Risk: Elevated

Warning, gamers! How criminals steal accounts

Category: Consumer warnings · Published: 21/07/2026 · Last updated: 22/07/2026

Summary

What is this about? Current fraud case, reported by Watchlist Internet. See linked source for details.

Who is affected? Consumers in Germany.

How high is the risk? Elevated

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.

How the scam works

You come across an enticing gaming website that, for example, calculates the value of your inventory or promises free skins or free currency.
You are prompted to log in there with the username and password of your real gaming account.
The criminals use these credentials to immediately log into your real account with the game provider.
The game provider then sends you a security code by email.
The fake site asks you to enter this code – supposedly to perform the alleged service.
In reality, however, you are confirming an account change (e.g., changing the email address on file).
The criminals take over your account and gain full access to your content and payment details.

How to recognise it

Third-party websites that promise free skins, free currency, exclusive perks, or an inventory value calculation.
Logging in with your real gaming account (e.g., Epic Games/Fortnite) on a site that does not belong to the official provider.
After login, the site requests a security code that was sent to you by email.
The email states that the code is intended not for a login but for an account change.
After entering the code, a different email address is suddenly on file in the account.
The websites look legitimate at first glance but use well-known game brands and terms as bait.
A prize without participation or a "free" offer that asks for your data
An upfront payment for "fees/taxes" is demanded

How to protect yourself

Enable two-factor authentication (2FA) on your gaming account – preferably using an authenticator app.
Do not log in to third-party websites with your real gaming account and check URLs carefully.
Read every email containing a security code carefully: Check whether the code is intended for a login or an account change.
Regularly check which apps and websites have access to your account and remove any unknown connections.
Use a unique, strong password for each account and secure your email account with 2FA as well.
If you suspect fraud, preserve all evidence (e.g., screenshots of the fake site and the emails) before deleting anything.

What you should never do

Do not enter any security code sent to you by email from the game provider on a third-party site.
Do not log in with your real gaming credentials on unknown or external websites.
Do not blindly trust offers such as free skins, free currency, or alleged inventory value calculations.
Do not react hastily or change anything in your account before reading the exact wording of the code email.
Do not delete any evidence (emails, screenshots, chat histories) if you have already fallen for the scam – you will need it for support, your bank, and a police report.

Frequently asked questions

Do I have to pay if my gaming account was stolen?

The scam targets the account itself, not a direct payment to the criminals. However, if stored payment details are misused, contact your bank immediately and have any suspicious charges investigated.

What happens if I entered the security code on the fake site?

You have most likely confirmed an account change (e.g., a new email). The criminals can now reset your password and take over the account. Change your password immediately via the official site or app and secure your email account.

How did the scammers get my data?

They did not steal your data beforehand. You enter your username, password, and security code yourself on the fake site – that is exactly what the scam is designed to exploit.

How do I get my account back?

First, try to change your password directly via the official website or app. If you no longer have access, use the official account recovery process or contact the game provider's support.

Should I file a police report?

If there is financial damage or misused payment details, filing a report is advisable. Contact the police and preserve all evidence beforehand, such as screenshots of the fake site and the emails. Your local consumer advice centre also offers initial guidance.

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

22/07/2026Description updated
21/07/2026Warning added from an official source