My Account had been hacked and they removed my main and recovery email.

Question

My Account had been hacked and they removed my main and recovery email.

Anthony Halim 0

Hello Microsoft Community / Support Team,

Last week, I discovered that my Microsoft account ([PII removed]@gmail.com) was breached and my original primary email was removed and replaced by someone using the temporary address [PII removed]@microversemail.com.

Since then, I haven't been able to log into my Microsoft account through the web. Initially, my Windows Xbox app still had a cached session, but now it has also expired. Before that happened, I managed to capture all the necessary evidence (including screenshots of the hacker's alias and error logs) proving that this account belongs to me and that it has been hacked.

I already submitted the Account Escalation request and replied with all the requested details within minutes. However, a day has passed, and I haven't received any updates or progress.

My questions are:

Did my recent email reply containing the requested details and evidence successfully reach the support team, or was it automatically ignored/discarded due to formatting or ticket status issues?

How can I track the status of my support ticket to ensure it is being actively worked on by the Safety Team?

Is there any direct escalation channel or method to reach out to a human support agent who can manually release/unlink the hacker's alias ([PII removed]@microversemail.com) and restore my original email?

Are there any other alternative ways to recover my account without losing my game data and progress?

Thank you for your assistance.

User's image

daniel varney 0 Reputation points

2026-10-16T15:36:33.77+00:00

exact same thing happened to me with the same temp email...

1 answer

Your answer

daniel varney 0 Reputation points

2026-10-16T15:36:33.77+00:00

exact same thing happened to me with the same temp email...

Answer 1

Kai-H 28,690 Microsoft External Staff Moderator

(Please note that our forum is a public platform, and we will modify your question to hide your personal information in the description. Kindly ensure that you hide any personal or organizational information the next time you post an error or other details to protect personal data.)

Hi, Anthony Halim

I’m sorry this happened, especially with your games at stake. We cannot check ticket status or confirm email delivery from this forum, so there’s no way to tell here whether your reply was received or discarded.

Here are some suggestions you can try:

Reply to the existing support thread with your case number and ask for confirmation that your evidence was attached, whether the case is still open, and when to expect an update. I recommend a short, plain-text follow-up, not because your original formatting was necessarily a problem.

If you cannot reach the case handler, use the hacked-account recovery guide. Its helper can offer contact with an agent. Explain that your original alias was removed and that you already have an escalation case.

There is no guaranteed manual alias-reset shortcut; support agents cannot directly change account details. Game progress and purchases also cannot transfer to another Microsoft account, so focus on recovering the original account.

Anthony Halim 0 Reputation points

2026-10-13T09:51:48.39+00:00

Thanks for the suggestion. Unfortunately, that's exactly what I tried, but the system keeps pushing me into a dead end.

As soon as I received the follow-up email from support asking for details, I replied within a minute with all the proof (including screenshots of the hacker's alias [PII removed]@microversemail.com and web error logs). However, following your advice to send a short plain-text follow-up resulted in the system immediately sending an automated reply stating that the case is closed—even though it hadn't even been 24 hours and no human agent had actually reviewed it.

I've tried opening new cases, but the automated bots keep auto-closing or rejecting them because the hacker completely deleted my original email alias ([PII removed]@gmail.com).

Since the standard support ticket system is entirely trapped in an endless loop of automated closure, my question is: Is there any other escalated channel, direct form, or specific department (like Microsoft Privacy or Data Protection) that handles severe account hijacking cases where the primary alias has been stolen? Or is the consumer support system literally designed to abandon victims in this scenario?

Thanks again.
Kai-H 28,690 Reputation points Microsoft External Staff Moderator

2026-10-14T08:27:27.7+00:00

Hi, Anthony Halim

Since you replied within minutes and the case was then automatically closed, this is no longer simply a matter of waiting for the email response. The escalation appears to have failed before the account-takeover review could be completed.

There is a specialist Microsoft Account Safety process for confirmed account-takeover cases, but customers cannot contact that team directly. A regular support agent must create or reopen the escalation and keep the case active until the specialist team provides an outcome.

Please open Contact Microsoft Support while signed in with another Microsoft account. Ask for an agent and provide the previous case number. You can use wording such as:

"My account was taken over, the attacker removed my original alias, and I already submitted the requested evidence. The escalation case was automatically closed immediately after I replied. Please review the existing case, confirm whether my evidence was attached, and reopen or re-escalate it as an account-takeover case to the Microsoft Account Safety team. Please do not redirect me only to the Sign-in Helper because the stolen alias is no longer recognized."

If the agent cannot reopen the original case, ask for a new case number and request that the existing evidence and closed case number be referenced in the new escalation. Avoid opening several cases simultaneously, since duplicate cases can make tracking more difficult.

The Microsoft account Sign-in Helper can offer an agent option in some situations, but it may not recognize an address that the attacker removed. Unfortunately, there is no separate public legal, executive, or privacy channel that can bypass account ownership verification or manually restore an alias. A privacy request concerns access to or handling of personal data, not account recovery, so it is unlikely to restore access.