AccountShark
Back to Blog
TipsBuyingGuide2026

7 Common Mistakes When Buying Gaming Accounts (And How to Avoid Each in 2026)

Kiran ValeJan 3, 2026630 views
7 Common Mistakes When Buying Gaming Accounts (And How to Avoid Each in 2026)
A comprehensive guide to the 12 most costly mistakes buyers make in the gaming account secondary market — and exactly how to avoid each one. Read this before…

Why These Mistakes Matter

Buying a gaming account should be straightforward: find the account, pay, receive access, play. But the secondary market for gaming accounts is messier than most buyers realize, and the same handful of mistakes account for the overwhelming majority of failed transactions. We've seen thousands of purchases across WoW, OSRS, FFXIV, Fortnite, and other titles — the patterns repeat constantly.

This guide walks through the most common mistakes buyers make, what they actually cost, and how to avoid them. Read this before you buy an account from anywhere — us included. A careful buyer is a safer buyer, and the questions you should be asking don't change based on which marketplace you're using.

The stakes have risen every year as accounts have accumulated more rare items. An original-owner WoW account with multiple legacy raid mounts, meta achievements from past expansions, and a complete transmog wardrobe is genuinely irreplaceable — you cannot simply re-farm most of what's on it, because a lot of the content is gone permanently. That makes every purchase consequential, and it makes the cost of a bad transaction much higher than the sticker price.

1. Buying from Unverified Sources

Peer-to-peer trades on Discord servers, Reddit, forums like OwnedCore, or random listings on Craigslist are still surprisingly common — and they're where the worst outcomes happen. The pitch is always the same: "skip the marketplace fees, pay me directly, I'll save you money." What actually happens:

  • No escrow. You pay, then hope the seller delivers.
  • No verification. You're trusting screenshots that may be edited or recycled from a different account.
  • No recourse. If the seller disappears, there's no platform to dispute with and no chargeback insurance.
  • No warranty. If the account gets recovered by the original owner six weeks later, you have no one to contact.
  • No identity tie. The seller's Discord handle or Reddit username is disposable. A real marketplace has verified seller identities and payment history.
The FTC has documented online marketplace scam patterns for over a decade, and direct P2P gaming account trades match every high-risk profile they describe. The FBI's Internet Crime Complaint Center logs tens of thousands of non-delivery scam reports annually, and gaming-account fraud is a category the bureau tracks.

A specific pattern we see constantly: a buyer finds a "great deal" on a Discord listing, pays via PayPal Friends & Family, loses the account to an original-owner recovery six weeks later, and the Discord account has been deleted. PayPal won't reverse F&F transfers because they're explicitly excluded from buyer protection. The buyer's only option at that point is filing a report with the IC3 and accepting the loss.

How to avoid it: use a verified marketplace with real escrow. If a seller on a forum is pushing to go off-platform, that's not a way to save money — it's a way to become their next mark. Marketplace fees pay for verification, escrow, warranty, and dispute resolution. Removing them shifts the cost from cash to risk. See our account verification guide for what real verification looks like.

2. Skipping Verification Checks

Even on legitimate marketplaces, buyers sometimes ignore the verification information and just buy based on the photo and price. The listing says "100% verified" in the headline but the details don't actually match what's shown. Common discrepancies:

  • Character screenshots from months ago that don't reflect current state
  • Armory links that go to generic profile pages without meaningful data
  • "Verified" badges that only mean the seller has a verified email, not that the account has been reviewed
  • Inventory screenshots taken from a different alt, with items that aren't on the main character being advertised
  • Achievement points and collection totals that are claimed in the description but don't match what appears in-game
  • Screenshots of bank contents with items that were subsequently sold on the auction house before the listing went live
Before you buy, open every armory link, cross-reference character names and levels, and make sure the current listing matches the seller's claims. For games like WoW, the Battle.net armory gives you live data. For OSRS, the hiscores are authoritative. FFXIV's Lodestone serves the same purpose. For anonymous verification of WoW accounts without the seller handing over credentials, third-party profile tools like Phantom Armory pull live data from Blizzard's API and show mounts, pets, achievements, titles, and rare items in a single view — if a listing's claims don't match an independent profile lookup, you have a concrete reason to pause.

How to avoid it: treat every claim as something to verify independently. If the marketplace makes verification data easy to cross-check, that's a good sign. If they don't, that's a much bigger red flag than the listing's surface appearance. Budget ten minutes per listing to do this cross-check. It is the single highest-ROI use of your time in the entire purchase process.

3. Not Checking Ban History

Every major game tracks penalty history. Bans, suspensions, chat restrictions, and open appeals all carry over to whoever buys the account — and a suspended account can sit dormant for years before the suspension surfaces when the new owner tries to log in. There is no statute of limitations on account penalties; a ban from a 2018 exploit will still be there in 2026.

  • WoW: ban history lives in Battle.net Account Management. Look for "Action: Closure" or "Action: Suspension" and note references to exploitative behavior, RMT, or botting.
  • OSRS: Jagex publishes ban appeals publicly in some cases. Many botting cases result in temporary mutes rather than full bans — read carefully.
  • League of Legends and Valorant: Riot's terms of service document penalty triggers; the Valorant support portal has specific penalty guidance.
  • Fortnite: Epic accounts carry cross-game bans. Epic doesn't publish a ban history page — have the seller log in and screenshot support case history.
  • FFXIV: Square Enix suspensions affect all characters at once. Lodestone doesn't show suspension state — rely on live login.
  • Diablo 4 and Overwatch 2: covered by Battle.net penalty history. A ban on one Blizzard product can affect the whole account.
  • Lost Ark: Smilegate runs separate enforcement from Steam. A clean VAC record doesn't mean the Lost Ark account is clean.
Buyers often skip this step because it feels awkward. Do it anyway. Static screenshots can be photoshopped — ask the seller for a live screen-share or short screen recording of them scrolling through the history.

