My sons xbox luve has been hacked and sending verify email to unknown email address

Hello Theresa, this is Manuela. I'm an Independent Advisor and community user like you, ready to assist with this.
Not a Microsoft employee.

I'm sorry to hear that your son's account has been compromised and that you're not able to verify the account ownership.

In this situation, the best option is trying to recover the by using some other methods available in the Microsoft interactive guide below:

https://support.microsoft.com/account-billing/h...

As a reminder please notice that no one at Microsoft support can view or change the account details for you, this is for security policies.

You know the email and the password for the account?

or

Just the Email?

If you know both is it wanting you to verify the email address as a valid email?

Or

Have you forgotten the password for the account and when trying to recover the account it wants to verify ownership by sending an email to the email address that was hacked?

Is the email address verified? If it is verified, sign in to account.live.com and click add or change alias. There you can add a new email, make it the primary alias and removed the hacked email address. If it is not verified, but you know the password,
sign in to verifyme.microsoft.com and when it says your email hasn't been verified it will give you an option to change the email address you sign in with.

Thanks for your help. We are signed in with my email. We clicked new and entered my son's email and this is what we got when we tried to verify:

Incorrect email address

The Microsoft account that you signed in with is not the email address that needs verification. To verify the correct email address, follow the instructions in your verification email message, and then sign in with the email address referenced in that message.

Just so that I am understanding correctly.

1. Your son setup a MS account with an email that was 1 digit off of a real email. Is this email a MS server email (outlook, Hotmail) or is it a like gmail, yahoo email?

Normally when a Non MS server email is setup it requires verification that you have access to that email. by sending an email with a link to that email address to verify that you have access to the email address. IF this never happened this is more than
likely what is happening.

2. When your try and sign into the account at account.microsoft.com it is wanting you to verify the email address?

Do this and see if this helps.

Go to account.live.com/addassocid

Sign into the account by typing in the wrong email address and the password that your son set up with the account.

This should bring up a page that wants to send the verification to the email to verify it again.

There should be a link that says that you do not have access to that email and should allow you to change the email that is linked to that account. You should then be able to add a new email to the account so that you can add a different email as long as
it is NOT currently used on any other MS account.