My account got hacked

Davy Chiang 20 Reputation points
2026-09-12T02:05:40.2466667+00:00

My account got hacked when I tried to complete verification on a discord server, then I entered the single-use code, I thought it was safe until I see that my security info was changed. Then I tried logging in but I am too late, they deleted my account and changed it into something else with the supporting email being [moderator's note: PII removed]. I am so scared cause my bank account info and xbox, minecraft account, and pc was linked to that single account, please help. I do not have access and the supporting email was no longer valid. I tried entering the email but it does not exist

Windows for home | Other | Security and privacy
0 comments
Answer accepted by question author
Vikki-T 10,375 Reputation points Microsoft External Staff Moderator
2026-09-12T08:35:03.23+00:00

Hi Davy Chiang,

I understand how serious this is, especially since the affected Microsoft account is connected to your Xbox, Minecraft, PC, and payment information.

Since your original email address is now shown as nonexistent, the attacker may have changed or removed the sign-in alias rather than deleted the entire account. Please do not post the unfamiliar email address, verification codes, passwords, bank details, or other security information publicly.

In addition to trying the recovery option already provided, I recommend contacting Microsoft Support from another Microsoft account that you can still access:

  • Visit Contact Microsoft Support.
  • Sign in with another accessible Microsoft account.
  • Enter Account hacked or compromised and select Get Help.
  • Scroll down to Contact Support and choose the available chat option.
  • Explain that the original sign-in email is no longer recognized, the account alias and security information were changed without permission, and the account is linked to Xbox and Minecraft.

Gather any information that may help identify the account, such as the original email address, previous passwords, Xbox Gamertag, purchase or subscription details, and the approximate date the account was compromised. Do not include passwords or verification codes in the public thread.

Please note that this is a user-to-user support forum. Moderators and contributors, including external Microsoft employees, cannot access account back-end systems, verify ownership, restore an alias, or change security information on your behalf. Microsoft Support must follow the account ownership verification process and cannot manually bypass it.

Because a bank account or payment method may be connected, please also contact your bank through its official phone number or website and ask them to review the account for unauthorized activity.

I hope Microsoft Support can review the available recovery options for your case. Thank you so much for your understanding.     

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-09-12T02:05:54.5133333+00:00

    This matches a common phishing takeover: the single-use code gave the attacker access, and changing the security info is a sign the account was compromised.

    1. Start with Microsoft’s account recovery flow immediately: Start. That tool asks for the email address or phone number and either gives self-help steps or offers the chance to talk to an agent.
    2. Before changing any password on the PC, run a full malware scan:
      • Open Windows Security
      • Go to Virus and threat protection
      • Select Scan options > Full scan > Scan now
    3. If access is still possible, change the Microsoft account password right away. If sign-in fails, use the password reset option in the recovery flow.
    4. After regaining access, review account settings that attackers commonly change:
      • Connected accounts
      • Forwarding
      • Automatic replies
    5. Check the Recent activity page and report any sign-ins that were not legitimate.
    6. Add another verification method on the Advanced security options page so recovery is easier if this happens again.

    Important facts for this situation:

    • Legitimate unusual sign-in emails from Microsoft can come from ******@accountprotection.microsoft.com.
    • Emails from the Microsoft account team are trustworthy when the domain is @accountprotection.microsoft.com.
    • Microsoft support agents are not allowed to send password reset links or directly change account details.

    Because bank information was linked to the account, contact the bank immediately using the number on the bank card or official bank site and ask them to review the account for unauthorized activity.

    If sign-in or recovery does not work, use Microsoft’s support entry point: Contact Microsoft Support.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.