well to stop it from happening never accept one of those seemingly random game invites because that will probably take you to a private game and they can hack you somehow
I accepted one person i didn't know and got hacked as a result. Now since my paypal is linked to my xbox and bank account, safe to say the cuss word cleared it out.
How did i get it stopped? I called the support line and they had it dealt with within two days which was very quick and helpful. I changed my secret password and question, deleted the guy and as MostManlyMan says, never accept anyone i don't know.
Thanfully the person was stupid, forgot to log out of my account and played fifa for a few hours, so his console ID was traceable and he's now banned from live.