Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

justanotherlockedaccount#3122 wrote:

Hey, GGG finally responded to my email.

My email after reporting the hack:

Please don't proceed with locking my account to prevent further damage. Both steam and email have MFA activated and the login history shows that no account was compromised besides the PoE account. I have already changed my password for the PoE account, although I just linked it two weeks ago.
[...]
Again, I assume you wont do anything about my stolen items - but please also skip the part of banning my account so I have to send another 20 Emails to get it unlocked again.

--

Their response after 3 weeks:

Thank you for the message and I am really sorry to hear about this. If your account has been compromised it means that your email address or Steam account may have been compromised as well.
I have locked your account to prevent any further damage, please let us know when you have completed a malware scan of your computer and changed your email and Steam password and we can go ahead and look into restoring access to the account.



So yeah - dont contact support if you need help. They dont even read the emails and I dont think they will look into this at all. Thanks again for preventing further damage 3 weeks after getting hacked, verifying connected accounts and changing my password. 10/10 support.

That’s insane... Now I have a bad feeling that if GGG ever responds to my ticket, they’ll just ban my account and do nothing else? And then I’ll have to open another ticket to get it unbanned, which will take another few months? And all this even though my password is secure and I’m using 2FA, which wasn’t even triggered? This is so disappointing and completely destroys any hope that they’ll ever actually do something about this so I can play properly without worrying again.

Yeh i did the same, reading forum and first message was i changed all my passwords dont lock my account, they copy pasta and locked me for more than 3 weeks rn. Imagine support that not even reading and just block if your message have hacked account word, wow GGG, Blizzard doing bad games now but their support work great. Fix your support. It's worst in all ways you can imagine right now. I will never again ask support for anything just unlock my account for god sake.

"

derilzdota#2658 wrote:

Yeh i did the same, reading forum and first message was i changed all my passwords dont lock my account, they copy pasta and locked me for more than 3 weeks rn. Imagine support that not even reading and just block if your message have hacked account word, wow GGG, Blizzard doing bad games now but their support work great. Fix your support. It's worst in all ways you can imagine right now. I will never again ask support for anything just unlock my account for god sake.

If I ever get a response, I’ll share it with you all—you deserve to know something as well. My request was very detailed, including the information that my account is secure, has already been reviewed by Steam, and was changed again for safety, even though, according to their statements, there was no unauthorized access. They haven’t found any unauthorized access, and their 2FA wasn’t triggered either.

and the funny 9s that they won't give compensation... they see just our pockets and nothing more.

"

bestmaster1996#5421 wrote:

"

justanotherlockedaccount#3122 wrote:

Hey, GGG finally responded to my email.

My email after reporting the hack:

Please don't proceed with locking my account to prevent further damage. Both steam and email have MFA activated and the login history shows that no account was compromised besides the PoE account. I have already changed my password for the PoE account, although I just linked it two weeks ago.
[...]
Again, I assume you wont do anything about my stolen items - but please also skip the part of banning my account so I have to send another 20 Emails to get it unlocked again.

--

Their response after 3 weeks:

Thank you for the message and I am really sorry to hear about this. If your account has been compromised it means that your email address or Steam account may have been compromised as well.
I have locked your account to prevent any further damage, please let us know when you have completed a malware scan of your computer and changed your email and Steam password and we can go ahead and look into restoring access to the account.



So yeah - dont contact support if you need help. They dont even read the emails and I dont think they will look into this at all. Thanks again for preventing further damage 3 weeks after getting hacked, verifying connected accounts and changing my password. 10/10 support.

It's quite unfortunate that they didn't even read the content of your message, just focusing on the word "hacked." It might be a policy issue from their team, where the next step after a hack is to lock the account, no matter the circumstances. This means that the best way to avoid having your account locked is to not contact support at all, which ultimately benefits the hackers the most in this situation.

After lurking in these forums for the past three weeks, it’s become clear how account hacking issues are handled. Every time a player posts here about their account being hacked, the response from the moderators is always the same:

"Unfortunately, we aren't able to assist with this issue over the forums. Please contact us at support@grindinggear.com (...)"

It’s predictable and almost feels like a script. Even if you’re new to the forums, spending just 5 minutes reading the threads will make you realize what’s going to happen if you contact support.

If you email support@grindinggear.com, you’ll receive another automated response:

"I have locked your account to prevent any further damage. Please let us know when you have completed a malware scan of your computer and changed your email and Steam password."

At this point, your account is locked, and you can’t access it to complain or follow up through the forums. If you then create a new account to warn others about this process, your post will likely be removed with a message like:

"Hey there, although we really encourage community discussion, your post on the following thread was removed as it contained private correspondence between you and Grinding Gear Games staff."

