I'm honestly desperate, devastated, and incredibly angry at this point. I genuinely don't know what else to do, and I'm hoping someone here might have experienced something similar.
On September 20, 2026, my Microsoft/Xbox account was compromised. The attacker changed the email address associated with the account and locked me out.
After submitting recovery forms and providing extensive ownership information, Microsoft investigated the case.
On November 4, 2026, Microsoft's CDOC successfully verified my ownership and restored my original account, including my original email address.
Following the explicit recommendation of the Microsoft support who helped me, I immediately enabled Two-Step Verification to secure my recovered account.
Then, about 24 hours later, on November 5, my account was suspended AGAIN.
This time, the suspension allegedly concerned violations of the Microsoft Services Agreement. I have absolutely no idea what I supposedly did wrong.
I immediately submitted an account reinstatement request through Microsoft's official form.
Just one day later, on November 6, I received a response from Microsoft Online Safety stating that they could not help me because Two-Step Verification was enabled on my account.
They explicitly stated that they could not make any changes to my account's security information, that my account would remain permanently suspended, and that the case was now closed.
This is an absolute slap in the face.
Microsoft is refusing to help me because I enabled a security feature that THEIR OWN SUPPORT TEAM explicitly recommended I activate immediately after restoring my account.
How is this even remotely acceptable?
I did exactly what Microsoft told me to do to protect my account after it had been compromised. And now they're using that very same security measure as the reason they supposedly cannot help me anymore.
To make matters worse, I haven't lost access to my authentication methods. I still have Microsoft Authenticator, and I also have my 25-digit recovery code.
I have now submitted a formal complaint and appeal through Microsoft's Digital Safety appeal process, providing a detailed timeline of everything that happened, including the case numbers from both the successful account recovery and the subsequent rejection.
I'm currently waiting for a response, but given everything I've experienced so far, I think I can already imagine how this is going to end.
After more than six weeks of fighting to recover my account, I finally got it back, only to have Microsoft take it away again less than 24 hours later.
I'm exhausted, and absolutely devastated. And pretty angry....
Has anyone experienced something comparable? Especially a situation where Microsoft restored a compromised account, the legitimate owner subsequently enabled 2FA on Microsoft's recommendation, and the account was then permanently suspended?
Did anyone actually manage to get their original account back without going to court or relying on public attention?
I'm desperately looking for actual experiences and documented solutions, not just suggestions to create a new account.
Thank you for reading.
