Information Regarding Unauthorized Access

Unauthorized Access

Unauthorized access refers to a third party (someone other than the actual account user) accessing an account without permission and/or using information somehow obtained from the user). This is not only a violation of the PlayOnline User Agreement, but may also be a criminal act in violation of the law.

Even if someone who has had an account accessed by a third party manages to take it back and successfully log in, it is not uncommon for items, gil, or even characters to be altered.

The following guidelines set out preventative measures to safeguard users from unauthorized access, as well as procedures for recovering a user account in the case that it is accessed by a third party.

Preventative Measures Against Unauthorized Access

The following are preventative measures to safeguard users' account information from malicious third parties.


Square Enix's Countermeasures for Dealing with Unauthorized Access

As set out in Article 5 of User Responsibilities of the PlayOnline User Agreement, management and security of one's PlayOnline ID and password is solely the responsibility of the user.

If you think that the account has been accessed by an unauthorized third party, please contact us by visiting the SQUARE ENIX Support Center. We will perform our own internal investigation to determine whether or not there was unauthorized access, and do so as quickly as possible.

PlayOnline, at its discretion, may provide two kinds of assistance for customers whose accounts have been accessed by third parties: “account recovery” and “game data recovery.” Both of these may be provided based on the results of our own internal investigation. “Account recovery” removes the disciplinary measures history for the period that the account was being accessed, as well as fixing the password changes and other data that was altered during the period of unauthorized access. “Game data recovery” restores an account's game data to the state it was in before it was altered through unauthorized access. Game data recovery, however, can only be requested once per customer. (Multiple accounts can be dealt with on a single recovery request).


Procedures for Account Recovery

If you are unable to log into the account, you can log in to the account but items have disappeared, or you suspect that the account may have been accessed by a third party, please visit here for the assistance regarding this issue. After your situation has been assessed, we will proceed to one of the two procedures outlined below.

Account Recovery

“Account Recovery” involves returning a compromised account to the original registrant of the account. An additional measure to the account recovery process is deletion of disciplinary measures that occurred during the period that the account was considered compromised.

[ Step 1: Contacting SQUARE ENIX ]
Please visit here for assistance. We will work with the original registrant of the account to reestablish access to the account. This process will include identifying key pieces of information on the account and possible identify verification through a third party (Notary Public) should the original registrant not be able to identify all necessary information.

If you become aware of unauthorized access outside of the SQUARE ENIX Support Center's hours of operation and possess multiple PlayOnline IDs, log in from another PlayOnline ID and contact a Game Master (GM). The GM will make the accessed account temporarily unavailable. However, please note that a GM cannot perform account related actions such as changing one's password. Please visit here for additional information regarding this issue.

>>Square Enix Support Center

[ Step 2: Verifying your PC's Safety ]
It is possible that a third party accessed your PlayOnline ID and password through a virus or spyware that had infected your PC. If your PC is infected with such programs and you enter the new password you received from the PlayOnline Information Center, the account could again be accessed by an unauthorized third party.

Update your security software to the latest version and perform a virus scan. If your computer is infected with any viruses, exterminate them immediately and then change your PlayOnline password once again.

After you log in to the account, check whether or not the game data has been altered.


*Deletion of the disciplinary measures history will occur after PlayOnline's internal investigation.

Game Data Recovery

If you discover that the game data has sustained any problems due to unauthorized access, please contact the PlayOnline Information Center within 7 days of your account's recovery. Game data may be recovered for customers who fulfill the following two requirements.

[ Step 1: Contacting Square Enix ]
To contact SQUARE ENIX Support Center, click here.

>>SQUARE ENIX Support Center

[ Step 2: Agree to the Terms For Game Data Recovery ]
You will need to agree to the terms listed below (please read them carefully before contacting the PlayOnline Information Center).


   Terms For Game Data Recovery
  • By utilizing server backup data, the game data will be returned to its state before your account was accessed by an unauthorized third party.

    However, we cannot specify exactly to which point in time the data may be returned. We also cannot return the data to a time designated by the user.

    Depending on the timing that the backup data for recovery is created, there may be certain items up for auction or yet to be collected from the delivery box. In such cases, the items are not recoverable.

    There are cases where, according to certain circumstances, the backup data isn't saved and game data recovery is not possible.

  • Game data recovery can only be requested once per customer.
    (Multiple accounts can be dealt with on a single recovery request)

  • There are cases where your character's name may not be available due to a world transfer or other circumstance where another character with the same name already exists.

  • You cannot use the account until the game data recovery has concluded (generally takes about one week).

  • If it is discovered that you have made a false game data recovery request, action will be taken according to the PlayOnline User Agreement.
    When the recovery work has concluded, we will contact you by e-mail.

    Please verify that your registered e-mail address is up to date and is not set as your PlayOnline e-mail address.

  • If we cannot find any evidence of unauthorized access through our internal investigation, the game data will not be recovered.

[ Step 3: Wait for Restoration Confirmation E-mail from PlayOnline ]
PlayOnline will contact you by e-mail with the result of the recovery once it has concluded. Recovery generally takes one week, but if you have still not received an e-mail after a week, please contact the PlayOnline Information Center.

Click here to view the compromised account policy.