Hacked account... HELP

Question

I was just playing minecraft one day... i tried to join a discord server for like free loot a week ago, got a code to my email, and i entered it stupidly, and then mins after... BOOM account hacked everything changed, and i've been trying to get my account back for a week. any solutions? i've tried everything, but the best response i've gotten so far was a CDOC service form they never replied to and from a support agent asking me to create a alternate email. my account that got hacked is yxlo<removed PII>@outlook.com they changed it from yx<removed PII>@outlook.com

Answer 1

Hi ,

I'm Dyari. I'm sorry to hear that your account is compromised.

The process of recovering a compromised account is automated. Please use the Sign-in Helper tool first:

https://support.microsoft.com/en-us/account-billing/no-puedo-iniciar-sesi%C3%B3n-en-mi-correo-electr%C3%B3nico-475c9b5c-8c25-49f1-9c2d-c64b7072e735

If it does not help, fill out the recovery form with all the accurate information you know. Be noted that it takes time until you receive a response.

https://support.microsoft.com/en-us/account-billing/ayuda-con-el-formulario-de-recuperaci%C3%B3n-de-una-cuenta-de-microsoft-b19c02d1-a782-dee6-93c3-dc8113b20c42

If the hacker has changed the associated email address, unfortunately, it would be difficult to recover the account.

Answer 2

First: don't beat yourself up over the code. That "free loot" Discord scam is currently the single most common way Minecraft accounts get stolen. The code Microsoft emailed you was a security code for your own account, and the scammer's page harvested it the moment you typed it in — that's the whole trick, and it catches thousands of people.

Here's where you actually stand and what to do.

The recovery form is the only real path. There is no separate "hacked account" queue, and no support agent can manually hand the account back. Everything runs through the Microsoft account recovery form:

https://account.live.com/acsr

Submit it using your original address (******@outlook.com), even if the site tells you the account doesn't exist — it says that because the attacker changed the alias, and the form still works. That's also why the agent asked you to create an alternate email: Microsoft needs somewhere to reply that isn't the stolen mailbox. That request was legitimate, not a brush-off. Make a fresh address (Gmail is fine), and use that same one on every submission.

How to give the form its best chance:

• Fill it in from the computer/phone, browser and home internet connection you normally used with that account. Microsoft weighs this heavily.
• Use an InPrivate/Incognito window so no other Microsoft account is signed in.
• Answer every field you possibly can, even with guesses. Partial credit counts.

What to dig up before you submit — this is where most people fail, because they submit thin and get auto-rejected:

• Old passwords. Any you've ever used on the account, including ones from years ago. This is one of the strongest signals.
• Proof of purchase. Search whatever email account received the original Minecraft receipt for terms like Mojang, Minecraft, Thanks for your order, or Microsoft Store. You want the order/transaction number, the purchase date, and the last four digits and type of card used. If a parent bought it, ask them to find their bank statement line. Purchase proof is the most convincing evidence you can supply.
• Your Minecraft username(s), including any previous ones, and your Xbox gamertag.
• Roughly when you created the account, and the country/region it was set to.
• Subject lines of recent emails in the mailbox, names of any folders you created, and a few email addresses you regularly wrote to.

You are allowed to resubmit. Submissions are scored automatically, and a rejection isn't final — each new attempt with more detail is judged fresh. People who eventually get their accounts back usually did three or four rounds, not one.

Run Minecraft Support in parallel, right now:

https://help.minecraft.net/hc/en-us/request/new?ticket_form_id=360001225811

They're a separate team from Microsoft account recovery and deal specifically with stolen Minecraft profiles. Attach your proof of purchase. A week with no reply is worth a polite follow-up on the existing ticket rather than opening a new one — new tickets go to the back of the queue.

Also do these today, regardless of how recovery goes:

• If any other account (Discord, your alternate email, a game store) uses the same password, change it now. Attackers reuse harvested credentials within days.
• Turn on two-step verification, ideally a passkey or authenticator app, on the accounts you still control.
• Check with your bank if a card was saved to the Microsoft account, and watch for charges.

