Select Language:
A significant security vulnerability within Sony’s systems has been confirmed as the root cause of numerous PlayStation 5 users having their accounts compromised. What’s happening isn’t technically a traditional “hack,” but rather a sophisticated social engineering scam that exploits trust and the support process itself, often executed with the assistance of PS Support agents.
### How PlayStation accounts are compromised through social engineering
It’s important to clarify: no one is safe from this type of scam. The scammers only need some basic publicly available information about the target to succeed. Claims that victims are at fault for sharing private details online—like transaction IDs from PS Store purchases—are misleading. While sharing a screenshot of a transaction with a purchase number could assist hackers, the main method of attack doesn’t rely solely on such details, as demonstrated by well-known PlayStation journalist Colin Moriarty.
Scammers leverage their ability to impersonate users by convincing PS Support agents they are the account owners. Simply providing recent purchase history—such as a date of a recent buy or specific game details—along with a username or email can be enough for a skilled scammer to seize control of an account. This process bypasses even two-factor authentication and passkeys because the support agents, acting at the scammer’s behest, override these security measures.
User PorkPoncho tested this method (with consent from his sister, to demonstrate the process) and successfully took control of her PlayStation account, changing the email and password through Sony support:
> “With my sister sitting right there, I was able to breach her PSN account and take full control by just contacting Sony support…”
> — PorkPoncho (@PorkPoncho) May 21, 2026
Additionally, Colin Moriarty discussed this vulnerability extensively in a recent podcast, emphasizing that the problem isn’t new and remains unaddressed by Sony.
### Ongoing Issues and Lack of Action
Sony has acknowledged the existence of this flaw but hasn’t implemented a fix yet. As a result, more PS5 users are losing access to their accounts. Just recently, a veteran trophy hunter shared on PSNProfiles that after over ten years, their account was compromised in a similar manner, leading them to give up on PlayStation altogether. They now feel forced to leave the platform after failing to recover their account.
The hope is that Sony will recognize the urgency of the situation and provide a solution soon.





