A gaming account may hold saved progress, purchases, friends and years of creative work. That makes it valuable to the child—and attractive to people who send fake “free item,” “urgent verification” or account-trading messages. Security works best when the child knows what to do before an offer arrives.
Give the child their own supervised account
Do not build a child’s identity and purchases inside an adult’s everyday account. Use the platform’s child or family account structure, with a caregiver-controlled recovery address and accurate age information. Separate accounts make age controls, spending, friends and recovery clearer.
Create a unique password that is not reused for email, school or another game. Store it in a trusted password manager rather than a shared chat or notebook beside the console. Turn on a passkey or two-step verification where the service supports it, and keep backup codes in a caregiver-controlled place. PlayStation, for example, documents passkeys and two-step verification through an authenticator app or text message.
Teach the three places not to sign in
- a link sent through game chat or direct message;
- a page promising free currency, rare items or account upgrades;
- a screen shared by a stranger who says they must “verify” or “fix” the account.
If a message claims there is an account problem, open the platform’s official app or type the known support address independently. The US Federal Trade Commission warns that phishing messages often create urgency, claim suspicious activity or payment problems, and use links to steal passwords or financial details.
Protect recovery, not only the password
Check which email, phone number, security question and linked account can reset the login. A strong password is little help if the recovery email is abandoned or shared. Keep the recovery account secured with its own multi-factor authentication. Update it before changing phone numbers or losing access to an old email.
Review linked services and active devices every few months. Sign out consoles the family no longer owns. Never sell or give away a device until accounts are removed through the official reset process and needed saves are backed up.
Make help safer than hiding
Say clearly: “If you clicked or entered something, tell me quickly. We will secure the account first and talk later.” Children may hide an error because they fear losing all game access. Delay gives an attacker more time to change recovery details, spend money or contact friends.
EdCaptain’s online help-seeking agreement gives a no-blame route for secrecy, money and account requests. If someone asks for gift cards or game currency, the guide on online friends asking children for money provides a specific response.
If the account may be compromised
- Use a clean, trusted device and the platform’s official support route.
- Change the password and secure the recovery email first if it is also at risk.
- End other sessions and remove unknown linked accounts or devices.
- Check purchases, messages and changed profile details.
- Save screenshots, receipts and support case numbers without forwarding private content.
- Tell known friends not to trust recent messages from the account.
Contact the payment provider promptly about unauthorized charges and use the platform’s dispute process. Do not pay a person who promises to return the account, and do not retaliate through another account.
Practise with realistic examples
For younger players, show a fake offer you make yourself and practise closing it. School-age children can identify urgency, unusual web addresses and requests for codes. Teenagers can lead a quarterly security check and explain how they would verify an account warning without using the message link.
Account security is not a one-time adult setup. It is a shared routine: separate identity, protected recovery, no sign-in through messages and fast, blame-free help when something looks wrong.
