A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Use the attacker’s replacement email address—not your former address—in the Microsoft account recovery form’s “What Microsoft account are you trying to get back into?” field.
Recover using the replacement address
- Record the complete replacement address privately.
Do not post it, your former email, passwords, recovery codes, console IDs, or receipts here. If Authenticator does not display the full address, check a device still connected to the account:- Xbox: Profile & system → Profile and look under the Gamertag.
- Windows: Settings → Accounts → Your info.
- Open the Microsoft account recovery form:
https://account.live.com/acsr - In “What Microsoft account are you trying to get back into?”, enter the attacker’s current replacement address.
- Enter a different, secure email address that you can access for Microsoft’s reply.
- Complete the form from a device and location previously used with the account, if possible. Include:
- Previous passwords
- Xbox Gamertag
- Hardware ID from a frequently used Xbox, preferably an older console
- Microsoft/Xbox purchase and billing details
- Outlook contacts and exact subject lines, if applicable
- Skype information, if applicable
Finding the replacement address only enables the correct recovery attempt; it does not guarantee restoration.
If the replacement address is unavailable or rejected
Use Microsoft’s Sign-in Helper. Microsoft specifically directs users who receive “account doesn’t exist” or “We couldn’t find an account with that username” to that tool; it may provide self-help or an option to contact an agent.^3^
If it still cannot identify the account, select the support/contact option and state:
My personal Microsoft/Xbox account was taken over, its sign-in alias was replaced, and my former address now reports that the account does not exist.
Sign in with a separate Microsoft account if support requires authentication. Contact categories and chat availability can vary by region and session. Support can guide the recovery process, but agents are not permitted to send password-reset links or manually access and change account details.^2^
If two-step verification was enabled and none of its verification methods remain accessible, Microsoft states that the recovery form and support cannot bypass those protections.^2^
Protect everything else now
- Change the password of the email account formerly linked to Microsoft.
- Change any other account using the same or a similar password.
- Review that email account’s forwarding rules, recovery methods, and active sessions.
- Run a full malware scan before changing passwords on the affected PC: Windows Security → Virus & threat protection → Scan options → Full scan → Scan now.^4^
- Contact the payment provider immediately if unauthorized charges appear.
References