EA Forums Online Security Newsletter - Volume 2/ 2026

I've been trying to use my limited brain power to come up with an interesting common scam that's used for gaming, as there are some really strong examples already, and I didn't want to reiterate one that has already been posted. Hopefully, this idea hasn't been mentioned already and is mildly interesting.

Account Recovery/Rank Up/Unban Scams:

While I thankfully don't see it very often, I have come across this in the wild, and there are seemingly a few different "flavours". 

In essence, this scam is when a bad actor offers account services to people in the hopes that the account holder will hand over their login details. It can take a few different forms, such as offering to recover an account someone has locked themselves out of, claiming to be able to revoke an account ban, recovering in-game items, or offering to rank up an account and unlock items, and some of the offers can be quite tempting. After they gain access, they'll usually change the details and sell the account on or use it for cheating until it's banned. Moreover, they'll potentially be able to access payment details and might even be able to get into connected accounts, so the damage can quickly spread from a gaming account to other areas and accounts.  

Fortunately, many people will realise that handing over sensitive information to someone who contacts them out of the blue isn't a good idea, but as with most scams, fraudsters wouldn't bother if it wasn't worthwhile. I could definitely see younger gamers falling victim to this kind of scam with the promises of ranking up and unlocking everything on an account. 

Since it's close to a social engineering scam, the safest way to stay safe is to consider any offer of any account services to be highly suspicious. 

In case it gives anyone an idea of what kind of thing to look out for, this is a screenshot I took earlier of a scam post I reported here on the forums. It's related to cryptocurrency accounts, but the basic idea and offer is effectively the same as one targeted at a gaming account (all of the contact details should be blanked out).