Managing personal Outlook.com account settings, security, and privacy
Follow these steps to try to recover the hacked Microsoft account that is linked to Outlook.com, Xbox, and Minecraft:
- Scan your devices for malware
- On Windows 10/11 or 8.1, open Windows Defender (Microsoft Defender) from Start and run a full scan to remove any malware before changing passwords.
- Use the official hacked-account recovery flow
- Go to the official guidance for compromised accounts and start from there: How to recover a hacked or compromised Microsoft account.
- This flow will direct to the Sign‑in Helper and the account recovery form as needed.
- Try to sign in and indicate the account is compromised
- On the Microsoft sign‑in page, enter the hacked email/phone.
- Select Forgot my password.
- When prompted, choose I think someone else is using my Microsoft account and follow the steps.
- If a verification code can still be sent to the phone number that sometimes works, use that option and enter the code.
- If sign‑in still fails, submit the account recovery form
- Use the Account recovery form from the official help article.
- Complete it from a device and location previously used with this account (for example, the usual PC or console and home network).
- Provide as much accurate information as possible (old passwords, approximate account creation date, Xbox/Minecraft purchases, etc.).
- If the recovery form is rejected
- If the security info (phone/email) has been fully replaced by the attacker and the recovery form does not grant access, there is no other supported method to regain that specific Microsoft account. Support agents cannot override the automated ownership checks or manually reset the password in that case.
- If Outlook.com or the Microsoft account is blocked
- If the account is locked due to suspicious activity, use the Sign‑in Helper from the Outlook.com unblock article to enter a security code and unblock it.
- If the sign‑in page shows no Next button
- This indicates the account is locked for suspicious activity or Terms of Use violations. Use the aka.ms/ link shown on that page to submit the reinstatement form and wait for the Microsoft Online Safety team to review it.
- If the account truly cannot be recovered
- Create a new Microsoft account and secure it with:
- A strong, unique password.
- Updated security info (phone and alternate email).
- Two‑step verification using Microsoft Authenticator.
- For Minecraft or Xbox purchases, contact the respective game/service support separately to see whether any options exist for entitlements, understanding that recovery is not guaranteed once the Microsoft account itself is lost.
- Create a new Microsoft account and secure it with:
- Monitor for unusual sign‑in alerts
- After recovery (or on any new account), use the Security basics page to review the Recent activity page and mark any unfamiliar sign‑ins as This wasn’t me or Secure your account.
References:
- How to recover a hacked or compromised Microsoft account
- Help with the Microsoft account recovery form
- What happens if there's an unusual sign-in to your account
- Hello , welcome to Account help & learning
- Microsoft account has been locked
- Unblock my Outlook.com account
- My account got hacked - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A
- Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
- my microsoft account has been compromised - Microsoft Q&A