Microsoft Account Security is a joke
WHAT AN EXPERIENCE!
Story time...
Not going to bore anyone with the details from the beggining of time,
Starting witha bit of brief history, I am an avid PC gamer but have played on XBOX and PS for most of my childhood.
My PC gaming really kicked off when a game called minecraft came out, which I happily bought on the day it release (not microsoft versions, but when Notch released it in ALPHA).
Skip to Microsoft buying mojang and they FORCE us to link these minecraft accounts to a Microsoft account in order to continue playing the game.
So, I linked it.
Skip forward to August 2025, I have been playing, have even been paying the XBOX game pass for a good 4 years or so, all going good.
I go away for a few days and come back to my account being non-accessible and with a strange recovery email adress that I do not recognise at all.
I can´t ask for a password recovery, because the email isn´t mine.
I can´t ask for a text message, because the recovery number has also been changed.
I look at my email, NOT ONE SINGLE EMAIL telling me someone is trying to change the recovery email or phone number.
So, next logical step?
Get in touch with Microsoft.
I get in touch with Microsoft via the online chat option, and what do you know, a BOT.
After hours, I finally manage to get in touch with a real person that told me that they cannot do anything to help, but they will escalate the issue and take it higher up, looking good.
I receive an email asking me to provide as much evidence as possible to show the account was actually mine, so I did.
Here is a list of what I sent them;
- My IP address (has been the same for the las 9 years and is the ONLY one that has accessed the account)
- My home address in spain (last 9 years)
- My home address in UK (where I first made the account)
- My friends on the account
- The date of the account being made (more or less because who really knows the exact date 12 years later)
- The last time I changed the password (even provided the security code used to change it)
- The last games I had played
- The billing information used to pay for game pass (yes, I am locked out of my account and it has my bank details saved on it)
- The only gamertag that the account has ever had
- Screenshots of the purchase history
- Screenshots of all account information
- Screenshots of me playing with the account
- Provided all phone numbers that were associated with account
- Provided all the emails that have ever been used as recovery emails (only 2)
What more do they want?
I mean, I am talking to them and my name is literally the only name that has ever been on the account and is on the CURRENT BILLING INFORMATION for the game pass that has been paid for the last 4 years.
So, they have replied after almost TWO WEEKS.
Basically, saying they are satisfied with the information and evidence provided and agree with me that the account is mine.
BUT...
They cannot do anyhting to return my account to me because some hacker changed the recovery information!?!?!??!
Is this a joke?
A multi-billion dollar company can CLEARLY see the account is mine but will not return it to me?
They have blocked the account, at least, they say they have.
The only thing they could say was "Sorry, you have lost the account and wil have to re-purchase everything"
Like come on, really?
The microsoft account is the least of my worries to be honest, but the minecraft account is an account from the ALPHA days and all of the purchases of ranks and server purchases are gone along with it.
I wouldn´t mind if it wasn´t for the fact that NO EMAIL, OR TEXT, OR ANY WARNING was given to me that someone was trying to get into my account, yet when I want to do a simple password change, I have to put in a code that they send by email or text and this person was literally allowed to change ALL SECURITY info on the account without any code.
I have asked them to not close the case and take it higher up, i want this sorted.
I know i´m ranting on a user forum, but I find it shameful the little interest Microsoft put in to actually help their users.
I guess it´s just easier to say "Welp, make a new account and buy everything again".
Signing out now, will keep this updated if anything changes as I am 100% sure I am not the only person this has happened too.