How to avoid it: require a screenshot or live-share of the seller's penalty history before you buy. Budget 10 extra minutes for any purchase above $100. For purchases above $1,000, insist on a live video call with screen-share.

4. Ignoring Original Owner Status

This is the single biggest mistake in the account-buying space, and it's the one that causes the most unrecoverable losses. The "original owner" is whoever created the account and registered the original recovery email, security questions, and phone number. Non-original-owner accounts are permanently vulnerable to account recovery by the actual creator.

Here's the nightmare scenario: you buy a WoW account from a seller who seems legitimate. They transfer credentials, you change the password, you even change the recovery email. Six months later, the original creator contacts Blizzard, proves they created the account, and Blizzard's account recovery process returns it to them. The current-owner marketplace transaction isn't legally enforceable against the original owner's ownership claim, because almost every publisher's TOS forbids account transfers — the original owner is the only party the publisher recognizes.

This is why original-owner accounts typically cost 30-50% more than non-original-owner accounts with otherwise identical features. That premium is the risk differential — an insurance premium against the single largest loss scenario in this market.

What original-owner proof looks like:

  • The original confirmation email from when the account was created (with registration date visible)
  • Payment records in billing history matching the seller's identity
  • CD key / physical-box proof for older accounts that predate digital distribution
  • The seller's ability to answer legacy security questions without prompting
How to avoid it: ask explicitly whether the account is original owner, and ask to see registration date proof. If you're buying non-original-owner, understand you're accepting permanent recovery risk and price accordingly. See our verification guide.

5. Skipping the Security Changeover

Once you have access to the account, you have a short window to lock it down before something goes wrong. The security changeover is a sequence of steps, and missing any one of them leaves a door open for the seller or the original owner to recover the account.

The full changeover:

  • Change the password from the one the seller provided
  • Change the recovery email to one you control (that the seller has never seen)
  • Update security questions to new answers only you know
  • Enable 2FA using a new authenticator app on your device
  • Update the registered phone number to yours
  • Review active sessions and log out all non-you devices
  • Check payment methods — remove any that aren't yours
  • Review connected apps and third-party integrations — revoke anything unfamiliar
  • Remove linked social accounts (Facebook, Google, Discord, Twitch) that aren't yours — these are recovery vectors
  • Review email forwarding rules on the recovery email — silent forwarding is a common attack
This should happen within the first hour of receiving access. Sequence matters: change the password first to invalidate the seller's active sessions, but change the recovery email before enabling 2FA since email changes are 2FA-sensitive on most platforms.

How to avoid it: do the changeover immediately, in full. Save screenshots of every step as evidence for warranty claims later. Create a reusable checklist document — after a couple of transactions it becomes muscle memory.

6. Not Enabling 2FA Immediately

This deserves its own point because it's the single highest-leverage security step and most buyers delay it thinking they'll do it later. They don't.

Two-factor authentication with an authenticator app (Google Authenticator, Authy, or the game's own authenticator) makes account recovery attempts from strangers orders of magnitude harder. Without 2FA, anyone with your email password can reset your game account. With 2FA tied to a device you physically control, they can't. Google publishes a 2FA explainer that applies broadly.

For WoW, Blizzard's mobile authenticator provides in-game bonuses. Prefer authenticator apps over SMS-based 2FA — SMS can be intercepted via SIM-swap attacks, a well-documented vector for gaming account theft.

One nuance that trips up buyers: several publishers have both "email 2FA" and "authenticator 2FA" options. Email 2FA is not enough, because the email account itself is typically the weakest link. Go straight to authenticator-based 2FA, and store the backup codes in a password manager immediately.

How to avoid it: set up 2FA within 15 minutes of receiving account access. Save backup codes somewhere only you control — password manager, encrypted note, or printed in a safe — not in an email or a browser bookmark.

7. Ignoring Warranty and Buyer Protection Terms

"Warranty" and "buyer protection" on gaming marketplaces vary wildly. Some are real, enforceable policies. Others are marketing copy with no substance. Before you buy, understand exactly what you're covered for and for how long.

Key questions:

  • What failure modes are covered? Bans that weren't disclosed? Recovery by the original owner? Missing items? Fake screenshots?
  • What's the timeframe? 30 days, 90 days, lifetime? AccountShark's warranty and buyback policy are documented publicly.
  • What's the remediation? Full refund? Partial? Store credit? Replacement account?
  • Is the warranty transferable? If you resell, does coverage pass to the next buyer or void?
  • Who actually pays out? The marketplace itself or the seller via mediation? A seller-funded warranty is only as good as the seller's willingness to pay.
If the marketplace can't give you clear answers, their warranty isn't real. Look for marketplaces that publish warranty policies at stable URLs you can screenshot before buying. Policies hidden behind a login or only visible in order-confirmation emails are a sign the operator wants the option to change them silently.

How to avoid it: read the warranty terms before you buy. Save them. If a dispute happens, the documented terms at the time of purchase are what apply.

8. Focusing Only on Price

The cheapest listing is almost never the best value in this market. Dramatic price differentials usually mean one of:

  • The account has an undisclosed issue (ban, suspension, missing items, non-original-owner status)
  • The seller is planning to recover it post-sale (they don't care about the discount because they're planning to get the account back anyway)
  • The marketplace has lighter verification and the seller knows their listing wouldn't survive stricter review
  • The account's stats don't match what the listing claims
  • The listing has been relisted repeatedly and the seller has dropped the price because every previous buyer rejected it after inspection
Compare a low-priced listing against the typical range for similar accounts. If it's 30-50% below market, something is wrong. Occasionally sellers legitimately need quick cash and price aggressively, but that's the exception. Use cross-marketplace browsing to establish a floor — if no other marketplace has a comparable account under a given price, a listing below that price is statistically almost certainly compromised.

