Is Buying Gaming Accounts Legal? ToS vs Actual Law in 2026

Is It Legal to Buy a Gaming Account?

There is no federal, state, or (as far as public record shows) international statute that criminalizes the private sale of a gaming account between consenting adults. A gaming account is, at a legal level, a bundle of access credentials and digital goods licensed from a publisher. Transferring those credentials between private parties is a contract matter — and in most jurisdictions, private parties are free to contract with each other on whatever terms they agree to, subject to consumer protection law and fraud statutes.

What makes account buying feel "illegal" to many players is the fact that every major game publisher prohibits it in their ToS. The ToS is a private contract between the player and the publisher. Violating it has consequences — typically account bans — but those consequences come from the publisher, not from a court or a police department.

What Is the Difference Between ToS and Law?

A law is a rule enacted by a legislative body (Congress, Parliament, the EU) that applies to everyone within a jurisdiction. Violating a law can result in criminal prosecution (fines, imprisonment) or civil penalties (damages, injunctions) depending on the statute. Laws are published publicly and can be challenged in court.

A Terms of Service is a contract drafted unilaterally by a company (Blizzard, Riot, Epic Games) that a user agrees to by clicking "I Accept." It governs the user's relationship with that specific company's product. ToS are enforceable as contracts, but they cannot criminalize behavior — only a legislature can do that. The remedies a ToS can impose on the user are limited to what the contract itself specifies, which is almost always some variation of "we can terminate your access to our service."

The confusion between "against ToS" and "illegal" is encouraged — sometimes deliberately — by publisher communications. Phrases like "unauthorized," "prohibited," "violation," and "enforcement action" evoke legal language even when describing what are, technically, contract breaches. Legal scholars including Eric Goldman (Santa Clara Law) and Joshua Fairfield (Washington and Lee Law) have written extensively on the way ToS language blurs this line.

What Do Game Publishers Say About Buying Accounts?

The public-facing policies below are paraphrased from each publisher's current ToS and community-conduct documentation. None of them are direct quotes.

Blizzard Entertainment (World of Warcraft, Overwatch, Hearthstone, Diablo IV): The Battle.net End User License Agreement prohibits the sale, transfer, or sharing of accounts. Blizzard reserves the right to terminate any account found to be sold or transferred. In practice, Blizzard's enforcement focus is on in-game rule violations — botting, real-money trading, piloted boosting — rather than account ownership changes. Simply buying an account and playing it normally is not what their detection systems are built to action. The MDY Industries v. Blizzard case (2011) is frequently cited as evidence of Blizzard's willingness to litigate, but that case was specifically about bot software (Glider), not about individual account buyers.

Jagex (Old School RuneScape, RuneScape 3): Jagex maintains one of the strictest real-world-trading (RWT) enforcement policies in the industry. Account buying, gold buying, and account sharing are all explicitly prohibited, and Jagex has publicly stated that RWT-linked accounts receive permanent bans. Jagex has also invested heavily in automated detection that flags suspicious account activity patterns.

Square Enix (Final Fantasy XIV): The FFXIV User Agreement prohibits account sales and transfers. Square Enix additionally requires government-issued ID verification for certain account-recovery and region-change transactions, which adds friction for players attempting to assume ownership of a purchased account. Enforcement is generally reactive rather than proactive.

Epic Games (Fortnite, Rocket League): Epic's ToS prohibits account transfers and includes automated detection for suspicious login patterns. Account-buying enforcement typically results in permanent bans of both the selling and buying accounts if Epic detects the transfer.

Riot Games (League of Legends, Valorant, Teamfight Tactics): Riot's ToS prohibits account sharing, selling, or buying. Riot operates one of the most active automated detection systems in gaming — login-pattern anomalies, IP jumps, and hardware fingerprint mismatches regularly trigger account flags.

Activision (Call of Duty, Diablo IV via Battle.net): The Activision Software License Agreement, combined with the Battle.net EULA for Diablo IV, prohibits account transfers. Call of Duty accounts are also governed by the Call of Duty Security and Enforcement Policy, which includes automated anti-cheat and anti-boosting systems.

Can You Get Arrested for Buying a Gaming Account?

