Managing personal Outlook.com account settings, security, and privacy
The correct path is Microsoft account recovery, not Minecraft Support.
Because the attacker changed the primary alias, the original email may no longer be recognized by automated recovery. The supported actions are:
- Start with the Microsoft Sign-in Helper for hacked account issues: Start
- This tool asks for the account email address or phone number.
- It can provide self-help steps or offer the chance to talk to an agent.
- Before changing or resetting anything, run a full malware or antivirus scan on the PC used with the account.
- Microsoft’s guidance is to clear viruses or malware first, then change or reset the password.
- If any sign-in still works, immediately change the password from the Security basics area.
- Also review recent activity and mark unfamiliar sign-ins using This wasn't me or Secure your account.
- If sign-in does not work, use the password reset flow and select the option that indicates someone else may be using the account.
- If access is restored, review account settings that are commonly changed after compromise:
- connected accounts
- forwarding
- automatic replies
The account details already available are useful when working through recovery or support options:
- original email address
- Minecraft purchase receipt
- order number
- prior account details such as username
If the original address now returns “We couldn't find an account with that username,” Microsoft’s account recovery flow is still the supported route for hacked-account handling.
References: