9 ms·
Tell HN: Microsoft locks migrated Minecraft accounts, requires phone to unlock
Earlier this year I migrated each of my children's Minecraft accounts to Microsoft accounts as Microsoft no longer allows launching Minecraft with a Minecraft account.
About a month after doing the migration while signing in to one of the Microsoft accounts I was presented with a message from Microsoft that the account was locked due to activity on the account that 'violated their terms of service' despite no one using the account since the earlier migration.
The only way to unlock the account is to provide a phone number in order to receive a confirmation code. There is no email option provided to receive a confirmation code, and the only way to contact support directly is by signing in to the account (can't be done while the account is locked).
Prior to the migration from Minecraft to Microsoft I never had any issues with using any of our Minecraft accounts.
Whoever at Microsoft thought this was a good idea is causing them to lose business.
- tsian2 4y agoI lost my account from 2010 in the migration, because they require the transaction ID of the original purchase. The support person told me that the transaction ID was a key to the account.
- inglor 4y agoJust a developer (for Excel). I don't work on Minecraft or anything related but I'm happy to (try and) escalate this internally in Minecraft and/or identity through the internal channels. You can email me at bgruenbaum@microsoft.com
- shkkmo 4y agoThe community has been complaining about this for months, if they don't know that this is a ubiquitous issue, they have their head in the sand.
- hn2019 4y agoThe point to be made to your colleagues is that requiring people to provide a phone number in order to unlock a Microsoft account is driving those people away from other Microsoft products, such as Excel. So effectively, the poor account management practices at Microsoft are putting your job at risk.
- kingcharles 4y agoYou're doing the Lord's work.
- subtra3t 4y agoI'm not OP, but I think I can speak for them when I say that you're a life saver! I too faced this issue a week ago, but for sake of convenience I just gave my number to them. Seriously, thank you.
- josephcsible 4y agoThey already got your money when you bought the game for your kids. They don't care whether or not you ever play it again, and in fact their server costs are probably lower if you don't.
- mkl95 4y agoHow do you know they got his money though? Minecraft was released in 2011 and Microsoft bought it a few years later. To me it seems like Microsoft want people to buy their Minecraft spinoff, so they are making it harder to play the original game.
- khedoros1 4y agoThere's an in-game marketplace where you can buy a number of cosmetic upgrades and such with "Minecoins", which are sold similarly to other in-game currencies. Looks like $20 for 3500 coins.
- josephcsible 4y agoBut I thought this forced migration was for Java Edition, and that Minecoins were only for Bedrock Edition.
- teaearlgraycold 4y agoMinecoins? Jesus Christ. Glad I’m only on Java.
- 8note 4y agoIt's a datapack and map marketplace
- bencollier49 4y agoFor now.
- teaearlgraycold 4y agomonkaS
- throwaway67743 4y agoTwitter did the same and got penalised, it's just the way people behave now under the guise of "security" - I'd raise this with whoever the competent (ha!) DPA is wherever you are and see what they say
- spicybright 4y agoHow did they get penalized?
- johnnyapol 4y agohttps://www.bleepingcomputer.com/news/technology/ftc-fines-twitter-150m-for-using-2fa-info-for-targeted-advertising/ https://www.bleepingcomputer.com/news/technology/ftc-fines-t...
- ziml77 4y agoThat isn’t the same thing unless Microsoft is using the phone number to target ads.
- Nextgrid 4y agoWho says that they don't? Microsoft has heavily invested in advertising since Windows 10. Keep in mind that Twitter does the exact same thing (locking accounts and requiring phone numbers to unlock) since a while ago and recently got caught "accidentally" using those numbers for tracking reasons. Facebook also got caught doing the same some time ago.
- throwaway67743 4y agoThey all do it under the guise of security, Google, Microsoft, Twitter etc
- tehbeard 4y agoThey certainly aren't using it to verify I am who I am.... I had them lock a MS account I made for a 2nd/alt account (Something I bought years ago to help when I made plugins and game content).. Account got immediately locked the second I tried to use the launcher for "suspicious activity, give mobile number NOW to regain access". I tried fighting it for a month, Mojang buried their head in the sand. I've even seen youtubers with multiple millions of subscribers get hit by this bullshit, with no help from Mojang. They already have the email address I associated with the Minecraft account to begin, that should be good enough...
