My microsoft account got hacked

Use Microsoft’s hacked-account Sign-in Helper now instead of the failed passkey option; it will ask for the original email address or phone number and either provide the available recovery route or offer contact with an agent.^1^

Recover the compromised account

1. Open Microsoft’s hacked-account recovery page above and start the Sign-in Helper.
2. Enter the email address or phone number that belonged to the account before the unfamiliar address appeared.
3. Select the option indicating that someone else may be using the account.
4. Supply a separate, working email address where Microsoft can contact you.
5. If directed to the recovery form, complete it at: https://account.live.com/acsr
6. Submit it from a device and location previously used with the account, if possible. Prepare:
   • Previous passwords.
   • Minecraft/Xbox purchase details and billing information.
   • Xbox console hardware ID, if applicable.
   • Outlook contacts and exact email subject lines, if that account used Outlook.
   • The original account address and Xbox gamertag.

Microsoft normally sends the recovery result to the contact email within 24 hours. If verification fails, the form can be submitted again, up to twice per day, with more accurate information.^2^

The unfamiliar email and recovery option shown in the screenshot should not be used. Do not send a verification code to an address you do not control, and do not publicly post that address, receipts, order numbers, passwords, or recovery codes.

Contact Microsoft if the helper offers no recovery route

Go to Contact Microsoft Support, enter Account Recovery, select Get Help, and then Contact Support. Choose the account-security option and use chat if offered. Support can investigate and route the case, but agents are not permitted to send password-reset links or directly change account details; ownership must still be established through Microsoft’s recovery process.^3^

State clearly that:

• The account was associated with Minecraft.
• The passkey now displays an unfamiliar sign-in address.
• The listed recovery email is not yours.
• You can provide previous passwords and purchase evidence.
• You need recovery of the original Microsoft account, not the separate account used to post here.

Secure everything still under your control

Before changing passwords, run a full malware scan on the device used during the Minecraft incident: Windows Security → Virus & threat protection → Scan options → Full scan → Scan now. Microsoft recommends scanning first so newly changed credentials are not immediately exposed again.^1^

Then:

• Change the password of your accessible email account and this second Microsoft account.
• Use unique passwords not shared with the compromised account.
• Review their recent sign-in activity and select This wasn’t me or Secure your account for activity you do not recognize.^4^
• Enable two-step verification and add current recovery methods.
• Check payment cards or PayPal for unauthorized charges and contact the payment provider immediately if any appear.

Do not create another Minecraft purchase expecting it to restore the old profile: recovery must target the Microsoft account that owns the existing purchase.

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Help with the Microsoft account recovery form | Microsoft Support
3. How to help keep your Microsoft account secure | Microsoft Support
4. What happens if there's an unusual sign-in to your account | Microsoft Support