PSN Accounts Are Being Hacked Even With 2FA Enabled, Reports Warn

PlayStation players are waking up to a nightmare scenario this week—one where your PSN account can be hijacked even if you’ve done everything right. Two‑factor authentication? Check. Passkey? Check. Strong password? Check. And yet, hackers are still walking straight through the front door like they own the place.

And the worst part?

They’re doing it with shockingly little information. Quite terrifying, really.

This isn’t fear‑mongering. This is happening right now, and Sony hasn’t said a word.

A Hack That Shouldn’t Be Possible… But Is

According to reporting from PlayStation Lifestyle, a tech journalist had his PSN account fully compromised despite having both 2FA and a passkey enabled. That should be the digital equivalent of Fort Knox. Instead, it was more like a screen door.

The hacker didn’t brute‑force anything. They didn’t guess passwords. They didn’t bypass 2FA with some Hollywood‑style exploit.

They simply contacted Sony support.

And Sony… handed them the keys.

All the hacker needed was:

• The account username
• A transaction number from a screenshot the victim posted online in 2023

That’s it.

That was enough for Sony to verify ownership and give the attacker full control.

Several sources confirm the same sequence: username + transaction ID = instant takeover.

Once inside, the hacker:

• Changed the email
• Changed the password
• Spent money on the linked payment method
• And then—after Sony restored the account—took it again

This is the kind of plot twist even “Black Mirror” would call “a bit much.”

Sony Support’s Verification Process Is the Real Villain Here

Here’s where things get truly wild. Sony support reportedly accepted:

• Last digits of a payment card
• A console serial number

as proof of ownership.

No name.

No date of birth.

No security question.

No ID verification.

No actual authentication.

Just the kind of information that could easily be found in an old email, a screenshot, or—apparently—a random transaction number floating around the internet.

This isn’t a hack.

This is a policy failure.

And Sony Still Hasn’t Commented

Sources noted that Sony has not acknowledged the issue, not issued a warning, and not patched the verification loophole.

Players are left in the dark while hackers are having a field day.

And yes, multiple users have now come forward with identical stories.

Yeah, this is now a pattern.

The “Early Morning Attack” Theory

GAMINGbible adds one extra detail: hackers often strike in the early hours of the morning, hoping you’re asleep and won’t notice the takeover until it’s too late.

Is that specific to this exploit?

Not necessarily.

But it tracks with how account thieves operate across platforms—hit when the victim is offline, then lock them out before they wake up.

Final Thoughts

This isn’t just a PSN problem. It’s a Sony support problem.

You can lock your account down with every modern security tool available, but if customer service hands your account to the first person who asks nicely, none of it matters.

Until Sony fixes its verification process, PSN users are stuck in a dangerous limbo—one where your account, your purchases, and your personal data are only as safe as the support agent on the other end of the phone.

So yeah.

Change your password.

Lock down your email.

Stop posting screenshots with transaction numbers.

And maybe don’t sleep too deeply.

Because right now, 2FA isn’t the shield we thought it was.