MSBILL.INFO.WA is heaven for Credit Card Fraud.

If your brand new credit card was charged before it even got activated, then your issue is with your credit card company,

I’m sorry but none of us can look at your account, if you had one, and we have no access to anything to do with money. You will have to deal with customer support at Xbox and your credit card company. These are the only people with access to financial transactions.

My recommendation would be to call back and ask for a supervisor who would have more advanced training in handling situations that don’t fit the norm

If it was on a credit card, report it as fraud

Just got my credit card statement through and noticed the same charges as everyone else. I'm not sure if I should be reassured that I'm not the only one who's been affected, or worried that nearly two weeks after what was clearly an organized and widespread
case of fraud there's been no statement from Microsoft advising people to check for unusual activity.

Has anyone actually received any information about what action is being taken? I'd quite like my account restored to the way it was before. As grateful as I am for the three FIFA 2012 achievements, I think I'd rather they disappeared. Oh, and I suppose getting
my money back is important too. Possibly even more important, unless I find a way to survive without purchasing food.

If only I could spend microsoft points on groceries.

If remembering passwords is a problem it's worth looking into the concept of root word based passwords. The idea behind it is you have a common word that's in all your passwords and then combine it with a unique word for each site. For example -

1. I choose my root word as Slake and then change some of the letters to numbers to get Sl8k3

2. For my XBL account I take Sl8k3 and combine it with the word Limbo (yes that's a reference to the book) so I get Sl8k3Limbo.

3. I then change some of the letters in Limbo to numbers to get L1mb0.

4. My password is then Sl8k3L1mb0.

5. I then repeat the process with other sites, continuing to use Sl8k3 as a common thread but combining it with unique words for each site.

Impossible for a hacker to guess or social engineer out of you and bruteforcing it will take years. All you need is a word that can't be linked to you personally and to jumble it up with a few numbers. Before anyone asks Sl8k3L1mb0 isn't my password anywhere,
I'm not that stupid.

@Temhotabot. I'm not blaming anyone for my account theft, and although your example of how most accounts probably get compromised and how to protect them are wise words... they do not show all the ways.

That said the victims (especially those who own xboxes) suffer badly. Safeguards set in place to prevent accidental purchases (I've read someones child or sibling have bought DLC using the account without permission) and unauthorised purchases can AND should
be brought in. If I ran my own company I would feel it my duty of care to the customer to protect their details in any way I could. If adding a small safeguard to stop account theft being rendered virtually pointless, I'd do it. Xbox victims do lose a lot
of time and a safeguard would end that, they could just change their password and be playing again immediately.

If I owned a company I wouldn't want to put up a big warning saying "The only protection this account has is a password and regardless of how that is bypassed, once it is compromised no safeguards exist. You are responsible for deciding whether or not you
want to keep your payment details here".

I'd probably hide them away in the small print but a simple safeguard would be the best option.

If renewals, and only renewals could be done without verification both sides can be happy as nobody can purchase anything once in the account and MS can still continue auto renewal without need of the account owner having to log in.