- fifticon 4y agoThis is true, I've seen the same. In general,their takeover of MC has wrapped a lot of unwanted red tape around access to our minecraft playing.
- robertlagrant 4y agoFor anyone who knows history, this is the least surprising outcome :-)
- LoveGracePeace 4y agoAgreed. And after years of enjoying and relaxing in Minecraft, when they started this new account politics in violation of our (original player base) agreement with Mojang; I quit playing Minecraft.
- MattIPv4 4y agoAs someone who had a lot of old accounts with some pretty OG names, this whole migration process has been a right headache 'cause now I have a ton of burner Microsoft accounts ('cause each MS account can only have on MC account) and each one needed verifying.
- throwmeaway8 4y agoIf you want, you could sell your accounts, as the market's gotten bigger and prices are better for names now (unlike in 2016 when names were $50 each). What names do you have, out of curiosity?
- Avamander 4y agoWhat's even more lovely about that process is that you have to be very certain you want your MS account's name associated with your Minecraft username. Your MS account's name is automatically used as your Xbox live name. The setting to hide your Xbox live name is only available on Xboxes.
- HansHamster 4y agoThis also happened to me (twice) with ms accounts used only to log into Skype. And I just migrated my Minecraft account 2 days ago, let's see how that plays out... This just sounds to me like a "technically, you don't have to provide a phone number to create an account. Of course we will just lock it afterwards, but _technically_ it's not required..."
- jp57 4y agoIt's possible that the TOS message is boilerplate that they put up when they haven't created (and localized) an appropriate message for the real reason (or they don't want to reveal the real reason). To me it sounds like maybe they detected a successful credential stuffing attack against the accounts and locked them. That said, it sounds like their recovery process leaves a lot to be desired.
- Nextgrid 4y agoI had a gaming-only Microsoft account locked in the same way and I can guarantee you there is no successful credential-stuffing attack against it (even the username was secret, as it was random and not used anywhere else). Locking accounts for "security reasons" and requiring a phone number is a common tactic to harvest phone numbers for "growth & engagement" reasons. Twitter does that since a while ago and recently got caught "accidentally" using those numbers for tracking reasons. The security argument doesn't make sense because if they don't already have an existing phone number to compare to, they can't authenticate the newly-provided phone number - if the account was actually breached, the attacker will trivially bypass the restriction by just providing a phone number they control and take over the account anyway.
- hn2019 4y agoYeah, allowing someone to enter an arbitrary phone number is actually worse security than sending the confirmation code to the email address associated with the account.
- DarylZero 4y ago>The security argument doesn't make sense because if they don't already have an existing phone number to compare to, they can't authenticate the newly-provided phone number From a security standpoint, the point of requiring a phone number is to increase the expense of the request -- like a captcha. (Not to say that there is a real security purpose in this specific case.)
- shkkmo 4y agoThis is not a triggered action as Microsoft locks the account immediately and reliably. This isn't a recovery process as Microsft doesn't ask you to reset credentials and claims to not keep the phone number associated with the account. This is some sort of incredibily user hostile anti bot technique.
- convery 4y agoYe, companies are terrible with accounts. Found out I had made an Apple account in 2010 by getting an email that the security questions had been changed to Chinese. Reset the password to go delete the account but was not allowed to sign in without responding to the (Chinese) security questions. Tried contacting support and asked them to delete the account, from the email registered with them, noting that no one has used the account in 10 years and it was created in Sweden so it was obviously hacked. They said they are not allowed to do that, and the only option is to login with the security questions or book a time for a phonecall where I can prove my identity so they can reset the security questions..
- c-fe 4y ago> or book a time for a phonecall where I can prove my identity so they can reset the security questions I do not see the problem with this, when it comes to account deletion you want to be very careful and this sounds to me like a very reasonable offer.
- toast0 4y agoI don't see how Apple can verify identity to reset security unless they verified identity to setup the account, and as far as I remember, Apple doesn't require an identity verification to setup accounts. If the identifier is an email address, it should be relatively easy to disown an account if you control the email address.
