My microsoft account was hacked, they changed the email, password, and turned on 2 factor authentication

Question

I got invited to a discord server for a minecraft team while playing on a public smp, and when I joined it asked to verify my minecraft account by giving my minecraft username and email associated with it. After I did this and nothing happened, I left the server and blocked the person that invited me to it. After this happened, I got an email in my inbox that said security info was added with a gibberish email to my email address associated with my minecraft account. I got signed out of everything associated with xbox or minecraft, including the xbox app on pc and mobile, microsoft java edition, bedrock edition, and my xbox account on my xbox one s. I can't reset the password or use the standard account recovery form because the account has 2 factor authentication enabled, and when trying to recover my account, it says my microsoft account wasn't recognized. For some reason, I am still signed in with the email associated with my minecraft account on Gmail where I can still view the email that says security info was added, so I am not sure if that is any help. I am wondering if there is any hope of getting my account back, and blocking out the hacker and removing his email address and 2FA, or if I can switch the email associated with my minecraft account to a different one so I do not have to buy minecraft java and bedrock again. I appreciate any help with this.

Answer 1

This is a widely reported scam on Discord joining a server, you get redirected to a fake page to enter your details and that gave them full access to your account and they immediately change the recovery details like the associated Email to block you from accessing the account.

I wish I had better news, but when a Microsoft account is hacked, if the hackers change the associated Email or if 2FA is enabled on the account, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered.

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

Answer 2

There is a defined path to try, but if the attacker has fully changed the sign‑in email, password, and security info (including 2FA), recovery may ultimately fail and the account can become unrecoverable.

Follow these steps in order:

1. Run malware/virus checks on all devices

• Before doing any account work, clear malware so credentials are not stolen again.
• On Windows 10/11, use Windows Defender:
  • Select Start.
  • Search for Windows Defender and open it.
  • Update definitions and run a full scan.
• Ensure any antivirus app is up to date and configured for regular scans.

(From: How to recover a hacked or compromised Microsoft account – Step 1.)

2. Use the official hacked-account recovery flow

• Go through the official guidance for compromised accounts: How to recover a hacked or compromised Microsoft account.
• If you can still sign in at all, immediately change the password after the malware scan.
• If you cannot sign in, use the reset password option and follow the hacked-account path (select I think someone else is using my Microsoft account when prompted, as described in What happens if there's an unusual sign-in to your account).

3. Submit the Microsoft account recovery form

• If normal reset fails or the account shows as not recognized, use the account recovery form: Account recovery form.
• Complete it from a device and location previously used with the account, if possible.
• Provide as much accurate detail as possible (old passwords, services used, approximate purchase dates, etc.).
• Follow the guidance in Help with the Microsoft account recovery form for filling it out.
• If the form is rejected multiple times, the account is typically treated as unrecoverable.

4. Use the Sign-in Helper / hacked-account helper

• Use the Sign-in Helper tool for hacked or unrecognized accounts: Open the Sign-in Helper for support options or hacked account issues.
• This tool may:
  • Route to self-help flows (including hacked-account recovery), or
  • Offer a chance to contact an agent, depending on the scenario.

5. Check for “security info change pending” state

• If at any point you see messages like Your security info change is still pending or You can’t access this site right now, it means all previous security info was removed and replaced, and a 30‑day security info change period is in effect.
• On that pending screen, use whichever of these options appears:
  • Cancel this request – only if the change was initiated by you and you still have access to the old security info.
  • Let us know – use this if you did not make the change; this routes you through the “unauthorized change” flow.

6. After (and if) access is restored

• Immediately:
  • Change the password again after confirming devices are clean.
  • Review and remove any attacker-added aliases or sign-in emails via Manage how you sign in.
  • Add safer verification methods (Microsoft Authenticator, additional email/phone) via Advanced security options, as described in How to help keep your Microsoft account secure.
• Check Outlook/Outlook.com settings for:
  • Suspicious rules (Settings → Mail → Rules).
  • Forwarding and automatic replies.
• Use Sign out everywhere and revoke any unrecognized app permissions.

7. If recovery fails

• Based on the referenced guidance and Q&A cases:
  • When an attacker has changed the primary email, password, and all security info (including 2FA), and the recovery form cannot verify ownership, Microsoft treats the account as unrecoverable.
  • Microsoft Support and community forums cannot override the automated recovery decision or manually reset security info.
• In that case:
  • The Microsoft account (and associated Xbox/Minecraft entitlements) may not be recoverable.
  • For Minecraft-specific options, contact the Minecraft team via their official support (as suggested in the Q&A context) to see if any alternatives exist, but there is no guarantee of restoring purchases.

8. Future protection

• Add multiple ways to sign in or verify (Authenticator, backup email/phone) and keep them up to date, as described in How to help keep your Microsoft account secure.
• Avoid entering Microsoft or Minecraft credentials on third-party “verification” sites or Discord bots.

---

References:

• How to recover a hacked or compromised Microsoft account
• Help with the Microsoft account recovery form
• What happens if there's an unusual sign-in to your account
• How to help keep your Microsoft account secure
• Hello , welcome to Account help & learning
• Unblock my Outlook.com account
• My account got hacked. - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A