On Friday my daughter woke up to two emails in her gmail account, on her mobile phone, from what looks like a genuine Microsoft support email address. The first states a process has started to take over account (email address here with some asterisks to disguise which we are not immediately familiar with), by a completely new email address with nothjng blocked out. The second email states new app(s) have access to your data. She clicked on a link from the first email for “if this was not you” however this proved useless and we could not gain access.
The confusing thing is we have both only used a Microsoft account through work and uni. We had recently struggled writing CV’s and cover letters using Google docs and had been saying how we should bite the bullet and pay for an account.
Fast forward to a couple of hours later, I receive on my mobile phone (not my daughters) a text from my bank (also genuine as attached to a thread of old messages from the Halifax). This text contains a passcode with a message saying not to give to anyone who calls, and is for £299.98 to Microsoft. I open and read the message, do not receive any calls asking for the code, do not leave my phone unattended (my daughter is not a thief, liar nor has any interest in Xbox) and check the banking app straight away. There I see two transactions for £299.98 each for XBOX!
I call the bank straight away and explain what happened. I initially tell the fraud agent that we do not have a Microsoft account or an Xbox. She searched my banking history and found two other transactions to Microsoft, advised that the transactions were authed by a passcode, then announced “based on the information given to me today I cannot refund this” and that was the end of that.
After the panic and adrenaline dies down I chat to my daughter and we study the email mentioned in the first email with the asterisks and deduce this could be a genuine Microsoft account from some 13 years ago when she did indeed have an XBOX.
We can’t get the Microsoft account back, the bank seem to think I made the transaction - until I got upset and angry, they finally agree to refund as the £600 drains my overdraft and I’m utterly screwed, and they advise it’s temporary and if Microsoft contest the charge back they will have to charge me again at a later date.
I am gutted and terrified of either Microsoft contesting or it all happening again. One agent at the bank advised it’s rare but could be a phone clone, and advised I order a new sim which I have done. This feels unlikely though as surely other things would have happened by now?
Does anyone know how someone could gain access to the passcode text? Again, I did not give the code to anyone simply read the text. No one else had access. Please help me understand what has happened, and does anyone know what else I can do as I feel helpless. I have reported to Action Fraud Police but don’t have much hope.
Thank you so much for reading so much! I appreciate any advice.