apparently there is a group calling itself the "xbox support club" that is sending messages to users claiming that suspicious activity on accounts is being monitored and in order to prevent unauthorized access the email and password for the account is needed to secure the account.
obviously, we need to discourage users from falling for such a scam.
xbox employees will never ask for password information for any reason. please don't fall for this!
