Support NeoGAF

[The Elite]

Added a couple of updates to the OP for clarity. Not sure what to expect to hear tonight. For now I am focusing on my own security.

Did a malware bytes scan and don't detect anything strange. Still planning on doing a reformat.

OP, try this:

Turn on your PS4, go to Settings -> PSN -> Activate as primary PS4. You should be able to do that.

That way their PS4 will be made secondary and your account is useless for them.

Already tried this. Doesn't work.

 

[rpmboy]

OP, try this:

Turn on your PS4, go to Settings -> PSN -> Activate as primary PS4. You should be able to do that.

That way their PS4 will be made secondary and your account is useless for them.

You can't do that. When you click that button, you'll get a message telling you to deactivate the other PS4 first

 

[PodcastFips]

You can't do that. When you click that button, you'll get a message telling you to deactivate the other PS4 first

Really? Damn

In that case I'd try to spam Remote Play and gain access to that menu, but it's likely they turned off the internet connection for now.

 

[rpmboy]

Really? Damn

Yeah. Gimmie a sec and I can screen cap the message

EDIT:

OP would just see this screen. Gotta physically go to the console to deactivate, do the mass deactivation every 6 months (which OP's Russian friend already used up), or call Sony

 

[A Link to the Past]

Yeah, this is one of the things that Sony is absolutely pitiful about. They would sooner let a victim of a scam get screwed over than risk someone scamming them.

 

[mosdl]

Added a couple of updates to the OP for clarity. Not sure what to expect to hear tonight. For now I am focusing on my own security.

Did a malware bytes scan and don't detect anything strange. Still planning on doing a reformat.



Already tried this. Doesn't work.

Reformat is probably not needed, most likely your username/password got leaked by some site and those 2 worked in PSN to get access to your account.

 

[The Elite]

Reformat is probably not needed, most likely your username/password got leaked by some site and those 2 worked in PSN to get access to your account.

Yeah, I don't see any signs of a keylogger.

I am concerned it may be on my work computer if there is something.

 

[BiGBoSSMk23]

Man this is creepy.

How could they have accessed your account just like that?

 

[shotgunbob04]

So. I am in waiting mode.

In the meantime I have changed my password and financial information from PSN.

What else can I do?

I imagine they are going to download the games on my PSN if they can (not sure if they can if they can't log into my PSN account now that the password has been changed.).

They probably download my stuff onto their PS4 and then play it on their PSN account. They had download Battlefield: Hardline, DriveClub and Street Fighter V.

What do I lose by not having my PS4 set as primary? What else can I do to protect my PSN account?

Edit: I think I can edit their device nickname. This could be fun.

When your console isn't activated as primary:

•Your game saves don't auto-upload if you have PS Plus
•Other accounts on that PS4 can't play your games
•You can't play your digital games offline
•Other accounts on the console won't benefit from your PS Plus

You'll have to manually upload your game saves to the PS Plus server until you can activate your PS4 as primary again.

Like others have said, the important thing is that you still have control of your account, and that you changed your password right away. This should mean that the other person will be prompted to enter the new password, in order to sign into PSN. But I'm not sure if that means your games that they previously downloaded will be inaccessable until they sign in on your account again, or if they'll still be accessable solely because their PS4 is registered as your account's primary.

 

[MilesTeg]

If this person was able to login to your account, why wouldn't he have changed the login information?

 

[The Elite]

Man this is creepy.

How could they have accessed your account just like that?

They had to get my password. It's unnerving.

I recall changing it after the hack. I used different passwords on different services so I don't see anything happening anywhere else that is a cause for concern. Still, I am probably going to go through everything at this point.

If this person was able to login to your account, why wouldn't he have changed the login information?

Didn't change login info. Didn't use the paypal I had tied to the account.

 

[5taquitos]

If this person was able to login to your account, why wouldn't he have changed the login information?

You don't cut off the chicken's head if it's still laying eggs.

 

[Gamer @ Heart]

If this person was able to login to your account, why wouldn't he have changed the login information?

Because he didn't want the OP to become aware of the telheft and keep getting new games as he buys them maybe?

 

[rpmboy]

If this person was able to login to your account, why wouldn't he have changed the login information?

To not raise suspicion? OP would have gotten an email about a password change and an email change probably requires the current email to confirm it, but the person could have ghost used OP's account for quite a while if OP didn't accidentally stumble into it via Remote Play.

