i had another microsoft account stolen via malware

Question

i had another microsoft account stolen via malware

Drago DracoMan671 0

I had a Microsoft account stolen via a token stealer, I have tried the recovery form but it is slow and is unclear if I need to replay to the escalation emails or submit another form. however, I have proof that I own the account via Microsoft family safety settings.

User's image

Drago DracoMan671 0 Reputation points

2026-10-11T05:25:05.9366667+00:00

if need be, i can show the account listed on an xbox 360, but i will be unable to sign in to the account because the hacker changed the password, recovery email, removed my 2fa and phone number, and changed the 25 digit recovery key. i literally have nothing else to show except the horrible things the hacker said to me while holding my account ransom. and i have several people on discord who can vouch that i indeed own this account.
Drago DracoMan671 0 Reputation points

2026-10-11T05:27:39.3333333+00:00

if i have to i will keep making posts here till something is done about this. the fact i have had to wait so long and have only spoken to a real person 1 time, and all i was told is "its an automated system" what kind of automated system does not have a manual override built in for when the system fails? its like a giant machine with exposed moving parts not having an emergency stop
Drago DracoMan671 0 Reputation points

2026-10-11T05:50:38.6333333+00:00

if possible, i will also provide the Microsoft Global Device Identifier key from my registry on the pc that was used to make the screenshot above

1 answer

Your answer

Drago DracoMan671 0 Reputation points

2026-10-11T05:25:05.9366667+00:00

if need be, i can show the account listed on an xbox 360, but i will be unable to sign in to the account because the hacker changed the password, recovery email, removed my 2fa and phone number, and changed the 25 digit recovery key. i literally have nothing else to show except the horrible things the hacker said to me while holding my account ransom. and i have several people on discord who can vouch that i indeed own this account.
Drago DracoMan671 0 Reputation points

2026-10-11T05:27:39.3333333+00:00

if i have to i will keep making posts here till something is done about this. the fact i have had to wait so long and have only spoken to a real person 1 time, and all i was told is "its an automated system" what kind of automated system does not have a manual override built in for when the system fails? its like a giant machine with exposed moving parts not having an emergency stop
Drago DracoMan671 0 Reputation points

2026-10-11T05:50:38.6333333+00:00

if possible, i will also provide the Microsoft Global Device Identifier key from my registry on the pc that was used to make the screenshot above

Answer 1

Kayece Jan Mae Amizola 16,770 Independent Advisor

Hi,

Unfortunately, the only way to regain access to your Microsoft account is by submitting the Account Recovery Form. Microsoft Support will also direct you to this process, as they do not have the ability to access or change your account information.

Microsoft takes account security seriously, which is why the recovery process is automated and cannot be manually changed by MS support. To improve your chances of success, please provide as much accurate information as possible to verify that you are the rightful owner of the account. The more details you can provide, the better your chances of passing the verification process. Please note that if your primary email address, phone number, aliases, and security information have been deleted or replaced, unfortunately, there is no way to recover your account. This is a difficult situation, but please understand that the recovery process exists to protect your account and its contents.

If your recovery request was denied or unsuccessful, please click the link below for more information.

https://support.microsoft.com/en-us/accounts-billing/manage/account-recovery-unsuccessful

If you have not received an email regarding your recovery request, please check your spam, junk, and other email folders. Also, make sure to check the same email address you provided in the recovery form, as that is where Microsoft will send its response.

It may not be the outcome or solution you were hoping for, but I hope this helps address your concern.

Stay Safe!

Drago DracoMan671 0 Reputation points

2026-10-11T06:03:46.92+00:00

i will wait a little bit longer for an email from the system, but you guys really need to add additional options for recovery. token stealers are becoming more and more common, and the way you guys have your recovery set up makes it nearly impossible to recover a low-activity account
Kayece Jan Mae Amizola 16,770 Reputation points Independent Advisor

2026-10-11T06:10:48.4966667+00:00

I understand how important our accounts are to us, but we also need to understand that Microsoft has strict security measures in place. That is why they have this Recovery account form to make sure that no person can intervene in recovering your account, as it requires personal information. As users, we are responsible for keeping our accounts secure by staying vigilant and being careful about sharing our personal information and login credentials with others.
Drago DracoMan671 0 Reputation points

2026-10-11T06:12:57.0233333+00:00

also how do i respond to the account escalation request, do i reply to the email? or is there a link?
Drago DracoMan671 0 Reputation points

2026-10-11T06:17:20.3366667+00:00

yes, but some users (like me) don't have the mental fortitude to keep stuff like that written down, because a normal person should never have to go this far just to regain something i rightfully own. and a token stealer doesn't need login credentials to steal an account, all it takes is a wrong visit to a website and everything you're logged into is under the control of someone else, and then they hold it for ransom. the fact that there is no manual review is a security flaw in and of itself. the way it is currently set up is expecting way too much of the average end user.
Kayece Jan Mae Amizola 16,770 Reputation points Independent Advisor

2026-10-11T06:31:13.09+00:00

I understand, but these strict security measures happen not only in MS but also on other platforms. I have an account that was hacked due to a link I had access to, and considering that I also entered important credentials, which is a lesson learned: do not click any link and research first regarding the email content and company. If the email is from a large company, double-check the email content, and it's better to contact their support.

If you received an unsuccessful or declined request, you need to fill out the form again.
Drago DracoMan671 0 Reputation points

2026-10-11T06:38:48.3933333+00:00

these strict security measures make it easier for hackers to maintain control of accounts too, also another important note, the discord account linked to my stolen microsoft account has several thousands of dollars worth of 3d assets i've bought over several years, as well as several very important connections i literally cannot afford to lose. the fact i cannot have a human help me. when about 6 years ago, before covid. i could talk to a real person and have my account back in less than 30 minutes is appalling. this ai system doesnt work, frustrates users and ENCOURAGES hackers to steal accounts because they know there is nothing users can do about it.
Drago DracoMan671 0 Reputation points

2026-10-11T06:39:35.25+00:00

there has to be a point where this has got to change. human involvement in situations like this should be mandatory by law.
Drago DracoMan671 0 Reputation points

2026-10-11T06:42:43.3833333+00:00

if i have to i will email aasha sharma directly. because at this rate thats the only way i am going to be able to get ANYTHING done. the fact i am considering skipping the chain of command and going straight to the CEO of xbox shows you just about how fed up i am with this situation and the way it is being handled. this is unacceptable for a company of this size
Kayece Jan Mae Amizola 16,770 Reputation points Independent Advisor

2026-10-11T06:49:11.9233333+00:00
I understand your frustration, as I have had the same experience but on a different platform. I am also a user just like you, which helps other users, and unfortunately, I cannot do anything regarding MS security implementation to recover the account. I can only recommend that you provide feedback on the Feedback Hub regarding your concern.

https://support.microsoft.com/en-us/windows/apps/send-feedback-to-microsoft-with-the-feedback-hub-app

You may also try contacting support for more guidance regarding the recovery form, but as what I have mention, MS support cannot change nor access our data and may also recommend to fill out the recovery form.

Go to - Contact - Microsoft Support

In the box below "We're here to help", type hacked account, click "Get Help", and then click "Contact Support" below.

In this section, you will need to sign in to your current Microsoft account you use here.

Select "Other Products" under Products & Services, select "Manage Account Security" as the category, and click to confirm

You can select " Chat with a support agent in your web browser " to access the chat window.

Make sure to mention all the solutions you have taken.