How to avoid it: get a sense of market prices before you shop. Browse 5-10 similar listings to understand the range. Treat outliers as suspicious rather than as bargains. For WoW specifically, our value calculator aggregates thousands of historical sales to produce a fair-market estimate you can use as a reference. OSRS buyers can use our OSRS value calculator for the same purpose.

9. Not Understanding What's Included

Listings describe what's on the account at a moment in time. Buyers sometimes skim the description and assume things are included that aren't. Common surprises:

  • Mounts/skins/cosmetics that look rare in screenshots but aren't actually on the account
  • Gold/currency amounts that fluctuate and may be partially spent by transfer
  • Subscription status that expires shortly after purchase
  • Alt characters shown in screenshots but not actually included in the sale
  • Items in auction house/bank that are listed, sold, or removed before transfer
  • Reagent bank or void storage items that are not visible in a standard character preview
  • Pet/mount collection totals that include duplicates or seasonal placeholders
  • Linked games on a shared launcher (a Steam account might include four games but only two are licensed to the account owner, with the others being family-sharing temporary access)
Read every line of the listing. Ask specific questions about anything ambiguous. Get the answers in writing through the marketplace's messaging system so there's a record. For any rare item that was central to your decision to buy (a specific mount, a limited tabard, a feat-of-strength achievement), confirm its presence at handover before releasing escrow.

How to avoid it: make a list of what you're expecting based on the listing. At handover, verify each item is actually present before confirming escrow release.

10. Rushing the Process

A legitimate seller will never pressure you to rush. Any urgency is a fraud pattern — the seller wants the escrow window to close, or the buyer protection period to expire, before you realize something's wrong.

Variations of the rush tactic:

  • "I have three other buyers interested, I need an answer in an hour"
  • "My other account is banned, I need this money today"
  • "Let's just skip the escrow to save time"
  • "Can you confirm escrow release tonight? I need the funds"
  • "The listing goes offline at midnight, decide now"
  • "The seller discount code expires in 20 minutes"
None of these are reasonable requests. A legitimate seller understands the process and works within it. Artificial scarcity and artificial deadlines are textbook social-engineering techniques — the general pattern is well-documented in the security literature) and it applies as much to gaming-account fraud as it does to phishing.

How to avoid it: take the time the process requires. Escrow windows exist for your protection. Don't shorten them for anyone.

11. Moving Off-Platform Mid-Transaction

Once you're on a verified marketplace, staying on-platform is what protects you. Sellers occasionally suggest moving the rest of the transaction to Discord, PayPal Friends & Family, or wire transfer to "save fees" or "simplify things."

What they're actually doing:

  • Removing escrow protection
  • Removing chargeback protection (PayPal F&F explicitly isn't covered by buyer protection; PayPal documents this clearly)
  • Moving the transaction outside the marketplace's warranty coverage
  • Creating a situation where your only recourse if something goes wrong is to contact law enforcement
The marketplace fees exist because the marketplace is doing work. Verification, escrow, warranty, dispute resolution — those cost money and that cost is the fee. Saving the fee means you're now paying in risk instead of cash. Even if the fee is 10% and the transaction is $1,000, you are not saving $100 by going off-platform — you are wagering the full $1,000 to maybe pocket $100, with odds that are not in your favor.

How to avoid it: complete every transaction fully on-platform. If a seller insists on going off-platform, walk away and report them to the marketplace.

12. Not Saving Transfer Evidence

When something goes wrong, evidence determines outcomes. Buyers who save nothing have nothing to show when they need to file a dispute. Screenshots, transaction records, and communication logs all matter.

Save:

  • The full listing page (save as PDF, not just a screenshot)
  • All marketplace messages with the seller
  • Screenshots of the account state at handover (character screen, inventory, bank)
  • Email confirmations of the transaction
  • 2FA setup confirmations and recovery-email-change records
  • Any promises or disclosures the seller made in chat
  • Payment receipts from whichever provider moved the money
  • A short screen recording of the first login, showing inventory at the handover moment
Store these outside the marketplace. Marketplace data can be edited or deleted; your local copies can't. If you file a chargeback or a complaint with the FTC or IC3, these artifacts determine whether your claim moves forward.

How to avoid it: take screenshots throughout the process. It takes 30 seconds and can save you hundreds of dollars later.

13. Buying from Resellers Instead of Original Owners

Not every seller on a marketplace is the account's original creator. Many listings are posted by resellers who bought the account wholesale from somebody else, flipped it with a markup, and often don't hold any of the original credentials or proof-of-creation documents. This structurally limits how much fraud protection the buyer can get, because the reseller cannot provide anything the original owner could.

Telltale reseller signs:

  • Many unrelated listings (multiple games, regions, price points) rather than one specific account
  • Generic description language that appears in several of the same seller's listings
  • Cannot answer basic questions about the account's play history ("which raids did you clear in Wrath?")
  • Claims "OG" status but cannot produce the original email or billing records
  • Scripted, fast response times — you're talking to someone running a dozen conversations
Resellers aren't automatically bad. Many operate legitimately as a middleman. But the buyer must understand they're one layer from the source, and reseller-provided warranty is only as strong as the transfer paperwork the reseller holds.

