Hi Wyatt Wolfe,
It is understandable that the recovery form feels limiting when both accounts were taken over and much of the older information is no longer easy to remember.
Since the attacker changed the sign-in details and security information, please start with the Microsoft Account Sign-in Helper. Enter the original email address or phone number associated with the affected account and follow the options shown. The tool can identify the account issue and present any support options available for that specific situation.
If you are directed back to the Microsoft account recovery form, complete it from a device and location that you previously used with the account. Before trying again, check saved passwords in your browser or Windows Credential Manager. Provide as much accurate information as you can remember. If you never used Xbox or cannot remember certain payment details, do not invent them; answer the applicable sections as accurately as possible and leave unrelated fields blank.
Unfortunately, there is no separate public process that allows account ownership to be established simply by submitting an IP address, screenshots, or purchase records directly through this forum. For security reasons, support agents also cannot manually change account details or send a password-reset link. However, the Sign-in Helper may offer an option to contact Support after checking the affected account.
The 30-day period you found generally relates to certain pending security-information changes. It should not be treated as a general recovery window or a guarantee that previously signed-in devices will receive a recovery message.
You may also contact Microsoft Support for further guidance. If the Support Assistant appears, enter: “I need to speak with a live support agent.”
Please note that this is a user-to-user support forum. Moderators and contributors, including external Microsoft employees, cannot access account records, review recovery submissions, or make changes to an account from here. Also, please do not post email addresses, payment details, IP addresses, recovery codes, or screenshots containing personal information publicly. Thank you so much for your understanding. Wishing you the best with the recovery process.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.