Online Gaming Without the Griefers
Gaming is the most social software on earth — billions of players, real friendships, real economies. Where there's a real economy there's real crime, and game accounts are stolen, scammed, and resold at industrial scale, because a decade of purchases and rare items has genuine market value. The good news: gaming security is ordinary security wearing a headset.
The account is the loot
- Unique password + MFA on every gaming platform, full stop. Most platforms hand out free cosmetics for enabling it — take the bribe.
- The email behind the account matters more than the account. It's the recovery path; protect it hardest (see Passwords, Passkeys, and MFA).
- Nobody legitimate asks for your login. Not a teammate boosting you, not "support" in a DM, not a site checking if your skin is rare. Account sharing is how most youth account theft begins.
- Beware the free-currency economy. Generators, giveaways, and too-cheap marketplaces for V-Bucks, Robux, and skins are phishing with extra steps. Buy only in-platform.
Scams with a controller
Trade scams (item vanishes mid-swap), fake tournaments with "registration fees," streamers-you-know running "giveaways" from hijacked channels, and cheat downloads that are simply malware — a perennial favorite, since cheaters willingly disable their antivirus to install their own infection. If a game modification asks you to turn off protection, it has told you what it is.
Voice chat, doxxing, and heat-of-the-moment
Treat every lobby as a public place: whatever is said in voice or text is effectively said to the internet, possibly recorded. The durable rules:
- Gamertags contain no real name, age, school, or location — and don't reuse the same handle everywhere if you value unlinkability.
- Streaming? Scrub the frame: no mail on the desk, no street view out the window, no discord notifications with real names.
- Mute and report generously; arguing with a griefer is feeding a business model.
- Swatting is rare but real for visible players: if you stream competitively, consider registering with your local police's anti-swatting program where available.
For parents
Play the games your kids play, at least once — credibility is the whole ballgame. Enable platform family controls together and openly: spending limits and purchase approval prevent both scams and $400 surprises; chat controls fit the kid's age, then relax as they earn it. The one rule that matters most: weird interactions get reported to you, no blame attached. Groomers exploit games precisely because kids fear losing access if they tell (more in Raising Digital Natives).
Stop treating game accounts as toys. Think of them as bank accounts denominated in hours. Connect with MFA before queueing.