- deleted 4y ago[deleted]
- throwmeaway8 4y agoI had a similar issue. I called them, and they allowed me to delete the account if I provided ownership of the email. I'd recommend calling them, takes a while but it works.
- mapmap 4y ago>The only way to unlock the account is to provide a phone number in order to receive a confirmation code. You can use any phone number you have access to. It doesn't need to be a unique phone number for each child.
- hn2019 4y agoAnd Microsoft could send the confirmation code to the email address already associated with the account, but they would rather create a reason to siphon more data from people.
- test1235 4y agoHas anyone come up with a disposable mobile number service, similar to how you can get a temporary email address for signing up to junk?
- encryptluks2 4y agoThey exist, but this is likely a very bad idea. Most services that I've found, once you use a mobile number with them they never really remove it and the next thing you know, they are sending some stranger SMS messages to change your password per their "secure" 2FA requirements.
- ev1 4y agoI can confirm this is a bad idea. Many many services permanently use it as some kind of fall back recovery, even after the phone number is removed and recycled and no other one is added.
- shkkmo 4y agoMS blocks most of the disposable number services.
- ushakov 4y agonot Microsoft, but i can't login into web version of VK anymore because they started requiring adding phone number to existing accounts
- matheweis 4y agoIs there an open Minecraft clone? Because this is getting kind of ridiculous…
- kache_ 4y agoactually, yes
- fartcannon 4y agoThere are numerous. https://www.minetest.net/ https://www.minetest.net/ is pretty popular.
- Nextgrid 4y agoI'm sure there are plenty of cracked launchers around, and there is no ethical issue with using those if you already paid for the software once.
- pbhjpbhj 4y agoMinecraft is the closed clone of the open Infiniminer IIRC. There are a ton of clones, but for a lot of people it's the social aspects. Putting my kids account on 'Xbox Games' (we don't have an Xbox, nor ever will I expect) for whatever bs reason we had to do that was a complete mess.
- matheweis 4y agoRight. I should have clarified further, an open/free clone that is available in the app stores and supports multiplayer.
- trollied 4y agoAuthentication and printers. The two hardest problems in Computer Science.
- prepend 4y agoAs a parent this is one of my pet peeves as so many services for kids assume/require a phone number. I’m sure it has nothing to do with me getting so much phone spam as to turn off my ringer. Microsoft has been a real jerk with the Minecraft acquisition. It would be so much better for users had notch never sold. They are increasing prices, making it harder to start, removing mod functionality, and basically just all bad stuff.
- giancarlostoro 4y agoWhats worse is if you want to find a VOIP app to have a dedicated number for these one off requirements you risk eventually not being allowed to use it due to VOIP number or whatever.
- flenserboy 4y agoWaiting for them to get rid of traditional Minecraft so they can monetize everything and lock it into Windows.
- CursedUrn 4y agoIt's been 7+ years since Microsoft bought Minecraft, I'm honestly surprised it took this long for them to do this customer hostile stuff. We had a good 5 years before they started ruining it.
- VistaBrokeMyPC 4y ago"Embrace, extend, extinguish"
- nvrspyx 4y agoI....don't see how that applies here.
- TrueGeek 4y agoI was setting up an account for my child and it insisted on knowing their first job as one of the security questions. I normally put PIN-type responses to these and record them somewhere, but it said that wasn’t a valid answer. So many of these systems just aren’t very well thought out.
- PolemicThoughts 4y agoI have a 13 year old minecraft account. I've been unable to migrate it because I don't have the transaction ID. I don't have the email (I wasn't very good at managing an inbox when I was 14), and the bank that it was bought with no longer exists, even if they had more than 7 years of records retention. I told support I can provide government IDs for myself and my father (the name on the card, presumably), but I got told, basically, to get stuffed. TID or bust. My only guess on what to do next is to try to find someone with an inside at Mojang to workaround the user-hostile process, but I've had no luck. If anyone knows how to workaround this, I'd appreciate it.
- teaearlgraycold 4y agoYou probably don’t want to reward them with extra income, but if it can at least get to the username change screen with your current account you could change your username, wait 30 days, and then buy a new account with your old username.