From what I’ve observed, this process feels like an intentional effort to silence complaints rather than genuinely address account hacking issues. It raises serious questions about whether these leaks and hacks are just random incidents—or something more coordinated behind the scenes.

"

kahamanex#9784 wrote:

"

bestmaster1996#5421 wrote:

"

justanotherlockedaccount#3122 wrote:

Hey, GGG finally responded to my email.

My email after reporting the hack:

Please don't proceed with locking my account to prevent further damage. Both steam and email have MFA activated and the login history shows that no account was compromised besides the PoE account. I have already changed my password for the PoE account, although I just linked it two weeks ago.
[...]
Again, I assume you wont do anything about my stolen items - but please also skip the part of banning my account so I have to send another 20 Emails to get it unlocked again.

--

Their response after 3 weeks:

Thank you for the message and I am really sorry to hear about this. If your account has been compromised it means that your email address or Steam account may have been compromised as well.
I have locked your account to prevent any further damage, please let us know when you have completed a malware scan of your computer and changed your email and Steam password and we can go ahead and look into restoring access to the account.



So yeah - dont contact support if you need help. They dont even read the emails and I dont think they will look into this at all. Thanks again for preventing further damage 3 weeks after getting hacked, verifying connected accounts and changing my password. 10/10 support.

It's quite unfortunate that they didn't even read the content of your message, just focusing on the word "hacked." It might be a policy issue from their team, where the next step after a hack is to lock the account, no matter the circumstances. This means that the best way to avoid having your account locked is to not contact support at all, which ultimately benefits the hackers the most in this situation.

After lurking in these forums for the past three weeks, it’s become clear how account hacking issues are handled. Every time a player posts here about their account being hacked, the response from the moderators is always the same:

"Unfortunately, we aren't able to assist with this issue over the forums. Please contact us at support@grindinggear.com (...)"

It’s predictable and almost feels like a script. Even if you’re new to the forums, spending just 5 minutes reading the threads will make you realize what’s going to happen if you contact support.

If you email support@grindinggear.com, you’ll receive another automated response:

"I have locked your account to prevent any further damage. Please let us know when you have completed a malware scan of your computer and changed your email and Steam password."

At this point, your account is locked, and you can’t access it to complain or follow up through the forums. If you then create a new account to warn others about this process, your post will likely be removed with a message like:

"Hey there, although we really encourage community discussion, your post on the following thread was removed as it contained private correspondence between you and Grinding Gear Games staff."

From what I’ve observed, this process feels like an intentional effort to silence complaints rather than genuinely address account hacking issues. It raises serious questions about whether these leaks and hacks are just random incidents—or something more coordinated behind the scenes.

All account related issues recieve and have received the same response for literally years..... take off your tinfoil hat.

Posting conversations with staff same thing...

Imagine trying this hard to shirk personal responsibilty for your own accounts/secuirty hahahaha.

"

BinoKUTc985#5286 wrote:

"

CaffeinatedFog#0188 wrote:

I've been following this thread for a while and I have to ask: how many of you play SSF? Does this wave of theft also affect SSF players?

By the way, a very good question. If there are no victims of SSF, then there are obviously some manipulations in the regular leagues. (Although it is quite possible that the hacker is such a SSF, ugh and just leaves))

Is this a joke ?

Do you know how SSF works ? 😅

You cant be serious here.

"

medicated03#7220 wrote:

"

Malejas#1960 wrote:

"

bestmaster1996#5421 wrote:

At this point, the silence itself has become one of the worst answers for us. I believe it will gradually erode trust over time.

This exploit is catastrophic enough to a game to where you think it would have been addressed day 1....2....3....12..."vacation" or not. Not only has it not been address but not even a single word about it from GGG. Maybe disable trading? Maybe release a statement that they are even looking into it.

Nope nothing... Let's let the general public keep blaming the victims instead meanwhile people have proof of their stolen items on the official trade market.

I don't want to hear any blizzard slander from a Poe player that's for sure. The lack of care from devs regarding this is insane

There is no exploit though?

Comprimised accounts yes, no proof of any GGG related issues, in fact they have asserted its not on their end.

Do you guys understand that the process of being hacked goes like this

1. Account lock

2. You prove you own it and arent the hacker.

3. You finally get account back naked and start again.

No one here too impatient to get a reply from CS is starting again lul

You like many others here are wrong, clearly you can just read 200 posts here to see that.

I said exploit because it's something within the game and not account related or steam related. Something is being exploited through the trade and whisper system. It's the only thing that is common within all of the posts here.

Not anti virus software
Not weak passwords
Not standalone vs steam
Not 3rd party apps
Not 3rd party sites

The only commons are
Poe2 installed
Trading through whispers from official site.

