just a little warning,if you have your payment details on your xbox remove them after you have bought something.
my son had his hacked this week and because my details were on the xbox £200.00 was taken from my paypal/bank account
anyway i will get the money back in time
some info here Microsoft accused of Xbox fraud ‘cover-up’ | The Sun |News

oh and my son did not fall for pfishing scam