Share via

Microsoft account hacked - primary alias changed - original email no longer exists

Dan Jones 0 Reputation points
2026-05-06T09:05:43.05+00:00

My Microsoft/Xbox account has been compromised. The attacker changed the password, recovery information, and primary alias/email address attached to the account.

My original account email now returns: “This Microsoft account does not exist.”

I have evidence showing that a different unknown email address is now attached to the account instead.

Because the alias was changed, I cannot use the normal recovery system as it requires signing into an account that Microsoft now says no longer exists.

I still have ownership evidence including:

Xbox purchases

Billing history

Console serial number

Gamertag

Previous passwords

Screenshots of the alias change

I am requesting escalation to the Microsoft account recovery/security team for manual review.

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-05-06T09:06:04.8166667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Direct escalation to a manual-review team is not available for personal Microsoft accounts. Recovery is handled only through the official self-service and support flows. Based on the described situation (account taken over, primary alias and security info changed, original alias now shows “This Microsoft account does not exist”), the following supported options apply:

    1. Use the hacked/compromised account flow
    1. Submit the Microsoft account recovery form
    • Go to the account recovery form (linked from the hacked/compromised account article) and submit a request with as much accurate information as possible.
    • Use all available ownership evidence when filling the form (previous passwords, billing details, Xbox-related info where requested, etc.).
    • After submission, results are sent to the working contact email provided at the start of the form within 24 hours.
    • If the account cannot be verified, the result email will say so. In that case, the form can be retried up to two times per day, each time with any additional or more accurate information available.
    • If the account is verified, instructions to sign back in are sent to the same working email.
    1. Understand support limitations
    • Support agents and advocates are not allowed to send password reset links or directly access/change account details for security reasons.
    • If the recovery form repeatedly fails to verify ownership, the account is treated as unrecoverable; community forums and moderators cannot override this or perform a manual backend recovery.
    1. If the account is in “security info change pending” state
    • If at any point a “Your security info change is still pending” message appears when trying to sign in, use the options on that screen:
      • “Cancel this request” if the change was initiated and the old security proofs are still accessible.
      • “Let us know” if the change was not made by the account owner; this routes through the unauthorized-change flow.
    1. After regaining access
    • Review and follow the guidance in “How to help keep your Microsoft account safe and secure” (linked from the recovery-form help article) to:
      • Add strong security info (Microsoft Authenticator, additional email/phone).
      • Remove any attacker-added aliases from “Manage how you sign in”.
      • Check for unusual sign-ins and mailbox rules/forwarding.

    If the recovery form and hacked-account flow do not result in successful verification, there is no supported escalation path that can bypass these automated ownership checks for personal Microsoft/Xbox accounts.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.