You can continue to think otherwise and GGG will hopefully fix it without making a big deal about it but it's clearly on their end. Most people who were exploited refuse to even report it to GGG as it might get their account forever locked (you can reply with proof, won't matter) many in here provided proof almost a month ho and still locked.

This exploit is catastrophic enough to a game to where you think it would have been addressed day 1....2....3....12..."vacation" or not. Not only has it not been address but not even a single word

There is no exploit though?

Comprimised accounts yes, no proof of any GGG related issues, in fact they have asserted its not on their end.

Do you guys understand that the process of being hacked goes like this

1. Account lock

2. You prove you own it and arent the hacker.

3. You finally get account back naked and start again.

No one here too impatient to get a reply from CS is starting again lul
[/quote]

You like many others here are wrong, clearly you can just read 200 posts here to see that.

I said exploit because it's something within the game and not account related or steam related. Something is being exploited through the trade and whisper system. It's the only thing that is common within all of the posts here.

Not anti virus software
Not weak passwords
Not standalone vs steam
Not 3rd party apps
Not 3rd party sites

The only commons are
Poe2 installed
Trading through whispers from official site.

You can continue to think otherwise and GGG will hopefully fix it without making a big deal about it but it's clearly on their end. Most people who were exploited refuse to even report it to GGG as it might get their account forever locked (you can reply with proof, won't matter) many in here provided proof almost a month ho and still locked.[/quote]

You got proof ? Nope.

https://www.pathofexile.com/forum/view-thread/3688764

This post is a perfect example of it not being poe 2 related lol. They even used his paypal, keep making stuff up but :)

"

kahamanex#9784 wrote:

"

bestmaster1996#5421 wrote:

"

justanotherlockedaccount#3122 wrote:

Hey, GGG finally responded to my email.

My email after reporting the hack:

Please don't proceed with locking my account to prevent further damage. Both steam and email have MFA activated and the login history shows that no account was compromised besides the PoE account. I have already changed my password for the PoE account, although I just linked it two weeks ago.
[...]
Again, I assume you wont do anything about my stolen items - but please also skip the part of banning my account so I have to send another 20 Emails to get it unlocked again.

--

Their response after 3 weeks:

Thank you for the message and I am really sorry to hear about this. If your account has been compromised it means that your email address or Steam account may have been compromised as well.
I have locked your account to prevent any further damage, please let us know when you have completed a malware scan of your computer and changed your email and Steam password and we can go ahead and look into restoring access to the account.



So yeah - dont contact support if you need help. They dont even read the emails and I dont think they will look into this at all. Thanks again for preventing further damage 3 weeks after getting hacked, verifying connected accounts and changing my password. 10/10 support.

It's quite unfortunate that they didn't even read the content of your message, just focusing on the word "hacked." It might be a policy issue from their team, where the next step after a hack is to lock the account, no matter the circumstances. This means that the best way to avoid having your account locked is to not contact support at all, which ultimately benefits the hackers the most in this situation.

After lurking in these forums for the past three weeks, it’s become clear how account hacking issues are handled. Every time a player posts here about their account being hacked, the response from the moderators is always the same:

"Unfortunately, we aren't able to assist with this issue over the forums. Please contact us at support@grindinggear.com (...)"

It’s predictable and almost feels like a script. Even if you’re new to the forums, spending just 5 minutes reading the threads will make you realize what’s going to happen if you contact support.

If you email support@grindinggear.com, you’ll receive another automated response:

"I have locked your account to prevent any further damage. Please let us know when you have completed a malware scan of your computer and changed your email and Steam password."

At this point, your account is locked, and you can’t access it to complain or follow up through the forums. If you then create a new account to warn others about this process, your post will likely be removed with a message like:

"Hey there, although we really encourage community discussion, your post on the following thread was removed as it contained private correspondence between you and Grinding Gear Games staff."

From what I’ve observed, this process feels like an intentional effort to silence complaints rather than genuinely address account hacking issues. It raises serious questions about whether these leaks and hacks are just random incidents—or something more coordinated behind the scenes.

That's exactly how I perceive the situation, and it's really sad. I will report back what they say to me and share it with all of you. My request contains very detailed information about the hacker, screenshots as evidence, and also a report from Steam stating that my account is secure and no one has logged in from an unauthorized source through Steam, just like the 2FA was not triggered. This suggests that the issue lies with GGG and not with some account password. If someone tries to log in from a different IP/location, I have to approve it on my phone, or it won't work. Still, they were able to empty my account. Steam, just to be sure, has rechecked everything and updated my password and 2FA. If I now get a response from support telling me to change my password and lock my account, I will know that they haven't read the content of my ticket and are just sending a copy-paste reply. If that's the case, I will be very disappointed and will no longer support them. I've been playing POE since its early days, have spent thousands of hours in it, and was always very positive about GGG. But this would be the absolute last straw