Hacked microsoft account (Xbox account)

There is only one supported path to try to get a hacked Microsoft/Xbox account back when the attacker has changed the password and all security info (email, phone, verification app, passkey): use the official hacked-account recovery flow and the account recovery form.

Follow these steps:

1. Use the hacked/compromised account troubleshooter
   • Go to How to recover a hacked or compromised Microsoft account and start the helper tool.
   • Provide the hacked account’s email/phone and follow the prompts. This will guide through the correct recovery or support options for a compromised Microsoft/Xbox account.
2. Try to reset the password
   • On the sign-in page, select Forgot my password.
   • When asked why, choose I think someone else is using my Microsoft account.
   • Follow the instructions to reset the password. If any of the verification options shown (email, phone, etc.) still belong to the rightful owner, use them to regain access.
3. If normal reset doesn’t work, use the account recovery form
   • If none of the verification options are accessible because the hacker replaced them, fill out the Microsoft account recovery form as described in Help with the Microsoft account recovery form.
   • Use a different, working email address that can be accessed; Microsoft will send updates about the recovery request there.
   • Provide as much accurate information as possible (old passwords, services used, approximate creation date, etc.). The form is the only way to prove ownership when security info has been changed.
4. Understand the limitation if security info is fully replaced
   • If the recovery form is not granted and all security info (email, phone, verification methods) has been replaced by the attacker, there is no other supported method to recover the account. Microsoft Support and community forums cannot override the automated recovery process or change security info on behalf of the user.
5. After regaining access (if successful)
   • Immediately run through the hacked-account guidance to:
     • Scan devices for malware.
     • Change the password to a strong one.
     • Review and remove any unknown aliases, forwarding rules, or security info.
     • Add additional ways to sign in or verify (such as another email/phone or Microsoft Authenticator) so recovery is easier in the future.

References:

• How to recover a hacked or compromised Microsoft account
• Hello , welcome to Account help & learning
• Help with the Microsoft account recovery form
• How to help keep your Microsoft account secure
• What happens if there's an unusual sign-in to your account
• How to use two-step verification with your Microsoft account
• Change the email address or phone number for your Microsoft account
• My account got hacked. - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• my microsoft account has been compromised - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A