Account Recovery and Boosting Scams
Services that promise to recover a locked account or improve a player's rank by accessing their credentials — then steal the account or extort payment.
Last reviewed: 1 June 2026
What this scam is
Account recovery and boosting scams involve third-party services that ask players to share their game account credentials — username, password, and sometimes two-factor authentication details — in exchange for recovering a suspended or locked account, or artificially advancing the account's competitive ranking. In both cases, handing over credentials gives a third party full control of an account, and the outcome is frequently theft, extortion, or both.
Account boosting is where a player pays someone to play competitive matches using their account to artificially improve their rank or statistics. Some boosting services are operated by skilled players who genuinely deliver the service, but scammers operate fake boosting offers alongside legitimate ones, taking the payment and stealing the account instead.
Account recovery services claim to help players who have been locked out of their accounts — often from a previous takeover or a banned account — by using methods that bypass the official recovery process. These services cannot legitimately offer what they claim. Any method that actually bypasses an account's security is either exploiting a vulnerability (which the publisher will patch and reverse) or is itself a phishing operation collecting credentials.
Some scammers operate a two-stage scheme: they first conduct a takeover of your account, then contact you posing as a recovery service offering to restore access — for a fee. The 'recovery service' and the original thief are the same person.
How it works
Boosting and recovery services are advertised across gaming forums, Discord servers, dedicated websites, and social media. Prices are presented per rank tier, per match win, or as a flat recovery fee. Reviews and testimonials on the service's own platform are frequently fabricated.
For boosting, you are asked to share your game account login credentials so the service's 'booster' can play on your account. Alternatively, you are asked to add an unknown account as a party member and let them carry your team through ranked matches. In either case, you have given access to an account that may contain valuable items, purchases, and associated payment methods.
Once the service has your credentials, the possibilities range from the service completing the boost as promised (while potentially also examining your account for valuable items), to immediately changing the account's linked email and password to lock you out, to selling the account on a secondary market while you are still expecting the boost to complete.
For recovery services, credentials are requested under the pretence of being needed to verify ownership or re-establish access. In reality, providing them either completes an existing takeover or hands the account to the service.
Extortion follows in some cases: after gaining control, the scammer contacts the player demanding payment for the return of the account, exploiting the player's emotional attachment to their progress and purchases.
Why this scam works
Competitive rank carries real status in gaming communities, and the gap between a player's skill level and their desired rank creates genuine motivation to seek shortcuts. The existence of legitimate boosting operations — some games have active professional boosting markets — makes the category feel credible.
For account recovery, the emotional state of having lost access to an account with years of investment amplifies the desire for any solution. A service that claims to offer a faster alternative to the official recovery process — which can be slow and uncertain — is appealing precisely because the player is already distressed.
Sharing credentials with a service can feel like a calculated risk: if the boost is delivered, the account remains yours; you are simply renting it briefly. The extent to which access enables full control — including payment method theft, item stripping, and permanent lockout — is not fully appreciated until after the fact.
Common red flags
- Service requires you to share your account password
- Recovery service contacts you unsolicited after your account was locked
- Service asks for two-factor authentication codes during the process
- Payment is non-refundable and must be made before service begins
- Reviews are only available on the service's own website
- Service claims to use 'proprietary methods' to bypass official recovery
- Account changes begin immediately after credentials are shared
- Service asks you to temporarily disable two-factor authentication
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Account boosting — reach [rank] in 24 hours. Share your login and we handle the rest. DM for pricing.
Lost access to your [game] account? We recover accounts the official support cannot. [price], 100% success rate.
Your account was flagged — we can get it unbanned using our contacts. Pay [price] and share your details.
Rank boost service: [rank] to [rank] for [price]. Log in and add [username] — we start tonight.
We noticed your account was locked. We can restore it for you within hours — contact us at [fake link].
Common variations
- Boosting credential theft — takes credentials and steals the account instead of boosting
- Recovery extortion — locks the account then offers paid recovery
- Two-stage scheme — orchestrates the original takeover then poses as the recovery service
- Partial boost scam — performs a small improvement then demands more money to continue
- Duo boost phishing — adds you to a party, then sends a fake login link during the session
How to verify before you act
No legitimate account recovery or boosting operation requires your actual account password. Legitimate coaching or skill-improvement services work in a party or duo format where the other player uses their own account — your credentials are never needed. If a service asks for your password, this is the clearest indicator that recovery or boosting is not the actual goal.
For account recovery, use only the official account recovery process offered by the game publisher. The official process exists specifically to restore accounts to verified owners. It may take longer, but it does not require handing your credentials to an unknown third party.
If an unsolicited recovery service contacts you after your account was locked, treat this with significant caution. The timing — your account being locked and a recovery service appearing — is a common pattern in coordinated takeover-and-extortion schemes.
Research any service through independent community forums, not just reviews on the service's own website. Look specifically for reports of account theft following use of the service.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Competitive players seeking rank advancement
- Players whose accounts have been suspended or locked
- Players who have previously experienced an account takeover
- Players with high-value accounts seeking to protect progress
What to do immediately
- If you shared credentials, attempt to log in and change your password and linked email immediately
- Contact the game publisher's official support team using their official website
- Check your linked payment methods for unauthorised charges
- Report the service to your national fraud authority
- If extortion is occurring, do not pay — contact the publisher and fraud authorities
- Enable two-factor authentication if it is not already active
How to prevent it
- Never share your game account password with any third party under any circumstances
- Use the official account recovery process for locked accounts — do not seek shortcuts
- Enable app-based two-factor authentication to slow any account takeover attempt
- Be sceptical of services that appear immediately after your account experiences a problem
- Understand that sharing credentials violates most publishers' terms of service and removes their obligation to assist
- Research any service independently on community forums before engaging
Evidence to preserve
- All communications with the service
- Payment confirmation and records
- The service's website URL and any profiles
- Account change notifications received
- Screenshots of any extortion messages
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Is account boosting against the rules?
Most competitive games explicitly prohibit account sharing and boosting in their terms of service. Even if a boosting service delivers what it promises, your account may be penalised, ranked down, or banned when detected. The risk is both financial and to the account itself.
I was contacted by a recovery service after my account was locked — is that suspicious?
Yes. The timing is a common pattern in coordinated scams. Use only the official recovery process offered by the publisher. Block and report the unsolicited contact.