My account has been stolen, and i wasn't notified, until i recently tried to use my gog account to utilize a code from amazon gaming. when i tried to use every email i have, including the most likely one for it that i remember.. it said user not found.. now, i do have a few platforms, i have been speaking with Alexandra, and i apparently can not provide enough information to get the account. I can see the account is still there - i dont know what else i can do, but im absolutely irritated my account has been taken. are they able to see changes to accounts, i.e my email having been changed from x to y..birthdates changing etc.. what sort of assurances are there that someone didnt change all the information and im supposed to be able to know what it is now. so frusterating!

when i tried to use every email i have, including the most likely one for it that i remember
I wonder why you can't log in...

Perhaps you should find the address that has GOG confirmation/receipt emails and use that one. And if you still can't log in, those emails should provide a lot of information required by Support to help you.

You need order confirmation e-mails or order receipts printed as PDF, and the last 4 digits of the bank card used or other (partial) payment method details.

It's doubtful anyone took over your account. By default, two-step login is enabled. Trying to log in with a different browser or IP address requires the confirmation code sent to your e-mail address. If you didn't disable that security feature, someone would've had to have both your login credentials or browser cookies, and access to your e-mail account.

I am starting to agree, sort of. however it only took two seconds to change email,i create this account under my original email, and then i changed it to my secondary with in a few seconds. and i was only notified of it after it was done, no verification if i didnt enable two step. the account in question was created quite a while ago, and evidently i hadnt logged in, in four years or more. crazy how time flies. but i most likely did not have 2 step auth enabled is all i can think of, my fault for not doing so. now, i also created an account using the email, trashusername@notanexsistantemail.com which it allowed to go through, so way to check for mistakes there. so either lost account, or stolen account, doesnt seem to make much difference. if i effed up the email address and didnt realize, cant do a recovery with out the accurate email. if i never setup a profile, in the time its been since i used the profile, my bank cards would have changed, who keeps a record of every bank card they use.

I wonder why you can't log in... me too, as my usual email for this was not showing up when i tried to recover password. my browsers, would have been wiped a while back as its a new pc i have many, many platforms i log into each with a different email or password, so im starting to forget what goes where. hoping to get to the bottom of it all, but unlikely

Send it some tickets, check your mail and send it some of those. You have 2FA, you can check the last time you log it and even send your IP, I don't know what else could help.

If you have no proof of account ownership whatsoever and you don't even remember what e-mail address you used, then I don't know how you expect to reclaim your account.

You can change your privacy settings to allow chat messages from everyone, then send a polite chat message with your support ticket number to a staff member like ponczo_ or Clownski_. They might have different suggestions for proving you're the account owner.

Are you 100% sure you made the account through an email account?

GoG used to support Facebook login, it would be easy to confuse and forget those details.

I can understand how you feel.

But at the same time, GOG cannot start just giving away accounts to anyone who says they own that account. If GOG did do that, then everyone's account would be stolen on a regular basis, since scammers would falsely claim that they own everyone's account.

So I assume you could understand why GOG can't just give you an account simply because you say it yours...even if it is yours, and you can't prove it, that's tough, but they still can't give away accounts based solely on someone's say-so, because even if your situation is legit, many others who do the same thing would not be legit, and without proof, GOG has no way to differentiate between the legit claims and the scammer claims.

Your bank or card issuer will.

If it's a debit card, the transactions will be on your bank statement and you must have access to these (unless you've destroyed all your bank records, changed banks and can't remember who you banked with at the time - in which case, you've got bigger problems coming your way than a lost GoG account).

If it's a credit card, your historical statements will be available online, or you will have been sent paper copies. If they're online, you've got no problem. If they're paper copies, I'd generally say people should keep 7 years worth on file before throwing them out (or as many years as your local tax authorities can go back into your records)

If you used paysafe, then you're probably out of luck.

If you used paypal, then the records are probably online.

If you're struggling to remember user IDs and passwords, all I can recommend is writing them down and keeping them in a locked, fireproof safe. Or a password manager, but I prefer the oldfashioned way as there's always the risk you lose access to the manager.

@OP - My recollection, is that GOG have only had Two Factor checking for a few years, and that it is optional in any case.

You need to seriously consider you have been hacked, and not just your account on GOG, unless you had an easy to crack password at GOG or maybe shared it openly in an email with someone.

Your only recourse to get your account back, is records, such as GOG receipts or bank records or proof you owned the original email address that GOG would have a copy of, and they should be able to track when any change was made and look into it.

This is genuinely some good advise. Technology, for all what it's worth, is a risk, keeping the passwords in an application is a risk too, including losing the "invisible bytes" (unlike a real thing that is harder to lose, usually); If a PC with the password manager gets hacked, that's a goner, but to "hack" the safe is significantly less potential attackers. I'll only say it's a good idea to use 2FA (not GOG's kind) on 1-2 special offline devices in addition, so that if someone gets the password somehow, then they shouldn't be able to access an account (that's how my Git accounts operate).

Wait didn't GOG turn all of the accounts to 2 FA automaticly a few years ago?
Or was that opt in only?
Meaning that when it was activated and you maybe don't have that email anymore is a way to get locked out if you can't get any proof.

Since i only payed with paysafecards here i took a picture of my orders page a couple of times as proof if that is enough?
But i didn't need it yet.

I still have my email confirmations from 2011 so check your email folder.

Most "my account was stolen" posts end up with "oh right, I just forgot what Email I used. Found it".
And yes, for everyone's sake ... write down your accountname / username + password somewhere.

The 1st gives me thrills in itself. Google did that to me, leaving as 2FA the latest used phone that has died thanks to built-in battery, then got replaced. Like, it's fine to enable for new accounts, not fine for older all of a sudden without consent, I'll even say that's bad practice that may cause loss. If someone wants this kind of 2FA, manual enabling is always an option.