Microsoft account compromised

Question

Microsoft account compromised

Boris MPopov 0

My Microsoft account was compromised and I can't recover it

My Microsoft account was compromised after I installed an unofficial Minecraft mod. After running it, my Microsoft password was changed and the sign-in email was also changed to an email address I don't recognize.

My original Microsoft account was connected to my Minecraft username CAZTT. I can still provide information that proves I owned the account, including my original email address and other account information.

The recovery form isn't working for me, and I've also reached the limit after requesting too many verification codes.

I have stopped using the suspicious mod and am trying to secure my computer and accounts.

Can someone please tell me what the correct recovery process is when the attacker has changed both the password and sign-in email?

I can provide ownership information through an official private support channel if required.

Thank you.

0 comments

1 answer

Your answer

Answer 1

The supported recovery path is:

Run a full malware scan before changing anything else. In Windows Security, open Virus and threat protection → Scan options → Full scan → Scan now. Microsoft recommends a full scan before changing the password on a compromised account.
Use the Microsoft account Sign-in Helper first. For hacked accounts, this is the recommended starting point. It asks for the account email address or phone number and then either provides self-help steps or offers the option to talk to an agent.
If the account still appears in sign-in, use the hacked-account recovery path. On the sign-in page, select Forgot my password and then choose I think someone else is using my Microsoft account.
If the recovery form is needed, use a working contact email and wait for the result. The recovery form requires a working email address that can receive messages about the request. Microsoft sends the result within 24 hours. If the request is not verified, it can be retried up to two times per day.
Important limitation: if two-step verification was turned on and none of the alternate verification methods are accessible, Microsoft states that support agents cannot reset the password or change account details.
Support limitation: Microsoft support agents are not allowed to send password reset links or access and change account details. If Sign-in Helper offers contact with an agent, that is the official support route, but account recovery itself remains subject to those security limits.
If access is restored, immediately review account settings. Check connected accounts, forwarding, and automatic replies, then change the password to a strong one.

Because the attacker changed both the password and the sign-in email, the correct process is still to start with the Sign-in Helper and then use the account recovery flow it provides. If the recovery form has already failed, it can be retried within the allowed limit. If two-step verification was enabled on the account and no verification methods are available, there is no supported manual bypass through support.