Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
To address unauthorized Microsoft charges, follow these steps:
- Check what the charge is for
Go to the Manage your payments page of the Microsoft account dashboard and select Investigate next to the charge. This helps identify whether it’s a subscription, app/game, in-app purchase, or another Microsoft service. See details in How to investigate a billing charge from Microsoft. - Common reasons for unexpected charges
When a charge looks unauthorized, it is often due to:- A Microsoft subscription with recurring billing turned on (for example, Microsoft 365).
- Someone in the household (family member/child) using the payment method on a Microsoft account.
- A previously declined charge that was retried and then succeeded.
- A pre-order or split order that has now shipped.
- In‑app purchases from apps or games.
- If the purchase is accidental or unauthorized
- For accidental or unauthorized purchases from Microsoft Store, request a refund via the guidance in Returning items you bought from Microsoft for exchange or refund.
- If a child or family member used the card, review and track their purchases and set up spending controls so they must ask before buying.
- If account compromise is suspected
If there is any sign someone else is using the Microsoft account:- Follow the steps to recover a hacked or compromised Microsoft account.
- Then follow guidance on how to help protect your Microsoft account (for example, updating password and security info).
- Prevent future unauthorized charges
- For Windows 11/10 Microsoft Store purchases, require a password at checkout by turning off Purchase sign-in in the Microsoft Store app settings on each shared device.
- On Xbox consoles, set Ask for my passkey to make purchases so a passkey is required for every purchase.
- For children’s accounts on Windows/Xbox, configure Microsoft Family spending limits so they must request approval before purchases.
- If the charge is clearly fraudulent on the card itself
- Contact the bank or card issuer to report the transaction and ask about a chargeback (transaction reversal) if the payment truly was not authorized.
- Repeated misuse of chargebacks can be considered fraud, so use this only when the payment is genuinely unauthorized.
- If the charge is for Azure usage
For unexpected Azure charges, review the invoice and Cost analysis, check who owns the resources, analyze audit logs and permissions, and if still unclear, create an Azure billing support request (billing support is free) so a billing engineer can investigate.
References: