Got hacked

Question

Hello, my Microsoft account got hacked. I got it and changed my password 3 times and put different email from the hacker one. When i try to log in on my Minecraft Launcher from my Microsoft acc, it only give me the option of the hackers email, when i click to sign in with a different way it still only gives me the option of their email. What do I do?

Answer 1

Hello, good day and thanks for your question. Sorry to know about this and I understand that you have encountered an account related issue.

Please take note that a compromised account is a complex scenario and once the email and phone number has been changed to a different one then it is at the point that it is unrecoverable (even if 2FA is enabled) and Microsoft Support will not be able to help either.

For this you can go over to this link https://go.microsoft.com/fwlink/?linkid=2196140 and most likely it will be followed by doing the account recovery form which is an automated process that you will need to enter every bit of information that you can remember on the account (if this is unsuccessful, the account cannot be recovered) and you can check out the links below for reference.

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

https://support.microsoft.com/en-us/account-billing/help-with-the-microsoft-account-recovery-form-b19c02d1-a782-dee6-93c3-dc8113b20c42

https://support.microsoft.com/en-us/account-billing/your-microsoft-account-recovery-request-wasn-t-granted-dc56c3e3-dff0-4ed5-8edb-60290eea6b53

Please take note that if 2FA is enabled on your account, ACSR will inform you that your recovery request will be ignored and you will only receive a message that the recovery request is either successful or it will indicate that it has insufficient information and this means that 2FA is disabled. You may keep on trying as many times as you want which is up to two times per day.

Please take note as well that Microsoft Support will not be able to assist with doing manual recovery, unblocking, and escalation as support agents and advocates are not allowed to send password reset links or access and change account details.

Answer 2

Follow these steps to secure the Microsoft account and stop the hacker’s email from being used:

1. Verify and secure the account first
   • Go to the Security basics page and sign in with the hacked Microsoft account.
   • Select Review activity and check the Recent activity page. For any sign-ins that are not recognized, expand them and choose This wasn't me (for Unusual activity) or Secure your account (for Recent activity). This helps lock out the attacker and walk through a security check.
   • After that, on the Security basics page, select Change password and set a strong, unique password again.
2. Remove the hacker’s sign-in email / alias
   • The email addresses and phone numbers on the account are aliases. The hacker’s email is likely added as an alias that can be used to sign in.
   • Use the guidance from How to fix "This username has been turned off" error: go to the alias/sign-in management page ("Manage how you sign in" for the Microsoft account) and remove any alias that is not recognized. Only keep personal emails/phone numbers.
   • This prevents the Minecraft Launcher and other apps from offering the attacker’s email as a sign-in option.
3. Add safe security info and sign-in methods
   • Go to the Advanced security options page of the Microsoft account.
   • Select Add a new way to sign in or verify and add trusted methods (own email, phone, or Microsoft Authenticator). Ensure the list of phone numbers and email addresses is up to date and only belongs to the account owner.
   • This ensures verification codes no longer go to the hacker and makes recovery easier if the account is compromised again.
4. Clean up any remaining compromise indicators
   • Follow the hacked-account recovery steps in How to recover a hacked or compromised Microsoft account:
     • Run a full antivirus scan on the PC (for example, using Windows Defender on Windows 10/11) before changing passwords, to ensure no malware is capturing credentials.
     • After scanning, change the Microsoft account password again if needed.
     • Check account settings such as connected accounts, forwarding, and automatic replies, and remove anything not recognized.
5. If the account cannot be fully recovered
   • If the hacker has replaced all security info and the account recovery form fails, moderators indicate there is no other supported way to recover the Microsoft account. In that case, Minecraft access tied to that Microsoft account may also be unrecoverable, and further help must be requested from Minecraft Support as described in the Q&A references.

Once the hacker’s alias is removed and only trusted aliases and security info remain, the Minecraft Launcher should stop offering the attacker’s email and instead use the remaining valid Microsoft sign-in options.

---

References:

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• How to help keep your Microsoft account secure
• How to fix "This username has been turned off" error
• My account got hacked. - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A