How it plays out
In-game currency only exists on the game company's own servers, and only the company can add it. A generator page shows a convincing fake progress bar and a counter, then says you must 'verify you are human' by entering your password, completing offers, installing an app or downloading a tool. Each of those steps earns the scammer money or gives them your account. The currency never arrives.
Spot the red flags
An invented example of how this scam often reads. Tap the parts that feel wrong, or reveal all 4 flags. The sender and addresses are invented for teaching; please do not type them into a browser.
Get 10,000 free credits1 in 60 seconds - working today!Step 1: enter your username and password2 so we can find your account.Step 2: complete 2 quick offers3 to verify you are not a bot.Only 37 codes left4 - hurry!
- 1
free credits
Only the game company can add currency to an account. No outside site can. - 2
username and password
A real service never needs your password to send you a reward. - 3
complete 2 quick offers
Human verification through offers or app installs is how the scammer gets paid. - 4
Only 37 codes left
A countdown is there to rush you past thinking.
Red flags checklist
- Any promise of free premium currency, skins or items outside the game's own store or official events.
- A page that asks for your password, or for your email and password together.
- 'Human verification' that means filling in surveys, installing apps or entering a phone number.
- A download (a 'generator tool', 'injector' or 'script') you must run on your computer.
- Fake live counters, countdowns or chat boxes showing other people 'receiving' rewards.
- Links shared in video descriptions, comments or direct messages rather than inside the game.
If it happened to you
- If you typed your password, change it straight away from the official app or website, not from any link you were sent.
- Turn on 2-step verification for the game account and for the email address linked to it.
- Sign out of all other sessions from the account's security settings.
- If you downloaded and ran a file, disconnect from the internet, run a full scan with your security software, then change passwords from a different, clean device.
- If you paid money or entered card details, contact your bank (you can call 159) and report it to Report Fraud, or Police Scotland on 101 if you live in Scotland.
- Report the page to the NCSC suspicious website service and report the video or message on the platform where you saw it.
Why no generator can touch your balance
Every online game keeps your currency balance on its own servers. When you buy a pack or earn a reward, the game company's systems record it against your account. An outside website has no way to write to those systems, so a page that claims it can is not telling the truth.
This is why generator sites never give a sensible explanation of how they work. They talk about 'glitches', 'exploits' or 'leftover codes', because any honest explanation would show it is impossible. If a real flaw ever existed, the game company would fix it and could remove anything gained through it.
Some generators claim to hand out gift card codes instead of adding currency directly. Gift cards are sold through shops and the platform's own store. A site giving away an endless supply of valid codes for nothing would be losing money on every visitor, which is a good reason to doubt it.
Where the scammer actually makes money
The fake reward is bait. The real business sits behind the 'verify' step, and it usually works in one of four ways:
- Account theft. If you type your password, the scammer can sign in, take items, change the email address and sell the account.
- Survey and offer fees. Some sites earn a small payment each time a visitor fills in a survey, enters a phone number or installs an app. You do the work; they get paid.
- Premium-rate or subscription sign-ups. 'Enter your mobile number to receive your code' can lead to unwanted paid text subscriptions.
- Malware. A 'generator tool' you download may be a program that steals saved browser passwords, session cookies and chat app tokens.
Because the scammer profits even when you never get anything, the page has every reason to keep you clicking through 'one more step'.
Why videos and comments make these pages look real
Generator links are often pushed through short videos that show someone 'receiving' a huge balance. Screens like that are easy to fake with edited footage or a private test server. Comment sections fill up with replies saying 'it worked for me', which can be posted by bots or stolen accounts.
Search results are no proof either. Scam pages are sometimes uploaded to free hosting, shared document sites or file-sharing pages to borrow the trust of a well-known domain. A familiar address in the URL bar does not mean the content on the page came from the game company.
A useful rule: free currency only comes from inside the game itself, through the store, battle passes, official events or promotions announced on the game's own website or social accounts.
Talking to a child who has already clicked
Children are a common target because free currency is so appealing. If your child has entered details on one of these pages, the most useful thing you can do is keep the conversation calm. A child who expects to be told off is less likely to mention the next problem.
Work through the steps on this page together: change the password from the official app, check the email address on the account is still theirs, and turn on 2-step verification. Our parents' guide covers spending limits and other controls each console and platform offers.
If the account has already been taken over, the hacked account triage page walks through recovery platform by platform.
If you ran a download from a generator site
A downloaded file is more serious than a typed password, because it may still be running. Treat the device as untrusted until it has been checked.
- Disconnect the device from the internet.
- Run a full scan with your security software (Windows includes Microsoft Defender) and remove anything it finds.
- From a different device you trust, change the password for your email account first, then for your game and chat accounts.
- Sign out of all sessions on each account and turn on 2-step verification.
- Check your saved payment methods and recent purchases.
Our page on cheat and mod malware explains how password-stealing programs work and why changing passwords from the infected device can hand the new password straight to the attacker.
Official ways to earn free currency and items
Most games do offer some free rewards, which is part of why generator scams feel believable. The genuine routes are all inside the game or announced on its official channels:
- daily log-in rewards, challenges and free tiers of seasonal passes;
- in-game events and limited-time missions;
- promotions run by the platform itself, such as free games or items claimed through the official store;
- codes handed out by the publisher at official events or through its verified social accounts, redeemed in the game's own redeem screen.
A useful test: if claiming the reward means leaving the game or official store and signing in somewhere else, it is not one of these.
Questions
Are any free currency generators real?
No. Currency is stored on the game company's servers and only the company can add to it. Official free rewards come through the game itself or announced promotions.
I only entered my username, not my password. Am I at risk?
The risk is lower, but your username can be used to target you with follow-up phishing messages. Be extra careful with any message about your account over the next few weeks and turn on 2-step verification.
Can I get banned for using a generator?
Many game terms of service forbid using unauthorised tools or exploits. The bigger risk is losing the account to the scammer.
