Epic Games Account Hacked or Email Changed? How to Get It Back and Lock It Down

If your Epic Games account has been hacked, secure the email address on the account first, because Epic calls your email the key to your account. If you can still sign in, change your email password, then your Epic password, and turn on two-factor authentication. If the attacker changed the email to one you do not control, simply signing in is not enough to keep the account, so submit Epic's account recovery request with as much proof of ownership as you can gather.

Losing an Epic account can mean losing a Fortnite locker built up over years, a library of games, and any linked console accounts. It is also a moment when people make things worse by panicking, paying a "recovery service", or trusting a stranger on Discord. The process itself is free, and it is run through Epic's own help pages. This guide covers what to do depending on how much access you still have, how to prepare a strong recovery request, what to do afterward, and how to make your account a much harder target.

Key facts

• Epic describes your email address as the key to your Epic Games account.
• If you can still sign in, Epic's advice is to reset your email password first, and then reset your Epic password.
• If the email was changed to one you do not control, Epic says you need to submit a recovery request.
• Epic's recovery request asks for details such as an Account ID, Invoice ID, display names, previous emails and any payment methods used.
• Epic reviews the request and emails the outcome to the new address that you provide.
• After recovery, Epic advises resetting your password, turning on two-factor authentication and checking linked accounts.
• We could not find a published turnaround time for recovery requests.

Work out how much access you have

The right response depends on where you stand right now.

Step one: secure your email

Do this before you touch your Epic account. If an attacker controls your email, then they can reset any password you change.

1. Sign in to your email provider on a device that you trust.
2. Change the password to a long, unique one.
3. Turn on two-factor authentication for your email.
4. Check your recovery phone number and backup email, and remove any that you do not recognize.
5. Look at your filter and forwarding rules. Attackers sometimes add a rule that quietly forwards or deletes security messages.
6. Sign out of all other sessions, if your provider offers that option.

If you have lost control of your email too, recover that first through your provider's own account recovery tools.

If you can still sign in

Epic's guidance for a compromised account you can still access begins with resetting the password for your email, followed by your Epic password. Then:

1. Open your Epic account's Password and security section and set a new password that you do not use anywhere else.
2. Turn on two-factor authentication.
3. Check the Linked Accounts tab, and remove any console, social or other accounts you do not recognize.
4. Review your purchase history and payment methods.
5. Check for any email address changes that you did not make.

If the attacker changed the email on your account to one that you do not control, Epic says that being able to sign in is not enough to keep the account. Do not delay here. Go to the recovery request section below, since your session may end at any time.

If you can no longer sign in

Try a password reset first. If your email on the account has not changed, use the "Forgot your password?" option on the sign-in page. Check your spam folder for the message.

Try linked sign-ins. Epic says that if you have a linked PlayStation, Xbox, Nintendo, Facebook or Google account, you can try signing in through it. This could give you a way back in when your password has been changed.

Look for Epic's security emails. Search your inbox for messages from Epic about email or password changes. These can contain useful details, and they are also evidence for your request. Be cautious about clicking any links in messages, and go directly to Epic's site if you are unsure. Check the sender's domain carefully.

Do not create a new account just yet. A new account can confuse things, and it does not get your purchases back. Focus on the recovery process.

If the attacker turned on two-factor authentication

Epic has a help article about being locked out by 2FA. Once you are signed in, you can disable 2FA or change your preferred method from the Password and security section. Backup codes or email verification can get you in if you have them.

If you do not have those, and the attacker has set up 2FA on an account that you cannot get into, the recovery request route is the one to use.

Submitting an account recovery request

This is the key step for most hacked accounts. Epic's form begins by asking you for the email address that you want to use for your account from now on, and confirming it with a security code. It then asks for information which proves that the account is yours.

Gather your evidence first

The more accurate details you provide, the better. Spend a little time preparing before you fill in the form.

Search your email for "Epic Games" and for words like "receipt", "invoice" and "V-Bucks". If you bought V-Bucks through your console instead of Epic, then you may have receipts in your console's transaction history.

Filling out the form

• Use an email that you control and that is secure. Do not use the compromised one.
• Be accurate rather than creative. Do not guess at details just to fill in the boxes.
• Provide the date of your account's creation if you know it, along with your country.
• Use the same details you would have used when setting up the account.
• Submit one thorough request rather than lots of partial ones.