There is no law anywhere — in the US, EU, UK, Canada, Australia, Japan, or South Korea — that criminalizes the voluntary transfer of a gaming account between two consenting adults. Account buying is a private contract matter, and private contracts between adults are generally legal absent specific statutory prohibitions.

The criminal risk arises only when the account was not legitimately owned by the seller. In the United States, receiving stolen property is criminalized under both federal law (18 U.S.C. § 2315) and individual state laws. If a seller stole an account and sold it to you, two things happen:

• The original owner can recover the account through the publisher's account-recovery process, usually successfully, because publishers maintain identity records including original payment methods, email addresses, and IP history.
• Depending on your jurisdiction and whether you knew or should have known the account was stolen, you could face civil liability for receiving stolen property — and in extreme cases, criminal charges. The "knew or should have known" standard is central: if a seller offered you a $2,000 account for $50 and demanded cryptocurrency with no buyer protection, a court may find you should have known something was wrong.

Is Gaming Account Reselling Illegal?

The first-sale doctrine is the legal principle that once you lawfully buy a copyrighted work (a book, a CD, a game disc), you can resell it without paying the copyright holder a second time. The doctrine is why used bookstores, Goodwill, and GameStop exist legally.

Whether the doctrine applies to digital goods — including gaming accounts — is one of the most contested questions in modern copyright law. The leading US case on the subject is Capitol Records, LLC v. ReDigi Inc., which addressed whether a marketplace for reselling digital music files was lawful.

Gaming accounts occupy an unusual space in this debate. When you "sell" an account, you're not reproducing any copyrighted software — the publisher's servers hold the data, and you are transferring login credentials plus the contract rights associated with them. That's closer to selling a concert ticket than reselling an mp3.

The EU has moved somewhat further toward consumer rights on this question. In UsedSoft GmbH v. Oracle International Corp. (2012), the Court of Justice of the European Union held that the first-sale principle applies to downloaded software under certain conditions. The ruling was specifically about Oracle software licenses and has not been directly extended to gaming accounts, but EU consumer-rights lawyers frequently cite it in discussions of digital resale.

What Happens If You Get Caught Buying an Account?

The consequences of a ToS violation are narrow and written into the contract itself. Publishers have strong business incentives to enforce through bans rather than litigation (lawsuits are expensive, slow, and establish precedent that publishers usually don't want to set), and so the practical downside of account buying looks more like losing an eBay purchase than facing a court date.

The asymmetry between ToS severity and legal exposure is why most legal scholars describe account ToS enforcement as a private regulatory regime: publishers write the rules, detect violations, and impose penalties, all without involving the state. It's a system that functions efficiently for the publisher but lacks the procedural protections of actual law (no due process, no neutral adjudicator, limited appeal).

Are Account Marketplaces Themselves Legal?

This is the same principle that makes eBay legal even when eBay users occasionally sell items they "shouldn't" — things that violate a manufacturer's resale policy, for instance. The marketplace provides infrastructure for private transactions; the legal obligations of those transactions rest with the parties involved.

For gaming accounts specifically, marketplace legality is buttressed by the fact that:

• No statute criminalizes the underlying transaction. Marketplaces cannot facilitate illegal activity because the activity itself is not illegal — only contractually prohibited.
• Publishers have no direct cause of action against marketplaces. A publisher can sue for tortious interference in narrow circumstances, but this requires demonstrating specific damages, intentional interference, and absence of privilege — a high bar that US courts have rarely found to be met in gaming contexts.
• First Amendment considerations protect marketplace listings. A listing is commercial speech; banning listings that describe lawful (if ToS-prohibited) transactions would raise serious speech issues.

Publishers have, in a handful of cases, sent cease-and-desist letters to marketplaces or attempted to work through payment processors to cut off access. These tactics have had limited long-term effect: the marketplace ecosystem is large, geographically distributed, and commercially resilient.

What Is the Difference Between Account Buying and Account Recovery/Hacking?

The distinction matters enormously. A buyer purchasing an account from its legitimate owner is, at worst, engaged in a contractual violation of the game's ToS. A buyer purchasing an account that someone else stole is handling stolen property and may be committing a crime.

What Does the Law Say About Virtual Property?

The scholarly debate on virtual property is decades old, and the real-world case law has not caught up. Academics such as Joshua Fairfield, F. Gregory Lastowka, and Dan Hunter have argued for formal property recognition of virtual goods based on the same three characteristics that define real-world property: rivalrousness (one person's possession excludes another's), persistence (the item exists continuously over time), and interconnectivity (the item can be used, traded, or transferred within the virtual world).

