A game account recovery checklist should begin with the account provider's official recovery page, secure the linked email, preserve evidence, and strengthen sign-in controls after access returns. Do not send a password, passkey, backup code, or verification code to anyone who contacts you.
Stabilize the email and device first
If the sign-in email may also be compromised, recover that mailbox through its provider before relying on reset messages. Use a device you trust, install pending security updates, and scan it when malware is a realistic possibility. Microsoft advises scanning a compromised device before changing the Microsoft account password, then checking account settings after recovery. See Microsoft's compromised account guidance.
Write down the account ID, linked email, approximate last successful sign-in, purchase receipts you already possess, and any provider emails about changes. Preserve those messages rather than replying to a suspicious sender. Avoid repeated guesses that could trigger a temporary lock.
Use the provider's recovery route
Open the provider's support site directly instead of following an unsolicited link. PlayStation says users with email access can choose Trouble Signing In and Recover Your Account, while users without email access should use its Online Assistant. It also directs people who notice an unrecognized sign-in ID, online ID, or password change to support. See PlayStation account recovery.
Complete only the questions the official flow asks. Accurate historical details are more useful than invented answers. If support requires a case, record the case number and communication channel. Do not pay a third party to bypass recovery or ask someone to impersonate the account owner.
Review activity after access returns
Change the password to a unique one and secure the email account with its own strong sign-in method. Review profile details, connected devices, authorized apps, subscriptions, payment methods, and recent transactions. PlayStation's compromised-account guidance recommends changing the email password first when an account-change message is unrecognized; it also tells owners of a stolen console to sign out all devices, deactivate consoles, and consider removing payment methods. See PlayStation's compromised account steps.
If a charge is unfamiliar, compare it with transaction history and recurring subscriptions before using the provider's refund or fraud route. Preserve dates and identifiers, but do not publish receipts or payment details in a community forum.
Harden access and document completion
Enable the provider's current multi-factor or passkey option, regenerate exposed backup codes, and store recovery information somewhere separate from the console. Remove devices or sessions you do not recognize. Confirm that the linked email and phone belong to the owner and that no forwarding or recovery destination was added without permission.
Finish by signing out and back in once on a trusted device, verifying purchases remain available, and recording the recovery date. If access or ownership is still disputed, keep the case open with official support rather than repeating destructive resets.
Sources
- How to recover your account for PlayStation — PlayStation
- Phished accounts and unauthorized charges — PlayStation
- How to recover a hacked or compromised Microsoft account — Microsoft