How to avoid it: ask early: "Are you the original owner, or did you acquire this before listing?" Honest resellers will tell you. If the seller claims original-owner but fails a basic memory test, you know what you're dealing with.

14. Misunderstanding How Account Recovery Works Post-Sale

Most buyers assume that once they've changed the password, email, phone, and 2FA, they're safe. That assumption is only partially correct. Publisher-side recovery does not rely on current credentials — it relies on provable identity. If the original owner can prove they created the account (billing records, CD key, government-ID-matched purchases), most publishers will return the account to them regardless of what the current credentials are.

What this means in practice:

  • Changing every credential does NOT prevent an original-owner recovery
  • Changing every credential DOES prevent a casual seller-side take-back
  • The window for original-owner recovery is effectively unlimited — no statute of limitations
  • Publishers vary: Blizzard is thorough, Riot is aggressive, Jagex varies by case
Non-original-owner purchases carry permanent tail risk. It may be small (if the original owner has moved on) but it's never zero. It's more like a long-term lease with uncertain end date than an outright purchase.

How to avoid it: prioritize original-owner accounts for high-value purchases. For low-value purchases where a recovery is merely annoying rather than catastrophic, non-original-owner is reasonable. Never spend more than you can afford to lose outright on a non-original-owner account.

15. Assuming Linked Games and Licenses Transfer

An account on a launcher (Battle.net, Epic, Steam, Riot, Square Enix) can hold many different game licenses, expansions, and DLCs. Buyers routinely assume the entire library transfers — but that's not guaranteed. Some licenses are tied to the payment method that purchased them and can be reclaimed or disputed after transfer. Some are redeemed from one-time CD keys that don't survive a recovery-email change if the publisher audits.

Specific cases:

  • Battle.net: WoW, Diablo, Overwatch, and StarCraft licenses are generally stable, but recent expansion purchases on a card the seller still controls can be charged back, at which point Blizzard removes the license
  • Steam: Steam accounts officially cannot be sold ever, and family-sharing licenses do not transfer
  • Epic: Fortnite and other Epic licenses can be revoked if purchased with a compromised payment method
  • Riot: RP and Valorant Points are virtual currency with no transferable ownership
How to avoid it: verify every license you care about at handover, and wait out the seller's card-chargeback window (typically 90-120 days) before considering the account stable.

16. Ignoring Regional and Server Restrictions

A WoW account on the EU Battle.net region cannot be freely moved to the NA region — Blizzard treats them as separate services. An OCE-region FFXIV character cannot always be transferred to a JP data center without meeting specific eligibility criteria. A North American League of Legends account cannot be consolidated with a European account.

Buyers sometimes buy an account in one region assuming they can switch; they can't, and the value of the account is different once the region is locked.

  • WoW: NA and EU Battle.net are separate walled gardens. Blizzard does not offer cross-region character transfer.
  • FFXIV: data centers allow intra-region travel but accounts are tied to the region of purchase.
  • League of Legends: NA, EUW, EUNE, KR, etc. are fully separate. No cross-region account transfer.
  • Lost Ark: NA West, NA East, EU Central, EU West, SA don't share characters.
  • OSRS: worlds are global; accounts are effectively region-agnostic.
How to avoid it: confirm the region before buying and price accordingly. A NA buyer purchasing an EU account should factor in latency and the jurisdictional complexity of any dispute.

17. Not Checking for Active Subscriptions That Auto-Renew

An account with an active subscription is sometimes advertised as "comes with six months remaining" — but if that subscription is auto-renewing against the seller's payment method, two problems arise. First, the seller can cancel it at will. Second, when the seller's card eventually declines, the subscription lapses. Worse, if the seller has set up recurring billing and then disputes the underlying charge, Blizzard or whichever publisher can claw back the subscription time from the account.

Remove all of the seller's payment methods immediately after transfer. Add yours only once you're confident the transfer is stable and the chargeback window has passed. If the listing advertised a specific amount of game time, screenshot the remaining balance at handover — if it evaporates later, that's your evidence for a warranty claim.

How to avoid it: cancel auto-renew on any subscription the seller left active, wait out the chargeback window, and then set up your own billing. Don't let the seller's recurring payment continue simply because it's convenient.

18. Paying via Untraceable Methods on a Site Without Escrow

Some marketplaces accept crypto, gift cards, or wire transfers exclusively. Those payment methods are fine when combined with strong escrow and warranty. They are catastrophic when used in direct peer-to-peer deals, because there is no reversal mechanism. Once the crypto transaction confirms on-chain or the wire clears, the money is gone.

Payment methods and buyer protection status:

  • Credit card via a legitimate marketplace: strong — chargeback rights plus marketplace dispute resolution
  • PayPal Goods & Services: moderate — buyer protection exists but excludes some digital goods
  • PayPal Friends & Family: none — explicitly not covered
  • Zelle / Venmo / CashApp: none — peer-to-peer with no buyer-side dispute mechanism
  • Wire transfer: none — bank wires are final
  • Cryptocurrency: none — on-chain transactions are irreversible
  • Gift cards: none — and often a sign of outright scam
How to avoid it: if a payment method is required that has no reversal path, the marketplace must provide strong escrow and warranty to compensate. If neither is present, walk away.

19. Buying Around Patches That Devalue Rare Content

Publishers occasionally reintroduce, re-release, or make farmable previously unobtainable items. A Legion Mage Tower appearance that was genuinely rare for years became farmable again in Dragonflight Season 3. A long-vaulted holiday mount can reappear during an anniversary. Entire expansion transmog sets have had their availability changed over the years.

Buyers who don't track these changes end up paying "rare-item premium" for content that's about to become common. The reverse also happens — items that are currently farmable get vaulted in the next major patch, spiking their secondary-market value overnight.

