Epic Games account security

The steps that actually close the ways a Epic Games account gets taken — in the order worth doing them.

7 steps · about 5 minutes Two-Factor Authentication

What an attacker gets with your Epic Games account

Games Library Friends Purchases Fortnite Stats Real Name

If the account is already gone

Epic Games takes about 48-72 hours to answer a recovery request. Start it before you do anything else on this page — nothing here gets back an account somebody else is holding.

Visit Epic Support — Go to epicgames.com/help
Select Account Issue — Choose "Account" then "Compromised Account"
Fill Out Form — Provide account details and proof
Submit Ticket — Include all relevant proof of ownership
Check Email — Watch for Epic response
Enable 2FA — Must enable 2FA after recovery

Have these ready before you start. Epic Games will ask for them, and the request stalls without them:

Payment receipts (V-Bucks, games)
Connected platform accounts
Previous email addresses
Account creation date
List of friends or purchased games

Start Epic Games account recovery →

How Epic Games accounts are taken

Free V-Bucks Scams
Account Selling
Fake Epic Emails

Already lost the account? Start Epic Games account recovery → — go there first. Nothing on this page recovers an account that’s already gone.

The checklist

critical

Turn on two-factor sign-in

Epic supports an authenticator app, email codes or SMS. The app is the strongest of the three.
high

Check your connected accounts

Epic accounts link to PlayStation, Xbox, Nintendo, Steam and social logins. Anything linked is another way in.
high

Sign out everywhere

Ends every session you did not start, on every device.
high

Use an email nobody can guess

The sign-in email is the reset route. If it is the one on your public profile, that route is public too.
medium

Change the display name if it is your real one

Epic display names are visible to everyone you play with.
medium

Require a PIN for purchases

Stops stored payment being spent by whoever has the session.
low

Treat free-skin offers as phishing

The common Epic scam is a fake login page promising cosmetics.

What this guide can’t do

Every step above hardens the account from here on. None of them touch the data that has already leaked — the email, password and phone number sitting in someone else’s breach dump, which is where most Epic Games takeovers actually start. You can’t unleak a breach. You can find out what’s in there and take away what it’s worth.

See what’s already exposed — free scan

Checks 13.1B+ leaked records. No card, no account to look.