Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Hi, @Ian
I'm really sorry you're dealing with this, and honestly, the closed case with no email is the part that would push anyone over the edge. Let me be straight with you about what can and can't be done, then give you the steps worth trying.
First, the hard truth: account recovery is an automated process, and support agents are not allowed to reset passwords or change account details, no matter what documents you send. If the hacker turned on two-step verification and you can't reach any of the verification methods, the form cannot override it. That's why the "we can't verify" reply comes back instantly.
What I'd do now:
Follow up on the closed case instead of starting over. Go to Xbox Support, select Contact us, sign in with your new account, choose Account & profile, I can't sign in, Compromised/hacked account, and ask for chat or a callback. Give them the case/SIR number, the date it was opened, and say you never received the closure email. Ask them to confirm whether it was actually reviewed and to re-escalate it. Also check the junk folder of the contact email you gave them, since those replies come from @ accountprotection.microsoft.com.
Resubmit the recovery form, but differently. Fill it out from a device you used before (your Windows PC or on the same network as your Xbox), at home, in a private browser window. List every old password you remember, your gamertag, Xbox console hardware ID, and purchase details. It is recommended that you change the details each time rather than resubmitting the same answers, and you get two attempts per 24 hours.
Stop the Game Pass charges now. Since you can't reach the subscription from inside the account, call your bank or card issuer, explain the account is compromised, and block or dispute the recurring charge. You can also ask Microsoft billing support (through your new account) to look up the charges by card number.
One more thing: please don't post your case number, emails, or receipt details here publicly.
I know this isn't the "we fixed it" answer you wanted. If the case follow-up or the form gives you anything new, reply here and I'll help you with the next step.