how to fix minecraft account possibly being hacked

Treat the Discord DM verification prompt as suspicious and secure the Microsoft account directly through Microsoft, not through the Discord message.

1. Check recent sign-in activity on the Microsoft account and confirm any sign-ins that were not done by the account owner.
2. Run a full malware scan on the PC before changing anything else:
   • Open Windows Security
   • Go to Virus and threat protection
   • Select Scan options > Full scan > Scan now
3. Since the password was already reset, review account security settings next:
   • Check that sign-in verification methods are current on the Advanced security options page
   • Add another way to sign in or verify identity if needed
4. Review account settings that attackers commonly change:
   • connected accounts
   • forwarding
   • automatic replies
5. If still signed in on shared or old devices, sign out everywhere from the Microsoft account.
6. Turn on or keep using multi-factor authentication and make sure the password is strong and unique.
7. If access problems continue or the account appears compromised, use the Microsoft sign-in helper or hacked account recovery flow.

Important:

• Do not trust a Discord DM as proof that Microsoft is verifying the account.
• Legitimate unusual sign-in alerts may come by email or text and may require a security code from account contact methods.
• If checking email alerts, the legitimate sender listed in Microsoft guidance is from the Microsoft account team at ******@accountprotection.microsoft.com.

If the account becomes locked, unlock it by signing in at https://account.microsoft.com to request a security code. Any phone number that can receive text messages can be used for the code.

References:

• What happens if there's an unusual sign-in to your account
• How to recover a hacked or compromised Microsoft account
• How to help keep your Microsoft account secure
• Microsoft account has been locked
• What to do if your email address is leaked