I don’t know how it started to happen, I only know that Saturday morning my son woke me up in a panic. He couldn’t log on to PSN, he couldn’t get into his email, “nothing” worked. He’s 16. He’s autistic. And his communication skills aren’t the best. I come downstairs to use Family Management to see the email has been changed to someone that’s not us. After I chat with PlayStation support we get the email address changed to one of my own, get a new password in place, and set-up 2SV only for 30 minutes later him to get kicked offline, same story. Second chat session with PlayStation support, we rinse-and-repeat and that seems to be working, except by Saturday night, while the credentials weren’t getting changed, he kept getting knocked offline because his ID was signing in to another PS4. We only have the one, so fast forward to Sunday, and a third chat session with PlayStation Support to learn how to deactivate all PS4s on the web, and activate as primary our solitary unit in the house. All was good until Sunday night. Starting Sunday night, he was removed from his clan, gear was moving from the vault to the character, and on it went. After a little while I figured out how to remove the offender’s iPhone from the list of authorized devices and get a clan admin to reinvite him to the clan. And all was quiet until today, when the person was back at it again. This time, I removed the offending iOS device and disabled all sessions. I’ve additionally changed the email address to one of my own, and now after the app sign-in has hit the PSN and its 2SV, I think all is well. However, and this is where I need help, I don’t know what to do if this person is able to keep adding their iPhone to my kid’s bungie net account. Bungie’s help twitter feed hasn’t responded, so I’m hoping the community can help a struggling dad out. I can’t keep him safe forever, but I’m just trying to help him stay looked after as long as possible, doing one of the few things that help him feel normal; play Destiny 2 on the PS4 with friends and his clan. Any help would be greatly appreciated.
Hello Shadic109, I'm sorry you are experience this issue. Bungie.net and the companion app use a player's PSN credentials to sign in. That means that if a person is continuing to sign in to Bungie.net then they have have access to your son's PSN account. You may want to set up two factor authentication. This article has information and links that may help you: https://www.bungie.net/en/Help/Article/12718 Hope that helps.
Edited by DragonWithin: 4/22/2019 10:22:03 PMChange the password to something else that's not easily guessed and isn't already in use by the compromised account. Bungie.net doesn't use its own authorization, connecting accounts and the like is done entirely through authorization from the three mains, Blizzard, Microsoft, and Sony. So, change your PSN ID's password. You said you did that before, but if it's continuing to happen, then the login information has already been compromised. Change it again. It sounds like either you or your son is using a compromised website, app, or has a virus on one of the devices where the information has been entered, especially considering how quickly the trolling attack started up again after you had already changed it once. I'd suggest checking on this. Bungie can do nothing to protect your account from unauthorized access, as when your account signs in, it's your account, so the only thing you can do is protect your account and your son's account yourself. One thing you may want to make sure you do is log into bungie.net using your son's account, go to your profile settings, go to the ACCOUNTS & LINKING section, and at the bottom, remove authorization for third-party access and then disable sessions for the Mobile companion. This will make it so that an already-authorized session can't maintain that session, and trying to do so again requires logging in again, which they won't be able to with the changed password.