- PolemicThoughts 4y agoMy user name is a common real-life first name with no numbers or symbols. So, since username transfers to a specific new account are not possible, I would almost certainly lose the name to a sniper with a script. I know there's a whole industry around that practice.
- jsiaajdsdaa 4y agoBefriend someone at Mojang or get a job there lol
- ratww 4y agoThat seems like the only reasonable option these days. Got a reasonable problem with a small business, or even a bank? Just go to the nearest branch and talk with a reasonable person. Got a minor issue with a tech company? Godspeed and good luck, better find someone able to escalate the problem internally, while possibly breaking some rules.
- lgrapenthin 4y agoYes, they are doing that. Had the same experience and several of my friends also.
- tehbeard 4y agoHad to deal with this for an alt. account.... Not a lawyer, but.... Given how many children play this game.... locking access to the accounts and demanding PII from minors seems like a recipe for the EU to put GDPR to use for once...
- retube 4y agoMy kids have minecraft and it's a fucking nightmare. We lost one aged account because of login issues, and similar to the OP here, one tablet is now locked out with seemingly no way of recovery: I tried calling, emailing, signing up to xbox, but basically: fuck off, you've lost the 25 quid and all your worlds.
- 29athrowaway 4y agoFirst, Microsoft bought Mojang. Then, they developed new Minecraft games that do not support Linux, unlike the original. Finally, they require a Microsoft account to play. Well, guess what: I am not using Windows, and I am certainly not going to use a Microsoft account. Product managers at Microsoft can go all fuck themselves with a voxel torch.
- kQq9oHeAz6wLLS 4y agoUp until 1.18.30, you could play Bedrock edition on Linux using mcpelauncher. Sadly, with 1.18.30 MS switched MCPE over to their RenderDragon engine, and the mcpelauncher community has yet to find a stable workaround.
- asddubs 4y agoif you're in europe, report them for a GDPR violation
- bencollier49 4y agoI don't seem to be able to migrate any of my children's accounts, the onboarding process just fails in strange ways. Got tired of trying to make it work.
- Shadonototra 4y agoeven thought i bought the game back in the days, i still play a pirated version, 0 hassle, all the fun!
- nathanaldensr 4y agoDue to Microsoft's disgusting behavior regarding forced migrations for children, Minecraft is no longer played in my household. That's really sad, too, since it was one of very few games my entire family enjoyed. It's also the game I have the most hours in. Good job, Microsoft.
- foobarian 4y agoSame. Roblox won out in our household. It doesn’t help that multiplayer is so much harder with minecraft
- deleted 4y ago[deleted]
- xrobledo84 4y agoMicrosoft is involved in forced migration of children?
- em-bee 4y agoswitch to minetest. it's Free Software. you can host your own family server just by running the game on one machine and have everyone else connect to that. my son does it all on his own, and he invites his classmates to come over and play with him locally. there are also some family friendly public servers.
- subtra3t 4y agoMinetest is probably one of the best Foss Minecraft alternatives out there. It's incredibly stable, it works on pretty much ever piece of hardware, and to top it all off, it's ridiculously easy to mod it with Lua.
- feanaro 4y agoI don't understand requiring a transaction ID to migrate. Is that really a necessity? I almost certainly don't have the transaction ID (I haven't yet tried to migrate), but I also certainly do not expect that they can require that I supply for a successful migration. Requiring this is akin to stealing something I bought. Are people okay with Microsoft stealing from them? I'm certainly not. This sounds like fruitful ground for a class action suit, if true.
- gtirloni 4y agoThat's the thing, what business are they losing exactly? I don't think it even registers in their annual accounting.
- kmfrk 4y agoMirrors the general issue with Xbox x Microsoft x Windows integration. It's never not a disaster. Amazing to me that account management is such an unsolved problem for MS. It's also why I'm extremely reluctant to buy MS games you have to install and log in to using the Xbox/MS Games ecosystem.
- ipv6ipv4 4y agoMy son encountered the exact same issue. We've given up.