Specific cases:

  • WoW anniversary events often re-release previously limited mounts and toys
  • Fortnite item shop rotations can return a "rare" skin at any time, voiding its premium
  • FFXIV seasonal events rerun on multi-year cycles
  • OSRS economy shifts when new bosses drop items that compete with existing BiS gear
How to avoid it: before paying a rarity premium, search patch notes and community speculation for the item. If it's been hinted at as returning, discount the premium. Our blog tracks returning content per-patch for WoW.

20. Buying Accounts with Linked Social Logins You Don't Control

Several games allow login via Facebook, Google, Apple, Discord, or Twitch — meaning someone holding the seller's social account can recover the game account even if you've changed the password and email. Unlinking social logins is a mandatory step in the security changeover, and some games make it harder than it should be.

The specific risk: you buy an account, change the Blizzard email and password and phone and 2FA — but the account is still linked to the seller's Twitch account via the "connected accounts" page, and the seller can initiate a "recover via linked Twitch" flow six weeks later.

Common linked-social recovery vectors:

  • Fortnite/Epic: Facebook, Google, Apple, Xbox, PlayStation, Switch
  • Riot games: Google, Apple, Xbox, PlayStation
  • Battle.net: Twitch (for Drops), PSN, Xbox Live
  • FFXIV: Steam (for Steam-purchased copies, permanently)
  • Lost Ark: Steam — permanently linked, cannot be unlinked. A Lost Ark account is effectively an extension of its parent Steam account.
How to avoid it: audit the connected-accounts panel as part of the security changeover and unlink everything you don't control. For games with permanent social linkage (Lost Ark + Steam, Steam-purchased FFXIV), the underlying Steam account is part of the purchase.

21. Skipping the 2FA Handoff Step

A specific failure mode within the security changeover deserves its own callout: the 2FA handoff. When the seller has 2FA enabled and you're taking over, there's a short window where the account is briefly exposed. If you simply have the seller disable their 2FA and email you the password, anyone with that email can access the account during the gap.

The right sequence:

  • Seller disables their 2FA (they need to enter their current 2FA code to do this)
  • Seller provides you the current password
  • You log in immediately and change the password
  • You enable a new 2FA using YOUR authenticator app
  • You verify the new 2FA works by logging out and back in
  • You save the new 2FA backup codes in a location only you control
This whole sequence should happen in under 10 minutes with both parties live on chat. If the seller is not available in real time to do a live handoff, postpone the transaction until they are.

How to avoid it: schedule the handoff as a synchronous call with the seller. Don't accept asynchronous "I'll disable 2FA tonight and email you the password" handoffs. Those are exactly the gap the attacker needs.

22. Not Reading the Marketplace Warranty Fine Print

Marketplace warranties often contain exclusions and waiting periods that buyers discover only after filing a claim. Common gotchas:

  • "Must file within 24/48/72 hours of discovery": miss the window, lose coverage
  • "Does not cover publisher policy changes": some warranties exclude publisher-side bans unrelated to the transfer itself
  • "Requires completed security changeover": if you didn't change the password within the required window, coverage voids
  • "Excludes promotional listings": sale-priced listings may have reduced coverage
  • "Store credit only": payouts as credit toward future purchases, not cash
  • "Pro-rated by time elapsed": partial refund if the account is recovered later in the warranty period
Our own warranty, refund policy, and buyback program are published at stable URLs — read them before any high-value purchase.

How to avoid it: read the warranty policy at a stable URL before buying. Screenshot it. If the page changes between purchase and claim, your screenshot establishes which version applies.

23. Buying in Games Where the Publisher Is Actively Hostile to Transfers

Some publishers are lenient about account transfers; others are actively hostile. The difference dramatically affects the risk profile of the purchase.

  • Blizzard (WoW, Diablo, Overwatch, Hearthstone): forbidden in EULA, inconsistent enforcement. Clean transfers usually survive long-term.
  • Riot (League, Valorant, TFT): actively aggressive. Riot bans for sale or transfer when detected, and anti-cheat flags account-sharing patterns.
  • Epic (Fortnite, Rocket League): increasingly strict, automated flagging of unusual logins. No appeals from non-original owners.
  • Jagex (OSRS, RuneScape): allows some changes of ownership with documentation, but botting/RMT sweeps can hit transferred accounts.
  • Square Enix (FFXIV): forbids transfer, enforcement is rare.
  • Smilegate (Lost Ark): no public policy, lean stricter.
  • Grinding Gear Games (PoE, PoE2): modest enforcement; transfers survive if no RMT.
The tighter the publisher, the more non-original-owner risk you're taking.

How to avoid it: calibrate by publisher. For Riot games, original-owner is effectively required above a few hundred dollars. For Blizzard games, non-OO is workable with tail risk. For FFXIV and PoE, non-OO is comparatively safer.

24. Getting Tricked by Bundle Pricing vs. Individual Value

A common listing tactic: "Includes 5 rare mounts + 3 legacy titles + TCG card + full PvP set — $2,500." The bundle seems like a deal until you realize only one of the five mounts is actually rare, two of the titles are trivially obtainable, and the PvP set is a set any active player has.

Always separate the value drivers from the filler. Identify the two or three items on the account that you actually care about, and compare the listing's price to what a clean account with just those items would cost. If the bundle is 20-30% cheaper than the sum of the individual items, it's a real bundle discount. If it's priced the same as a clean account with just the rare items, the filler is worth zero and you're paying for rare items at rare-item prices.

How to avoid it: price the rare items individually using auction records or other listings, then add a modest discount for the filler. If a seller's bundle pricing is significantly above the rare-items-only pricing on a comparable listing, you're paying for nothing.