Outside the US:

• South Korea: The Korean Supreme Court has recognized virtual items as property for tax purposes and in criminal cases involving theft of in-game items. South Korean law enforcement has prosecuted individuals for stealing MMORPG accounts.
• China: Chinese courts have repeatedly ruled that virtual items are personal property protected under the Civil Code. In 2003, a Beijing court ordered a publisher to return stolen in-game items to a player — one of the earliest judicial recognitions of virtual property anywhere.
• Taiwan: Taiwan has prosecuted theft of virtual game items as ordinary theft under the Criminal Code since 2002.
• European Union: The EU has not comprehensively addressed virtual property, but consumer protection directives (particularly Directive 2019/770 on digital content) establish baseline rights for purchasers of digital goods.

Have Any Game Publishers Sued Account Buyers?

The landmark publisher lawsuit in the account-buying adjacent space is MDY Industries, LLC v. Blizzard Entertainment, Inc., which remains the most-cited case in gaming ToS enforcement.

The MDY decision has been criticized by copyright scholars for stretching copyright law to enforce what is fundamentally a contractual arrangement. Regardless of its academic reception, the case is the high-water mark of publisher legal enforcement in the ToS-adjacent space — and it targeted a commercial bot developer, not an account buyer.

Is Gold Buying Legal?

The legal analysis of gold buying mirrors account buying almost exactly. Transferring virtual currency between private parties is a contract matter, not a criminal one. No jurisdiction criminalizes the purchase of in-game currency from another player.

What differs is enforcement intensity. Publishers have stronger business reasons to crack down on gold buying than on account buying, because:

• Gold buying funds botting. The economic pipeline runs: player buys gold → seller ran bots to generate that gold → bots damaged the in-game economy, tanked drop prices, congested spawn zones, and made life worse for every other player. Breaking the pipeline by banning buyers reduces the ROI for bot operators.
• Gold buying scales worse than account buying. A single gold buyer may make hundreds of purchases over a single character's lifetime; a single account buyer typically buys once. The enforcement target is more obvious.
• Gold buying is easier to detect. Large, atypical gold transfers between players show up clearly in server logs, especially when paired with the recipient's buying history (recent credit card purchases, newly created social graph, no prior economic activity).

For all these reasons, gold-buying bans are often faster, more frequent, and more severe than account-buying bans. But none of it is illegal in the criminal sense.

Do Account Transfers Violate Copyright?

The DMCA, specifically 17 U.S.C. § 1201, prohibits circumventing "technological measures" that control access to copyrighted works. This is the law that makes DVD rippers, certain game-console mods, and — potentially — some forms of 2FA bypass legally questionable.

In an ordinary account sale, however, no circumvention occurs. The seller simply hands the buyer the credentials. The buyer logs in using those credentials the same way the seller previously did. No technological measure is bypassed because authorization has been voluntarily given. The DMCA anti-circumvention rule is not implicated.

The EU equivalent (Article 6 of the Copyright Directive 2001/29/EC) operates similarly, and the UK's Copyright, Designs and Patents Act 1988 provides parallel protections. None of these frameworks categorically criminalize account transfers — they apply narrowly to specific technical-measure circumvention.

