A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Follow these steps immediately to try to recover and secure the account:
- Use the official hacked-account recovery guide
Go through the Microsoft hacked/compromised account flow here:
How to recover a hacked or compromised Microsoft account.
This is the only supported way to recover a personal Microsoft account that has been taken over. - Run through the Sign-in Helper / recovery form
If normal sign-in and password reset do not work, use the Sign-in Helper and recovery form as described in:- Help with the Microsoft account recovery form
- Provide as much accurate information as possible (old passwords, approximate creation date, services used like Minecraft, devices used, etc.). The system uses this to verify ownership.
- If the account “does not exist” or security info was fully replaced
If the recovery form says the account does not exist, or if the hacker has removed your email/phone and replaced all security info, the guidance in the Q&A references is:- When the security info has been changed and the recovery form fails, there is no other working method to recover the Microsoft account, and Support cannot override this automated process.
- In that case, follow the hacked-account article above and, if still unsuccessful, the account is considered unrecoverable.
- If you still have any access at all
If at any point you manage to sign in to the original account:- Immediately run a full antivirus scan on your PC before changing anything (Step 1 in the hacked-account article).
- Then change the password and set a strong one.
- Review and fix account settings as described in Step 3 of the hacked-account article: check connected accounts, forwarding, and automatic replies for anything you do not recognize.
- If the hacker added their own email/alias
If you regain access and can reach alias/security management:- Remove any email aliases or sign-in addresses you do not recognize using the “Manage how you sign in” area (as described in the Q&A context).
- Add your own secure verification methods (such as Microsoft Authenticator) so codes no longer go to the attacker.
- If recovery fails but Minecraft is involved
The Q&A references indicate that if the Microsoft account cannot be recovered (recovery form fails and security info is replaced), Microsoft cannot restore it.
For Minecraft purchases tied to that account, contact Minecraft Support separately to see if they can offer any alternative options for your game access. - For future protection
After resolving this (or for any new account created):- Turn on two-step verification and keep multiple up-to-date security methods (phone, alternate email, authenticator).
- Regularly review recent activity and security info on the Security basics page.
References:
- How to recover a hacked or compromised Microsoft account
- Help with the Microsoft account recovery form
- Hello , welcome to Account help & learning
- What happens if there's an unusual sign-in to your account
- My account got hacked. - Microsoft Q&A
- Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- Hacker set up continuous draft ransomware email - Microsoft Q&A