What to Do If Your Xbox Live Account Is Hacked

Immediate Steps

1. Change password at account.microsoft.com/security. Use a unique 12+ char passphrase.
2. Enable 2FA (Two-Step Verification) → Authenticator app (Microsoft Authenticator, Authy) preferred over SMS.
3. Check recent activity → "Sign-in activity" for unknown locations/devices.
4. Remove unknown devices → "Security" → "Manage trusted devices."

Contact Support

• Request a account recovery via Xbox Support (chat/callback).
• Provide: original email, billing history, console serial numbers, Gamertag history.

Secure Your Ecosystem

• Change email password (if same/reused).
• Scan PC/phone for malware (Malwarebytes, Defender).
• Never share login codes or "verification links" from strangers.

Prevention

• Unique password per service (password manager: Bitwarden, 1Password).
• 2FA on **everything** (email, social, banking).
• Phishing awareness: Microsoft never asks for password via email/chat.

If financial fraud occurred, contact your bank and file an IC3 complaint.