PlayStation scams
Last updated September 18, 2026
The short answer
PlayStation scams target the PSN account, which holds a payment method, a wallet balance and a game library. The usual routes are phishing links promising free PlayStation Plus or currency, and messages asking you to share a verification code.
A PSN account is worth stealing for three separate reasons: the saved payment method, any wallet balance, and a digital library that can be worth hundreds of dollars. The user base includes many children, which means the payment method on file frequently belongs to a parent who is not watching the account. Most compromises trace back to a reused password or a code shared with someone in a chat.
How PlayStation scams work
- 1
Free PS Plus and currency phishing
Links promising free PlayStation Plus, wallet funds or a new console lead to a fake Sony login. The credentials are used immediately.
- 2
Verification code requests
A message in a game chat or on Discord asks you to read back a code "to verify". The code is a two-factor prompt for your own account.
- 3
Account resale after takeover
Compromised accounts with large libraries are sold. The buyer loses access when the original owner recovers it, and the seller sells the same account repeatedly.
- 4
Fake store and gift card sites
Sites selling discounted PSN cards deliver invalid codes or codes already redeemed.
Warning signs
- An offer of free PlayStation Plus, wallet funds or a console
- Anyone asks for a verification code, in any chat
- A login page is not on sony.com or playstation.com
- PSN cards are sold well below face value
- A friend's account sends a link out of character
- You receive a sign-in alert you did not trigger
- Your wallet balance or library changes unexpectedly
Examples
The code in party chat
A player is asked in a party chat to confirm a code "to prove the account is not a bot". The code is the two-factor prompt for his own account. The account is taken over, the $60 wallet balance spent, and the saved card used for $400 of purchases before Sony blocks it.
Free PS Plus for a year
A link promising a free year of PlayStation Plus leads to a convincing Sony login. The credentials work on the real site because the password was reused from a forum breach. The library, worth roughly $1,200, is listed for resale that night.
What to do
- Turn on two-factor authentication on the PSN account.
- Never share a verification code with anyone, including friends.
- Buy PSN cards from real retailers, not discount sites.
- Remove saved payment methods from accounts children use and buy wallet funds with cards instead.
- Use a unique password — most PSN compromises come from password reuse.
Report it to PlayStation
Report account theft through PlayStation support. Purchase history and the original email are what support uses to verify ownership.
Getting your money back
Contact PlayStation support immediately with the original email address, purchase history and console serial number — ownership evidence drives recovery. Dispute unauthorised card charges with your issuer; they are covered. Change the password on the email account behind PSN as well, since that is often compromised first, and turn on two-factor before restoring access. Wallet balance spent is rarely restored, but Sony has reversed purchases on a same-day report.
Frequently asked questions
Why would someone ask for my PSN verification code?
Because it is the last step of taking over your account. They have your password already — from a breach or a phishing page — and the code completes the login. No friend, moderator or Sony employee will ever ask for one.
Are cheap PSN gift cards online legitimate?
Usually not. Discounted codes are frequently already redeemed, invalid, or bought with stolen cards — in which case Sony voids them later and you lose the balance. Buy from Sony directly or a real retailer.
How do most PlayStation accounts get compromised?
Password reuse. A password exposed in an unrelated breach is tried against PSN automatically, and where it matches the login simply works. A unique password plus two-factor authentication removes almost the entire risk.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about PlayStation, these are the guides worth reading next.