Microsoft account hacked, original security emails removed, cannot recover account

Phạm Hoàng 0 Reputation points
2026-11-09T02:27:55.9566667+00:00

My Microsoft account was hacked.

The attacker changed my password and added a new security email to my account. Shortly after that, my original security emails were removed.

I received Microsoft security notifications showing:

  • Password changed from an unknown location.
  • New security information added.
  • Original security email addresses removed.

My original account email now shows as "account does not exist" when I try to recover it.

I am the legitimate owner of the account and I have:

  • Microsoft Store purchase receipts
  • PC Game Pass subscription records
  • Order IDs
  • Payment information used on the account

I cannot access the account anymore and the self-service recovery process does not work because the original email is no longer recognized.

What is the correct way to escalate this case to Microsoft Account Recovery or a support agent?

Thank you.

Microsoft Security | Microsoft Authenticator
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Callahan, Celeste 0 Reputation points
    2026-11-09T16:20:27.5133333+00:00

    You should def go get a real agent, because they need to fix this. If you got a new device and updated your email, and like, what, everything else?, you should be good to go.

    Idk if you can recover all the things that it effected but you could try. Good luck! <3

    Was this answer helpful?

    0 comments
  2. EmilyS_726 34,280 Reputation points Volunteer Moderator
    2026-11-09T04:15:41.6666667+00:00

    Hello

    It sounds like your account might have been hacked and taken over.

    I am so sorry this happened. Please fill out the Recover My Account form: https://aka.ms/recovermyaccount

    Instruction for each field can be found here: https://support.microsoft.com/accounts-billing/manage/guidance-notes-for-the-microsoft-account-recovery-form

    Contact email: Use an email address you currently have access to. This is where Microsoft can contact you regarding your request.

    Response time: A response may take around 5 business days, although this is not guaranteed. Please save this to your safe sender: [email protected]

    Dates: Pay close attention to the required date format. This is an area where users sometimes make mistakes because it is asking for US date format.

    Account information: Provide as much accurate information as possible. If you genuinely don't know an answer, it is better to leave it blank if allowed rather than guess.

    Device and location: If possible, complete the form using a computer, Wi-Fi network, and location you normally use to access your account. This may help Microsoft recognize your usual sign-in activity.

    ============================

    Also, to avoid any misunderstanding or false expectations, I'm a community user. I can help you navigate and make sure you are using the right tool/resources, but I don't have access to your account and cannot manually recover or unblock it. The final decision is made by the account security review team, so I cannot guarantee the outcome.

    Microsoft Support also cannot bypass the required account verification or reinstatement process.

    Lastly, please don't share any passwords, verification codes, or other private account information here, as this is a public forum.

    Was this answer helpful?

    0 comments

  3. AI answer

    2026-11-09T02:28:42.8933333+00:00

    Contact Microsoft Support from a separate working Microsoft account and request an account-security investigation because the compromised account’s original sign-in alias is no longer recognized.

    Escalate to a support agent

    1. Open I need to talk to a customer support agent.
    2. Sign in with another Microsoft account. Create a temporary account if necessary; do not use the attacker-controlled address.
    3. Enter Account Recovery or Account sign-in issues.
    4. Select Get Help and then Contact Support.
    5. If product/category choices appear, select:
      • Other Products
      • Manage Account Security
      • Chat with a support agent in your web browser
    6. If the initial route does not expose chat, select Show expanded list of products → Outlook → Get Home support, enter Account Recovery, and request Talk to live chat agent. This route is documented in a closely matching case where the attacker removed the original alias and the recovery form reported that the account did not exist.^1^

    Tell the agent:

    My personal Microsoft account was compromised. The password, primary sign-in alias, and security information were changed without authorization. My original address now returns “account does not exist,” so self-service recovery cannot identify the account. Please create an account-security case and determine whether it can be investigated using the historical account and purchase information.

    Ask for the case number before ending the session.

    Prepare the evidence package

    Provide information only through Microsoft’s official support or recovery workflow:

    • Original email address and all former aliases
    • A working contact email
    • Approximate account creation date
    • Previous passwords
    • Microsoft Store order IDs and receipts
    • PC Game Pass subscription and billing details
    • Last four digits of the payment method, if requested—never send a full card number in ordinary chat
    • Xbox gamertag and frequently used console hardware ID, if applicable
    • Devices and locations previously used to sign in
    • Copies of Microsoft security notifications, including dates and times
    • The attacker’s replacement address, if visible in a legitimate Microsoft notification

    Microsoft specifically uses historical passwords, service information, and frequently used Xbox console hardware IDs as recovery evidence.^2^

    Important limitation

    A support agent can document and route the compromise, but Microsoft states that support agents cannot manually send password-reset links or directly access and change account details. Purchase receipts and payment records are useful evidence, but they do not by themselves guarantee restoration.^2^

    Because the original address is no longer recognized, repeatedly submitting the same recovery form under that address is unlikely to move the case forward. Microsoft’s official compromised-account guidance says its sign-in helper may either provide the applicable self-help route or offer an opportunity to speak to an agent.^3^

    If support asks you to use the recovery form again, ask which currently recognized identifier should be entered. Complete it from a device and location previously used with the account, provide a separate working contact email, and include as much historical information as possible. Microsoft normally sends the form result to that contact address within 24 hours.^2^

    While the case is open:

    • Change the password of the original email mailbox and any account that reused the Microsoft password.
    • Enable multifactor authentication on those accounts.
    • Review payment statements and contact the payment provider about unauthorized charges.
    • Run a full malware scan on devices previously used with the account. Microsoft recommends completing the scan before changing a recovered account’s password.^3^

    References

    1. HACKED ACCOUNT - Microsoft Q&A
    2. Help with the Microsoft account recovery form | Microsoft Support
    3. How to recover a hacked or compromised Microsoft account | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.