![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 6%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDW%3C/text%3E%3C/svg%3E)
Hello, thank you for reaching out to Microsoft Q&A.
Microsoft has implemented several security measures to protect User accounts, however the hackers still attempt to gain unauthorized access through phishing attacks. If you receive any third-party link claiming to be from Microsoft, carefully consider why the link was sent to you before taking any action, and avoid clicking it directly. Instead, navigate to your Microsoft account directly through your browser.
Based on the information you provided, it appears that the hacker has fully compromised your account by removing your existing email address (alias) and replacing it with a new one. If this has occurred, account recovery becomes significantly more difficult, as the attacker may have altered all account-associated information.
However, if you still remember your Xbox Gamertag and any other details associated with the account, you may submit an Xbox Account Recovery Form and request assistance from the Xbox Support team for account recovery.