Contact Xbox Support:support.xbox.com/contact-us → "Chat" or "Request a Call" → select "Account stolen / unauthorized access." Provide: Gamertag, email, purchase history (last 4 digits of card), console serial (if available).
If Payment Info Used: Contact bank — dispute charges, replace card.
Police Report (Optional): For identity theft / large fraud — creates paper trail for Microsoft escalation.