 

[CREMSteve]

If this person was able to login to your account, why wouldn't he have changed the login information?

Because as long as the OP kept buying new games, the thief gets to play them.

 

[The Elite]

When your console isn't activated as primary:

•Your game saves don't auto-upload if you have PS Plus
•Other accounts on that PS4 can't play your games
•You can't play your digital games offline
•Other accounts on the console won't benefit from your PS Plus

You'll have to manually upload your game saves to the PS Plus server until you can activate your PS4 as primary again.

Like others have said, the important thing is that you still have control of your account, and that you changed your password right away. This should mean that the other person will be prompted to enter the new password, in order to sign into PSN. But I'm not sure if that means your games that they previously downloaded will be inaccessable until they sign in on your account again, or if they'll still be accessable solely because their PS4 is registered as your account's primary.

Thanks for the info. Really frustrated about the PS Plus saves. I tend to play always connected and don't use other accounts so I can live without those.

Ultimately though, this shit needs to be fixed. Waiting for a response from Sony now but I don't I won't just be ok with "We can't do anything." They are allowing someone to use content purchased on my account. That's not ok. That's criminal.

 

[ZOONAMI]

This is not RP issue. In fact, RP helped him to identify a issue.

Does turning off the remote play setting on my ps4 not prevent someone from remote playing into my ps4?

 

[PodcastFips]

In past threads about this topic we usually had someone with connections to Sony's customer service. Anyone know who I'm talking about? Maybe you could send him a PM then.

 

[MilesTeg]

You don't cut off the chicken's head if it's still laying eggs.

So the sole purpose of this was to play OP's games? OP, do you buy a lot of digital games? Maybe this person saw your trophy list?

 

[The Elite]

So the sole purpose of this was to play OP's games? OP, do you buy a lot of digital games? Maybe this person saw your trophy list?

Trophy list wouldn't confirm digital versus physical.

I do buy a lot of digital though.

 

[BahamutPT]

Have you tried deactivating the Russian console from your account through Remote Play? Just go into the other guy's console settings and do it if you still can.

 

[agc]

I had this same issue the other day (minus Remote Play part). I just noticed, when I was offline, I couldn't play any of my games at all. Logged on the website and another PS4 was my primary along with a PSP system and the web deactivation was recently used.

I called Sony and explained that my account got accessed by someone not me and that I had changed my password before I called. He mentioned the form but said he would bypass it and notify the "specialists" directly. Took them about 24 hours to deactivate it.

 

[Hjod]

I just checked the SEN site, someone deactivated my console as primary in the last six months. My friend had the primary and I got a hold of him and it was not primary anymore. Well shit.

Changed my psn password, changed my email password and enabled a pin code to log in to the ps4 (don't know of that only works locally).

Well I'm joining you up shit creek OP.

 

[spannicus]

Dark web maybe

 

[Sub Zero]

Seems like that every week someone's PSN account from here gets compromised, and SONY for some bullshit reason still refuses to implement two factor verification

 

[MilesTeg]

Trophy list wouldn't confirm digital versus physical.

I do buy a lot of digital though.

Well there are a lot of games that are digital only.

 

[rob305]

it would be hilarious if you could wipe the russian guys console and then change your password

 

[The Elite]

Have you tried deactivating the Russian console from your account through Remote Play? Just go into the other guy's console settings and do it if you still can.

Can't get back in. I keep trying.

 

[Trogdor1123]

Feels like I should check as well. Crazy stuff.

 

[Aureon]

I set it up on Wednesday using a code created directly from my PS4. Manually registered it on the PC app. Worked like a charm then.

Today, it was taking a long time to connect. Then suddenly, I was I was on someone else's PS4.

It very much sounds like your PC is compromised.

Pass a Malwarebytes deep scan first thing in the morning.

 

[PodcastFips]

Seems like that every week someone's PSN account from here gets compromised, and SONY for some bullshit reason still refuses to implement two factor verification

At least they could provide the primary console some more power over your account. It's much more likely that the rightful account holder gets his account compromised, rather than his PS4 stolen.

 

[The Elite]

it would be hilarious if you could wipe the russian guys console and then change your password

If I get back in I am fucking shit up on my way out.

 

[Grylvak]

Holy shit, that's scary. Best of luck to you man. Hopefully Sony can get something done.