Per-Game Caveats

Every game has its own mix of verification tools, recovery policies, and enforcement behavior. The broad advice above applies universally, but these per-game notes can save you from the specific pitfalls of each title.

World of Warcraft

Use the live Battle.net Armory to verify every character against the listing's claims. Classic Era, TBC, Wrath, Cata, and MoP Classic are each separate sub-accounts on the same Battle.net, so a "Classic + Retail" listing should specify which Classic realm type. Unobtainables like MoP Challenge Mode sets and WoD Challenge Mode weapons are permanent value drivers — verify them individually, not just from a thumbnail. Feats of Strength achievements (rare PvP titles, legacy cloaks, removed raid achievements) must be checked individually. Gold listings should be verified against Blizzard's per-character gold cap; "10M gold" sometimes means the character plus alt bags, not a single stack. See WoW account, Classic Era, TBC, and MoP Classic listings.

Old School RuneScape

The official OSRS hiscores are authoritative and cannot be faked — cross-reference every listing before buying. OSRS has been migrating to the new Jagex Account system; older unmigrated accounts are easier to hand off but have weaker security, migrated accounts are more secure but handoff is more involved. Many secondary-market OSRS accounts were botted at some point, and Jagex runs retroactive ban waves — a clean-for-two-years account can still get caught in a wave. Verify membership status and remaining days. See OSRS listings or our OSRS value calculator.

Final Fantasy XIV

The Lodestone shows every character's level, mounts, minions, and achievements — anything claimed in the listing must match. FFXIV accounts created via Steam are permanently linked to Steam; a Steam-FFXIV purchase is effectively a Steam-account purchase. A single Square Enix account can hold multiple "service accounts" — verify which one the listing covers. Original 1.0 players hold "Legacy" status with a permanent 10% subscription discount. Mog Station cosmetics are account-locked and non-transferable.

Fortnite

Epic aggressively flags resold Fortnite accounts, so secondary-market Fortnite carries higher restriction risk than most titles. Rare OG skins (Galaxy, Renegade Raider, Aerial Assault Trooper, Black Knight, Skull Trooper, Ghoul Trooper) are heavily forged — verify via live login, not screenshots. Linked PSN/Xbox/Nintendo accounts are recovery vectors; audit them at handoff. V-Bucks stay on the account but can't be gifted out. See Fortnite listings.

League of Legends

Riot is the most aggressive major publisher against account trading — LoL purchases carry structurally higher risk. Rank listings often reference a previous season; verify current-season placement. Prestige, Victorious, and limited event skins drive most of the value and must be verified individually in the collection. RP balance stays with the account and is non-transferable. See LoL listings.

Valorant

Same Riot enforcement posture as League. Competitive rank is per-season — verify current MMR at handoff. A single Riot ID spans League and Valorant, so a Valorant purchase is a whole-Riot-account purchase. Vanguard anti-cheat runs at kernel level and flags unusual login patterns — don't log in from a VPN or unusual region immediately after purchase. See Valorant listings.

Diablo 4

D4 accounts are Battle.net accounts, so all WoW rules apply. Seasonal characters drop to the Eternal realm at season end — verify which realm the showcase characters live on. High-paragon characters are a significant value driver; check paragon via live session. See Diablo 4 listings.

Lost Ark

Lost Ark accounts are permanently linked to Steam. End-game value sits in engraving quality and gear honing state, which are fragile (a bad honing attempt can destroy significant materials). Region lock is strict — NA West, NA East, EU Central, EU West, SA don't share characters. See Lost Ark listings.

Path of Exile 2

PoE2 characters are league-specific; standard-league characters carry forward, seasonal characters migrate at league end. Premium stash tabs are account-wide and a meaningful value driver. Rare supporter-pack cosmetics from early seasons carry real collector value. PoE2 has no public armory — verification requires live login. See PoE2 listings.

What a Safe Transfer Looks Like, Step by Step

The process below is what a clean, safe transfer looks like from payment to full account control. Any deviation from this sequence is a signal to slow down.

Step 1: Pre-Purchase Verification (before payment)

  • Open the live armory/profile for every character advertised and cross-reference against the listing
  • Screenshot the listing and the armory comparisons
  • Read the marketplace warranty policy at its public URL and screenshot it
  • Confirm escrow is in place and understand its release conditions
  • Ask the seller for ban history and original-owner proof explicitly

Step 2: Payment Into Escrow

  • Pay using a method with dispute rights (credit card through the marketplace, Stripe, or PayPal Goods & Services)
  • Confirm the payment sits in escrow, not released directly to the seller
  • Save the payment receipt outside the marketplace

Step 3: Credential Transfer (live with seller)

  • Seller disables their 2FA live on chat
  • Seller provides password, current recovery email, security-question answers, and a list of every linked social account
  • Both parties stay in live chat throughout

Step 4: Immediate Security Changeover (first hour)

  • Log in and verify access
  • Change the password, then the recovery email, then enable 2FA with your authenticator app
  • Verify 2FA by logging out and back in; save backup codes to your password manager
  • Update phone number, log out all non-you sessions, remove seller payment methods
  • Unlink every social account that isn't yours; review recovery-email forwarding rules

Step 5: Content Verification

  • Verify every character, mount/pet/cosmetic total, bank balance, currency balance, and subscription state against the listing
  • Screenshot everything for warranty evidence

Step 6: Escrow Release

  • Release only after every listing claim is verified
  • If anything is missing, file a dispute through the marketplace BEFORE releasing

Step 7: Stability Period (2–4 weeks)

  • Don't add personal payment methods until the seller's chargeback window has passed
  • Monitor for login attempts or recovery-email-reset notifications
  • Keep all transfer evidence saved. After four weeks the seller-side takeback risk has largely cleared; original-owner risk remains permanent.

