My account for hacked and the hacker changed everything

Najd Khemiri 0 Reputation points
2026-06-04T13:05:15.78+00:00

My original Microsoft account was <removed PII>@gmail.com. It was compromised and the email was changed to ******@gmail.com without my permission. I received security alert emails from Microsoft confirming these changes. I used this account for Xbox and had purchased games linked to it, including Minecraft.

When I tried to recover my account through the “Recover your account” page, I entered my original email <removed PII>@gmail.com, but the system said the account does not exist. Because of this, I had to use the changed email ******@gmail.com instead, hoping it would allow me to proceed.

However, during the recovery process I reached the step asking for “Email addresses of contacts you've recently sent emails to.” Since my account was hacked and the email was replaced with ******@gmail.com I have no information to provide for this section.

I am asking for your help to recover my account. Please verify my ownership using my Xbox Gamertag, my purchase history (including Minecraft), and the devices I used to sign in.

Please help me regain access to my account. You can contact me at ts email and I have all proofs

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

1 answer

Sort by: Newest
  1. AI answer

    2026-06-04T13:05:43.4833333+00:00

    For a hacked Microsoft account where the email, password, and security info have been changed, recovery is only possible through the official self-service flows. Support agents and forums cannot directly verify ownership using Xbox Gamertag, purchase history, or devices, and they cannot modify security info or reset passwords on your behalf.

    Follow these steps end-to-end:

    1. Use the official hacked/compromised account guide Go through the steps in How to recover a hacked or compromised Microsoft account. This is the primary path Microsoft provides for compromised personal accounts.
      • Start with the sign-in helper tool here: Start (from the article). It will ask for the email/phone/Skype name and route to the correct recovery options.
    2. Run the account recovery form for the changed address Because the primary alias was changed to ******@gmail.com, the system now treats that as the sign-in ID. Use that address in the recovery form, even though it is not yours.
      • Use the account recovery form linked from the hacked-account article.
      • Fill in as much accurate information as possible. If there are sections you cannot answer (such as “Email addresses of contacts you've recently sent emails to”), leave them blank or put what you genuinely know; do not guess.
      • If the form is rejected, submit again from a different device or network and ensure all details (old passwords, approximate creation date, Xbox usage, etc.) are as accurate as possible.
      Guidance on what happens after submitting and how often you can retry is in Help with the Microsoft account recovery form. After submission, results are sent to the working contact email you provided within about 24 hours. If verification fails, it is possible to retry up to two times per day.
    3. If you can still sign in anywhere, secure the account If there is any scenario where sign-in still works (for example, an old session on a device or browser):
      1. Immediately run a full antivirus scan on that device before changing anything, as described in How to recover a hacked or compromised Microsoft account (Step 1: clear viruses/malware).
      2. Change the password using the Change password option after signing in.
      3. Go to Security basicsAdvanced security options and:
        • Remove any email addresses or phone numbers that are not recognized.
        • Add a new, secure method to sign in or verify (for example, a new phone number or app), as described in How to help keep your Microsoft account secure (section “Add another way to sign in”).
      4. Check account settings such as connected accounts, forwarding, and automatic replies, and remove anything suspicious.
    4. If security info was fully replaced and recovery fails The Q&A guidance in the context explains that if a hacker has changed all security info and the recovery form cannot verify ownership, the account may become unrecoverable. In that case:
      • Continue to use the Sign-in Helper at https://go.microsoft.com/fwlink/?linkid=2196140 for any remaining options.
      • If the recovery form repeatedly fails and the security info is no longer yours, there is no alternate manual override; Microsoft Support cannot bypass the automated checks or restore access based on Xbox Gamertag or purchase history.
    5. After regaining access (if successful) Once access is restored:
      • Follow How to help keep your Microsoft account secure to:
        • Add multiple verification methods.
        • Keep security info up to date.
        • Avoid staying signed in on shared/public devices and sign out everywhere if needed.
      • Review Recent activity on the account to confirm there is no further unauthorized access.

    For Minecraft and Xbox purchases tied to this Microsoft account, access to those purchases depends on regaining access to the underlying Microsoft account. If the account cannot be recovered, those entitlements generally cannot be moved.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.