Account Recovery When You Are Locked Out
Recovery succeeds or fails on evidence you can only gather before you need it. Here is what to prepare and what to send.
The short answer
Gaming account recovery depends primarily on proving ownership through purchase records, original account creation details, and access to the registered email, with purchase receipts being the strongest single piece of evidence. Securing the registered email account first is essential, since an attacker with email access can reverse any recovery you complete. Support requests succeed far more often when they include specific verifiable details rather than lengthy explanations.
Verified and last updated August 12, 2026.
- Time needed
- 14 min
- Difficulty
- Intermediate
- Read time
- 3 min
Account recovery is a documentation exercise. It succeeds on evidence, and the evidence is mostly things you can only gather before you lose access.
The other thing that decides it is the order you do things in, and nearly everyone gets that wrong.
Email first, always
Whoever controls the registered email can reset the password again. Recovering the game account while the email is compromised gives it back to them within hours.
Step 1: Secure the registered email first
Take back the email account Varies
Change the email password from a device you trust, enable two-factor authentication on it, then check the forwarding rules and filters. Attackers routinely add a rule forwarding password reset messages to themselves, and that rule survives a password change. Also review connected apps and remove anything unfamiliar.
The forwarding rule is the detail people miss. A changed password with an active forwarding rule means every future reset still reaches the attacker.
Step 2: Gather ownership evidence before contacting support
Purchase records are the strongest because they tie a real payment method to the account in a way an attacker cannot fabricate. Dig out the oldest one you can find.
Describing what the account contains is nearly worthless as evidence, because anyone who has seen the account can do that. People send paragraphs of it and wonder why the request stalls.
Step 3: Write the request short and specific
Support agents process a large volume of these. A short message with verifiable identifiers outperforms a long explanation every time.
Include, in a list:
- The account name or ID
- The original registration email
- Transaction ID and date of an early purchase
- The last four digits of the payment card used
- Approximate creation date
- When you lost access and what you have already done
Leave out the narrative. Who you suspect and how upsetting it is do not affect the outcome and lengthen the read.
Submit one request and wait. Multiple tickets frequently get merged and pushed back in the queue, which is the opposite of what chasing is meant to achieve.
Afterwards
Once recovered, assume the credentials are known and act accordingly.
Change the password, enable two-factor with an authenticator app rather than SMS, review linked devices and sign out everywhere. The 2FA guide covers why SMS is the weaker option and what recovery codes are for.
Then store the new credentials somewhere you will still have them in three years. The password manager guide covers doing that properly, including keeping recovery codes off the device that generates the codes.
What works
What doesn't
Key takeaways
Frequently asked questions
What is the strongest proof of account ownership?
A purchase receipt, because it ties a payment method and a transaction identifier to the account in a way an attacker cannot fabricate. The first purchase ever made on the account is particularly strong. Payment card details, transaction dates and order numbers carry far more weight than describing what the account contains.
Why secure the email before the game account?
Because whoever controls the registered email can trigger a password reset and take the account back immediately. Recovering the game account first simply hands it back to them within hours. This ordering is the most common reason recovery attempts fail repeatedly for the same person.
How long does recovery usually take?
Anywhere from a day to several weeks depending on the platform and the queue, and there is limited value in chasing during that period. Submitting one well-evidenced request is more effective than several partial ones, which can push you to the back of a queue or cause tickets to be merged and delayed.
What if I never made a purchase on the account?
Recovery is considerably harder but not impossible. The original creation email, the approximate creation date, previous usernames, linked platform accounts and IP or location history all help. Providing several weaker pieces of evidence together can be sufficient where any one alone would not be.
About the author
Roblox & Live-Service Editor
Priya started scripting in Roblox Studio at fourteen and has since published three experiences, the largest of which passed 1.2 million visits. That background is why our Roblox coverage explains why a code fails rather than just telling you to try again later.
Found something wrong? Games patch and fixes go stale. If a step here no longer works, tell us at hello@spyld.com and we will retest it. Read how we test and our editorial policy.