Urgent: Microsoft Account Compromised via Device Code Phishing

Question

Urgent: Microsoft Account Compromised via Device Code Phishing

Not disclosed 0

My Microsoft account has been taken over following a device code phishing attack. This account is linked to my Minecraft account and is also the organiser account for Microsoft Family Safety, so I currently have limited control over both.

I've already tried the recovery routes I could find online, but they have not worked because the attacker appears to have changed or removed the username, recovery email address, and other account information that Microsoft uses to verify ownership. I've also tried the "Challenge Account" recovery process, but it wasn't able to help.

Does anyone have a contact within Microsoft who could help escalate this case or point me to the correct team? Any assistance would be greatly appreciated.

Thank you.

0 comments

1 answer

Your answer

Answer 1

Hello Not disclosed
I’m sorry to hear that your Microsoft account was compromised and that the attacker changed the account information.

Since the automated recovery process was unable to verify ownership, you will need to contact Microsoft Support directly for further assistance.

Please note that this is a user-to-user support forum. Moderators and contributors, including external Microsoft employees, are not allowed to directly interfere with Microsoft product features or access back-end systems. Our role is limited solely to providing technical guidance on reported incidents, requests, or ideas.

You can try contacting a Microsoft Support agent by following these steps:

Open Contact Microsoft Support.
In the box below “We’re here to help,” type Microsoft 365, select Get Help, and then select Contact Support below.
Sign in with a Microsoft account. If you cannot sign in with the compromised account, use another accessible Microsoft account to reach support.
Under Products & Services, select Microsoft 365 and Office. Select Technical Support as the category, and then confirm your selection.
Select Chat with a support agent in your web browser to open the chat window.

When speaking with the support agent, explain that the account was taken over through a device-code phishing attack, that the attacker changed or removed the sign-in alias and recovery information, and that the account is connected to Minecraft and Microsoft Family Safety. Keep any purchase receipts, previous account details, security notifications, and Minecraft or Xbox information available in case they are requested for verification.

I hope the support agent can review the available recovery options and guide you.

Have a nice day.