Epic Games Account Compromised, Email Changed: Recovery

You try to sign in to Epic Games and the password does not work. The reset email goes to an address that is not yours, or never arrives. Someone has changed the email on the account, and your skins, purchases and linked consoles are on the other side of that door.

This guide follows Epic Games' own help pages. It puts the steps in Epic's order, explains what to do when the email was changed, and covers what the pages say about a denied recovery request and the one appeal. We do not promise recovery, and no outside service can override Epic's verification. One wrong step can cost you the account, so know what you are doing before you start.

Last checked: 26 October 2026.

#What Does Epic Say to Do First?

Epic's My Epic account was compromised and I cannot access it page opens with the email. It says your account email and access to it are the key to your Epic Games account. If you still have access to your email, sign in to your email provider, change its password and turn on two-factor authentication. If you have lost access to your email, contact your email service provider to recover it, then secure it with a unique password and two-factor authentication.

Epic calls your email the key to your Epic account, so a thief who still controls it may be able to reset your password again. Fix the email account first. Our guide on hacked accounts that had two-factor authentication on explains how a weak email account undoes the rest.

#Epic's Recovery Steps in Order

The page says the reset route works only if you still have access to the email address on your account. If the person who got into your account also changed the email to one you do not control, go to the recovery request. Epic's How can I recover access to my Epic Games account? page describes the sign-in route: go to the sign-in page, click Trouble signing in, enter the email you used and follow the screens. If it cannot find your account, or you have lost access to the email, it points you to the Lost access to this email address option, which asks for more information.

#What If I Can Sign In With a Linked Account but the Email Was Changed?

Epic says this directly. If you get in with a linked console or social account but the email was changed to one you do not control, signing in is not enough to keep your account, and you should submit an account recovery request. So do not stop when you see the dashboard. Look at the email in your account settings before you do anything else, and do not link or unlink accounts until you know who controls the email.

#What Do I Prepare for the Recovery Request?

The pages we read do not list the details Epic asks for in the request, so we do not describe the form. They do say the recovery team verifies your identity, and the appeal page says a request is denied when Epic does not receive enough evidence confirming that you created the account. So plan your evidence before you submit, using plain logic:

• The email address you used to create the account, and any older ones.
• Any receipt or confirmation email for a purchase on the account, in your name.
• The consoles or social accounts you linked, and roughly when.
• The device and place you normally played from, and the display name you used.
• Your account ID if you can still find it on any device, since it identifies the account.

Keep this list private. It is for you to fill in the official form with. Nobody trustworthy needs your password.

#My Recovery Request Was Denied. Can I Appeal?

Epic's How can I appeal my account recovery request decision? page says account recovery requests are denied if Epic does not receive enough evidence confirming that you created the account. To appeal:

1. Find the email where your request was denied.
2. Click the appeal this decision link and submit your appeal on the page it opens.
3. After you submit, you will see a message confirming that Epic has received your appeal request.

The page also gives an alternative route. Go to the check your account recovery status page and enter your account recovery ID. You are taken to a page where you can submit the appeal, and a verification code is sent to the email address you gave in your recovery request.

#When Is the Appeal Button Missing?

The appeal page lists four reasons you may not see the Appeal button:

So the sequence is: one request, one appeal on the same request, and a fresh request if the appeal is denied or the 14 days pass. The page does not say that a new request will succeed, and it does not say how long a decision takes. The key point is not to waste the appeal.

#What to Do After You Get the Account Back

Epic's What do I do after my Epic Games account has been recovered? page says that once recovery is approved, Epic emails the outcome and the steps to complete before you sign in again. It lists them:

1. Reset your password, using the email confirmed in your recovery request and the security code sent to it.
2. Turn on two-factor authentication in the Two-Factor Authentication tab, choosing your preferred method.
3. Link your accounts in the Linked Accounts tab, under the external account you want to link.

The page also points to Epic's guide on securing your account. It says that if you notice unusual activity, linked accounts you do not recognise or you cannot make changes, you should submit a support ticket. Our guide on recovering a hacked Steam account lists similar hardening steps for another game platform.

#What the Pages Do Not Say

The pages we read do not say how long a recovery request or an appeal takes, and they do not say how many requests succeed. They do not list what evidence counts as enough, and they do not say what to do if you cannot create a new request after 14 days. They do not promise that you will get the account back. We do not know your outcome, and we will not guess it.

#When It Is Safer to Get Expert Help

Some people sort this out alone, and the official steps stay first. The risks are plain. Epic's appeal page says you are only allowed one appeal for a request, and that the Appeal button is not there after 14 days from the denial. Epic also says signing in with a linked account is not enough when the email was changed, so the wrong move at that point can leave the thief in control of the email. After a hack, scammers target players with offers to get an account back. Epic's pages describe its own recovery request and appeal as the route, and no one needs your password. Our guide to spotting fake recovery services lists the signs.

If you are unsure about any step, or the account matters to you or your income, handing the case to an experienced team such as AwareXone is the safer choice. We can help you gather your evidence, put the steps in order and word the request clearly. We never ask for your password. See our account security help page, and use the Apply for Case Review button at the end of this guide.

#When a Case Review Makes Sense

If a recovery request was denied, the 14 days are running, or the same email protects other accounts, a review can help you plan the next step before you use the single appeal. SocialSafe by AwareXone is a Malaysia-based service, independent of Epic Games, that helps you use the official routes. We never ask for your password or login codes, and we cannot change Epic's decisions. See how we work on our trust page.

#Frequently Asked Questions