Use the Microsoft account recovery flow immediately.
- Start with the hacked account tool: Start. It asks for the email address or phone number and then shows self-help steps or an option to talk to an agent.
- Before changing the password, run a full malware scan on the PC:
- Open Windows Security
- Go to Virus and threat protection
- Select Scan options > Full scan > Scan now
- If access is restored, change the password right away and use a strong password.
- Then review account settings that may have been changed by the attacker, including connected accounts, forwarding, and automatic replies.
- If the account is locked, try unlocking it by signing in at Sign in to request a security code.
- Any phone number that can receive text messages can be used.
- The phone number does not need to be associated with the account.
- If the code is not received or does not work, use the verification code troubleshooting guidance.
- If the sign-in screen does not show Next, use the aka.ms/ reinstatement link shown in that window and submit the reinstatement form. After submission, a Microsoft Online Safety support agent reviews the request and contacts by email. Do not submit multiple requests, because that can slow the response.
Important supported limits:
- Support agents are not allowed to send password reset links or access and change account details.
- If the attacker changed the sign-in details and standard recovery is unsuccessful, the remaining path in the provided guidance is the official recovery and sign-in helper process.
The purchase receipt and redeem code are not described in the provided guidance as a way to manually restore access or transfer Minecraft to another Microsoft account.