Fraudulent Distribution of Xbox Games via Account Exploitation and Unauthorized Access

Dear Microsoft / Xbox Team,

I am writing to formally report a fraudulent scheme involving the unauthorized distribution of Xbox digital games through the abuse of shared accounts and, potentially, weaknesses related to parental controls and secondary account usage.

I want to clarify upfront that I engaged with this seller in good faith, believing I was purchasing legitimate digital licenses. The Instagram account operates under the name “Juegos Digitales Legales” (“Legal Digital Games”), which strongly suggests legitimacy to unsuspecting consumers.

Description of the scheme

After completing the purchases, the seller:

Remotely installed accounts on my Xbox console.

These accounts already contained the advertised games.

I was instructed to use these accounts to install and run the games on my console.

• I immediately figured that these accounts were not owned by the end user, are reused across multiple customers, and do not represent legitimate license ownership.

Once I realized this was a fraudulent and pirated distribution method, I immediately removed all associated accounts from my Xbox and requested a refund, which was denied.

This method:

Bypasses legitimate digital ownership.

Allows the same licenses to be installed across multiple consoles.

Puts users at risk of account bans or console enforcement.

• Directly harms Xbox’s digital licensing ecosystem and Xbox Game Pass service.

Accounts used per game (for investigation)

The seller provided and installed the following accounts, each linked to a specific game:

• FC26 - [Moderator note: PII Removed]@outlook.com
• Resident Evil 4 Remake - [Moderator note: PII Removed]@outlook.com
• Halo: The Master Chief Collection - [Moderator note: PII Removed]@outlook.com
• Red Dead Redemption - [Moderator note: PII Removed]@outlook.com
• Sekiro - [Moderator note: PII Removed]@outlook.com

These accounts appear to be part of a broader pool reused across different buyers.

Seller presence

• Instagram name: Juegos Digitales Legales (@juegosdigitales.vislo)
• Website: www.vislogroup.com

Business model: Advertising “cheap original digital games” while distributing access through shared or compromised accounts

Intent of this report

My goal in submitting this report is:

• To alert Microsoft to an organized piracy and fraud operation.
• To protect other users who may unknowingly engage in this scheme.
• To help your teams assess whether this also involves a technical vulnerability or systematic abuse of account and parental control mechanisms.

Note that I tried the Counterfeit Software Report, but this form cannot be submitted for some kind of bug.