Step 8: Long-Term Monitoring

  • Keep 2FA active, never share credentials, avoid public computers
  • Periodically audit the connected-apps and linked-social-accounts panels

Due Diligence Checklist

Run through this before clicking buy on any listing:

  • [ ] Marketplace has a public warranty policy at a stable URL
  • [ ] You have read and screenshotted the warranty policy
  • [ ] Marketplace has a public refund policy at a stable URL
  • [ ] The listing matches live armory/profile data you verified independently
  • [ ] The seller has shared ban/suspension history (screenshot or live screen-share)
  • [ ] Original-owner status is explicitly stated
  • [ ] If non-original-owner, the price reflects the recovery risk
  • [ ] The listing's price is within the normal range for comparable accounts across at least two other marketplaces
  • [ ] The seller has a verified identity on the marketplace (not just a verified email)
  • [ ] The seller has listing age and transaction history on the marketplace
  • [ ] Escrow is in place with clearly documented release conditions
  • [ ] Payment method offers dispute/chargeback protection
  • [ ] You have at least two hours of focused time available for the full handoff and changeover
  • [ ] Your authenticator app is ready on your device
  • [ ] Your password manager is ready to store new credentials
  • [ ] You have cloud storage or email set up to receive transfer evidence
  • [ ] The seller has agreed to a synchronous live handoff, not asynchronous
  • [ ] You have NOT been asked to skip escrow, go off-platform, or rush
  • [ ] You have NOT been offered a "discount for cash" or "direct deal outside the site"
  • [ ] Regional restrictions are understood and priced into the purchase
  • [ ] Any linked social accounts have been enumerated and a plan exists to unlink them
  • [ ] The seller has not tried to change payment methods mid-conversation
Every unchecked box is a specific risk you're accepting. If you can't check most of these, don't buy.

Legitimate Price Benchmarks

The best way to avoid overpaying (or underpaying into a scam listing) is to benchmark before you buy.

Cross-Marketplace Comparison

Open three or four legitimate marketplaces and search for listings comparable to the one you're considering. You're looking for:

  • The price floor (the cheapest credible listing with similar content)
  • The price ceiling (the highest price you see for equivalent content)
  • The median (roughly the middle of the distribution)
A fair-market listing will sit somewhere in the middle 50% of that range. Listings at the top are usually overpriced or have rare content driving the premium (which you should verify). Listings below the floor are almost certainly compromised in some way.

Per-Game Valuation Drivers

  • WoW: mount count and specific rare mounts (Legion Mage Tower set, Ashes of Al'ar, Invincible, Mimiron's Head), achievement points, transmog completion, titles, feats of strength, gold, Challenge Mode sets
  • OSRS: total level, combat level, quest cape status, raid KC, unique items, GP, membership time remaining
  • FFXIV: job levels, relic completion, mount/minion/title counts, Legacy status, Housing status (real value driver)
  • Fortnite: rare OG skin count, V-Bucks balance, account level, Battle Pass history
  • League of Legends: champion count, rare skin value, rank, honor level, blue essence, RP
  • Valorant: rare skin bundles (Elderflame, Prime, Reaver, Oni, Champions), rank, account level
  • Diablo 4: paragon level, seasonal journey completion, Eternal-realm characters, cosmetics
  • Lost Ark: item level, engraving quality, gold balance, gear tier, Roster level
  • PoE2: character level, ascendancy completion, stash tab count, supporter-pack cosmetics, currency

AccountShark Valuation Tools

For WoW specifically, our WoW value calculator accepts armory data and returns an estimated market value based on historical sales. For OSRS, the OSRS value calculator does the same using hiscores data. Use these as a sanity check against individual listings. A listing priced 40% above our calculator estimate isn't automatically overpriced — the calculator can miss premium content — but it's worth asking the seller what content justifies the premium.

Red-Flag Pricing Patterns

  • 20-30% below floor: likely compromised (undisclosed ban, non-OO, missing content)
  • At or slightly below floor: quick sale or lightly compromised — verify carefully
  • Within median range: normal
  • 10-20% above median: usually premium content — verify what's driving it
  • 30%+ above ceiling: either unique content or an overpriced listing counting on an uninformed buyer

When to Walk Away From a Deal

A decision to not buy is always available to you. The following patterns should end the conversation.

Payment-Method Changes Mid-Deal

You started on credit card through the marketplace; now the seller wants Zelle or wire. This is always a bad sign. The only reason to change payment methods after negotiation is to remove buyer protection. A legitimate seller has no reason to move off the payment rail you both agreed on.

Sudden Pressure to Move Fast

"I have another buyer," "the price goes up tomorrow," "my account gets flagged if I don't sell today." Each of these is a manufactured deadline. Real sellers don't invent urgency. If the pressure appears after you've already begun due diligence, the seller is trying to prevent you from finishing that due diligence.

Refusal to Use Escrow

Any seller who refuses escrow on a transaction above a trivial amount is preparing to keep your money and not deliver. This is the single clearest signal in the entire space. There is no legitimate reason for a seller to refuse escrow.

Inability to Demonstrate Live Account Control

You ask the seller to log in and show the character in-game while screen-sharing. They can't, or they make excuses, or the logged-in account shows different characters than the listing advertises. Walk.

Changing Core Listing Details After Negotiation Starts

The listing said original-owner, but the seller now says "well, I got it from a friend who is original owner." The listing said "no bans," but now the seller is describing a "temporary suspension that's been lifted." The listing said "full mount collection," but now the seller is clarifying "most of the mounts." Each of these is a signal that the listing itself was inaccurate, and anything else in the listing may also be inaccurate.

