Help please

Question

One of my accounts was stolen/Hacked by a link and he swapped the Gmail and the password but i am logged in on my mail kind of still and i have a decent amount of information that the account is mine and he is trying to blackmail me into giving him stuff he wants but i am not listening to him and i have proof of him doing this so what should i do i think i summited the form for google to view to get it back but it's been a while and no response seen so anything i could do it the mean time i wait and hope for a response because they got my Minecraft and i play that a bit. So please anything helpful would be much appreciated.

Answer 1

Hi Damon Tate,

I know being hacked and then threatened is extremely stressful. You’re doing the right thing by not engaging with the attacker. To better help you, I would like to clear up a few things:

• Did you lose access to the Gmail account or the Microsoft account?
• Can you still sign into the Microsoft account or not?

Minecraft is owned by a Microsoft account, not Google. If you currently cannot sign into your Microsoft account anymore, the only supported way to recover it is the official Microsoft recovery form > Fill it out as much as possible, including:

• Old passwords you remember
• Devices you used
• Approximate account creation date
• Xbox Gamertag / Minecraft usage

However, if the one compromised was only an account and you can still sign into your Microsoft account, here’s something you can consider:

1. Sign into account.live.com/names/manage > check Account username
   1. If you don’t have other option yet > Add email / phone number
   2. If you have > Click Make primary then Remove the compromised email.
2. Click Change sign-in preferences > Uncheck all entries except the one you trust.
3. Click Security in top menu > View my sign-in activity > Secure your account to unknown sessions.
4. Go back and click Manage how I sign in > Scroll down and click Sign out everywhere
5. Under Recovery code, click Generate a new code (and save it) to reset if the attacker has it.

If you want help improving your chances with the recovery form, share with me the details as I asked above. That determines what matters most.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

For a hacked Microsoft account that now has its email and password changed, only the official Microsoft recovery and security processes can help. While waiting on Google for the Gmail side, focus on these steps for the Microsoft/Minecraft side and general safety:

1. Use the official Microsoft hacked-account recovery flow
   • Go to the Microsoft “How to recover a hacked or compromised Microsoft account” helper: https://go.microsoft.com/fwlink/?linkid=2196140
   • Follow the guided steps carefully. This may lead to the account recovery form.
   • On the recovery form, provide as much accurate information as possible (old passwords, approximate creation date, services used, etc.). If the form is denied, the account may not be recoverable.
2. Understand limits if the attacker changed security info
   • If the attacker changed the account’s security info (alternate email, phone, etc.), recovery is often not possible beyond the automated process.
   • If all security info was removed and replaced, the account can be put into a restricted state for 30 days while Microsoft protects it. During that period, access can be limited and changes are locked.
3. Protect other accounts tied to that email
   • If the stolen account’s email address is used as a username elsewhere, immediately:
     • Change passwords on those other services to strong, unique passwords.
     • Turn on multi-factor authentication (MFA) wherever possible. MFA blocks most password-based attacks.
   • If any passwords are weak or reused, change them right away.
4. Treat the blackmail as a security and safety issue
   • Do not pay or comply with demands.
   • Save evidence (screenshots, messages) in case local authorities or platform support ask for it.
   • Inform friends/contacts that the account is compromised so they ignore suspicious messages from it.
5. Clean and secure devices
   • Run a full, up-to-date antivirus scan on every device used to sign in to the hacked account.
   • Be cautious with links and attachments going forward; phishing links are a common way accounts are stolen.
6. Minecraft access
   • If the Microsoft account that owns Minecraft cannot be recovered, Minecraft access may also be lost.
   • If recovery succeeds, immediately:
     • Change the Microsoft account password.
     • Turn on MFA.
     • Review security info and sign-in activity for anything suspicious.

If the automated Microsoft recovery form ultimately fails and security info has been fully changed by the attacker, there is no additional manual override documented for consumer accounts.

---

References:

• How to recover a hacked or compromised Microsoft account
• What does “Security info change is still pending” mean?
• What to do if your email address is leaked
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A