My son was scammed on Rocket League and lost items - what can I do about it?

I believe with in-game items, you might have to reach out to the developer Psyonix to see if anything can be done.

support.rocketleague.com

You need to sit down with your son and teach him about the golden rule of the internet, not to give out passwords to anyone.

Not an awful lot really, its like you giving your bank card and pin number to a complete stranger, them taking all of your money, and then you asking the bank if they would give you your money back.

Let this be a lesson to your son, don't give account details out to anybody...................ever.

Unfortunately, it is almost impossible to get the items back. Though what was done is against the Code of Conduct and T&Cs of Xbox.

Please report the offender to https://enforcement.xbox.com/en-US/home/howTo#sub-topic0-0

I am sorry he had to learn such a hard lesson.

Please review all of your security settings at https://account.microsoft.com/security/ and consider setting up a PIN as well, even 2FA.

for security purposes I would go to https://account.microsoft.com/security/ to review sign in activity on the account.

I would also check https://account.microsoft.com/billing/orders/ to make sure they haven't made purchases through the account.

if there is unauthorised activity there you should go to https://beta.support.xbox.com/help/account-profile/manage-account/compromised-account-solution