Compromised Microsoft account — Minecraft Java Edition

Question

Hello,

My Microsoft account associated with my original Gmail address appears to have been compromised.

I received an official Microsoft security email stating that my passkey had been deleted. Shortly afterwards, I was logged out of Minecraft Java Edition.

My original Gmail address is now reported as not existing when I try to sign in. I also discovered a new Outlook alias containing my Minecraft username and a random suffix. When I try to sign in with this alias, Microsoft requests a verification method that I do not recognise.

I did not make these changes. I would like assistance recovering my original Microsoft account and restoring access to my Minecraft Java Edition purchase.

I can provide the original email address, Minecraft username, purchase receipts and screenshots of the security notifications and sign-in errors.

Please advise me on the appropriate recovery process.

Thank you.

Answer 1

Sorry to hear you're having trouble.

As well as the information already provided I wanted to also mention that after submitting the account recovery form which you can read about how to fill out here https://support.microsoft.com/en-us/accounts-billing/manage/help-with-the-microsoft-account-recovery-form please be sure to keep an eye on your email including the junk/spam folder in case the response goes there.

Answer 2

Start with Microsoft’s Sign-in Helper, using the original Gmail address first and the newly discovered Outlook alias if the original username is not recognized; recovering the linked Microsoft account is the supported route to restoring the Minecraft Java entitlement. ^1^ ^2^

1. Secure the device first

Before resetting credentials:

1. Open Windows Security → Virus & threat protection → Scan options.
2. Select Full scan → Scan now.
3. Also change the password for the Gmail account and secure it with multifactor authentication, particularly if it reused the Microsoft password.

Microsoft recommends completing the malware scan before changing the Microsoft account password. ^1^

2. Use the compromised-account recovery route

1. Open the official hacked-account page and launch its Sign-in Helper.
2. Enter the original Gmail address.
3. If Microsoft reports that the username does not exist, retry with the new Outlook alias you found. Microsoft specifically recommends using another alias or phone number attached to the account when the original email is no longer recognized. ^3^
4. Do not send a code to the unfamiliar verification method. In the helper, indicate that the verification options are not recognized or accessible.
5. Provide a separate working email address where Microsoft can contact you.

Because the original Gmail address now returns “account does not exist,” this is an unrecognized username/changed sign-in alias case—not an Outlook app problem. Deleting and re-adding an Outlook account would not recover the Microsoft identity.

3. Complete the recovery form if offered

Submit it from a device and location previously used for this Microsoft account. Include as much historical information as possible:

• Original Gmail address and any previous aliases
• Newly discovered Outlook alias
• Old Microsoft account passwords
• Minecraft username and Xbox gamertag, if applicable
• Purchase receipt, order or transaction details
• Approximate account and purchase dates
• Previously registered phone numbers or recovery addresses
• Screenshots and dates of the passkey/security notifications

Use the receipts as evidence in the Microsoft account recovery process; they do not provide a separate way to move the Java license to another account. Minecraft access is attached to the Microsoft account holding the entitlement. ^2^

Microsoft sends the recovery decision to the working contact address, normally within 24 hours. If verification fails, the form can be retried up to twice per day; improve subsequent submissions with additional accurate historical details. ^4^

4. If the original username still cannot be found

On Microsoft’s username-recovery page, select the support option under “We couldn't find an account with that username” and tell the advocate:

• The original Gmail sign-in now reports that the account does not exist.
• An unauthorized Outlook alias and verification method appeared.
• A passkey-deletion notification preceded the loss of access.
• The account owns Minecraft Java Edition.

The compromised-account page can also offer an opportunity to speak to an agent after collecting the email address or phone number. ^1^

Support can explain the recovery options, but cannot manually send a password-reset link, bypass identity verification, or directly change protected account details. ^4^

After recovery

Immediately:

1. Change the password to a unique one.
2. Remove unfamiliar aliases, passkeys, devices, and security methods.
3. Review connected accounts, forwarding rules, and automatic replies.
4. Add recovery methods you control.
5. Sign out of other sessions, then sign back into the Minecraft Launcher with the recovered Microsoft account.

The Minecraft Java purchase should be available through that recovered account; Minecraft Support cannot substitute for Microsoft account ownership verification. ^2^

Do not post the addresses, receipts, order numbers, screenshots, or discovered alias publicly; provide them only through Microsoft’s official recovery or support workflow.

---

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Troubleshooting Locked, Compromised or Stolen Microsoft Accounts ...
3. My username and password have stopped working | Microsoft Support
4. Help with the Microsoft account recovery form | Microsoft Support