PUBG Mobile Account Recovery Scam Exposed [Update 2026]

PUBG Mobile players have exposed a dangerous vulnerability within Krafton's automated account recovery appeal system this week, allowing malicious actors to illegally hijack verified player accounts by harvesting publicly visible profile metadata, registration achievement timestamps, and unpurged in-game purchase mail notifications. According to verified reports from Reddit PUBGMobile, community members uncovered how bad actors easily circumvent identity verification safeguards by weaponizing accessible account data. Attackers glean initial registration dates through public social milestones, extract match synergy records directly from active friend lists, and inspect Mail Security Center logs containing UC transaction timestamps. Once gathered, scammers lodge counter-claims that match automated verification criteria, effectively locking legitimate owners out of their competitive profiles. This discovery follows technical scrutiny surrounding recent title updates, where players previously addressed visual discrepancies in our [PUBG Mobile Stiff Outfit Bug: How to Fix Cloth Physics [Guide]](/news/pubg-mobile-stiff-outfit-physics-fix). The community has urged Krafton customer operations to replace automated recovery tickets with rigorous hardware-bound two-factor authentication, verified banking receipts, and registered mobile authorization to prevent rogue takeovers of long-standing tier accounts before upcoming competitive qualifiers.