Accounts accumulating years of purchases, rare items and progression carry genuine monetary value, and there is a liquid market for stolen ones. Losses run to significant sums, and are frequently dismissed by people around the victim as trivial. They are not.
How accounts are taken
- Fake trading, skin or marketplace sites that capture credentials through a convincing login page.
- A message from a friend whose account is already compromised, asking for a vote, a trade, or a look at something.
- Fake support agents responding to public complaints and requesting credentials to "restore" an account.
- Credential reuse — the password was breached on an unrelated site.
What to do immediately
- Reset the password on the email account behind the game account first. Recovering the game account is pointless while the mailbox is controlled by someone else.
- Enable multi-factor authentication on both, using an authenticator app rather than SMS.
- Contact the platform's support through its official site, with purchase receipts, transaction IDs and the approximate date of first purchase.
- Remove any stored payment method and check for unauthorised charges.
Evidence that decides recovery
Platforms restore accounts to whoever can prove they are the original owner. Purchase receipts from the payment provider, the original creation email, early transaction IDs and prior support tickets are what does that. Screenshots of items are not ownership evidence. Keep receipts somewhere outside the account itself.
If money was charged
Unauthorised charges made after the takeover can be disputed with your card issuer. Where a substantial amount was stolen, it is a financial crime and can be reported to your national cybercrime authority — the fact it involves a game does not change that.