EA Sports FC account security

EA Sports FC account security: Ultimate Team clubs, Coin rules, FC Points and phishing

Your Ultimate Team club is only as safe as the EA Account behind it. Every Coin, Item and FC Point in the club sits on that login, and EA’s rules can take the club away as surely as a thief can. This page collects what EA Help says about both risks, so the squad you built stays yours.

Last checked against official sources on November 1, 2026.

EA Sports FC account facts at a glance

Each row links to the EA Help article behind it.

Login for your club
Your EA Account. You sign in to the FC 27 Web App and Companion App with the same EA Account you use to play FC 27. Source
App dates this season
The FC 27 Web App opened on September 16, 2026 and the Companion App on September 17, 2026. After November 7, 2026, 11:59:50 PM UTC, both need at least one Ultimate Team login in FC 27 on PC or console. Source
Buying Coins
Not allowed. You earn Coins by playing and selling Items on the Transfer Market, and buying them from a third party breaks EA’s rules. Source
Possible penalties
Removing your Coins, deleting your Ultimate Team Club, restricting the Transfer Market, FC online bans, and bans from some or all EA games. Source
Account sharing
Against the FC rules, which treat it as accessing another player’s account. Source
Where FC Points are sold
The Ultimate Team Store, your platform’s store, physical cards from retailers, and trusted retailers. Source
Transfer Market on the apps
Depends on good standing, past rule breaks, active days played and how many Ultimate Team accounts use the same device. EA advisors can’t grant it. Source
Securing the EA login
Two-factor authentication by email, authenticator app or text message, plus backup codes, all set from the Security and Privacy page. Source
Unofficial tools
Only the official game and the official Web and Companion Apps are allowed. EA warns that some browser extensions capture passwords. Source

Protect your Ultimate Team club in six steps

  1. Step 1

    Put an authenticator on the EA Account

    Turn on two-factor authentication from Security and Privacy and choose the authenticator app tab. Enable a second method as well, so a lost or broken phone doesn’t cut you off from your club.

  2. Step 2

    Keep the backup codes off your phone

    Select View backup codes and store the list away from the device that makes your codes. EA says they are the only way in from a new device when your 2FA method is unavailable.

  3. Step 3

    Open the Web App from ea.com yourself

    Reach the Web App from EA’s own site, not from a link in a Discord server, a comment or a search ad. The phishing checks further down show how to tell a real EA address from a copy.

  4. Step 4

    Clear unofficial extensions out of that browser

    EA allows only the official Web and Companion Apps, and warns that certain browser extensions can capture passwords and track your browsing. Auto-buyers, bots and other automation are against the rules too.

  5. Step 5

    Never hand your login to a trader or a friend

    EA’s FC rules treat account sharing as accessing another player’s account, so lending your login puts the club at risk twice: from a ban, and from whoever now holds the password.

  6. Step 6

    Play once on console or PC before the deadline

    For FC 27, EA requires at least one Ultimate Team login on PC or console by November 7, 2026, 11:59:50 PM UTC to keep using the Web and Companion Apps.

What is on the line in an FC account

The club itself

EA can remove Coins or delete an Ultimate Team Club over Coin buying or distribution, and EA says coin sellers often profit from the Items they steal.

Transfer Market access

Rule breaks can block the Transfer Market on the Web and Companion Apps. A Transfer Market ban from FC 26 doesn’t carry into FC 27, but a ban from the whole FC franchise does.

FC Points you paid for

If Points go missing, EA asks for proof of purchase, your persona name, your platform, the time, date and time zone of the purchase, and the amount. PlayStation buyers go to PlayStation support instead.

Your other EA games

EA warns that breaking FC rules can affect your experience across platforms and games on the same EA Account, up to a ban from some or all EA games.

EA’s rules on buying and selling Coins

EA’s position is simple: you earn Coins, you don’t buy them. Ultimate Team matches, rewards in modes like Rivals and Squad Battles, quick-selling tradeable Items and fair-price Transfer Market sales are the legitimate routes. Buying Coins from a third party, or promoting Coin buying and selling anywhere in EA’s games or forums, breaks the rules.

EA also names “mule” accounts and comfort trades as harmful to the game economy. And there is a security angle: coin sellers often ask for your login details, which EA says can end with stolen Coins, Items, players or the entire account.

Coin distribution covers more than most players expect. EA counts all of these as breaking the rules:

  • Sending Coins to another player, even a friend.
  • Buying or selling Items well above or below their average price to move Coins between accounts.
  • Coin giveaways offered in exchange for promotions or favors outside the game.
  • Using several accounts to funnel Coins and Items into a single club.
  • Farming Coins with bots or disconnection tricks.

Web App and Companion App: who gets access

Early access to the FC 27 apps went to players who had logged in to Ultimate Team and created a club in FC 26, FC 25 or FC 24 on their platform before August 1, 2026, with an account that still exists and is in good standing. EA says that if you don’t have access, you have either broken its rules in the past or not played long enough.

