Someone Else Is Using My Xbox Account

About 15 years ago, I moved in with my boyfriend's sister. I broke up with him, still lived with her, she got married, I lived with them, then moved out.

Anyway, during the span of those 5ish years, I had two Xbox 360's. Neither of them RROD'd. 10 years ago, I moved out. 6-7years ago I got an OG Xbox One with Kinect. Then I got a Xbox One X.

I still have the two Xbox One's, but I left a 360 with my old housemate/her husband.

A year ago, purchase receipts are being sent to my email account, and random CoD achievements are pinging on my gamerscore.

I've never played a CoD, and all of the purchases are on 360 games. I went into account billing, and there's this random credit card with an address 300k's from me.

I looked up their name, and they run a charity for… Something. Can't really remember. The government charity register, and their address matches.

Anyway, I read in another thread that you can get an Xbox locked if fraudulent stuff happens.

I feel shitty, because I think my old housemates sold my Xbox 360, and didn't create a new account.

I don't mind someone that does good stuff for the community getting access to my digital backlog.

But I'm pretty sure it's their kid using my account. I have almost 20 years of Xbox stuff attached to my account (or however many years Live has been around), and I worry if I contact them. They'll try to hijack my account if I change my password.

I've reached out to my old housemates, only to discover they're divorced (I feel old now) and it's super awks to ask.

I just got a Series X, with another on the way (present for my nephew's) all ordered under the same Microsoft account I've had since my MSN/Hotmail years.

So the question, do I raise the issue with MS, or reach out to the random credit card name/address that shows up in my billing information?

I hate the idea of them losing the dlc purchases they made… (But who wants Force unleashed DLC at this point?)

Edit: I worry about my current consoles getting locked.

Comments

  • +9

    Dude you have got to get your account back in your control and away from whomever is using it. Your intentions are nice but if you've got 20 years worth of stuff and are still using the account, definitely take it back.

    It would be nice if you could find a way to contact them and maybe refund them the dlc (LOL at the who wants Force Unleashed DLC), but even then it's strange they kept using your account and even stranger that Ms hasn't asked for a password in 10 years, or that you haven't changed your password in 10 years.

    Also, if you ever plan on playing a 360 game on your Series X (You never played any bc games on your One?), it would sign out the kid playing on your old 360, so in that regard alone it's best for both of you to have your own accounts.

    It must be a kid, who else would be using a 360 these days and not know how accounts and achievements work. And if they do then they are purposely using your account and probably testing the waters to see what they can buy. But if it is a kid who doesn't know how everything works, would be a bit heart breaking for them to lose out on games, friends, saves etc.

    I'd definitely recommend taking it back and if you feel bad, maybe find a way to contact them.

    • +2

      See, I wondered about the password thinkg.

      I haven't changed my password, and have had auto-sign in on. Since game-share, I've changed 3 consoles to home sign in, and none of them asked for the password except for the first login. Same with switching phones for GP streaming etc.

      I hate the idea of being an (profanity) about this, but I really am not going to reimburse them for CoD/Force Unleashed stuff.

      I'm hoping if I change my log in details, it'll force all the consoles to log in with an updated password.

      But then should I contact the person who has their credit card attached? It feels gross., And awkward. Like when having to point out that someone's fly is undone, and you can see brain.

      Edit: played heaps of BC, FF X-XIII are my staples

      • Yeah the password thing is definitely strange, I jump on my 360 every now and again and it asks for my email and password on a regular basis. I don't have any official info but from my experience I feel like if the 360 or even the One have been offline for a certain period of time, it triggers a prompt asking for credentials. Maybe your account and 360 were being using very consistently, but even then it's actually amazing its lasted this long.

        As someone mentioned below, it's weird how they would add in cc details to an unknown account, must have been a kid who doesn't know how the accounts work, and just asked their parents if they could buy something. The parents must have assumed it was their kids account and such. It would be beneficial to them if you removed their details from your account.

      • Also yeah I do the game share thing too, and have changed a few home Xboxs, I don't think this has any impact on the 360.

        Also be sure to make sure you have access to the recovery email and know the secret questions and answers, just incase ms lock your account, they will ask for this.

        And as mentioned below you can log your account out from devices, although I'm not sure it applies to the 360, but give it a try.

        Good luck, be sure to let us know how you go!

        (Maybe send them a letter explaining everything)

  • +3

    contact ms and try to get it resolved! whoever has put in cc details into a random account is dumb af you are doing them a massive favor

  • +23

    Change the password.

    Then boot out all devices

    https://support.microsoft.com/en-us/windows/manage-devices-u…

    Do this now. Don't wait.

  • +1

    looked up their name, and they run a charity for… Something. Can't really remember. The government charity register, and their address matches.

    I feel shitty, because I think my old housemates sold my Xbox 360, and didn't create a new account.

    If it ended up at a charity, then doubt they 'sold' it, more donated it.

    Either way, as above, change the password, remotely log out all devices.

    This will force the charity to setup a new account etc but better for them to do that than you to have your account banned.

  • +3
    1. sign out from all devices (unlink the device in question)

    2. change password

    3. add 2 factor authentication

    4. make you own console as "home" console

    • +3

      Yeah just pull the pin. But make sure the squatter doesn't have any leftover info in your account they can use to claw it back.

      Feel soz for the kid though.

Login or Join to leave a comment