In recent months, many Xbox users have reported receiving suspicious text messages about their Xbox accounts.
These messages claim that someone is interested in buying their account and reference a website called XboxCost.com.
At first, the offer seems attractive but, this is a scam that can steal your personal information. If you’ve received one of these messages then it’s important to understand this scam, how it works, and how to protect yourself from falling victim to it.
Scam Overview
The XboxCost.com scam targets users by offering to purchase their Xbox accounts at an attractive price. Victims are directed to visit a website that supposedly values their accounts and offers a deal. Once users interact with this website, they are directed to a path that puts their personal and financial information at risk.
The scam often begins with a text or direct message (DM) on platforms like Instagram. The message reads something like:
“Hello, I checked your Xbox account value on XboxCost.com and would like to buy it at that price. DM me on Instagram. If you don’t like the value, I might have a better offer.”
This simple message attracts people to their Xbox account and is worth something, including their interest. However, the real purpose of the message is much more threatening.
How Does XboxCost.com SCAM Works?
The XboxCost.com scam starts when you receive a message from an unknown account or a hacked social media profile, through a text message. The scammer claims they have checked the value of your Xbox account on XboxCost.com and are interested in buying it for a certain price.
They even offer a better deal if you aren’t satisfied with the value they mention. They want to make you curious and enable you to visit the website, where the scam begins.
When you visit XboxCost.com, the site looks professional and trustworthy, making you believe it’s legitimate. You’ll be asked to enter personal details, like your email or Xbox login information, to check your account’s value.
This request seems harmless, but it’s a setup. By asking for your credentials, the scammers trick you into sharing sensitive information, which they can use later.
After you enter your information, the website redirects you to a broken page or blocks you from continuing. This phishing tactic collects your details even if nothing happens on the website afterward.
The scammer now has your Xbox login details and possibly your email credentials. This gives them access to your Xbox account and any other accounts tied to that email, such as banking or shopping accounts, putting more of your personal information at risk.
Also, users report being redirected to fake login pages, usually for Google. These pages look identical to the real ones and ask for your Google login information. If you enter your credentials, the scammer controls your Google account, which can contain everything from emails to personal documents and linked services.
Once scammers have access to your Xbox account, they can lock you out by changing the password and security settings. With full control, they can steal your in-game items, or even sell your account on black market websites.
Since many Xbox accounts are tied to personal details like emails and credit card information, the scammer can use this data to commit identity theft or sell it to other criminals.
What To Do If You Fall For XboxCost.com SCAM?
To avoid falling victim to the XboxCost.com scam or similar phishing attempts, you should follow these steps.
- If you receive a message offering to buy your Xbox account, don’t respond. It’s highly likely to be a scam.
- Never click on links from unknown sources or sites that claim to “value” your gaming account. Stick to official websites for any transactions.
- Do not share your Xbox login details, email credentials, or any other sensitive information with anyone online, especially if they ask for it unsolicited.
- Enable 2FA on your Xbox account, email, and any other accounts. This adds extra security by requiring a second form of verification before anyone can access your account.
- If you receive a message like this, report it to Xbox or Microsoft support, as well as the platform where the message originated (e.g., Instagram). This helps prevent others from falling for the scam.
Jason Thomas is a Computer Science student specializing in AI & ML, dedicated to safeguarding individuals from online threats. Passionate about exposing internet scams, Jason spends his free time identifying and reviewing various fraudulent activities and unethical materials. With a unique blend of theoretical knowledge and practical application, he is a valuable contributor to the fight against online fraud. His commitment to technology and programming fuels his mission to protect people from scams and enhance internet safety for everyone.