 

[Hjod]

I'll call the support on monday when they open, other people have got them to deactivate even if it was used within the six months.

Thanks op for making me aware of this.

 

[BahamutPT]

Can't get back in. I keep trying.

Damn, that sucks. Hope you get an opening, get your account back and fuck his shit up.

 

[PodcastFips]

If I get back in I am fucking shit up on my way out.

Have you tried to call them again? Try to get someone else on the phone there.

Be polite, offer them to cross check your payment methods, offer them to tell your PS4's serial number, be proactive.

 

[The Elite]

It very much sounds like your PC is compromised.

Pass a Malwarebytes deep scan first thing in the morning.

Just did one scan. Doing another custom scan now.

Have you tried to call them again? Try to get someone else on the phone there.

Be polite, offer them to cross check your payment methods, offer them to tell your PS4's serial number, be proactive.

Just trying to make sure everything else is secure at the moment. They had asked me if I still had proof of payment for my PS4, which I no longer have since I bought it on launch day. Corresponding payment info is a good idea though. I will offer that as an option. I clearly have enough to prove I am the rightful owner of the PSN ID, they should be able to accommodate me.

 

[napalmjam]

Damn this sucks OP =( sounds those dodgy psngame.org things were they sell your account after deactivating it then a buyer sets it to primary and you don't find out till your offline . Hope you get this sorted man .

 

[Clockwork5]

Thanks for that. So basically they have access to my games even though my password has been changed simply because their console is set to primary.

As long as they don't have access to my password my account info should be safe right now?

I swear GAF knows more shit about this than Sony does.



Yeah. I am expecting to get more run around by Sony. I will need to make them understand they are essentially aiding criminal activity by not simply deactivating a PS4.

It was super easy to deactivate all consoles from my account when my login credentials were compromised. A 5 minute call to customer service. I wonder why you are having issues...

 

[bombshell]

it would be hilarious if you could wipe the russian guys console and then change your password

I'm not in a position right now to set up a remote play connection, but I'm pretty sure all access to any kind of settings is locked in remote play.

 

[The Elite]

It was super easy to deactivate all consoles from my account when my login credentials were compromised. A 5 minute call to customer service. I wonder why you are having issues...

Could be the service rep. It's obvious I am going to have to keep calling back at this point.

 

[BahamutPT]

I'm not in a position right now to set up a remote play connection, but I'm pretty sure all access to any kind of settings is locked in remote play.

Just tried it with my Vita. As long as you don't mess with something that breaks your connection to the console, it seems you can change all the settings (I deleted a game from my console).

 

[PodcastFips]

Just trying to make sure everything else is secure at the moment. They had asked me if I still had proof of payment for my PS4, which I no longer have since I bought it on launch day. Corresponding payment info is a good idea though. I will offer that as an option. I clearly have enough to prove I am the rightful owner of the PSN ID, they should be able to accommodate me.

Also offer them a copy of your ID and driver's license, together with payment information. You should be able to convince them by being open-minded about this kind of stuff.

 

[Vilix]

Does Sony not send a confirmation to your email whenever there's a change to your account?

 

[UpDownLeftRight]

Just tried it with my Vita. As long as you don't mess with something that breaks your connection to the console, it seems you can change all the settings (I deleted a game from my console).

Wouldn't that mean OP couldn't deactivate the system as primary if he got back in?

 

[PodcastFips]

Does Sony not send a confirmation to your email whenever there's a change to your account?

They do not notify you if your primary PS4 was changed, though. Which is a huge flaw imo.

 

[The Elite]

Does Sony not send a confirmation to your email whenever there's a change to your account?

They have when I changed my password and added a pin. Apparently they don't when all the consoles on your account are deactivated.

That's fucking wizard.

 

[Alebrije]

If someone does this to my PS4 and I have my credit card information on the account can he/she buy or use my credit card ??

 

[TimeEffect]

Can you actually Remote Play to deactivate his PS4 as primary? Sounds like the best option.

you should wait until it's like 3 am in Russia or something and deactivate.

 

[PodcastFips]

If someone does this to my PS4 and I have my credit card information on the account can he/she buy or use my credit card ??

Yes.

Can you actually Remote Play to deactivate his PS4 as primary? Sounds like the best option.

you should wait until it's like 3 am in Russia or something and deactivate.

The russian guy should be smart enough to disconnect the console from the internet, so...