First, check billing.microsoft.com to see what the points were used for. Second, if you do believe that your account was compromised (it can't be hacked only phished) then call support and open an unauthorized access file on the account. Be aware that
you will lose access to the account while they investigate.
Did this solve your problem?
Sorry this didn't help.
Great! Thanks for marking this as the answer.
How satisfied are you with this reply?
Thanks for your feedback, it helps us improve the site.