Microsoft/Xbox account hacked, hacker put authenticator on account.

Stop making verification attempts for at least 24 hours, then retry “I don’t have any of these” from a different device or network; if accepted, replace all inaccessible security information and complete the required 30-day waiting period.

The “temporary problem” can occur when unusual activity or repeated verification requests trigger a temporary block. Further repeated attempts may extend it. Microsoft recommends waiting one day initially—up to one week if necessary—and trying another network or device.^1^

Replace the attacker’s security information

Since the recovery form has already restored some access, do not repeat that form at this stage.

1. Make no additional code requests for at least 24 hours.
2. Retry from:
   • Another trusted device, and
   • Another network, such as mobile data instead of Wi-Fi.
3. Start signing in to the recovered Microsoft account.
4. At Verify your identity, select I don’t have any of these.
5. Enter a new email address that only you control and complete its verification.
6. Follow the prompts to replace the inaccessible email, phone, and Authenticator registration.

When all existing security information is replaced, Microsoft imposes a 30-day waiting period before the new information becomes usable.^1^ Do not use the attacker-controlled method during that period: using an existing verification method can cancel the pending replacement.

If the page instead shows “Scheduled for removal”, “Security info change is still pending,” or an equivalent message, inspect the pending change. If an unauthorized removal is pending and the page provides a cancellation or reporting option, use it; Microsoft documents that removing a verification method has a 30-day delay.^2^

Contain the compromise

Before changing the password again, run a full malware scan on every device used to access the account:

Windows Security → Virus & threat protection → Scan options → Full scan → Scan now.

Microsoft recommends completing the scan before changing the password so compromised software cannot capture the replacement credentials.^3^

If the account dashboard lets you perform these actions without the attacker’s Authenticator:

1. Change the password to a new, unique password.
2. Open Recent activity, mark unauthorized entries as This wasn’t me, and review changes such as aliases, verification apps, and profile edits.^4^
3. In Additional security options, select Sign out everywhere. This takes up to 24 hours and does not sign the account out of an Xbox console, which must be handled separately.^5^
4. After the replacement finishes, go to Security → Manage how I sign in → Add a new way to sign in or verify. Add your own recovery email and Authenticator or passkey, then remove only methods confirmed as belonging to the attacker.^6^

If the replacement page still fails

Use Microsoft’s compromised-account sign-in helper. It can provide applicable self-service options or offer contact with an agent.^3^

For direct support:

1. Open Contact Microsoft Support from the support page.
2. Enter compromised personal Microsoft account – attacker replaced all security information.
3. Select Get Help, then Contact Support.
4. If sign-in is required, use a separate working Microsoft account.
5. Choose Other Products → Manage account security, then request browser chat if offered.

Keep the original account address, Gamertag, Minecraft and Microsoft Store receipts/order numbers, previous passwords, and former billing details ready. However, support agents cannot send verification codes, issue password-reset links, or directly change account security details; they can only route and assist with the supported recovery process.^7^

References

1. Troubleshoot Microsoft verification code issues
2. What does 'Scheduled for removal' mean? | Microsoft Support
3. How to recover a hacked or compromised Microsoft account | Microsoft Support
4. Check the recent sign-in activity for your Microsoft account
5. How to sign out of your Microsoft account everywhere | Microsoft Support
6. Microsoft account security info & verification codes | Microsoft Support
7. How to help keep your Microsoft account secure | Microsoft Support