I need help with a potentially hacked account

Question

ive used my microsoft account more than a month ago, i wanted to join this minecraft discord server which required a verification. i recieved a one time 6 digit code which i sent to verify on the discord server, and now since the last time i signed into my account was so long ago i am signed out, no other place like self help in microsoft has been able to help me, i really need help, my account i want to recover is ********@outlook.com or what i had known as ******@gmail.com, and im completely signed out of it, i tried using all passwords i've ever known but it really doesnt work, the unknown email linked to my account now starts with ******@securitylock24hours.net so i really need help. since i never really use my microsoft account much i havent been able to use the form to revoer/reset my account and i have no other choice. please help me (contact me at ****@students.edu.sg)

Answer 1

This is a widely reported scam on Discord joining a server, you get redirected to a fake page to enter your details and that gave them full access to your account and they immediately change the recovery details like the associated Email to block you from accessing the account.

I wish I had better news, but when a Microsoft account is hacked, if the hackers change the associated Email or if 2FA is enabled on the account, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered.

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245

Answer 2

Yeah this is definitely pretty common as it just happened to me. Doesn't look like I'll be able to recover it in any way, but I've been reporting any emails I've seen associated with the hijack. Hope it works out a little better for you.

RIP Minecon 2016 cape :/

Answer 3

I am so sorry you are going through this. You have fallen victim to a very common and aggressive Discord Minecraft verification scam. By sending that 6-digit code, you accidentally gave the hackers a one-time password to access your Microsoft account. They immediately changed your security email to that fake domain (securitylock24hours.net) and changed your password to lock you out. You need to act immediately to try and get Microsoft to intervene or lock the account before further damage is done.

1. Contact Microsoft Support Directly (Human Agent) Since the hackers changed your recovery info, the standard automated recovery form (account.live.com/acsr) will no longer work for you. You must speak to a live support agent to report that your account has been compromised and ask them to escalate it to their global safety/compromised accounts team. Go to the Microsoft Contact Support Page. If you cannot log in, create a brand-new, temporary Microsoft account just to access support. In the search box, type "MSA" or "Hacked Account". Scroll to the bottom and click Contact Support. Under Products & Services, choose Other Products. Under Category, choose Manage Account Security and click Confirm. Select Chat with a support agent in your web browser. Explain clearly to the agent: "My Microsoft account was phished via a Discord scam. The hacker changed my primary security email to a domain starting with @securitylock24hours.net. I need this escalated to the compromised accounts team."
2. Contact Xbox / Minecraft SupportIf Microsoft Support cannot instantly restore it, you must also report it to Xbox/Mojang to try and preserve your Minecraft data or request a suspension so the hacker cannot use your profile. Open an official ticket through the Xbox Support Portal or Minecraft Help Center. Provide your original transaction ID (from when you originally bought Minecraft) if you still have it in your Google Mail history. This is the absolute best proof of ultimate ownership.
3. Secure Your Google & Discord Accounts. The scammers targeted your Microsoft login, but you must ensure your other profiles are completely safe right now: Check Your Gmail: Go to your Google account settings and log out of all unknown devices. Ensure no forwarding rules were set up by hackers to steal your emails.

Fix Discord: If you clicked links or authorized an app on Discord to join that server, go to User Settings > Authorized Apps on Discord and revoke privileges for anything suspicious. 

Change your Discord password immediately. A Critical Warning: Please be highly aware of "recovery scammers." Anyone online or in your DMs claiming they can "hack back" your account or fix this for money is a scammer trying to steal from you a second time. Only official Microsoft staff can modify Microsoft account states. If you need help gathering your original Minecraft transaction receipt details or drafting what to say to the Microsoft support agent, please try using an AI TO HELP YOU DRAFT THE PROPER INFO AND QUESTIONS TO ASK.