TL;DR: someone managed to add a stolen credit card and shipping information to my #microsoft account, ordered $160 worth of digital xbox gift cards, and redeemed those cards this morning.
There are no suspicious logins on my account, and I have verification and 2FA turned on.
Microsoft not only does not care, they also claim that any unauthorized activity on a user's account is the user's responsibility.
So that's fun.
Sigh. I had such high hopes for productivity this morning.
Thanks to my fediverse friends for talking me through how to deal with this!
@DrTCombs Back in the 1920s, Messrs Ilf & Petrov famously wrote that "rescuing a drowning person is the responsibility of said drowning person".
@DrTCombs this reminds me of the time when we logged into our Comcast account, we got someone else’s account info.
Comcast just told us to create a new account.
Simply refused to understand that we could control the other person’s account.
@jonathankoren @DrTCombs I'm going through this with tiktok at the moment. I have access to someone else's account because they accidentally signed up with my address. Tiktok won't do anything about it because of their privacy policy. Thouhh thry will tell me how to delere an account. *eyeroll*
I did check there's no payment methods set up there at least!
@DrTCombs I'm very interested in how they were able to add a credit card and billing address to your account without (apparently) being able to sign in.
My main worry for you is if/when the likely stolen credit card is reported your account will be the one that gets suspended. If you have anything important through that account I'd be sure to take some backups if you can.
@DrTCombs Did you get an email with an order number?
I'm wondering if they did a checkout as guest. I can't figure out what conditions allow you to checkout as guest, but they I saw they have this separate lookup for guest orders
https://www.microsoft.com/en-us/store/guest-order-lookup?rtc=1
@wesley
Yep, I found out about the purchase due to an email confirmation, with order number.
I logged into my Microsoft account through a different browser and sure enough, the order was there
@wesley
Same. Thankfully it's not an account I have any use for (and even less use for now).
I've filed a police report with my local PD, both in the hopes of covering my own ass and somehow helping the woman whose credit card appears to have been stolen.
We'll see.