Desperate for advice on my hacked Microsoft (Minecraft) account.

Enabling 2FA by the attacker does not by itself make recovery impossible, but if the attacker has already replaced the original security info (emails/phone, authenticator) and the recovery form is not accepted, there is no other supported way to regain access to a personal Microsoft account.

For a hacked or compromised account, the only supported path is:

1. Use the official hacked-account troubleshooter
   • Start with the guide here: How to recover a hacked or compromised Microsoft account.
   • It will direct to the correct recovery flow based on the sign-in status.
2. Submit the account recovery form with maximum detail
   • Use the account recovery form linked from the hacked-account article.
   • Provide every accurate detail available (old passwords, full billing info, ZIP/postal code, services used like Xbox/Minecraft, approximate creation date, etc.).
   • The form is an automated ownership check. When it succeeds, the account can be recovered; when it fails repeatedly, support cannot override it.
3. Understand what happens if recovery fails
   • Moderator guidance confirms that when a hacker has changed the email/phone and security info, and the recovery form is unsuccessful, the account is considered unrecoverable. There is no escalation path where support can manually bypass 2FA or restore access.
   • In that case, the Microsoft account (and its attached Xbox/Minecraft entitlements) cannot be restored to the original owner through support.
4. About suspension vs. recovery
   • The recovery form is designed to restore access when ownership can be verified, not just to suspend the account.
   • If the form does not accept the information as sufficient proof, the account typically remains as-is; the process does not guarantee suspension or lockout of the attacker.
5. Minecraft-specific next steps
   • If the Microsoft account cannot be recovered via the form, the recommended next step is to contact Minecraft Support separately to see if they can offer any alternatives for the Minecraft license or profile. This is not guaranteed, but it is the only additional avenue mentioned in the guidance.

If the recovery form has already been tried and rejected, the only practical options are:

• Try the form again from a different device/network and ensure all details are as accurate and complete as possible.
• If it still fails, treat the Microsoft account as unrecoverable and work with Minecraft Support regarding Minecraft/Hypixel access.

For the future, enabling strong security (Microsoft Authenticator, passwordless sign-in, multiple up-to-date recovery methods) is the main way to prevent this scenario.

References:

• How to recover a hacked or compromised Microsoft account
• How to help keep your Microsoft account secure
• Need help with hacked microsoft account - Microsoft Q&A
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• my microsoft account has been compromised - Microsoft Q&A