Account Security Problems

How to Stop Fraudulent Microsoft Gift Card Charges

WPS Content Manager Sep 30, 2026 869 views

Question details

The user needs to stop unauthorized Microsoft gift card purchases and secure their compromised account.

How to Stop Fraudulent Microsoft Gift Card Charges

Product: Microsoft Account Billing
Device & OS: not provided
Scenario: An attacker is using the user's compromised Microsoft account to continuously purchase gift cards, even after an initial password change.
Observed behavior: Unauthorized gift card charges appear on the user's linked payment methods, such as PayPal or a credit card, due to active unauthorized sessions.

Before you start

Gather your recent financial statements and log into your payment provider's dashboard so you can quickly identify the exact dates and amounts of the unauthorized charges.

Solution 1Recommended

Secure Your Microsoft Account and Terminate Active Sessions

Lock out attackers by changing your credentials, enabling multi-factor authentication, and forcefully signing out of all unrecognized devices.

Changing your password alone may not stop unauthorized purchases if the attacker still has an active session open on their device. You must manually revoke access to unfamiliar devices.

Change your password

Sign in to your Microsoft account dashboard, navigate to the 'Security' section, select 'Password security', and update your password to a strong, unique combination.

Enable Two-Step Verification

In the 'Security' dashboard, click on 'Advanced security options' and follow the prompts to turn on Two-Step Verification (MFA) using an authenticator app or phone number.

Remove unfamiliar devices

Go to the 'Devices' tab in your Microsoft account, locate any computers, tablets, or phones you do not recognize, and click 'Remove device' to terminate their access.

Remove payment methods

Navigate to 'Payment & billing', select 'Payment options', and temporarily remove your linked credit cards or PayPal accounts to halt any immediate purchases.

Secure Your Microsoft Account and Terminate Active Sessions

Session Persistence: It can take up to 24 hours for Microsoft to fully sign out all active sessions once you revoke device access and change your password.

Solution 2

Dispute the Unauthorized Transactions with Your Payment Provider

Because Microsoft may consider authenticated purchases as valid, contacting your bank or PayPal is the most effective way to recover your funds.

Free Microsoft Office alternative

Switch to WPS Office for a Secure, Lightweight Experience

Dealing with account compromises and unexpected billing issues can be frustrating. If you want a powerful office suite without the stress of complex recurring digital subscriptions, try WPS Office. It provides an intuitive, familiar interface while keeping your documents secure and easily accessible.

1. Download the installer: Visit the official WPS Office website and click the free download button for your operating system.
2. Install the software: Run the downloaded setup file and follow the simple on-screen instructions to complete the installation.
3. Open your files: Launch WPS Office and directly open your existing Microsoft Office documents to continue your work without interruptions.

100% free core office suite with no mandatory recurring subscriptions or hidden gift card integrations.Seamlessly open, edit, and save Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Lightweight design that installs quickly and runs smoothly on both older and modern devices.Familiar user interface makes migrating from Microsoft Office effortless without any learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Why am I still getting charged after changing my Microsoft password?

Attackers may still have access through active sessions on recognized devices or linked accounts. Changing your password does not automatically log out existing sessions. You must manually remove unrecognized devices from your Microsoft account's 'Devices' page to terminate their access.

Will Microsoft refund my fraudulent gift card purchases?

Microsoft may decline the refund if the system treated the transaction as valid because the purchaser used your correct account credentials and payment details. If Microsoft support denies the refund, you must dispute the charge directly with your bank, credit card issuer, or PayPal.

How do I find out who bought the gift cards on my account?

You can check the 'Recent activity' page in your Microsoft account's security settings to view the IP addresses, devices, and approximate locations of recent sign-ins. However, identifying the specific individual is generally only possible through an official investigation by your payment provider or law enforcement.

Should I delete my payment methods from my Microsoft account?

Yes, removing your credit card, debit card, or PayPal account from your Microsoft payment options immediately stops the attacker from making further purchases while you take the time to properly secure your account.

Microsoft Office Security Issues