Found 2 purchases which are not mine.

To address the unauthorized purchases on your Microsoft account, you can follow these steps:

1. Cancel the Purchases: You will need to cancel the subscriptions associated with the purchase order numbers you provided. If you bought the subscriptions directly from Microsoft, you can refer to the instructions for canceling your subscription based on your account type. For instance, if you have an MCA billing account, follow the guidelines for that specific account type.
2. Secure Your Account: Since you mentioned sign-ins from various countries, it's crucial to secure your account. Change your password immediately and enable two-factor authentication if you haven't already. This will help protect your account from unauthorized access.
3. Contact Support: If you continue to experience issues or need further assistance, consider contacting Microsoft support for help with your account and any suspicious activity.
4. Monitor Your Account: Keep an eye on your account for any further unauthorized transactions and report them immediately.

By taking these steps, you can help resolve the issues with your account and secure it from future unauthorized access.

References:

• Cancel your Microsoft business subscription in the Microsoft 365 admin center
• Protect tenants and subscriptions from abuse and fraud attacks

Hello,

Are the log in activities from foreign location successful, or failed attempts? If they are failed attempts, nothing to worry about, it means security measurement is successful. If it is successful, please go through the list below for a security check and take action as needed:

https://www.outlook.com and log in, click on the gear icon on the top right to launch the settings.

Then, on the Mail tab, go to Rules. Are there any rules set up here? If yes, delete them all.

Then check the conditional format, again, if it's there, delete it.

Then, check Forwarding and IMAP, If any items are present, delete them as well.

===========

Go to https://account.live.com > Your info > Sign in Preferences. Make sure to check all the aliases here. If you don't recognize any there, delete it.

Then go to Security > Manage How I sign in, make sure all contact info is yours.

Please make sure you change your password and enable two-step verficiation.

Go to your account online, go to Devices, remove any devices you don't recognize.

Then go to Security, click on Sign out everywhere. This is meant to kill any session that's still connected. Unfortunately, this one will take 24 hours to take effect.

===============

As for orders, can you confirm, are they showing up in your account online, either under Subscriptions, or under Order History?