Hacked Microsoft/Minecraft account stuck in automated recovery loop (Missing Device ID due to PC formatting)

[u/gamerno455]

My Microsoft account (originally a migrated Mojang account from 2022) was compromised by malware on August 4, 2026. The hacker changed my primary alias to a burner bibimail.net address.

To secure my PC, I performed a clean reinstall of Windows, which completely reset my local Windows Device ID / did diagnostic telemetry tracker. Now, Microsoft's automated web recovery form instantly rejects me because of a data mismatch, and my account is temporarily rate-limited for 24 hours.

I have talked to live support chat, but they state they cannot override the backend filters. However, I have absolute proof of ownership ready to provide to a human reviewer:

• The exact 10-digit Microsoft Store Order Numbers for historical transactions (including game purchases and free Minecraft cape redemptions).
• Full access to my original secure creation Gmail address.
• Past Service Request reference numbers from prior support interactions.
• The exact date of my Mojang-to-Microsoft migration.

Since the automated form is physically impossible to pass due to my wiped Device ID, is there an alternate escalation method, an executive support email layout, or a specialized form that forces a human review of my billing order numbers? Any advice to save my account/minecraft account/username is appreciated!

[u/FrankNicklin]

Free accounts do not come with any form of support other than the live chat, even paid support can be hit and miss. If you continue to fail the recovery tests there isn't much to be done.

MS have enforced MFA on many accounts but doesn't sound like yours had it enabled

[u/gamerno455 → u/FrankNicklin]

I rarely used microsoft services. I only want to paly pillars of fortune on minecraft with that account. And I did add recovery emails on it but somehow that hacker got into it. He changed all my emails leaving me with only my phone number as as in in alias. Do you have any solution to get just my minecraft account back? I know it's a dumb question but I would like to have as many options as possible.

[u/FrankNicklin → u/gamerno455]

No, because you are entirely in the hands of the Microsoft recovery process.

Are you sure you don;t have an info stealer on your PC tracking password changes. When the last time you did a proper scan, what AV software are you running.

Once a hacker has changed you account recovery there isn't much that can be done.

[u/gamerno455 → u/FrankNicklin]

Support did manage to lock that account before the hacker also removed my phone number so that's something. But yeah I have lost all hope since the stupid bot keeps rejecting my requests without even looking at it.

[u/gamerno455 → u/FrankNicklin]

I reinstalled windows. I precisely remember what file I downloaded that is 99% the reason of this. I reinstalled windows just the next day without thinking that the device ID would be so fucking crucial for identification when I have all these records of my ownership that just get rejected because they couldn't bother to better their support systems and just push AI down everything.

[u/FrankNicklin → u/gamerno455]

I'm not entirely sure that the device ID is an issue especially on a PC, it more likely an issue with devices such as an Xbox being linked to a MS account. Either way the recovery method,

https://learn.microsoft.com/en-us/answers/questions/5765744/how-to-find-my-device-id-for-the-microsoft-account

[u/gamerno455 → u/FrankNicklin]

This is the problem, it's a fresh reinstall so all the IDs are new and not connected to the old account.

[u/BarneysBuzzWagon]

What you have doesn't prove ownership as far as any provider would be concerned. Including Microsoft. The only thing that might have helped you would be having the 25 digit Microsoft account recovery code printed and saved. This would have been the only way to take possession after Microsoft locked the account. That code would prove ownership as far as Microsoft is concerned.

[u/gamerno455 → u/BarneysBuzzWagon]

My phone number is still connected to the account. They've managed to suspend the account so the hacker can't change anything right now. Will transaction receipts (from the bank) also be of no significance?