A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For accounts taken over by a scammer and used for Xbox/Microsoft purchases, there are two separate issues: recovering the compromised Microsoft account and addressing the money already spent.
- Attempt to recover the hacked/compromised account
- Use the official recovery/sign-in helper for compromised Microsoft accounts: the tool asks for the email/phone and then either provides self‑help or a path to an agent. See the guidance in How to recover a hacked or compromised Microsoft account and start from the provided “Start” link there.
- If normal sign‑in and recovery don’t work, submit the account recovery form (as described in the Q&A references). Provide as much accurate information as possible (old passwords, services used, approximate purchase dates, etc.). If the automated process cannot verify ownership, the account may not be recoverable.
- If the account cannot be recovered
- As described in the Q&A content, once a personal Microsoft account is fully taken over (email/phone/security info changed) and recovery fails, it is treated as unrecoverable. Community forums and general support channels cannot override the automated ownership checks or manually transfer ownership of that account.
- There is no supported process in the provided guidance to “move” or re‑grant all previous digital purchases (games, subscriptions, etc.) from a compromised/unrecoverable account to a new Microsoft account.
- Addressing unauthorized charges and subscriptions
- For unauthorized Xbox/Microsoft Store charges made with a card:
- Immediately contact the bank/card issuer to report fraud, request chargebacks, and, if needed, cancel/replace the card. This is explicitly recommended for unknown Xbox purchases.
- The bank can block future Microsoft/Xbox charges on that card and issue a new card number.
- On the Microsoft side, the guidance is:
- Investigate unexpected charges and, where applicable, request refunds for qualifying purchases or subscriptions. For digital games and apps, see Get a refund for apps and games purchased from Microsoft Store and, for Xbox specifically, follow the “Request a refund for digital games” path mentioned there.
- For subscriptions or recurring billing (e.g., Xbox Game Pass), use the refund/cancellation guidance in the Q&A references and the linked subscription refund article.
- Note that digital goods (apps, games, add‑ons, subscriptions) are generally non‑refundable unless the offer or applicable law provides otherwise, as stated in the Microsoft Store refund policy.
- For unauthorized Xbox/Microsoft Store charges made with a card:
- If someone else is using the account but it is still accessible
- If sign‑in is still possible, follow the compromised‑account guidance: change the password, review security info, and secure the account using the official recovery article.
- For Xbox specifically, to prevent further unauthorized purchases from the console, configure it to require a passkey/password for every purchase:
- Press the Xbox button → System > Settings > Account > Sign‑in, security & passkey.
- Select Change my sign‑in & security preferences.
- Choose Customize.
- Select Ask for my passkey to make purchases.
- Set Passkey required.
- Going forward (for affected users creating new accounts)
- Enable stronger security on any new or existing Microsoft account (e.g., strong unique password, additional verification methods) using the compromised‑account guidance.
- Monitor billing and orders regularly and act quickly if suspicious activity appears.
The available documentation and Q&A content focus on: using the official compromised‑account recovery flow, working with the bank for fraud on payment cards, and using Microsoft’s standard refund and subscription‑cancellation processes. They do not describe a supported path for Microsoft to systematically refund all prior digital purchases from a permanently lost account to a different account.
References:
- How to recover a hacked or compromised Microsoft account
- Get a refund for apps and games purchased from Microsoft Store
- Prevent unauthorized purchases from Microsoft Store
- My credit card is being used by an unknown person to buy Xbox pass. How do I cancel the monthly payment? - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A