My account was hacked and compromised. Please help!

Question

My account was hacked and compromised. Please help!

Allen Minami 5

Just 2 days ago my microsoft account was hacked. I suddenly recieved an email on microsoft saying that my security information has been changed. I clicked on review and it took me to a page where I input my microsoft email but when I put it in, it said that the email does not exist. I don't know what to do. I have contacted microsoft but they are not responding. I am scared the hacker is taking a lot of stuff from me. Every microsoft help is AI bots, I need a real human to help me at least lock my account, and give me back my account. Please help. The good news is however, I am still logged into the account on my laptop so I am doing everything I can to keep it alive.

2 answers

Your answer

Answer 1

Anthony Lee 1,140

Since your laptop still has an active session, try to get into the security dashboard.

Go to your microsoft account. If it opens without asking for a password, click on Your Info and then Edit account info.

Look for an unfamiliar email address. If you see one you don't recognize, that is the hacker’s alias. Do not remove it yet (it might trigger a 30-day lockout); instead, try to Add a new email (a fresh Outlook address) and set it as the Primary Alias.

If you can, go to Security > Advanced Security Options and click "Sign me out of all locations."

Allen Minami 5 Reputation points

2026-02-13T21:10:28.8033333+00:00

I went to my Microsoft account and clicked on your info but I can’t find the edit info option…
Allen Minami 5 Reputation points

2026-02-13T21:12:48.08+00:00

Is it possible to talk to you in person?
Anthony Lee 1,140 Reputation points

2026-02-13T21:17:07.11+00:00
Hi there,

It should be there.

Your account info is split into four sections.

this is the one that shows your profile and name

this one is profile info (e.g. date of birth, country, etc)

This is the account info. It should be labeled account info.

Your xbox profile.

What you want to do here is to be in section 3. Next to account info, to the right, there should be a link that says edit account info. Click on that link.

Let me know if you encounter any issues!

As for talking to me, sharing contact info like email addresses or phone numbers on this forum is not allowed and could lead to deletion of posts.
Allen Minami 5 Reputation points

2026-02-13T21:19:15.8133333+00:00

This is what it looks like when I click account info
Allen Minami 5 Reputation points

2026-02-13T21:21:58.72+00:00

Is there anything I can do or rely on? Is my Microsoft account gone? I asked Microsoft to lock it for now. Was that the best option for me? Does suspending the account mean the hacker can’t sell my Microsoft account?
Anthony Lee 1,140 Reputation points

2026-02-13T21:22:00.52+00:00

Thanks for sharing the screenshot.

I see what is happening now. You are in Windows settings > accounts.

You have to be in your Microsoft Account.

You should click on this link https://account.microsoft.com/ and sign in to your microsoft account.

Once there, you should see it. Let me know if you encounter any issues.
Anthony Lee 1,140 Reputation points

2026-02-13T21:26:59.5166667+00:00

Locking the account was the right choice.

When an account is locked (or "suspended"), it essentially enters a deep freeze.

It immediately invalidates active sessions. Even if the hacker has your new password or has added their own 2FA, they can no longer send emails, access your OneDrive files, or change further settings.

Hackers often steal accounts to sell them for their gaming history (Xbox), associated credit cards, or as an account for spamming. A locked account is useless to a buyer because they can’t log in.

The account is not gone forever.

Because the hacker changed your email (the "alias"), the system doesn't recognize your old login.

The "Email Does Not Exist" Error: This is because the hacker set their email as the "Primary Alias" and deleted yours.

Since you mentioned you are still logged in on your laptop, look for any "Security" or "Manage how I sign in" settings. If you can see the hacker's email address there, write it down. You will need that specific email address to tell Microsoft which account you are trying to recover.

Since the account is locked, you must prove you are the original owner to unlock it. This is done through the Account Recovery Form.

Don't use your old email: If it says "does not exist," try using the hacker's email (if you found it) or any phone number/Skype ID previously linked to the account.

When an account is locked for "suspicious activity," Microsoft's Online Safety Team usually has to review the case. This is a human-led process, unlike the automated bot.
Anthony Lee 1,140 Reputation points

2026-02-13T21:28:25.4633333+00:00

If you encounter any issues, feel free to let me know, and I will do my best to assist.
Allen Minami 5 Reputation points

2026-02-13T21:31:56.2533333+00:00

I was able to find the hackers email address! But when I filled in the form and submitted to Microsoft they told me that the hacker has 2FA and they cannot do anything about it :(
Allen Minami 5 Reputation points

2026-02-13T21:35:35.1166667+00:00

I can 100% prove that the account is mine. I just need Microsoft’s security team to actually support me and not give up on me so easily just because of a 2FA.
Allen Minami 5 Reputation points

2026-02-13T21:39:40.8933333+00:00

Thanks for helping me out though, I really appreciate your kindness and support throughout this painful process.
Anthony Lee 1,140 Reputation points

2026-02-13T22:05:38.1866667+00:00

I'm glad this solved your issue.