How to Buy an Account Legally Step-by-Step

1. Step 1. Research the marketplace
   Look for a marketplace with public reviews on Trustpilot, Reseller Ratings, or Sitejabber spanning at least 12 months. Check how disputes are resolved, whether there is a public warranty policy, and whether the marketplace holds funds in escrow until delivery is confirmed. Reputation and longevity are the most reliable signals.
2. Step 2. Verify the seller's ownership
   Ask for proof that the seller is the original account owner. Reasonable evidence includes: the original creation email, screenshots of the first purchase receipt or subscription history, login history tied to the seller's geographic location, and payment-method records. Any seller who refuses to provide verification is a red flag.
3. Step 3. Request proof of original purchase
   For accounts with significant purchased content (paid expansions, cosmetics, cash-shop items), request proof that those purchases were made by the seller. This protects against stolen-card charges being reversed later and clawing back content from your account.
4. Step 4. Use a marketplace with buyer protection
   A marketplace that guarantees delivery, holds funds in escrow, and provides a warranty window (typically 7 to 30 days) gives you real recourse if something goes wrong. Peer-to-peer transactions on Discord, Reddit, or random forums have no such protection — you are entirely dependent on the seller's good faith.
5. Step 5. Confirm account contents pre-purchase
   Before paying, request up-to-date screenshots of the account's contents that match what was advertised. Verify through publicly-visible sources where possible (for example, armory pages, character lookup APIs, or ladder pages). Catching a discrepancy before payment is far easier than recovering after.
6. Step 6. Change all security credentials immediately
   On receipt, immediately change the account email, password, and two-factor authentication method. Remove any linked third-party services. This severs the seller's access and establishes you as the current controller of the account. Keep a record of the date and time of these changes.
7. Step 7. Understand that ToS still applies
   None of the above makes the transaction ToS-compliant. The publisher can still terminate the account if they detect the ownership change. Marketplaces with warranties often cover this risk for a defined window; after that window expires, the account's continued existence depends on the publisher not detecting or not choosing to enforce.

Is Using a VPN with a Purchased Account Illegal?

There is no law in the US, EU, UK, or most other jurisdictions that prohibits VPN use. VPNs are commercial products sold openly. Using a VPN with a gaming account does not, by itself, break any law anywhere that routinely uses VPNs.

That said, the ToS angle matters. Most publishers treat login from a geographic location inconsistent with the account's established history as a potential security flag. Using a VPN to mask the login location can:

• Trigger automated security checks that lock the account temporarily.
• Violate region-locking ToS clauses if the VPN is used to access region-specific content (China-region servers, Korea-only games, etc.).
• Create grounds for account termination if detected and classified as region-evasion.

In countries where VPNs themselves are restricted (China, UAE, Russia, Iran, and others), VPN use can create legal exposure independent of the gaming context. Account buyers in these countries have an additional legal analysis layer that is outside the scope of this article.

Tax Implications of Selling Gaming Accounts

Tax treatment of gaming-account sales is unsettled in detail but reasonably clear in principle: if you earn income, it is taxable. The questions are when does it rise to the level of self-employment income, what are the deductions, and how should it be reported.

Casual sellers: A player who sells one or two accounts per year, netting a few hundred dollars, is in the same tax position as someone who sells old electronics on eBay. If the total is below the Form 1099-K threshold and the activity isn't organized as a business, the reporting burden is minimal. Some sellers report these gains as "Other Income" on Form 1040 Schedule 1 anyway, to maintain a clean record.

Regular or commercial sellers: A seller operating what the IRS would view as a trade or business should file Schedule C (Profit or Loss from Business). This treatment allows business-expense deductions (marketplace fees, advertising, internet costs allocable to the business), but it also subjects the income to self-employment tax on net earnings.

International sellers face additional complexity. The EU has begun applying VAT to digital-goods sales through DAC7 reporting, and many member states require platform operators to report seller activity over defined thresholds.

Disclaimer and Jurisdictional Note

The primary legal framework discussed above is United States law, supplemented by occasional references to EU directives and selected decisions from the UK, South Korea, China, and Taiwan. Other jurisdictions — including Japan, India, Brazil, and most African states — have their own frameworks that may resemble or diverge from the US model in important ways.

Key jurisdictional divergences to be aware of:

• China: Extensive regulation of online gaming (including playtime limits for minors), formal recognition of virtual property rights, and strict requirements around identity verification. Real-world trading regulations differ substantially from US practice.
• South Korea: One of the oldest frameworks for formal virtual-property recognition, with case law going back to the early 2000s. Account theft is criminally prosecuted.
• Germany and Japan: Strong consumer-protection regimes that may extend more protection to buyers than US law typically does, particularly around digital goods and automatic-renewal contracts.
• UK: Post-Brexit, UK law is diverging gradually from EU digital-goods regulation. The Computer Misuse Act 1990 is the UK equivalent of the CFAA and governs unauthorized access to computer systems.

FAQ

Is It Legal to buy a WoW account?

Yes. Buying a World of Warcraft account is legal in the US, EU, UK, Canada, Australia, and virtually every other major jurisdiction. The transaction does, however, violate the Battle.net End User License Agreement and the WoW Terms of Use. Blizzard's standard enforcement action is account termination rather than legal action. The legal character of the transaction is a private contract matter between the seller and the buyer, not a criminal matter.

