Need help recovering breached account

Question

Hi there,

My account was recently breached by a scammer who changed all the login information for the account, and is trying to extort me by holding the account for ransom. I tried submitting the account recovery form becauseI I was able to get the email that the scammer changed it to, but every time I submit the information, I get an email saying that the information is insufficient. I have emails that show proof of purchase and that I did indeed have this email before, and I would really appreciate help in getting my account back, as I am a frequent paying customer of Microsoft

Answer 1

Thanks for your honesty, just to add on, I was incorrect about the error. When I inputted my email, it says that they sent a verification code to the original email, but I never receive one. Does this mean I might be able to get it back or am i still unable

Yes, there's still chance for recovery.

You can also use the Xbox recovery form here:

Visit https://support.xbox.com/forms/recover-your-microsoft-account

For guidance using the form please see "Guidance notes for the Microsoft account recovery form" https://support.microsoft.com/account-billing/guidance-notes-for-the-microsoft-account-recovery-form-4dd8fef1-33d2-4fbe-9352-66127ab9b50e

I really hope this information is helpful!

Answer 2

I understand how stressful it can be to lose access to your account. Unfortunately, if the Microsoft Self-help tool didn’t work and the email address linked to the account has already been changed, the account is essentially lost.

If you have any active subscriptions linked to that account, you may need to contact your bank or card provider to block the recurring charge and prevent future billing.

I know this isn’t the outcome you were hoping for, but I recommend creating a new Microsoft account and setting up stronger security options like two-step verification to help protect it moving forward.

Answer 3

A hacked Microsoft account where the attacker has changed the sign-in info can only be recovered through Microsoft’s official automated processes. Support agents cannot manually reset passwords or override failed recovery attempts.

Follow these steps end to end:

1. Use the hacked/compromised account flow
   Start with the official helper for compromised accounts, which will guide to the correct self‑help or support path:
   How to recover a hacked or compromised Microsoft account → select Start and follow the prompts.
2. Secure devices before further attempts
   Because the account is being used for extortion, first ensure no device is still compromised:
   • Run a full, up‑to‑date antivirus scan on every PC/phone/tablet used with this account.
   • On Windows 10/11 or 8.1, turn on and run a full scan with Windows Defender as described in Step 1 of the hacked‑account article.
   • Only continue recovery from a device that has been fully scanned and cleaned.
3. Prepare for the Microsoft account recovery form (ACSR)
   Since the form is being rejected as “insufficient,” the next submissions must be as complete and accurate as possible. Before filling it out again, gather:
   • Old passwords used on this account.
   • Email addresses of frequent contacts and example subject lines of messages sent to them.
   • Details of Microsoft services used (Outlook.com, Xbox, OneDrive, etc.).
   • Any devices or locations commonly used to sign in.
   • Payment details previously associated with the account (only what the form explicitly asks for).
   Also check for any passwords saved in:
   • Microsoft Edge or Windows Credential Manager: see Save or forget passwords in Microsoft Edge and Credential Manager in Windows.
   • Other browsers or devices as described in Step 2 of the recovery‑form article.
4. Submit the Microsoft account recovery form correctly
   Use the official recovery form (linked from the help article below) and:
   • Enter the hacked Microsoft account address as the account to recover.
   • Enter a different, working email that is under control as the contact address.
   • Fill in every field with accurate information; do not guess wildly.
   • Submit from a device and network that were regularly used with this account (this helps automated checks).
   After submission:
   • A result email is sent to the working contact address within 24 hours.
   • If the result says the account could not be verified, the form can be retried with improved details up to two times per day.
   Detailed guidance: Help with the Microsoft account recovery form.
5. Understand limits if recovery keeps failing
   If the automated system continues to reject the form as insufficient, and the attacker has replaced the security info (email/phone/Authenticator), there is no manual override path for consumer Microsoft accounts. Forum moderators and standard support channels cannot:
   • Access or change account details.
   • Send password reset links.
   • Bypass the automated recovery decision.
   This is confirmed in multiple support and Q&A references: if the recovery form fails repeatedly despite accurate information, the account may not be recoverable.
6. If access is regained
   Once back in the account:
   • Immediately change the password to a strong, unique one.
   • Review and remove any unknown security info, devices, forwarding rules, connected accounts, and automatic replies as described in Step 3 of the hacked‑account article.
   • Follow the guidance in How to help keep your Microsoft account safe and secure to harden the account and make future recovery easier.
7. Do not pay the ransom
   Paying the scammer does not guarantee account return and encourages further abuse. Focus efforts on the official recovery process and on securing other accounts that may be linked to this email.

---

References:

• How to recover a hacked or compromised Microsoft account
• Help with the Microsoft account recovery form
• Get help with your Microsoft account
• Need help with hacked microsoft account - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• Me robaron una cuenta - Microsoft Q&A