The honest part. If the attacker replaced every piece of security info and the recovery form keeps rejecting you, Microsoft has no override — there's no back door for support staff either, which is the same protection that stops someone doing this to a stranger. If you reach that point, contact Microsoft Support (https://support.microsoft.com/home/contact) and ask them to suspend the account. That doesn't give it back to you, but it stops the thief using it or selling it on.

Going forward: Microsoft only ever asks for an emailed code on login.microsoftonline.com or login.live.com. If any Discord bot, website, or person asks you to type a code, it's theft, 100% of the time, no exceptions.First: don't beat yourself up over the code. That "free loot" Discord scam is currently the single most common way Minecraft accounts get stolen. The code Microsoft emailed you was a security code for your own account, and the scammer's page harvested it the moment you typed it in — that's the whole trick, and it catches thousands of people.

Here's where you actually stand and what to do.

The recovery form is the only real path. There is no separate "hacked account" queue, and no support agent can manually hand the account back. Everything runs through the Microsoft account recovery form:

https://account.live.com/acsr

Submit it using your original address (******@outlook.com), even if the site tells you the account doesn't exist — it says that because the attacker changed the alias, and the form still works. That's also why the agent asked you to create an alternate email: Microsoft needs somewhere to reply that isn't the stolen mailbox. That request was legitimate, not a brush-off. Make a fresh address (Gmail is fine), and use that same one on every submission.

How to give the form its best chance:

• Fill it in from the computer/phone, browser and home internet connection you normally used with that account. Microsoft weighs this heavily.
• Use an InPrivate/Incognito window so no other Microsoft account is signed in.
• Answer every field you possibly can, even with guesses. Partial credit counts.

What to dig up before you submit — this is where most people fail, because they submit thin and get auto-rejected:

• Old passwords. Any you've ever used on the account, including ones from years ago. This is one of the strongest signals.
• Proof of purchase. Search whatever email account received the original Minecraft receipt for terms like Mojang, Minecraft, Thanks for your order, or Microsoft Store. You want the order/transaction number, the purchase date, and the last four digits and type of card used. If a parent bought it, ask them to find their bank statement line. Purchase proof is the most convincing evidence you can supply.
• Your Minecraft username(s), including any previous ones, and your Xbox gamertag.
• Roughly when you created the account, and the country/region it was set to.
• Subject lines of recent emails in the mailbox, names of any folders you created, and a few email addresses you regularly wrote to.

You are allowed to resubmit. Submissions are scored automatically, and a rejection isn't final — each new attempt with more detail is judged fresh. People who eventually get their accounts back usually did three or four rounds, not one.

Run Minecraft Support in parallel, right now:

https://help.minecraft.net/hc/en-us/request/new?ticket_form_id=360001225811

They're a separate team from Microsoft account recovery and deal specifically with stolen Minecraft profiles. Attach your proof of purchase. A week with no reply is worth a polite follow-up on the existing ticket rather than opening a new one — new tickets go to the back of the queue.

Also do these today, regardless of how recovery goes:

• If any other account (Discord, your alternate email, a game store) uses the same password, change it now. Attackers reuse harvested credentials within days.
• Turn on two-step verification, ideally a passkey or authenticator app, on the accounts you still control.
• Check with your bank if a card was saved to the Microsoft account, and watch for charges.

The honest part. If the attacker replaced every piece of security info and the recovery form keeps rejecting you, Microsoft has no override — there's no back door for support staff either, which is the same protection that stops someone doing this to a stranger. If you reach that point, contact Microsoft Support (https://support.microsoft.com/home/contact) and ask them to suspend the account. That doesn't give it back to you, but it stops the thief using it or selling it on.

Going forward: Microsoft only ever asks for an emailed code on login.microsoftonline.com or login.live.com. If any Discord bot, website, or person asks you to type a code, it's theft, 100% of the time, no exceptions.