- theknocker 4y ago
- codedokode 4y ago> Microsoft that the account was locked due to activity on the account that 'violated their terms of service' What I dislike here most is that the explanation is probably a lie. If someone violated the rules then how providing a phone number can fix this? You are allowed to violate the rules if you leave a phone number? I remember a similar case. I registered email at outlook.com and after I tried to log in from slightly different IP (because my ISP uses dynamic addresses) there was a message that there was a "suspicious" activity, someone might be trying to log into my account and I must provide and confirm a phone number to access my account. I don't understand though how this can help if someone indeed had stolen my password. They could just provide their number and get access to an account. Also, Microsoft promised that they won't store my phone number. This is also strange. What's the point of asking for a phone number if you aren't going to store it? I think this also was a lie, and in fact they were storing something like a hash of a phone number and thought that this can be considered as "not storing a phone number". So basically what I don't like is the deceiving language that they use instead of being frank: we want to know your identity. They behave just like those Indian scammers who persuade people to buy gift cards.
- glatisaint 4y agoThey want a phone number to make sure you're not a spammer taking over the account.
- codedokode 4y agoThen the message about someone else trying to get access to an account would be a lie. Also it is unclear how a phone number can prove that I am not a spammer. I think that just looking at a number of emails sent would be a better metric.
- userbinator 4y agoA spammer probably has many throwaway phone numbers to use, since they are likely to care much less about companies harvesting data anyway.
- api 4y agoSounds like a dark pattern to harvest more user data, which is basically the entire business model of most of the Internet. We're getting to the point that the entire consumer computing ecosystem is one big dark pattern.
- dang 4y agoCan Minecraft be played without giving MS a Phone#? - https://news.ycombinator.com/item?id=30617884 https://news.ycombinator.com/item?id=30617884 - March 2022 (33 comments) Mojang to Require a Microsoft Account to Play Minecraft - https://news.ycombinator.com/item?id=30515742 https://news.ycombinator.com/item?id=30515742 - March 2022 (143 comments) Last call to voluntarily migrate Java accounts - https://news.ycombinator.com/item?id=30278313 https://news.ycombinator.com/item?id=30278313 - Feb 2022 (105 comments)
- huhtenberg 4y ago> About a month after doing the migration while signing in to one of the Microsoft accounts I was presented with a message from Microsoft that the account was locked due to activity on the account that 'violated their terms of service' despite no one using the account since the earlier migration. I had to create XBox accounts for some PC games my kids were playing. Used unique email accounts on my own mail server. A week in got a message upon login that "Your email account was hacked" (verbatim) and then it demanded a phone number. Fucking liars.
- deleted 4y ago[deleted]
- astrostl 4y agoMigration was a total nightmare for my family too.
- kingcharles 4y agoCould you buy a SIM card with one month's PAYG on it? In the USA I have a Boost account that is only $15 for one month, no contract.
- jfoster 4y agoI've heard so many stories about people being locked out of their accounts, but I've never heard about what happens if taking legal action to regain access. How is that not a thing yet? Or does it just work so well at getting human attention that it isn't even worth writing about?
- sshine 4y agoSince Microsoft bought Minecraft, consider regular login broken. I just want to play Minecraft, not be part of your cloud solution.
- gloosx 4y agoHaha, nice try, can't login to skype since 2011, old login info I was using it with was just gone prompting me to create new MS account with the same email, no message history or contacts preserved whatsoeever
- quintes 4y agoYou’ll see the same problem with Roblox and children accounts. We’ve paid for piles of robux, I had a child account linked to my email. It no longer seems linked and cannot reset it, I’ve sent 10s of emails but only get automated responses. Gaming industry don’t care
- ghusto 4y agoI don't think this will be that useful, but for what it's worth, I had the exact same issue. My kid's account is marked as a child account, and linked to my adult account (which was a nightmare in itself, but that's another story). I don't know what I did, but I did eventually manage to get it unlocked. I basically went through every possible permutation of links, which is why I don't remember what worked. It was something to do with unlocking it from the parent account, after _re-linking_ it to my account. Sorry I can't help more than that, but at least you know it's possible now ... somehow ;) P.S. The "security" of allowing a child to link their account to anyone who asks them to enter their email address is hilariously terrifying.