Microsoft account hacked

Question

Hello,

My microsoft account has been hijacked. Security data changed, phonenumber removed, recovery email points to some "autosec.top".
ACSR is not working for recovery.
I have minecraft account purchased (through mojang and migration) and reciepts in email as a proof that it is mine. My email is secure so far...

Where can I submit this data to recover my account. It is very important to me...

Answer 1

You're most welcome, and I hope you have a great day!

Best regards,

Darhyl

Answer 2

Hey there! Nice to meet you!

I'm sorry you are experiencing this.

Since the security info has been replaced by the hacker, I'm afraid there is no other working method to recover the Microsoft account, and Microsoft Support cannot help either.

However, I would recommend reaching out to Minecraft Support regarding your Minecraft account if they can provide an alternative option:

https://help.minecraft.net/hc/en-us/request/new?ticket_form_id=360001225811

Thank you for your understanding.

Best regards,

Darhyl

Answer 3

Based on the provided information, only the official self-service recovery paths can be used; support agents cannot manually restore access or change account details.

1. Follow the hacked/compromised account guide Use the official Microsoft troubleshooter for hacked accounts. It will ask for the account’s email/phone and either show self-help steps or offer contact options:
   • Go to How to recover a hacked or compromised Microsoft account and start the sign-in helper: Start.
   • Follow all steps, including:
     • Step 1: Scan all PCs/phones used with this account for malware and clean them before changing any passwords.
     • Step 2: Change/reset the Microsoft account password as soon as access is possible.
     • Step 3: After regaining access, review connected accounts, forwarding, and automatic replies to remove anything the attacker configured.
2. Use the Microsoft Account Recovery form (ACSR) correctly If normal reset options fail because security info was changed, the ACSR form is the only supported method:
   • Go to the Microsoft account recovery form (ACSR) page (account.live.com/acsr as referenced in the Q&A) and submit the hacked account address plus a working alternate email.
   • Before filling it out, review the official guidance: Help with the Microsoft account recovery form.
   • Ensure there is a working email that can receive Microsoft’s response (can be any active account, including a newly created Outlook.com account).
   • Provide as much accurate information as possible (old passwords, typical usage, etc.).
   • Submit from a device and location commonly used with the account to improve the automated checks.
   • After submission, Microsoft will email the result to the working email within 24 hours. If not verified, the form can be retried (up to two times per day) with improved details.
   Important constraints from the documentation:
   • If two-step verification is enabled and none of the verification methods are accessible, support agents cannot override this or send password reset links.
   • If the system cannot verify ownership via the form, there is no alternative manual override for consumer Microsoft accounts.
3. When ACSR says the account does not exist The Q&A context shows that if the recovery form and helper tools cannot find or validate the account (for example, after an alias change by the attacker), there is no additional escalation path for restoring that specific Microsoft account. In such cases, Microsoft Support also cannot bypass the automated systems.
4. Minecraft-specific help Since there is a Minecraft Java/Bedrock license tied to the compromised Microsoft account, Minecraft Support may be able to help with game access or migration options even if the Microsoft account cannot be recovered:
   • Use the official Minecraft Support request form referenced in the Q&A to provide purchase receipts, Mojang migration details, and account information.
5. After regaining access (if successful) If access is restored:
   • Immediately run a malware scan on all devices.
   • Change the password and ensure it is strong.
   • Review and clean up Outlook rules, forwarding, and connected accounts.
   • Add additional secure sign-in methods (phone, alternate email) via Advanced security options and keep them up to date.
   • Avoid staying signed in on shared/public devices and sign out everywhere if any device is suspected to be compromised.

If the ACSR and hacked-account guide cannot verify ownership, there is no supported way to submit additional proof (such as Minecraft receipts) to force recovery of the Microsoft account itself; only the automated recovery and the sign-in helper can be used.

---

References:

• How to recover a hacked or compromised Microsoft account
• Help with the Microsoft account recovery form
• How to help keep your Microsoft account secure
• What happens if there's an unusual sign-in to your account
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A
• Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A