Family member was hacked while playing Minecraft. Their email and profile were removed from my family account.

Recover the child’s compromised Microsoft account first—the Family Safety invitation cannot replace its changed sign-in email or send approval to a different address.

1. Secure the device before recovery

On the Windows PC used when the link was opened:

1. Open Windows Security.
2. Select Virus & threat protection → Scan options.
3. Select Full scan → Scan now.
4. Remove or quarantine anything detected.

Microsoft recommends completing a full malware scan before changing a compromised account’s password.^1^

Do not use the suspicious chat link again or communicate with anyone demanding payment or another verification code.

2. Start account recovery

Open Microsoft’s compromised-account page and use its Sign-in Helper.^1^

Enter, in turn, any identifiers previously attached to the child’s account:

• Original Microsoft email address
• Another known email alias
• Phone number
• Skype name

If an alternative alias or phone number remains attached, Microsoft documents that it can be used when the original email is no longer recognized.^2^

If the Sign-in Helper directs you to the recovery form:

1. Supply a separate working email address that you control; Microsoft sends the result there, not to the compromised account.
2. Complete the form from a previously used device and normal location, if possible.
3. Include as much historical information as possible:
   • Previous passwords
   • Exact Outlook email subject lines and contacts, if applicable
   • Xbox console hardware ID from a frequently used console
   • Skype details or prior purchase information
4. Watch the working email address for the result, normally within 24 hours.
5. If verification fails, Microsoft permits another submission, up to twice per day.^3^

A closely matching Minecraft account-takeover case also directs users whose account email was changed to the specialized recovery submission at https://aka.ms/recovermyaccount.^4^

3. If the original address says the account does not exist

Use the support option on the “My username and password have stopped working” page and tell the advocate:

• The child’s Microsoft/Minecraft account was taken over.
• The original username is no longer recognized.
• The security or confirmation email now goes to an unknown address.
• The child was removed from the Microsoft family group.

Microsoft Support cannot manually send password-reset links or directly change account details, but the documented path for an unrecognized username is to contact support from that page.^2^^3^

4. Restore Family Safety only after recovery

Once the child can sign in using an address under your control:

1. Sign in to the Family Safety dashboard as the family organizer.
2. Select Add a family member.
3. Choose Member.
4. Enter the recovered child account’s email address.
5. Have the child sign in to that account and accept the invitation.

The invitation is accepted through the invited Microsoft account; an underage member may also be asked for adult consent.^5^

If consent still appears under an unfamiliar adult account, Family Safety only allows consent to be managed by the adult account that originally granted it. Use Contact Support from the parental-consent page rather than repeatedly sending invitations.^6^

After recovery, change the password and review connected accounts, forwarding, automatic replies, and other security settings.^1^

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. My username and password have stopped working | Microsoft Support
3. Help with the Microsoft account recovery form | Microsoft Support
4. Son's account hacked - hacker changed associated e-mails - Microsoft Q&A
5. Add people to your family group | Microsoft Support
6. Managing parental consent | Microsoft Support