GTA 5 account security: Rockstar 2-Step Verification, linked platforms, character transfers and scams

Rockstar’s 2SV runs on an authenticator, on your phone or in your browser, added by scanning a QR code or typing a Secret Key. With it on, anyone signing in needs your password and a current code at the same time.

Two details matter more than they look. You can tell Rockstar to remember a device, which skips the code there later, so only do it on a device you own. And Rockstar’s pages describe no backup codes: if the phone dies, Rockstar sends you to the recovery steps of Authy, Google Authenticator, Microsoft Authenticator or 1Password. Its advice is to switch on cloud backup or code sync now, so you can restore the authenticator to a new device later.

Getting error #0.200.4, “Incorrect verification code”? Rockstar says the code may be wrong or expired, or the authenticator may be out of sync. Check the device clock, date and time zone, and turn on any time sync option in the app. Google Authenticator on Android has Time Correction for Codes in its settings.

Changing phones while you still have the old one is simple: in Security, select Unlink under 2-Step Verification Device, confirm with a code and your password, then set up the new device. Lost the email on the account instead? Rockstar asks for a web ticket through its trouble signing in request page.

Console and PC links follow different rules. On PlayStation and Xbox, links live on the Connections page at rockstargames.com/account/connections. You can unlink and relink at any time, but only one account per platform can be linked at once, and a PSN or Microsoft account can only be linked to one Rockstar account at a time. Because console GTA V and Red Dead Redemption 2 progress is tied to your PSN ID or Gamertag, Rockstar warns that linking a new one means losing your Story Mode and Online character progress.

Consoles can also connect through QR Code Sign In, where a PIN code entered on your phone or in a browser ties the console to your account. Rockstar lists your QR code, PIN code and 2SV codes as things never to share with anyone.

On PC, you cannot unlink Steam, Epic Games or the Xbox app yourself. Rockstar Support has to, and whether it will depends on your account’s status. Every PC link change starts a cooldown before the next one, and suspended or banned accounts cannot get links changed while the action stands.

Linked the wrong Steam or Epic account by mistake? Rockstar may make a one-time exception, but only if the Rockstar account has no gameplay time or progress in any Rockstar title. The cheap fix is checking which store account you are signed into before you first launch GTA V.

Rockstar supports two kinds of move. A PS4 or Xbox One profile can migrate to either a PS5 or an Xbox Series X|S, and on PC a GTA V Legacy profile can migrate to GTA V Enhanced. Profiles cannot move between PS5 and Xbox Series X|S, or between console and PC.

On a new console, sign in to Rockstar Games and use the Migrate Profile screen when you first pick Online, or later the Pause Menu under Online, Migrate Profile. The old profile stays on the PS4 or Xbox One, but the two stop syncing, and unspent GTA$ you paid for does not cross between brands, for example from PS4 to Xbox Series X|S.

Slow down at the Review Character screen: starting a new character there overwrites the existing character slot. On PC the Legacy to Enhanced move works the same way, your Legacy profile is kept, and you cannot play GTA Online on either version while it runs.

Rockstar can also refuse a migration. Suspended or banned accounts, and profiles with illegitimate or too little progress, may not be eligible, so a character pumped up with modded money puts its own transfer at risk.

Shark Cards add GTA$ to your balance when you buy them, through the storefront of the platform you play on, such as the Store in the Rockstar Games Launcher. There are no refunds, and you can hold at most GTA$50,000,000 from Shark Cards at once; the rest is credited after you spend enough to make room.

Money drops and modded lobbies are the other side of that coin. Rockstar says cheaters manipulate GTA$ and RP for themselves and other players, and it routinely sweeps accounts to remove illegitimately gained GTA$ and adjust RP. Shark Card money is left alone. Its Community Guidelines count cheats, hacks and third-party software used for an unfair advantage as cheating, and a suspension may reset your characters.

Whenever the email on a Rockstar account changes, Rockstar sends an account-specific recovery link to the previous address, from [email protected]. Clicking it rolls the change back, so check spam and other folders.

Lost the inbox itself? Recover it through your email provider first. If that fails, Rockstar Support may revert the account to an email that was linked before, but only if you write in from that previous address. It will not change account details for a request from an email that was never linked.

This page is about the Rockstar account you use for GTA V and GTA Online right now. For what Rockstar has confirmed about Grand Theft Auto VI, and how to get your accounts ready for launch, see our GTA 6 page.

One LoginScout card per Rockstar account keeps the answers in one encrypted place, for the day you set up a new console or need to show support the account is yours.