Addressing a Scam That's Cost Gamers THOUSANDS

Lemon Games 0 Reputation points
2026-05-30T16:20:36.3333333+00:00

Over the past two months, a lot of people, including myself, have gotten there accounts taken over by the email "yu*****@yuy1auto.cc" and are locked out of their accounts. This just happened to me yesterday, but I already don't have any hopes because I've hardly seen anyone saying that they were able to recover it or that Microsoft/Xbox support was helpful at all. This means that instead of doing anything, like refunding to a new account or unlocking the account, Microsoft forces people to repurchase everything--games, subscriptions, and any other products they were locked out of after the takeover.

Although it's also on us for falling for the scam and not enabling anything like 2FA, Microsoft doesn't often send an email to approve or even know about new logins until something has been changed, and it's too late.

I don't care for my account itself much, but I do want my purchases refunded to a different account or something like that, and the same for all the people who were affected by the scam.

Microsoft Security | Microsoft Authenticator

1 answer

Sort by: Most helpful
  1. AI answer

    2026-05-30T16:21:01.03+00:00

    For accounts taken over by a scammer and used for Xbox/Microsoft purchases, there are two separate issues: recovering the compromised Microsoft account and addressing the money already spent.

    1. Attempt to recover the hacked/compromised account
      • Use the official recovery/sign-in helper for compromised Microsoft accounts: the tool asks for the email/phone and then either provides self‑help or a path to an agent. See the guidance in How to recover a hacked or compromised Microsoft account and start from the provided “Start” link there.
      • If normal sign‑in and recovery don’t work, submit the account recovery form (as described in the Q&A references). Provide as much accurate information as possible (old passwords, services used, approximate purchase dates, etc.). If the automated process cannot verify ownership, the account may not be recoverable.
    2. If the account cannot be recovered
      • As described in the Q&A content, once a personal Microsoft account is fully taken over (email/phone/security info changed) and recovery fails, it is treated as unrecoverable. Community forums and general support channels cannot override the automated ownership checks or manually transfer ownership of that account.
      • There is no supported process in the provided guidance to “move” or re‑grant all previous digital purchases (games, subscriptions, etc.) from a compromised/unrecoverable account to a new Microsoft account.
    3. Addressing unauthorized charges and subscriptions
      • For unauthorized Xbox/Microsoft Store charges made with a card:
        • Immediately contact the bank/card issuer to report fraud, request chargebacks, and, if needed, cancel/replace the card. This is explicitly recommended for unknown Xbox purchases.
        • The bank can block future Microsoft/Xbox charges on that card and issue a new card number.
      • On the Microsoft side, the guidance is:
        • Investigate unexpected charges and, where applicable, request refunds for qualifying purchases or subscriptions. For digital games and apps, see Get a refund for apps and games purchased from Microsoft Store and, for Xbox specifically, follow the “Request a refund for digital games” path mentioned there.
        • For subscriptions or recurring billing (e.g., Xbox Game Pass), use the refund/cancellation guidance in the Q&A references and the linked subscription refund article.
      • Note that digital goods (apps, games, add‑ons, subscriptions) are generally non‑refundable unless the offer or applicable law provides otherwise, as stated in the Microsoft Store refund policy.
    4. If someone else is using the account but it is still accessible
      • If sign‑in is still possible, follow the compromised‑account guidance: change the password, review security info, and secure the account using the official recovery article.
      • For Xbox specifically, to prevent further unauthorized purchases from the console, configure it to require a passkey/password for every purchase:
        1. Press the Xbox button → System > Settings > Account > Sign‑in, security & passkey.
        2. Select Change my sign‑in & security preferences.
        3. Choose Customize.
        4. Select Ask for my passkey to make purchases.
        5. Set Passkey required.
    5. Going forward (for affected users creating new accounts)
      • Enable stronger security on any new or existing Microsoft account (e.g., strong unique password, additional verification methods) using the compromised‑account guidance.
      • Monitor billing and orders regularly and act quickly if suspicious activity appears.

    The available documentation and Q&A content focus on: using the official compromised‑account recovery flow, working with the bank for fraud on payment cards, and using Microsoft’s standard refund and subscription‑cancellation processes. They do not describe a supported path for Microsoft to systematically refund all prior digital purchases from a permanently lost account to a different account.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.