Epic reviews the request and emails its outcome to the new email address that you provided. We were not able to find a published timeframe, so be patient, and watch your spam folder.

A practical way to dig up your evidence

Many people assume that they have no proof, and then find plenty once they start looking. Set aside 20 minutes and try these places.

Your email archive. Search every email address that you have ever used for "Epic Games", "Fortnite", "receipt", "V-Bucks" and "verify your email". The very first message that Epic sent you is especially useful, as it can show when the account was created and which address it used.

Your bank and PayPal statements. Look for any payments to Epic Games. Note the date, the amount and the last four digits of the card. Having specific transactions is much stronger than a general memory that you spent money.

Your console's purchase history. If you bought V-Bucks on a PlayStation, Xbox or Nintendo console, that platform keeps a record. A screenshot of those transactions can help to link you with the account.

Old screenshots and clips. Captures from Fortnite or other Epic games can show your display name from a particular time, which helps if the attacker has changed it.

Friends and squad members. Ask them what your display name used to be, or whether their friends list still shows you. They might also be able to confirm the point when your account started behaving strangely.

Write everything down in one document before you begin the form, so that you are not trying to remember details under pressure.

Warn your friends

An attacker with access to your account may message your friends with scam links, or try to trade with them. As soon as you can, let your regular squad know through another channel that your account was compromised, and ask them to ignore anything unusual that appears to come from you. Doing this protects them, and they can also tell you whether anything strange happened while you were locked out.

After your account has been recovered

Epic's follow-up instructions are simple, and it is important to complete all of them.

1. Reset your password, using a new one that meets Epic's requirements.
2. Turn on two-factor authentication from the Two-Factor Authentication tab in your account.
3. Check the Linked Accounts tab and relink any external accounts you still use.
4. Report anything unusual. Epic says that if you notice any unusual activity, linked accounts you do not recognize, or if you cannot make changes to your account, submit a support ticket.
5. Follow Epic's "Securing your Epic Games account" advice.

Additionally, check your purchase history and your email settings again to be certain that nothing has been changed.

What about stolen V-Bucks or fraudulent purchases?

The Epic articles that we reviewed do not set out a specific refund process for purchases made by an attacker. Here is the sensible approach.

• Contact Epic support with the details of the purchases, once you have regained access.
• Contact your bank or payment provider if your card was charged without your permission, and ask them what your options are.
• Remove saved payment methods from the account until you are confident that it is secure.
• If the purchase was made using a console's payment system, then contact that platform's support too.

Before disputing a charge, it is a good idea to check how a chargeback could affect your account. Our guide to chargebacks on gaming platforms covers what happens on Steam, PlayStation and Xbox, and the general principle is the same elsewhere: try the platform's own process first if you have the option.

Scams that target people in this situation

If someone contacts you on social media claiming to work for Epic, treat it as a scam. Real recovery goes through Epic's own site. Never share your password or 2FA codes with anybody. Also avoid any site that promises free V-Bucks; our guide to legitimate free V-Bucks explains the few ways that really work.

How accounts get hacked in the first place

Knowing the most common routes helps you to avoid a repeat.

Reused passwords. When another website is breached, attackers try those stolen combinations on gaming accounts. This is why a password that is unique to each account matters so much.

Phishing pages. Fake sites that offer free skins, giveaways or "account verification" trick you into typing in your login details.

Malware. Fake game cheats, mods, and "free" downloads can install software that steals saved browser logins and active sessions. Our guide on free game downloads explains why this is a serious risk.

Selling or sharing your account. Anybody who has had your login can come back for it later.

A hacked email. If your email is not secure, then none of your accounts are safe.

Making your account harder to steal

Epic's 2FA options include an authenticator app and SMS. An authenticator app is generally a stronger option than SMS, since phone numbers can be hijacked through SIM-swap attacks.

Save any backup codes in a secure location that you can reach without your phone. A password manager or a printed sheet at home both work. If you lose your phone and have no backup, it can be hard to get back in, and you may end up going through recovery again.