Will I Go to Jail for Buying a Gaming Account?

No. There is no jurisdiction anywhere in the world where the voluntary purchase of a gaming account from its rightful owner is a criminal act. The only way jail becomes a risk is if the account was stolen and you knew or should have known — in which case the criminal issue is receiving stolen property, not account buying itself.

Can Game Publishers Sue Me for Account Buying?

Theoretically, yes. Practically, essentially never. Publishers have sued bot developers and large-scale RMT operations (the 2011 Blizzard v. MDY case is the landmark), but suing individual account buyers is a poor use of publisher legal resources. ToS-based account bans accomplish the enforcement goal at a fraction of the cost and without creating legal precedent the publisher may later regret.

Is Selling a Gaming Account Legal?

Yes. Selling a gaming account is legal in most jurisdictions, subject to the same caveats as buying: publisher ToS prohibit it, tax law may require reporting the income, and selling an account you don't actually own is illegal as fraud. The legal question is distinct from the ToS question.

Does the First-Sale Doctrine Apply to Gaming Accounts?

Unsettled. The US Second Circuit's 2018 ReDigi decision rejected one specific digital-first-sale implementation without broadly rejecting the concept. The EU's 2012 UsedSoft decision extended first-sale to at least some digital software. Neither decision directly addresses gaming accounts, and there is no clean binding precedent yet. In practice, publishers treat accounts as licensed and non-transferable; consumers and marketplaces operate on the assumption that first-sale-style resale is lawful until a court rules otherwise.

What Are the Penalties for Gaming Account ToS Violations?

ToS violation penalties come from the publisher and are defined by the ToS itself. The standard escalation is: warning → temporary suspension (often 30 days) → permanent ban → payment-method or hardware-ID flag for repeat or egregious violations. There is no civil or criminal state-imposed penalty for a ToS breach alone.

Is Account Sharing Legal?

Yes, legally. Account sharing is universally against publisher ToS, but there is no law criminalizing the practice of letting a friend or family member play your game account. The legal framework here is the same as account buying: contract breach, not criminal act.

Is Account Boosting Legal?

Yes. Account boosting — hiring a more skilled player to play your account temporarily and increase its rating, clear content, or complete achievements — is legal in every jurisdiction. It violates the ToS of most competitive games (especially League of Legends, Valorant, Overwatch). Enforcement is typically an account ban, occasionally a cosmetic rollback, and never criminal prosecution.

Can I Get Refunded If My Purchased Account Is Banned?

It depends on where you bought the account. Reputable marketplaces offer a warranty or refund window — commonly 7 to 30 days, sometimes longer for verified sellers. Peer-to-peer purchases (Discord, Reddit, random forums) typically offer no protection at all. Always confirm the refund policy in writing before paying.

What's the Safest Way to Buy a Gaming Account?

Buy from a marketplace with a verifiable reputation track record, public reviews, escrow, and a written warranty. Verify the seller's original ownership before paying. Change all security credentials immediately on delivery. Keep a complete record of the transaction (receipts, chat logs, timestamps). Understand that even with every precaution, the account's continued existence still depends on the publisher not enforcing the ToS.

Final Considerations

The central point worth restating: "illegal" and "against ToS" are not synonyms. Discussions of gaming-account legality routinely blur the two, and that blur benefits publishers by making players more nervous than the actual legal landscape warrants. On the other hand, being within the law does not mean the transaction is risk-free — ToS enforcement is real, unpredictable, and can cost you everything you paid. A clear-eyed assessment of both risks, separately, is the only sound way to approach the question.

For readers weighing a specific purchase, a few closing principles:

• A verifiable ownership chain is the single most important protection against the rare but serious criminal-exposure scenario.
• Marketplace warranty windows are the primary protection against ToS-enforcement loss.
• Price signals matter: unrealistically low prices are often evidence that something is wrong with the ownership provenance.
• Security reset on delivery — email, password, 2FA — is the single most important post-purchase step.

AccountShark operates as a buyer-protected marketplace with verification processes aligned with these principles; our warranty policy and refund policy are publicly documented, for readers who want to compare how different marketplaces handle the post-purchase risk window.