How do I recover my account of 20 years that was hacked?

Question

I made my Microsoft account to make my Xbox gamertag with my email 20 years ago. All it was, was a email and password.

I just had my account hacked and I have no way of recovering it. It asks me for a physical security key, face scan, fingerprint, 25-digit recovery code, authenticator app code. I don't have any of those. I made this account 20 years ago when none of those existed.

I used the "recover your account" thing and it says. 2-step verification has been turned on (which i did not do, the hacker did) and it basically told me im screwed.

Is there anything I can possible do? or did I just lose 20 years of my Xbox gaming library and gamescore overnight?

Answer 1

Hi Juturna,

I understand how serious this is, particularly because the account contains approximately 20 years of Xbox history and purchases.

Please note that this is a user-to-user forum, so contributors cannot access the account, verify ownership, remove two-step verification, or restore the account.

The Q&A Assist answer correctly explains that when two-step verification is enabled and none of the registered verification methods are accessible, support agents cannot send password-reset links or change protected account details. Unfortunately, this means the chances of regaining access are very limited. Have you had a chance to try the Sign-in Helper and compromised-account process included in that answer?

I would also like to add that you can contact Microsoft Support for account-specific guidance. Support cannot bypass the security checks or guarantee recovery, but an agent can confirm whether any official option remains:

1, Visit the Microsoft Support contact page: Contact - Microsoft Support  

2, In the search bar provided on the page, type "Account recovery" and press Enter.  

3, Click on the "Get Help" button that appears.  

4, Scroll down the page until you see and click on the "Contact Support" option.  

5, When prompted to select your product or service, choose "Other Products".  

6, For the category, choose "Manage account security".  

7, Look for and click on "Chat with a support agent in your web browser".  

8, Confirm your personal email when prompted - this is the email Microsoft will use to communicate with you during and after the support session.  

9, When connected, clearly explain your situation. Be concise but include all relevant details.  

I hope the support agent can confirm whether any recovery path remains for the account.

Answer 2

If two-step verification was turned on and there is no access to any verification method, Microsoft support cannot bypass it, send password reset links, or change account details.

The available recovery paths are:

1. Try the Sign-in Helper tool first. It can guide the account to the correct recovery path and may offer the chance to talk to an agent.
2. If the account was hacked, use the hacked-account recovery flow and start with the original email address or phone number.
3. If a previously saved 25-digit recovery code exists, it can be used during sign-in:
   • Start sign-in
   • Select Other ways to sign in
   • Select Use my password then Forgot password?
   • Select Use a different verification option then I don't have any of these
   • At Do you have an account recovery code?, enter the recovery code
4. If the password is not known and there is no access to any security info, submit the account recovery form. Use a working contact email, and if possible complete the form from a device and location previously used to sign in.
5. If the account has been inactive for more than two years, it may have been deleted and cannot be reopened.

Important limits from Microsoft:

• If two-step verification is on and none of the alternate verification methods are accessible, support agents are not allowed to reset the password or change the account.
• If security info is replaced, sign-in is blocked for 30 days before the new security info can be used.
• If current security info is found during that 30-day period, signing in with it cancels the pending security-info change.

For a hacked account, Microsoft also recommends scanning the PC for malware before changing or resetting any password, then reviewing account settings such as connected accounts, forwarding, and automatic replies after access is restored.

---

References:

• Help with the Microsoft account recovery form
• Troubleshoot Microsoft verification code issues
• How to get a Microsoft account recovery code
• I can't sign in to my Microsoft account
• How to recover a hacked or compromised Microsoft account