Hacked on Twitch

Your Twitch was taken. Here's the next hour.

Twitch compromises come through "sponsorships," fake mod tools and shared bot panels.

Does this look familiar

  • Streams or clips going out that you didn't start
  • Channel name, panels or redirect links changed
  • Email or password reset emails you didn't request
  • Connected accounts or extensions you don't recognize
  • A "sponsor" sent a "game to test" or a "capture tool" recently

Do these, in order

  1. Email and carrier first

    Before touching Twitch: from a clean device, change your email password, enable app-based two-factor, sign out of all sessions, and check recovery options. Call your carrier for an account PIN and port-freeze. Full first hour.

  2. Reset the password from a clean device. If the email was changed, use the account recovery form and give your username, the original email and the approximate date of the change.

  3. Settings → Security and Privacy: enable two-factor with an authenticator app, then "Sign out everywhere."

  4. Settings → Connections: disconnect every third-party app and bot you don't actively use. Review Extensions and Channel Points integrations.

  5. Check your Dashboard moderators, editors and VIP lists. Remove unknown names. Review payout settings for changed bank details.

  6. Scan or wipe the machine you opened the "sponsor" file on. Infostealers that target Twitch also take Discord and browser sessions.

Avoid

  • Running any executable from a sponsorship pitch. Ever.
  • Trusting a Discord message from "Twitch Partnerships." Partnerships email from twitch.tv addresses.
  • Reusing the compromised machine before it's clean.

After you're back in

Make sure it can't happen the same way twice.

  • Figure out how they got in. The fix depends on the door they used, and there's usually more than one.
  • Close that door specifically, then the ones next to it.
  • Assume the same people will try again. They usually do.
  • Check your passwords and email against known breaches with a free account, and run the exposure scorecard. Or let us do the whole thing.