Seller Refuses to Answer Basic Questions

"I don't remember" is sometimes a legitimate answer for a long-owned account — but not for the original-owner's own history. If the seller can't name the realm they played on, the guild they were in, the raids they cleared, or the expansions they owned when the account was created, they're not the original owner.

Marketplace Has No Clear Dispute Process

If you can't find the marketplace's dispute/complaint/warranty procedure inside two minutes of searching their public site, assume it doesn't exist. Operators who hide their policies do so because they don't want to enforce them.

You're Being Pushed Off-Platform

Every time. No exceptions. Off-platform means no protection. Walk.

The Price Is "Too Good"

Accept that markets price things roughly correctly. A 40% discount off the median comparable listing is not a miracle; it's a red flag. Great deals exist, but they're rare and they don't come with other red flags attached. If the price feels too good and one other warning sign is present, it is not a good deal.

Frequently Asked Questions

In most jurisdictions, buying a gaming account is not illegal at the consumer level. What's at issue is the publisher's terms of service, which almost universally forbid account transfers. If the publisher detects and enforces, the account can be banned — but the buyer is not typically subject to criminal prosecution. Civil disputes between buyer and seller are contract matters handled in small-claims court.

Will I get banned for buying an account?

Usually not, but the account itself may be flagged or banned if the publisher detects the transfer. Publishers generally pursue the account, not the buyer as a person. Risk is highest on Riot-published games and Epic-published games, and lowest on long-standing MMOs like WoW, FFXIV, and OSRS where account trading has been common for decades.

How do I know a marketplace is legitimate?

Look for: a stable company name and address, a public warranty/refund/terms policy set at fixed URLs, real escrow (not just "we'll hold the money"), verified identity KYC on sellers above a threshold, review history you can cross-reference, and a dispute process with clear steps and timelines. AccountShark publishes warranty, refund, terms, and privacy policies openly.

How long should escrow hold?

Long enough for you to complete the full security changeover and verify every item on the listing — typically 24–72 hours. For large purchases, ideally long enough for the seller's card-chargeback window to begin closing (often 7–14 days minimum before escrow release). Your marketplace's default escrow window should be disclosed before you buy.

What if the seller recovers the account after purchase?

File a warranty claim with the marketplace immediately. Provide your transfer evidence (chat logs, screenshots, 2FA setup, email-change confirmations). If the marketplace has real warranty coverage, you'll receive a refund or replacement. If the marketplace has fake warranty coverage, file a chargeback with your credit card issuer and report the marketplace to the FTC and IC3.

Can the original owner always get the account back?

In principle yes, because publishers recognize original creators above any current credential holder. In practice, original-owner recoveries are most common within the first 6–12 months after sale and decline over time as the original owner moves on. The risk never reaches zero for a non-original-owner account.

What's the difference between original owner and non-original owner?

Original owner = the person who created the account and holds the creation records (email, billing, CD key, security questions). Non-original owner = anyone who has owned the account since. Original-owner accounts carry a 30–50% price premium because they cannot be recovered by an earlier party.

Is PayPal Goods & Services enough protection?

Better than Friends & Family, but not sufficient by itself. PayPal buyer protection has specific exclusions for digital goods that often apply to gaming accounts. Use PayPal G&S as one layer alongside marketplace escrow and warranty, not as the only layer.

How quickly must I change the password and email?

Immediately. Within 10 minutes of receiving credentials. The window between credential transfer and full security changeover is the highest-risk period in the entire transaction.

Should I use a VPN when logging into my new account?

Generally no. Logging in from an unusual region immediately after purchase is a common trigger for publisher-side account-security reviews. Log in from your usual network and location for the first several sessions.

What's the minimum purchase size where this process is worth the effort?

All of it is worth the effort on any purchase above $100. For purchases above $1,000, add a live video handoff with screen-share. For purchases above $5,000, consider a formal escrow.com-style written agreement on top of the marketplace's default escrow.

Can I resell an account I buy?

Technically yes, and practically yes on most marketplaces. But you inherit the same disclosure obligations the original seller had: you must tell the next buyer about any non-original-owner status, any ban history you were aware of, and any inconsistencies in the account's history. Reselling an account while concealing material facts is how fraud cycles propagate.

What Good Buyers Do

The buyers who have the best outcomes in this market share a few habits:

  • They shop across multiple marketplaces to understand price and verification tradeoffs
  • They ask specific questions and save the answers
  • They read warranty terms fully before buying, not after something goes wrong
  • They do the security changeover immediately, not eventually
  • They don't hesitate to walk away from deals that feel wrong
  • They document everything
  • They prefer original-owner listings even at a premium
  • They run every purchase above a meaningful threshold through a full live handoff
  • They treat every transaction as unique rather than recycling assumptions from previous deals
  • They know the specific risk profile of the game they're buying, not a generic "account purchase" profile
None of this is complicated. It just takes 30 extra minutes of attention on a purchase you might keep for years.

The Bottom Line

The gaming account secondary market works — hundreds of thousands of buyers have smooth transactions every year. But the buyers who get burned usually share the same handful of mistakes from the list above. Avoiding them isn't expensive or hard. It just requires treating the purchase like the real transaction it is.

Ready to buy an account the right way? Browse verified WoW accounts on AccountShark. Every listing has been through our full verification process, every transaction is escrowed, and every purchase is covered by warranty. If you have questions about a specific listing, reach out to our team before you buy — we'd rather spend an hour answering questions than an hour handling a preventable dispute.