Everything on my xbox account got changed

Start with Microsoft’s Sign-in Helper, which can route a compromised-account case to the appropriate recovery steps and may offer an option to speak with an agent.^1^

Recover the account

1. Open the Sign-in Helper.
2. Enter the original email address or phone number that you used before the attacker changed the account.
3. Select the options indicating that:
   • You cannot sign in.
   • Someone else is using the account.
   • You do not recognize the current verification methods.
4. Follow the offered recovery route. If it directs you to the Microsoft account recovery form, provide a working alternate email address that you can currently access.
5. Complete the form from a device and location previously used with the account, such as your usual console/PC and home network.^2^

For the strongest Xbox ownership evidence, gather:

• The hardware ID from the Xbox console you used most frequently—preferably the older console if you recently replaced it.
• Your previous Microsoft account passwords.
• Your gamertag and information requested about Microsoft services used by the account.
• Exact Outlook contacts and email subject lines, if the account included Outlook.com.
• Any other accurate historical information requested by the form.

Answer as many questions as possible. Microsoft says guesses do not count against you, and results are normally sent to the alternate contact email within 24 hours.^2^

If recovery is rejected, refine the information and submit again; Microsoft permits up to two attempts per day.^3^

Speak with support

The Sign-in Helper may offer the chance to talk to an agent for a hacked-account case.^1^ If it does not:

1. Open Contact Microsoft Support.
2. Enter compromised Microsoft account and select Get Help.
3. If the automated guidance does not resolve it, select Contact Support and use the available chat or callback option.^4^
4. If sign-in is required, use another Microsoft account or create a temporary one solely to contact support.

Support can guide the recovery process, but agents cannot manually remove the attacker’s two-factor verification, change account details, or send a password-reset link. Ownership must be established through the supported recovery process.^2^

After access is restored

Before changing the password from a Windows PC, update its antivirus protection and run Windows Security → Virus & threat protection → Scan options → Full scan → Scan now. Then change the password and review the account’s security information, connected accounts, email forwarding, and automatic replies.^1^

Also change any other account that reused the old password, starting with the alternate email account used for recovery.

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Help with the Microsoft account recovery form | Microsoft Support
3. Account recovery unsuccessful | Microsoft Support
4. Error 400 when signing in | Microsoft Support