They should probably call the police and file a report first. Than, if they think their profile on the xbox has been compromised, they should call support and report it as such. If it were me, i'd sign into my account on a computer and change my password
Did this solve your problem?
Sorry this didn't help.
Great! Thanks for marking this as the answer.
How satisfied are you with this reply?
Thanks for your feedback, it helps us improve the site.