Protecting a child's account

Children and teens are a major target for scams built around free skins and in-game currency. If your child plays Fortnite:

• Make sure that the account uses an email address that a parent can access.
• Turn on 2FA and keep the backup codes yourself.
• Set up parental controls.
• Talk about how "free V-Bucks" offers work, and about why they should never give out their login.
• Consider removing saved payment methods from the account.

For a wider look at safe spending for younger players, see our guide to gift cards for kids' gaming accounts.

If other accounts were affected

An attacker who gets into one account often tries others. Once you have secured Epic, check your other accounts too.

• Steam: see our account recovery guide.
• PlayStation and Xbox: read our hacked console account guide.
• Banking and PayPal: check for unfamiliar activity.
• Any account that used the same password: change those now.

Run a full antivirus scan on any PC you used for logins. If you suspect that malware is involved, consider changing your passwords from a different device, as a compromised machine can capture new passwords too.

Check your games and locker once you are back in

When you finally regain access, take stock before you go back to playing. Open your library and confirm that your games are still there. In Fortnite, look over your locker and your V-Bucks balance, and write down anything that seems to be missing, with dates if you can work them out. Attackers often look to profit quickly, so unusual purchases or a changed display name are common signs. A clear, dated list gives Epic's support team something concrete to investigate, and it is far more helpful than a general statement that items have disappeared.

If your recovery request is rejected

If Epic cannot confirm your ownership, do not give up immediately. Gather better evidence, such as old receipts, bank statements with matching charges, or details of linked accounts, and then contact Epic's support team again through its official help site. A calm, factual explanation along with accurate details will help you.

Unfortunately, there is no guarantee. If your account had very few identifying details, then proving ownership can be difficult, which is a strong reason to keep records from now on.

Rebuilding after a hack

If you do have to start again, or just want to make up for lost V-Bucks, don't rush to spend. Our guide to buying V-Bucks and Robux with gift cards explains how you can use store balances instead of a card.

If you would like to build up some store credit at no cost, you can register with XPReward, complete offers for points and redeem them for gift cards, starting at $25 for 3,600 points. It takes time, and offers depend on your country, but you will not need to hand over your gaming login to anybody.

Frequently asked questions

What should I do first if my Epic Games account is hacked?

Secure your email account first, as Epic calls your email the key to your account. Change that password, enable 2FA there, and then change your Epic password if you can still sign in. Submit a recovery request if you are locked out.

How do I recover my Epic account if the email was changed?

Submit Epic's account recovery request. Provide an email you control and as many details as you can, such as your Account ID, Invoice ID, previous display names, payment methods and linked accounts. Epic emails its outcome to the new address.

What if the hacker turned on two-factor authentication?

If you can sign in, you can disable or change 2FA in the Password and security section. Backup codes or email verification may also help. If you cannot get in at all, then submit an account recovery request through Epic's help site.

How long does Epic Games account recovery take?

We could not find a published turnaround time from Epic. Keep an eye on the new email address that you gave in your request, including its spam folder, and avoid sending lots of duplicate requests.

Can I get my V-Bucks back after a hack?

The Epic articles that we reviewed do not describe a specific refund process. Contact Epic support with the details once you have regained access, and speak to your bank or payment provider about any unauthorized card charges.

Can I sign in using my console account?

Epic says that if you have a linked PlayStation, Xbox, Nintendo, Facebook or Google account, you can try signing in through it. If you can sign in but the email was changed, you will still need to submit a recovery request.

Are Epic account recovery services legit?

Treat paid recovery services and strangers offering help on social media as scams. The recovery process runs through Epic's own help site, and you should never share your password or 2FA codes with anybody.

How do I stop my Epic account from being hacked again?

Use a unique password, turn on two-factor authentication, secure your email, remove linked accounts that you do not use, and avoid free V-Bucks and cheat downloads. Scan your PC with antivirus software, and keep your purchase receipts for proof of ownership.

Sources

• Epic Games: My Epic account was compromised and I cannot access it, for recovery when locked out.
• Epic Games: My Epic account was compromised but I still can access it, for steps while signed in.
• Epic Games: How do I submit an account recovery request?, for the form details.
• Epic Games: What do I do after my Epic Games account has been recovered?, for follow-up steps.
• Epic Games: Securing your Epic Games account, for account protection.
• Epic Games: 2FA lockout help, for two-factor problems.

Epic's help policies checked on 8 November 2026. General security tips reflect common practice.