Account hacking and unauthorized alias change

Please note that this is a user-to-user community. As moderators, I have limited access to internal development details. My role is to direct users to the appropriate support channels and resources. While I cannot provide backend analysis, I will do my best to assist you within my responsibilities. 

Dear Naetochukwu Ofili

Thank you for reaching out to the Microsoft Q&A forum. I’m so sorry this happened. Please follow these steps to recover your account:  

1. If you can’t sign in, submit the Microsoft account recovery form. Provide every proof you have (Minecraft purchase receipt/order number, Xbox gamertag, previous aliases, billing details).  
2. If the form fails, please reach out to a live agent so that they could help you manually recover the account: 

• Visit Contact - Microsoft Support   
• Type a brief description of your issue in the search box  
• Scroll down to the bottom > select Sign in to contact support  
• Log in to another available personal Microsoft account.   
• Under Products & Services, select "Other Products"; Under Categories, select "Manage account security", and click Confirm.  
• Click "Chat with a support agent in your web browser" (during business hours) 

The more information, the higher the chances of success. Please follow the steps above and tell me how it goes. Thank you for your time and cooperation. 

Have a lovely day

Follow these steps to handle the hacked Microsoft account and the unauthorized changes:

1. Use the official hacked-account recovery flow
   • Go to the Microsoft hacked/compromised account helper and start the guided process: How to recover a hacked or compromised Microsoft account.
   • The tool will ask for the email or phone that was on the original account and then guide through self-help or offer contact with an agent.
2. If you can still sign in in any way
   • First, clear malware from the PC or device used to sign in:
     • On Windows 10/11, use Windows Defender: select Start, search for Windows Defender, open it, and run a full scan.
   • After the scan completes, immediately change the Microsoft account password to a strong one using the instructions in the hacked-account article.
   • Then review security and account settings:
     • Check connected accounts, forwarding, and automatic replies to remove anything the attacker added.
3. If you cannot sign in because the alias and password were changed
   • Use the account recovery form (ACSR) for the original account, not the new one created with the same address: https://account.live.com/acsr (from the Q&A context).
   • Provide as much accurate information as possible: old passwords, approximate account creation date, billing details used for Minecraft/Xbox/Microsoft Store, and any other details requested.
   • Submit the form from a device and location that were regularly used with the original account.
   • If the form is declined, it can be updated and resubmitted (up to twice per day) with more accurate details.
   • If the recovery form and the hacked-account helper both fail and the attacker has replaced the security info, there is no other supported method to recover that Microsoft account; support cannot bypass the automated process.
4. Handle Minecraft and Xbox access separately
   • If the Microsoft account itself cannot be recovered, contact Minecraft Support about the Minecraft license and launcher access, as suggested in the Q&A context, and provide proof of purchase and the Minecraft/Xbox gamertag.
   • For fraudulent Xbox/Microsoft Store charges, use the Get Help app or web support and use the “Call me back”/support contact options to dispute unauthorized charges, as shown in the Q&A example.
5. Secure all devices and future sign-ins
   • Ensure antivirus is up to date and run full scans on all PCs used to sign in.
   • Turn on two-step verification/MFA on any recovered or new Microsoft account and keep security info (phone, alternate email) up to date.
   • Regularly review the Security basics page and Recent activity for unusual sign-ins; if anything suspicious appears, mark it as not yours and follow the “Secure your account” flow.

References:

• How to recover a hacked or compromised Microsoft account
• What happens if there's an unusual sign-in to your account
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A
• fraud charges on microsoft account - Microsoft Q&A
• Change the email address or phone number for your Microsoft account
• Which account do you want to use?