Reporting an Xbox Live Impersonation Scam: Immediate Steps

If someone pretends to be an Xbox Support agent to steal your credentials, **act immediately**:

1. Report to Microsoft / Xbox

• In-Game/Console: Open the player's profile → "Report" → "Impersonation" → "Microsoft Employee."
• Web Form: Xbox Report Abuse Portal (select "Impersonation").
• Email: Forward phishing emails to [email protected].

2. Secure Your Account

• Change password at account.microsoft.com/security.
• Enable **Two-Factor Authentication (2FA)** — Authenticator app or SMS.
• Check **Recent Activity** for unauthorized sign-ins.
• Remove any unfamiliar "Trusted Devices."

3. Law Enforcement (If Financial Loss / Identity Theft)

• USA: File at IC3.gov (FBI Internet Crime Complaint Center).
• UK: Action Fraud.
• Canada: CAFC.
• EU: National Cyber Security Centre / Police cybercrime unit.

Red Flags: Real Xbox Support NEVER Asks For

• Password / 2FA codes
• Credit card / PayPal details
• Gift card codes ("to verify your account")
• Remote desktop access (TeamViewer, AnyDesk)
• Payment to "unlock" your account

Official support only directs you to support.xbox.com or the console's settings. Never share secrets.