Fraudulent Xbox profile on my Microsoft account

An Xbox profile cannot be transferred or separated from the Microsoft account that created it, so keep the Microsoft account and immediately revoke unauthorized access rather than trying to unlink the profile.^1^

Secure the account

1. Scan the Windows 11 PC before changing the password
   • Open Windows Security → Virus & threat protection → Scan options.
   • Select Full scan → Scan now.
   Microsoft recommends scanning first in case malware is capturing credentials.^2^
2. Review recent account activity
   • Open the Microsoft account Recent activity page.
   • Review successful sign-ins, profile changes, security-information changes, and permissions granted to applications.
   • Expand anything unfamiliar. If This wasn’t me appears, select it; otherwise select Secure your account for suspicious entries.
   The page shows significant sign-in activity from the previous 30 days, including device, application, and approximate location information.^3^
3. Change the Microsoft account password
   • Use a new, unique password not used for email, gaming, or other websites.
   • In the account’s Security settings, verify the recovery email, phone number, and authentication methods.
   • Remove any security information or trusted device you do not recognize and enable two-step verification.
   Changing the password is particularly important here: Xbox Support states that when an inaccessible console still has the profile, changing the Microsoft account password disables that console’s access to the account.^1^
4. Sign out everywhere
   • In the Microsoft account security dashboard, open Additional security options.
   • Scroll to Sign out everywhere and select Sign out.
   • Allow up to 24 hours.
   This signs the account out of browsers and apps, but does not sign it out of an Xbox console; the password change is therefore essential.^4^

Check the Xbox and billing exposure

• If the previously linked console is still available, remove your profile locally: Profile & system → Settings → Account → Remove accounts → select your profile.^1^
• In the Microsoft account dashboard, review:
  • Services & subscriptions for unexpected Xbox subscriptions.
  • Payment & billing for unknown payment methods or orders.
  • Devices for unfamiliar hardware.^5^
• Removing a console from Devices only unlinks that device; it does not detach the Xbox profile from the Microsoft account.^6^
• Cancel unauthorized subscriptions, remove unknown payment methods, and dispute fraudulent charges with the card issuer.

The profile displaying your name does not by itself establish who created or used it: the Microsoft account display name and Xbox gamertag are separate values.^7^ Recent sign-ins, order history, and activity after the password change are stronger indicators.

If gaming continues after the password change and account lockdown, contact Microsoft Support through the Contact Support option on the Recent Activity support page and report ongoing unauthorized Xbox use.^3^

References

1. Add or remove an XBOX profile
2. How to recover a hacked or compromised Microsoft account | Microsoft Support
3. Check the recent sign-in activity for your Microsoft account
4. How to sign out of your Microsoft account everywhere | Microsoft Support
5. What is a Microsoft account? | Microsoft Support
6. Before you recycle, sell, or gift your Xbox or Windows PC | Microsoft Support
7. How to change your Microsoft account name or address | Microsoft Support