Transfer Market access inside the apps is a separate gate, based on good standing, past rule breaks, active days played, and how many Ultimate Team accounts are used on the same device. An active day means three full Ultimate Team matches plus a Web or Companion App login in the same UTC calendar day. With one account on a device, access normally comes after two active days; with other Ultimate Team accounts on that device, it normally takes at least four.

EA advisors can’t grant Transfer Market access or tell you when it will arrive, so treat anyone offering to unlock it in exchange for your login as a scammer.

FC Points: buy from the right places and keep receipts

FC Points are the paid currency for packs, Ultimate Draft entries, Evolution slots, the Season Pass and Clubs cosmetics. EA lists four places to buy them: the Ultimate Team Store, your platform’s store, physical cards from retailers, and trusted retailers. On PlayStation and Xbox, buying FC Points inside the Companion App is only available in the United States.

Points also belong to a console family. When FC 26 launched, EA let players carry leftover FC 25 Points over only by logging in to FC 26 on console or PC, not through the Web or Companion Apps, and only within the same console family, such as Xbox One to Xbox Series X|S. Moving from Xbox to PlayStation was not possible, and the transfer could not be undone.

Pre-ordered an FC 27 Ultimate or Ultimate Plus Edition? EA says the FC Points included with those editions arrive in monthly drops, not all at once, so a smaller balance on day one is not by itself a sign of a hack.

Phishing aimed at Ultimate Team players

FUT clubs are worth stealing because Items can be sold, so the bait is nearly always Coins, packs or cheap FC Points. EA says it never needs your login to give you packs, players or Coins. Anything EA gives out is added to your account automatically, and it won’t ask for account details to hand out prizes.

  • Cheap Coins and Points sites. EA doesn’t sell in-game currency you can earn by playing, and it says buying that currency or EA Accounts from third parties is against its User Agreement. Players who use those sites can end up banned.
  • Redirect links. A link can start on ea.com and bounce you to a copy. Look for the word “redirect” in the address. EA says it never redirects you from ea.com to another site.
  • Look-alike domains. Real EA sites and emails use ea.com with the subdomain in front, like help.ea.com. An address like ea.help.com is not EA. Mail from an address ending in e.ea.com is genuine.
  • Codes you never asked for. A verification code or password reset you didn’t request doesn’t always mean your inbox was hacked. Don’t open the links, don’t share the code with anyone, and change your email password if you think it was exposed.

Second accounts, shared consoles and the Transfer Market

A second Ultimate Team account on the same console has a cost. EA says every extra account used on a device can slow Transfer Market access on the apps for each of them, and moving Coins or Items between your own accounts still counts as Coin distribution.

If someone else in the house plays FC, they need their own EA Account and their own club. Sharing one login breaks the account sharing rule, and any penalty lands on the one club you both depend on.

What to keep on your FC vault card

Keep what EA support asks for, and what you need on launch day of the next FC.

  • The EA Account email, your EA ID, and the persona name your club uses on each platform.
  • Which console family the club lives on, plus your PlayStation Network Online ID or Xbox Gamertag.
  • Your EA password, the 2FA methods you turned on, and the backup codes.
  • FC Points receipts: proof of purchase, the date, time and time zone, the amount, and any redemption code.
  • The season you first created an Ultimate Team club, since EA bases early app access on past clubs.
  • Invoice numbers for anything you bought through the EA app.

Questions people ask

Can I buy FC Coins without getting banned?

No. EA says you can’t purchase Coins. Buying them from a third party breaks the FC rules, and EA can remove your Coins, delete your club, restrict the Transfer Market or ban the account.

Can a friend play my Ultimate Team matches for me?

Not by signing in as you. EA’s FC rules count account sharing as accessing another player’s account, and handing over the login also hands over every Item in your club.

Why can’t I use the Transfer Market on the Web App?

EA bases app access on good standing, past rule breaks, active days played and how many Ultimate Team accounts use your device. EA advisors can’t grant it or tell you when it will unlock.

Do I have to play FC 27 on console or PC to keep using the Web App?

Yes. After November 7, 2026, 11:59:50 PM UTC, EA requires at least one Ultimate Team login in FC 27 on PC or console to keep using both apps.

Do FC Points carry over to the next FC?

For FC 25 to FC 26, EA allowed a one-way transfer on console or PC within the same console family. Check EA’s FC Points articles for the current year before you buy more.

Can LoginScout recover a hacked Ultimate Team club?

No. Only EA can look into a hacked EA Account or missing Items. LoginScout keeps your EA email, linked console IDs and FC Points receipts in one place for when EA asks.

Sources

Checked against these official pages on November 1, 2026. Platforms change their settings and menus often. If something here no longer matches what you see, email [email protected] and we will fix the page. LoginScout is independent and not affiliated with the companies named here.

Keep the identity with the login.

Create a free vault, then upgrade for a private temp mailbox and burner numbers when the library grows.