Recover from hacked online gaming account
Online gaming accounts are increasingly targeted by cybercriminals because they often contain valuable digital items, premium currencies and linked payment methods. If your gaming account has been compromised, acting quickly can reduce further harm and improve your chances of recovering the account.
We want to better understand the impact of you experiencing this issue, can you share your experience by filling in this online form? This will help us better protect future victims.
Hacked online gaming account - Do this first!
Change your password - If you can still access your account, change your password immediately using the platform's normal password reset process. Use a strong, unique password that you have never used for any other account.
Turn on multi-factor authentication - Enable multi-factor authentication (also known as two-factor authentication or 2FA) if it is available. Many gaming platforms offer MFA (for example Steam Guard on Steam). This adds an extra layer of security and helps prevent future unauthorised access.
Change your log in details to other sites that use the same - or similar - username and password - If you have used the same—or a similar—username and password combination on other websites or services, change those passwords immediately. Cybercriminals commonly test stolen login details on multiple platforms.
Report the compromise to the gaming provider - Report the unauthorised access through the gaming platform's official support or account recovery process.
The provider may:assist with account recovery
secure your account
preserve evidence that may assist with investigations
reverse unauthorised changes where possible
Approaches to dealing with a hacked online gaming account
Follow these steps now you have changed your password and turned on two-factor authentication:
Check your account security settings - Check your account's security settings. Where available:
review recent login activity
check connected devices
review linked applications
remove any devices or applications you do not recognise
If you identify suspicious logins, save screenshots showing information such as:
date and time
IP address (if shown)
browser
device type
location (if available)
These may be useful if the provider or law enforcement requests evidence.
Scan your devices for malware - There are several ways your login details may have been compromised, including:
password reuse following a previous data breach
phishing scams
malware
someone observing your password
sharing your password with another person
Run a full malware scan on every computer, phone or tablet you use to access your gaming account using reputable security software. Remove any malware that is detected before using the account again.
Review account activity - Check what happened while the attacker had access.
Look for:unauthorised purchases
changes to account settings
changes to linked email addresses or phone numbers
deleted friends or contacts
in-game trades or transfers
downloads or marketplace activity
Take screenshots of anything suspicious.
Set up account recovery options - If you have not already done so, add or verify:
a recovery email address
a recovery phone number
This makes recovering your account much easier if it is compromised again.
Consider what information was exposed - Think about what information the attacker may have been able to access, including:
private messages
saved payment methods
personal information
contacts or friends lists
Take steps to reduce any further risks, such as removing saved payment cards or changing passwords on other affected accounts.
Warn your gaming contacts- If the attacker may have contacted your friends or gaming contacts while using your account, let them know. Advise them not to trust any recent messages from your account and encourage them to remain alert for scams or phishing attempts.
If you are locked out - IIf you no longer have access to your account:
follow the gaming provider's official account recovery process
submit proof of ownership if requested
keep copies of all communications with the provider
do not attempt to use unofficial recovery services or individuals claiming they can recover your account
Links to online gaming provider guidance
Use the official support pages for your gaming platform.
Examples include:
Always access support through the provider's official website or application.
Report the crime
If money, valuable digital items or personal information have been stolen, or you believe a criminal offence has occurred, report the matter to the South African Police Service (SAPS).
When reporting the incident, take as much evidence as possible, including:
screenshots
dates and times
usernames
account names
email addresses
platform support case numbers
transaction records
payment confirmations
wallet addresses (where relevant)
messages from the attacker
Request a SAPS case number for your records.
If your bank card or payment information was used without your permission, contact your bank immediately to report the unauthorised transactions and request appropriate protective measures.
If there is an immediate threat to your personal safety, contact emergency services without delay.
How to stop your online gaming accounts getting hacked
Avoid buying or selling gaming accounts - Buying or selling gaming accounts often violates platform terms of service and increases the risk of fraud. Many scams involve convincing victims to hand over account credentials before payment is ever made.
Use strong, unique passwords - Good password practices include:
Enable multi-factor authentication (MFA) everywhere possible - Enable MFA on every gaming platform and email account that supports it. Your email account is particularly important because it is often used to recover gaming accounts.
Be cautious of phishing- Be careful when:
clicking links
downloading files
opening email attachments
responding to messages offering free skins, in-game currency or rare items
Cybercriminals frequently impersonate gaming companies, streamers and friends to steal account credentials.
Keep your devices secure - Reduce your risk by:
keeping your operating system updated
installing software updates promptly
using reputable antivirus software
downloading games, mods and software only from trusted sources
avoiding unofficial cheats, hacks or cracked software, which commonly contain malware
Donate
Your generosity makes our free support possible. Please consider giving today.
Without donations, we cannot keep our service free or provide help to the most vulnerable victims of cybercrime when they need it most. As a not-for-profit organisation, every donation goes directly towards keeping The Cyber Helpline up and running. Donate now and help us support victims of cybercrime.