hotmail, Xbox) | Automated recovery form; chat/phone for general help | Agents can't reset or unlock — the form decides |
| Work or school | Your IT administrator | Can reset your sign-in methods or issue a temporary pass, usually within minutes |
| Business where the only admin is locked out | Microsoft support via the admin centre or phone | Data Protection team verifies business ownership; this can take days |
That's the honest picture, and it's why we're seeing more people who've given up on Microsoft and come to us. We are not Microsoft and can't override Microsoft's security checks. What we can do is sit with you — remotely or at your place — and work every legitimate route properly.
3. Getting the Recovery Form Right
For personal accounts, the form at account.live.com/acsr is the main route back in. Microsoft's own tips, plus what we've learned helping people through it:
- Use a device and place you normally sign in from — your own computer, at home, on your home internet.
- Give a contact email you can open right now. It can be a family member's or a new free address. Microsoft replies there within 24 hours.
- Answer as much as you can. Old passwords, exact subject lines of recent emails, contacts' addresses, Xbox or Skype details all help. Guessing is fine — wrong answers don't count against you.
- You can try up to twice a day. If it's rejected, gather more detail (check old devices, a partner's inbox for emails you sent) and try again.
Microsoft's Sign-in Helper, a PC that's still signed in, a phone still logged in to Outlook, an old recovery email. A device that's still signed in can be used to add a new passkey or recovery email.
4. For Business Owners: The Sole-Admin Problem
If you run Microsoft 365 for your business and you're the only administrator, losing your phone can lock the whole business out of its own settings. Your staff can't reset you, and your IT provider can't if they don't have admin rights.
Microsoft's route is a support request through the admin centre or phone, after which its Data Protection team checks you own the business (often by asking you to add a record to your domain). It works, but it isn't quick.
Prevention is simple: two emergency admin accounts, as Microsoft recommends here, plus every admin on at least two sign-in methods. Our business IT support team sets this up.
5. Watch Out: Fake "Microsoft Support" Numbers
Searching "Microsoft support phone number Australia" when you're desperate is exactly what scammers count on. Ads and fake listings send people to call centres that ask for remote access, gift cards or payment to "unlock" the account.
- Microsoft will never call you out of the blue, and never asks for payment to recover an account.
- Never read a code from a text or email to anyone on the phone.
- Only use contact options reached from support.microsoft.com.
- If you've already given access or money, contact your bank, then IDCARE and Scamwatch.
We're an independent local IT business. We'll never claim to be Microsoft, never ask for your password, and you stay in control of your own account the whole time.
6. How We're Helping People Get Back In
We can't override Microsoft. What we do is take the frustration and guesswork out of it:
- Work out which account it really is — personal or work — because that changes everything.
- Find every device that's still signed in and use it to add a new passkey or recovery email.
- Sit with you through the recovery form, from your usual device and location, gathering the details that make it succeed.
- Fix Windows Hello and passkey loops on the computer itself.
- Once you're in, set up a second and third way in so this never happens again.
We do this remotely or in person. Remote support is $125/hr and an onsite visit is $205/hr, with a one-hour minimum. You'll know the cost before we start. We can't promise Microsoft will accept a recovery request, and we'll tell you honestly if it isn't looking likely.