Skip to content
    HackFirstAid.com

    Kid's gaming account hacked: how to recover it

    Your child's Roblox, Fortnite, Minecraft or console account was taken over. Most platforms can restore it. Secure the linked email, remove saved cards, file a recovery request and use it as a calm teaching moment.

    Do right now

    · Within minutes

    1. Have your child sign out of the account on every device — even ones they think are safe.

      More detail

      Stolen sessions can persist after a password change. Force a sign-out everywhere before doing anything else.

    2. Open the platform's account-recovery flow from your computer, not the kid's phone.

      RobloxMicrosoft / MinecraftDiscordSteamXboxPlayStation

    3. Check saved billing methods on the account and remove any payment method that isn't yours.

      More detail

      Attackers immediately try V-Bucks, Robux, skins or game-key purchases. Removing the card stops the bleeding while you recover.

    Do today

    · Within hours

    1. If the email on the account was changed, use the platform's 'recovery without email access' form — have order numbers, original sign-up date, and first game played handy.

    2. Once back in, change the password and turn on two-factor authentication using an authenticator app (not SMS).

    3. Review friend list, chat history, and any trades the attacker made; report scam messages they sent to other kids.

    4. Dispute any unauthorized charges with your credit card or PayPal — most issuers refund quickly when documented.

    Do this week

    · Within days

    1. Turn on Roblox Parent PIN, Microsoft Family safety / spending limits, or Steam Family View as appropriate.

    2. Move the account's email to a parent-controlled inbox or a long, unique address — not the kid's main email.

    3. If grooming, sextortion, or explicit images are involved, stop and switch to the Sextortion playbook — do not delete the messages.

      Cybertip.ca (Canada)NCMEC CyberTipline (US)

    Ongoing protection

    · Build the habit

    1. Use authenticator-app 2FA on every game/chat account; talk openly about 'free currency' sites and DM links from strangers.

    Related situations

    Child's Account or Device Compromised

    Your child's account or device hacked? Secure it, save evidence and know when to involve police — parent guide.

    Email or Social Media Hacked

    Locked out of email, Facebook or Instagram? Recover the account, lock out the hacker and stop scams sent in your name.

    Bank or Financial Account Compromised

    Unauthorized charges or transfers? Call your bank now, freeze the account and dispute the charges with these steps.

    Is this happening at work?

    If a business account, company device or customer data is involved, the steps change. Get help built for organizations.

    Go to business help →
    · Printed October 7, 2026