Use the official account recovery path immediately.
- Run a full malware scan on the PC before changing anything.
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- Start the hacked account recovery flow.
- Use the Microsoft hacked account recovery guidance and the sign-in helper tool.
- If the account no longer recognizes the original email address, use the Sign-in Helper first.
- If directed to the recovery form, complete it with as much accurate information as possible.
- Use a working email account that can receive updates about the recovery request.
- Include details such as previous passwords, previous email address, Minecraft-related account details, and other account information that only the owner would know.
- If all security info was removed and replaced, the account may be in a restricted state for 30 days.
- The message “Your security info change is still pending” means the old security info was removed and replaced with new info.
- In that case, changes take 30 days to take effect.
- After access is restored, immediately:
- Change the password.
- Review connected accounts, forwarding, and automatic replies for unauthorized changes.
Important:
- Support agents are not allowed to send password reset links or directly change account details.
- If two-step verification was turned on and there is no access to any alternate verification method, support cannot help recover the account.