Last year, PlayStation users began highlighting a major account hacking problem that only seems to be getting worse. As we reported back then, hackers are easily gaining control of PlayStation accounts despite two-factor authentication and Passkey enabled. Their modus operandi? Contacting PlayStation Support.
PS5 users have been highlighting their PlayStation account hacking plight since last year
To recap, hackers only need basic information to successfully pretend to be the account owner. They then contact PS Support with the information, and wrestle for control of their victim’s account.
When we first reported on this issue in December 2025, the victim was French journalist Nicolas Lellouche, who made the mistake of sharing a screenshot with a transaction ID online, which was used to hack him. When Lellouche contacted PS Support and informed an agent how the hacker gained control of his account, he was reassured that the issue was flagged and he would not face it again. However, the hacker continues to break into Lellouche’s account to this day, using the same transaction ID and the same method.
In that case, much of the blame was placed on Lellouche, but hackers are now targeting popular accounts with basic public information. This has happened to multiple trophy hunters, and yesterday, it happened to known PlayStation podcaster and journalist Colin Moriarty.
In a lengthy thread, Moriarty explained what went down and how hackers only needed to use publicly available information to break into his account. He immediately contacted PS Support, but to no avail.
Since Moriarty has connections within Sony, he bypassed PlayStation Support and received help from within the company to gain control of his account. He now plans to raise more awareness about the issue.
To be clear, Moriarty didn’t share any transaction IDs or screenshots online that would assist hackers. He’s a public figure, and it wasn’t difficult for hackers to obtain information like his sign-in email address to steal his account.
If it wasn’t already, Sony is well aware of the problem now. It remains to be seen how/if the company addresses it.
In the meantime, we advise players to keep their PlayStation sign-in email addresses separate from those they need to share publicly. It’s ridiculous that we even have to say this, but we suggest not revealing your PlayStation account name online either.
