My account was hacked, I contacted Microsoft for several times and I still didn't get a solution

Sarah 0 Reputation points
2026-03-09T14:09:24.2933333+00:00

Hello,

Since december 2025 my account has been hacked. I'm trying since then to solve this problem. They told me from Microsoft that they would block my Xbox account at the end of january 2026. So I thought this problem would be solved (I'm writing this question with my other account that is still in use for if you'd be wondering...) 2 weeks ago I saw there was a video game bought through my Paypal account through my Xbox account that was supposed to be blocked. I contacted Microsoft again. They told me to fill in a form again, which I did. I received an e-mail that told me it would maximum take 5 working days to write me an answer. Right now we're 2 weeks further and I still don't have an answer! What on earth am I supposed to do so this would finally be solved? My gamepass on that account is also still active! I'm not planning to keep on paying that also! I want it all to be stopped! How can i finally do this?????

Thank you for your answer!

Greetings,

Sarah

Microsoft 365 and Office | Subscription, account, billing | Other | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-03-09T14:10:09.71+00:00

    For a hacked Microsoft/Xbox account with ongoing unauthorized purchases and no effective resolution yet, the only supported paths are:

    1. Secure all devices and accounts
      1. Run a full antivirus/malware scan on every PC or device used to sign in to the hacked Microsoft/Xbox account, using Windows Defender or another up-to-date antivirus.
      2. After the scan completes, change the password of every related account (email, PayPal, etc.).
    2. Follow the official hacked-account recovery process
      1. Use the official guide for compromised Microsoft accounts: How to recover a hacked or compromised Microsoft account.
      2. Complete all steps:
        • Step 1: Clear malware (as above).
        • Step 2: Try to sign in and change the password. If sign-in fails, use the password reset flow from the article.
        • Step 3: Once/if access is restored, immediately review account settings (connected accounts, forwarding, automatic replies) and remove anything suspicious.
    3. If recovery fails, use the Account Recovery form repeatedly
      1. If the standard sign-in and reset paths do not work, use the Microsoft Account Recovery form (ACSR) referenced in the guidance for unsuccessful recovery: Account recovery unsuccessful.
      2. Before submitting again, review the official tips for filling out the form (linked from that page) and provide as many accurate details as possible (old passwords, approximate creation date, services used, etc.).
      3. The form can be submitted up to two times per day. If a previous attempt was rejected, adjust the information based on the guidance before resubmitting.
      4. If the form cannot be used because the additional security info is unrecognized, use the Sign-In Helper linked from the same page.
    4. Use the Sign-in Helper for support options
      1. For any “account hacked” or “we couldn’t find an account” situation, use the Sign-in Helper: Open the Sign-in Helper for support options or hacked account issues.
      2. Enter the hacked account’s email/phone and follow the flow; it will either provide self-service steps or options to contact an agent, depending on eligibility.
    5. Stop further unauthorized sign-ins and access Once/if access to the Microsoft account is restored:
      1. Sign in to the Microsoft account security page and:
        • Change the password again to a strong, unique one.
        • Enable two-step verification / Microsoft Authenticator.
        • Use “Sign out everywhere” (if available) to invalidate all active sessions.
      2. In Outlook.com (if used), check:
        • Settings → Mail → Rules and delete any suspicious rules.
        • Mail → Forwarding and remove any unknown forwarding addresses.
        • Remove any unknown connected accounts.
    6. Address Game Pass and Xbox purchases
      1. Once the account is either recovered or confirmed unrecoverable by the official process, contact Microsoft Support via the “Get Help”/“Contact Support” path described in the Q&A examples to:
        • Dispute fraudulent Xbox charges.
        • Request cancellation of the active Game Pass subscription on the compromised account.
      2. Be prepared to confirm that the payment method (e.g., PayPal) has been secured (password changed, unauthorized transactions reported to PayPal).
    7. If the account cannot be recovered
      1. If the official hacked-account guide and recovery form ultimately fail, there is no alternative supported method to regain access; support agents cannot bypass security or directly reset the account.
      2. In that case, continue working with the payment provider (PayPal) for charge disputes and ensure the payment method is removed from any remaining Microsoft/Xbox profiles that are under control.

    These are the only supported ways to:

    • Attempt to regain control of the hacked Microsoft/Xbox account.
    • Stop or dispute unauthorized purchases.
    • Work toward canceling subscriptions like Game Pass on that compromised account.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.