Dear Mark Jhun Hamtig,
Thank you for posting your question to the Microsoft Q&A forum.
I am truly sorry to hear this. As a Microsoft engineer, I see this specific situation often, and I know how heartbreaking and stressful it is.
I will be honest with you because acting fast is crucial to protecting your money and identity. When a hacker changes the Primary Alias to a foreign domain (like @rambler.ru) and removes your email, they have effectively erased your ownership of the account.
Here is the reality of the situation and the immediate steps you must take to protect yourself.
- Is Recovery Possible?
My answer is almost certainly No.
You can go to the login page and type your original email.
If it says "We couldn't find an account with that username," the hacker has deleted your email address. Because your "identity" no longer exists in the system, the Recovery Form cannot work, and Support cannot restore it.
- Are Saved Passwords Safe?
Unfortunately, no. This is the most dangerous part.
If you used Microsoft Edge and synced your passwords, the hacker likely downloaded them immediately.
Since the Microsoft account is likely gone, you must focus entirely on saving your other assets.
- Change Passwords Immediately: Log in to your Bank, primary Email (Gmail/Yahoo), and Social Media. Crucial: Do this on a phone or a different computer, as your current PC likely has malware.
- Cancel Credit Cards: If you had a card linked to Xbox or OneDrive, call your bank to cancel it. Tell them: "My account was stolen and I cannot remove the card."
- Scan for Malware: This hack is often caused by a virus (Session Token Theft). Run a full antivirus scan before logging into anything new on that PC.
I know this is devastating news to receive, and I am sorry I cannot offer a better outcome for the account itself. Please prioritize securing your bank and other emails immediately to stop any further damage.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.