EA account hacked and the email changed? What to do next

You go to load up EA Sports FC or Apex and your password stops working. You hit reset, and the reset email never comes, because the EA account email was changed to an address you have never seen. Your account got hacked, and the attacker locked the front door behind them. It feels final. It usually is not.

EA has an official process for exactly this, and one EA rule about email changes actually works in your favor. This guide walks through it in order, using only what EA Help says, so you spend your time on the steps that matter.

First, check what the attacker actually changed

Before you start filling in forms, work out how much access you still have. It decides which path below is yours.

1. Try signing in with your old password. Sometimes only the email changed and the password still works.
2. Try "Forgot your password?" on the EA sign-in page. If the reset email reaches you, you are back in control in minutes.
3. Check whether you are still signed in anywhere, like the EA app on your PC or a console that stays logged in.
4. Open your own email inbox and look for EA messages about account changes, including in spam and trash. Write down what you find and when.
5. Check your email account itself. If someone got into your inbox, that is probably how they got into EA, and they can do it again.

Do this from a device you trust. If you recently ran a cheat, a "free FC Points" tool or a cracked game, assume that device is the problem and use a different one until it is cleaned up.

The 30 day rule, and why it helps you

EA says you can only update your EA account email address and EA ID once every 30 days. That sounds like bad news when a hacker just used up the change. But EA also says you can change your email address back to an old one that was previously on your account without any restrictions.

In plain terms: the attacker cannot keep swapping in new addresses to stay ahead of you, and your original address is still a valid way back. If you manage to sign in while their email is on the account, try switching it back to your old address from the Account Information page (select Edit next to Email address). EA may ask you to verify your identity first. EA also notes that an error message can show up if the email was updated recently, so if the change is blocked, go straight to EA Support instead of retrying over and over.

If you can still get in: resecure it right now

Got in with the old password or a working reset? Good. Lock it down before the attacker notices. These are the steps EA Help lists for a hacked account, in the order that makes sense.

1. Clear your browser cache. EA points out that saved web data can include old passwords.
2. Reset your EA account password to a strong, unique one with letters, numbers and special characters. Our password generator makes one in your browser.
3. Reset the password on the email address tied to your EA account too. If the attacker still has your inbox, they can take EA back.
4. Put your own email back on the account if theirs is still there.
5. If you play on console, also reset the password on your PlayStation, Xbox or Nintendo account. EA lists this as part of resecuring.
6. Turn on two-factor authentication from the Security and Privacy page. EA then sends a code any time a new device tries to sign in to your account.

For 2FA, EA offers codes by email, text or an authenticator app, and calls the app the most secure option. EA also suggests keeping more than one verification method so you do not lock yourself out. Then find the Backup Codes section in your security settings and select View. EA says backup codes are the only way to sign in from a new device if you cannot reach your verification method, so save them somewhere that is not your phone.

If you are fully locked out: contact EA Support

If the reset email goes to the attacker and you cannot sign in with a connected account, EA says its team can try to recover your account. Start from EA Help, go to the EA account section, and follow the hacked account or "get back into your EA Account" options to reach an advisor.

Advisors need to be sure you are the real owner, so come prepared. EA lists what to have ready:

• The email address you used to make your EA account. This is your original email, not the one the attacker added.
• Any usernames or console IDs connected to the account, like your Xbox Gamertag or PlayStation Network Online ID.
• Invoice numbers from games you bought from the EA store, or product codes for your games.
• For a mobile game, the game's player ID.

If you also lost access to your original email inbox, EA suggests contacting your email provider (like Gmail or Yahoo) to recover that first. Getting your inbox back makes the EA side much easier, and you need it secured anyway.

One more thing about money. If the attacker made purchases, EA says advisors can help with charges on the EA store. Purchases made through Xbox, PlayStation or mobile app stores run through those platforms' own billing, and EA advisors cannot refund them. Contact that platform's support for those. The same goes if the hacker also got into your console account: that is a separate recovery with that platform.

Watch out for the second scam

People who just got hacked are prime targets for a follow-up scam. Someone in a Discord server, a comment section or a DM offers to "recover" the account for a fee. Do not bite. EA says it will never ask for your password, verification codes or login details through email, social media, forum messages or console messaging. Anyone who does is not EA.

• Only work through EA Help and replies from official EA addresses. EA says lock and suspension notices may come from [email protected].
• Do not click links in surprise emails. Type the EA site address yourself.
• Never share a verification code. A code someone asks you to read out is how they get in.
• If you get verification or welcome emails for an EA account you never made, EA says that does not always mean your inbox was hacked. Do not click anything, and change your email password if you think it was compromised.

If you are not sure whether a lock is a hack or an EA security lock, it helps to know the difference. EA may lock an account when it spots unusual activity, such as phishing, logins from shared connections or a reused password. That kind of lock is normally cleared by resetting your password: console players get a QR code to scan, and EA app users get a reset link.

Make the next recovery boring

Look at the list EA Support asks for. Original email, every linked Gamertag and PSN ID, invoice numbers, product codes. Most people have none of it written down, which is why recovery drags on. Spend ten minutes now and the next time goes much faster.

• Your EA account email and EA ID, and the date you made the account if you know it.
• Every console and platform account linked to EA, with the exact Gamertag or Online ID.
• Order or invoice numbers for EA store purchases and product codes for your games.
• Your EA 2FA method and your backup codes, kept off the phone they protect.
• A unique password, never reused on another site.

That is what LoginScout is built for. Each account gets one card with the login, password, recovery email, 2FA details and notes, encrypted on your device. Your EA card can hold the backup codes, linked console IDs and purchase notes right next to the login, so the answers to every support question are in one place. It works as a gaming password manager across every launcher, and you can see how six digit codes work with the 2FA code generator. For the platform-by-platform checklist, see how to recover a hacked EA account.

The short version

Try your old password and a reset first. If you get in, reset the EA and email passwords, put your own email back, and turn on 2FA. If you are locked out, contact EA Support with your original email, linked console IDs and purchase details. Remember that EA lets you switch back to a previous email address, so your original one still counts. Then write all of it down for next time. You can create a free vault for up to five accounts in about a minute.