Account got hacked
hey, I fell for a phishing scam and the email of my account was changed without my consent, I also made a ticket in the website, and that's how I got the account email back as it was. But the problem doesn't stop there, the day after it I receive a mail from riot saying that somebody logged in through my account from germany and another mail to reset my password which I did, not to mention that they changed the email one more time, which I had to fill in another ticket and respond to the mail that I got from the bot support. After I played a match with my friend, I got kicked out of the game and since then I wasn't able to login since it tells me "Your login credentials don't match an account in our system.", even my friends did not see me in the offline list, so assume the hacker deleted my account or possibly changed the username.
I really need help with this one, and yes I wrote all this as a reply for the email that I got from the support but it wasn't that much of a help except telling me pick a strong password, like I don't even have access to my account in the first place.
I really need help with this one, and yes I wrote all this as a reply for the email that I got from the support but it wasn't that much of a help except telling me pick a strong password, like I don't even have access to my account in the first place.
Solution
Also some tips on safeguarding your account in the future
- never share your account or account creds with ANYONE (they can then be shared with additional people without your knowledge, or your account taken over by the other person, and this happens all the time).
- never login into any site with your Riot credentials other than http://authenticate.riotgames.com/. this includes 3rd party applications that ask for your Riot credentials. for any applications that use our official 3rd party API, you should be redirected to this site to log in. if not, don't do it or your credentials can be compromised due to malicious apps, insecure storage/transmission, or session hijacking.
- add 2FA to your Riot account (https://support-leagueoflegends.riotgames.com/hc/en-us/articles/4415714343187-Two-Factor-Authentication-How-to-FAQ)
- add 2FA to the email account tied to your Riot account
- make sure that your Riot account and associated email account do not share the same password.
- verify your email on your Riot account so that the settings can't be changed without access to that email (https://support-leagueoflegends.riotgames.com/hc/en-us/articles/201751744-Email-Verification-FAQ)
if you have already been hacked and have an alternate email, change the email tied to your Riot account to a different email address.
if you have already been hacked, change the password on both your Riot account and associated email account.
if you have already been hacked, go to https://account.riotgames.com/ and click LOG OUT EVERYWHERE under Login Management.
see https://support-leagueoflegends.riotgames.com/hc/en-us/articles/4402981557267-Protecting-Your-Account for more tips.
