Turn on two-step sign-in everywhere
- Steam: the Steam Guard mobile authenticator in the Steam app. It also protects trades.
- PlayStation: 2-step verification, by authenticator app or text message, in account security settings.
- Microsoft / Xbox: two-step verification with the Microsoft Authenticator app. This covers Minecraft too.
- Epic Games: authenticator app, text or email codes, in account security settings.
- Battle.net: the Battle.net Authenticator in the mobile app.
- Riot: email-code sign-in for VALORANT and other Riot games.
An authenticator app is safer than text messages, because SIM-swap fraud can intercept texts.
The tricks that work on gamers
- "I reported you by accident." A stranger says they reported your account in error and gives you an "admin" to contact. That admin then asks for your login. Real platform staff never contact you through friend requests.
- Free currency. Any site promising free V-Bucks, VALORANT Points or skins in exchange for your login or a "verification" download is phishing.
- Fake tournament or vote links. Links in chat asking you to sign in to "vote for my team" lead to cloned login pages.
- Trade pressure. Anyone rushing a trade, asking you to trade outside the official system or to "hold" items for them is setting up a scam.
If it happens
- Change the password from a device you trust, and sign out of all sessions.
- Turn on two-step sign-in if it wasn't on, and check the recovery email and phone number.
- Remove saved payment methods and contact the platform's support team.
- Tell your bank if a card was used, and change any other account that shared the password.
For more on paying safely, see gift cards and prepaid codes.