Minecraft / Microsoft Recovery Guide

Minecraft Account Hacked? How to Recover It

Last updated: October 2026

Here's the thing most players don't realize until it happens: modern Minecraft accounts are Microsoft accounts. When your Minecraft login gets stolen, what's really been compromised is your entire Microsoft identity — your Outlook email, your Xbox profile, your OneDrive, everything. So this isn't a Minecraft recovery guide. It's a Microsoft account recovery guide, and that's exactly how you get your Minecraft back.

Step 1: If you have any access at all, act immediately

If you can still sign in anywhere — a phone still logged in, an old laptop, the Xbox app — you're in the best position possible:

1. Go to account.live.com/password/reset and reset the password to something unique and strong.
2. Go to account.microsoft.com/security and check for unfamiliar activity — new aliases, new phone numbers, unknown devices.
3. Enable 2-step verification and generate a recovery code you store offline.

If you're fully locked out, the rest of this guide is your path.

Step 2: Submit the Microsoft Account Recovery Form (ACSR)

The form lives at account.live.com/acsr. This is the form. Not a support chat, not a phone call, not an email to someone — this automated form. Here's how to fill it out:

1. Enter the original account email — even if the attacker changed it. That's the account you're proving ownership of.
2. Provide a different working email where Microsoft can reply to you. Use one the attacker can't touch.
3. Fill the form with maximum accurate detail:
   • Old passwords you remember using on the account.
   • Subject lines of recent emails sent from the Outlook address, and the names of frequent contacts.
   • Microsoft 365 purchase details — dates, payment info.
   • OneDrive activity — upload dates, file types.
   • Xbox console hardware ID, if the account was used on an Xbox.
   • Minecraft purchase details — when you bought it, what payment method, any transaction IDs from the receipt.
4. Submit from a familiar device and location — the device and browser you normally used, in a private/incognito window. This strongly affects the automated decision. Submitting from a random computer at a library is the worst possible choice.

Step 3: Use the correct form — ACSR vs. Account Reinstatement

Microsoft has two different forms that people mix up constantly:

• ACSR (Account Recovery Form) — for hacked accounts and lost access. This is your form.
• Account Reinstatement — only for accounts locked by Microsoft for suspicious activity. If your account wasn't locked by Microsoft, this form does nothing for you.

Filing the wrong one wastes days. If you were hacked, it's ACSR.

Step 4: If the form keeps failing, escalate through official support

If repeated ACSR submissions fail, you can contact Microsoft support at support.microsoft.com/contactus: choose Microsoft Account > Account hacked or compromised and request a chat or call-back. Ask for escalation to the account recovery team.

Be aware of what support can and cannot do: agents can review your case and escalate, but they generally cannot override the automated form's decision. This is escalation, not a shortcut — the form's verdict still rules.

Honest timelines

• Microsoft reviews the form and responds to your contact email — community reporting puts this at about 24 hours, with some sources saying 24 to 72 hours.
• There is no official guaranteed timeline. Check your contact email (including spam) daily.

After recovery: the full sweep

1. Review your sign-in activity and mark anything unfamiliar.
2. In Outlook, check connected accounts, forwarding rules, and automatic replies — attackers routinely add forwarding so they keep receiving your mail after you recover the account. Remove anything you didn't add.
3. Remove unknown aliases and security info; add your own email, phone, and an authenticator app.
4. Change the password once more, on a clean device.
5. Confirm your Minecraft entitlement is back — launch the game and verify your profile and worlds.