How Can an Account Get Stolen With 2FA Enabled and No Email Notification?

Shadei

How is it possible for an account to get stolen, password changed, email changed, and even bypass 2FA without the original owner receiving a single notification email?

ve submitted multiple recovery requests over the years and provided

First registered email
Original IGN/Login ID
ZP billing and transaction proof
Redeem codes
Old screenshots/photos

But support keeps giving generic replies because I don’t fully remember the exact creation date of an account made over 10 years ago.

I’m honestly asking: what more can an old player provide to prove ownership?

[MOD]ShadowRo

1. Send a suppport ticket -> account recovery , you need enough correct informations required , no need 2FA ( 2FA only secure website login ! ).
An email is send only when use the website account option to change present registered email AFTER login website <- where you need 2FA to login.

2. Only the information requested in the ticket is accepted because those info already exists on the server and therefore can be verified by direct comparation with what you send in .
Any other information such as printscreen from the game is not taken into account - the first reason would be that these images are at hand for anyone who had access to the account OR found them from other sources.

Therefore: the game account can only be recovered (regardless of 2FA status) based on the information set when the game account was created ( as are requested in the ticket! )
AND additionally but not enough alone: information about ZP recharge as requested in the ticket: service name and transaction ID which is NOT the same as the code used for ZP!

Shadei

Thank you for the clarification. I understand now how the 2FA system works.

The issue is that this account was created more than 10 years ago, so I do not fully remember the exact creation date or old security question anymore. However, I still have:

• First registered email
• Second registered email
• Transaction IDs
• ZP recharge history
• Login ID/IGN

I’m not trying to bypass the system, I’m genuinely trying to recover my original account with the information I still have available after all these years.

I will submit another ticket with the updated information and transaction details I recently found. I just hope the case can be reviewed carefully considering the age of the account.