My Microsoft account has been hacked HELP

Use Microsoft’s Sign-in Helper and, because the attacker removed your original sign-in address, escalate the case as “my username has stopped working after an account takeover.”

Contact the correct support channel

1. Open Microsoft’s compromised-account page and start the Sign-in Helper. Enter the original email address or phone number associated with the account. The tool can offer self-help or route you to an agent.^1^
2. If the original address returns “We couldn’t find an account with that username,” use the page’s contact-support option and explicitly tell the advocate:
   • The Microsoft account was taken over.
   • The attacker removed or replaced the original username/alias.
   • The password and recovery information were changed.
   • The account owns your Xbox profile and purchases.
   Microsoft specifically directs users to contact support when a previously valid username is no longer recognized.^2^
3. If no agent option appears, sign in with a separate working Microsoft account and go through Contact Microsoft Support → Get Help → Contact Support. Support options are selected according to the issue.^3^

Do not rely on replying again to the Account Safety Team message while it remains pending; the Sign-in Helper/contact-support route is a separate escalation path.

Prepare ownership evidence

Before starting the recovery or support session, collect:

• Original Microsoft email address and any previous aliases
• Xbox Gamertag
• Hardware ID from the Xbox console used most often, preferably the older console if you recently replaced it
• Previous passwords
• Microsoft/Xbox order details, receipts, subscriptions, and redeemed codes
• Approximate account-creation information
• A separate working email address where Microsoft can contact you

Microsoft’s recovery form specifically asks Xbox users for the hardware ID of a frequently used console. Complete the form from a device and location previously used with the account when possible.^4^

If you submit the recovery form, Microsoft says the result is sent to the working contact address within 24 hours. If ownership cannot be verified, the form can be retried up to twice per day.^4^ Check that contact account’s junk/spam folder as well.

Important limitation

Support agents cannot directly send password-reset links or manually change account details; ownership must pass Microsoft’s validation process.^3^ Do not post your Gamertag, console ID, receipts, passwords, or case numbers publicly.

After access is restored, scan the PC used with the account before changing the password, then review security information and account settings.^1^

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. My username and password have stopped working | Microsoft Support
3. How to help keep your Microsoft account secure | Microsoft Support
4. Help with the Microsoft account recovery form