A hacked gaming account is a time-critical incident. The longer you wait, the more an attacker can do: trade inventory items, spend wallet funds, change account details to impede recovery, or use your account to scam your friends. This guide provides platform-specific recovery steps for the most common gaming accounts, in the correct order of execution.
First Actions -- All Platforms
- Change your account password immediately from a clean device. If the attacker is actively in the account, a password change revokes their session in most cases.
- Check and secure your associated email account -- if the attacker controls your email, they can reset your gaming account password at will. Change the email password first if there is any indication it was also compromised.
- Log out all other sessions -- available in account settings on most platforms.
- Enable or strengthen 2FA if not already active.
- Contact platform support to report the compromise with as much detail as possible about what happened and when.
Platform-Specific Recovery Steps
| Platform | Recovery page | Key step |
|---|---|---|
| Steam | help.steampowered.com | Deauthorise all devices in Steam Guard; check for API keys; use account recovery form with original payment info |
| PlayStation | playstation.com/en-gb/support | Change sign-in ID via PSN Account Security; contact PSN support for wallet fraud |
| Xbox | support.xbox.com | Microsoft account recovery; review security alerts at account.microsoft.com/security |
| Epic/Fortnite | epicgames.com/help | Manual Verification process; request purchase reversal for V-Bucks fraud |
| Discord | dis.gd/support | Token invalidation via password change; revoke all authorised apps; alert server members |
| Twitch | help.twitch.tv | Change password and email; revoke connected apps; check for fraudulent subscriptions |