If you have a moment, please consider clicking the accept answer button. It only takes a moment, and is very helpful.

Have a great day.
Allen Minami 5 Reputation points

2026-02-13T22:15:52.59+00:00

How do you think I can get Microsoft to help out? Should I give up?
Anthony Lee 1,140 Reputation points

2026-02-14T01:22:11.51+00:00

Did you look at my answer yet?
Allen Minami 5 Reputation points

2026-02-14T01:23:20.95+00:00

Yes. I am contacting Microsoft. But I am scared they will say the same thing…
Anthony Lee 1,140 Reputation points

2026-02-14T02:18:33.24+00:00

Great. Feel free to let me know how it went.
Allen Minami 5 Reputation points

2026-02-14T11:10:10.69+00:00

I contacted them? I think through Xbox I am not sure because I just sent it to the Microsoft account safety team by filling out a form but they sent me a email saying the same thing. Since 2FA has been activated and security information has changed, it is not possible to get the account back. What should I doooooo
Anthony Lee 1,140 Reputation points

2026-02-14T13:01:02.01+00:00
I know this feels hopeless, but don’t give up. The message you received is from the automated recovery system, and not the human security team. When 2FA is added by a hacker, the automated form almost always rejects it, even if you provide perfect information. That doesn’t mean the account is gone.

Here’s what you should do next:

Keep using the device where you’re still logged in

As long as you stay signed in, the hacker does not fully control the account. Do not sign out, reset Windows, or remove the account from your laptop.

Contact Microsoft through a human‑handled channel

The automated form cannot override 2FA, but the Account Safety Team can. They handle cases where an account was stolen and the attacker added their own 2FA.

The best ways to reach a human reviewer are:

Xbox Support chat (they handle Microsoft accounts too)

Microsoft 365 / Office support if you have any subscription

Microsoft Virtual Agent > “Talk to a person” > “Account hacked”

Tell them clearly that you still have an active session, the hacker changed the primary alias, the hacker added their own 2FA, and the automated form rejected you.

You can provide proof of ownership (old passwords, devices, IP history, billing info, etc.)

This is exactly the type of case the human team can escalate.

Do not accept “2FA prevents recovery” as the final answer

That message only applies to the automated system.

Microsoft can override 2FA, they just need to escalate it.

You should not give up

You have:

The hacker’s alias, an active session, proof of ownership, and a locked account (which protects your data)

This is recoverable, but only through the human review path.
Allen Minami 5 Reputation points

2026-02-14T13:10:42.2666667+00:00

I contacted an actual human finally through Xbox support. They told me to wait 30mins but they still haven’t contacted me after an hour
Anthony Lee 1,140 Reputation points

2026-02-14T13:14:48.7833333+00:00
It’s normal for Xbox support to take longer than the time they estimate. The important thing is that you reached a real human, which is better than the automated system.

If they haven’t contacted you yet, don’t panic. Here’s what you can do:

Keep the chat window or case number open. Sometimes they reply late, and if you close the window, the session ends.

Try reconnecting to support if you don’t hear back after a while. Go back through the same Xbox support path and choose “Talk to an agent” again.

Tell them you already spoke to someone and were told to wait, but no one followed up.

Make sure you clearly explain the key details again

-You still have an active session

-The hacker changed the primary alias

-The hacker added their own 2FA

-The automated form rejected you

-You can prove ownership

-You need escalation to the Account Safety Team

This is the team that can override 2FA, not the bot, and not the automated form.

Make sure you don’t give up just because one agent didn’t follow up. Sometimes you need to talk to 2–3 agents before one escalates the case.

This is frustrating, but it’s very common with hacked‑account recoveries.

The important part is you know how to contact a human about it now.

Answer 2

Anthony Lee 1,140

Do not give up yet.

Real humans have recovered their accounts in your exact situation, but you have to use a specific strategy to bypass the "2FA is final" policy.

Microsoft’s automated recovery form (ACSR) will fail every time if 2FA is on. Stop using that form. You need an Account Takeover (ATO) Investigation, which only a human agent can start.

The "Xbox Support" Strategy (Highly Successful)

Even if you aren't a gamer, the Xbox Support Team has more powerful tools for identity verification than the general Microsoft team. They can verify you via your laptop's hardware ID or past purchase history.

Go to support.xbox.com/contact-us (Just copy paste that into the browser)

Click Contact Us.

Select Account & Profile > I can't sign in.

Type "Agent" in the chat until you get a Request a Call or Live Chat option.

State that your account was compromised, and the hacker enabled 2FA and changed the primary alias to [Hacker's Email]. You need to open an Account Takeover (ATO) Investigation ticket.

Use your proof (The Laptop)

Since you are still logged in on your laptop, you have proof that no hacker has. Before your session expires, collect these:

Console/Device ID: Go to Settings > System > About. Note your Device ID and Serial Number.

Transaction IDs: If you ever bought anything (Minecraft, Office, a $1 app), find the 10-digit order number in your email or the "Order History" tab if you can still click it.

Tell the agent that you are currently logged in on the primary device you've used for years. He can see your IP address matches the account's historical login data, whereas the 2FA was enabled from a different location.

Ask for an "Escalation," not "Recovery"

If an agent says, "We can't help because of 2FA," use this exact response:

"I understand the policy, but this is a malicious account takeover. I have the hacker's email address and proof of my original ownership. I am requesting that this be escalated to the Global Escalation Team to have the account locked and the 2FA reset based on my billing and hardware verification."

Create a Safe Landing Spot

Microsoft cannot fix your old email if the hacker changed the alias. Instead, they usually transfer your data and purchases to a brand new Microsoft account.

Create a fresh Outlook/Hotmail email address right now.

Do not link it to any Xbox gamertag or services yet.

Keep this email ready to give to the agent as the target for your recovered data.

Please don't give up. If you walk away, the hacker has your personal files, contacts, and possibly your payment methods forever. Even if Microsoft can't give the account back, you should persist until they suspend/delete it so the hacker loses access too.

Allen Minami 5 Reputation points

2026-02-14T10:15:03.65+00:00

I have been trying to talk to an agent but it keeps sending me to a AI bot on Xbox.
Vishesh Singh 0 Reputation points

2026-02-14T13:45:11.87+00:00

Hey bro help my account has been hacked also i tried your method but everytime I give my number for them to contact me it says error try again later or something
Anthony Lee 1,140 Reputation points

2026-02-14T17:58:06.2666667+00:00

This happens a lot.

Try waiting a few hours.

A recommended fix is to use a different browser or device:

If you are on Chrome, try switching to Edge.

If you are doing it on a Phone, then switch to a laptop.

Also try using Incognito/private mode.
Allen Minami 5 Reputation points

2026-02-15T16:50:39.6766667+00:00

I waited for a whole 24 hours and I still recieved nothing back...
Anthony Lee 1,140 Reputation points

2026-02-15T16:56:47.93+00:00

Allen, the reason you never got a callback after 24 hours is because your account is in a takeover state. When the hacker changed your primary email and turned on 2FA, Microsoft’s automated system stopped recognizing your phone number as belonging to the account. Because of that, the callback system won’t verify your request, so it never schedules the call. It’s not that they ignored you, the system is blocking it.

You need to reach a human through the Xbox support path so they can manually override it.

Go to https://support.xbox.com/contact-us

Choose Account & Profile → I can’t sign in

A virtual assistant will pop up.

In the chat box, type “agent” over and over until the bot gives you new options.

When it finally appears, choose either:

• Request a Call

• Live Chat with an Agent

If the callback option errors out, switch something:

-Use a different browser (Edge works best)

-Try a different device (phone → laptop or vice‑versa)

-Use Incognito/Private mode

-Try again at a different time of day

Please let me know how this worked. I hope you recover your account soon.
Vishesh Singh 0 Reputation points

2026-02-15T17:01:44.82+00:00

Hey Anthony I did everything you told in the first comment I got a reply we discovered the activities but unfortunately the email and password has been changed so we can't go against our policy to retrieve your account back to you
Anthony Lee 1,140 Reputation points

2026-02-15T21:06:54.8433333+00:00
Vishesh, that message you received is from the automated recovery system, not the human security team. The automated system always gives that response when a hacker changes both the email and the 2FA. It doesn’t mean the case is closed, and it doesn’t mean the account can’t be recovered.

You need an Account Takeover (ATO) investigation, which only a human agent can start. The automated form cannot override 2FA, but the human escalation team can.

Here’s what you should do:

Try contacting Xbox Support again using a different method. The callback system often fails when the account is in a compromised state.

Try these:

-Use a different browser (Edge works best)

-Try a different device (phone > laptop or vice‑versa)

-Use Incognito/private mode

-Try at a different time of day

Keep typing “agent” in the virtual assistant until it gives you the option for a real person.

When you reach a human, explain the situation clearly

Tell them:

Your account was hacked, the hacker changed the primary alias, enabled 2FA, the automated form rejected you, and you need an ATO escalation

This is the only team that can override the hacker’s 2FA.

Don’t give up because of one automated email.

Many people recover their accounts even after the hacker changes everything. It just requires escalation to the right team.

Share via

My account was hacked and compromised. Please help!

2 answers

Your answer