Back to Fake Branded Account Login ScamPhishing

This is a version of Fake Branded Account Login Scam in Phishing.

Fake Epic Games login hidden behind a free V-Bucks offer and a "Tap the targets" puzzle

A Fortnite-themed site at epic-treasure[.]info uses the Epic Games name and logo and offers free V-Bucks, Fortnite's in-game currency, with the line "Get 13,500 V-Bucks for your first check." Before the page loads, a "Tap the targets" puzzle asks the visitor to click shapes in a set order, which keeps automated security scanners from seeing what is behind it. Behind the puzzle is a copy of the Epic Games sign-in page. Only the email option goes anywhere: the PlayStation, Xbox, Nintendo, Google, Steam, Apple and other buttons show "Method Not Eligible" and tell the visitor to sign in with their Epic Games email and password "to claim the reward." Anything typed there is entered on a site that does not belong to Epic Games. The address was registered on November 6, 2026, with the owner's details hidden. The overall record remains Active, because similar pages appear on new addresses. This pattern was first observed on November 7, 2026, and last seen on November 13, 2026.

Fake Epic Games login hidden behind a free V-Bucks offer and a "Tap the targets" puzzle | Screenshot

What’s different in this version

These traits set this message apart from the usual pattern.

  1. The brand is Epic Games and the game is Fortnite. The lure is free V-Bucks rather than a security warning or an order problem, and the page calls itself a "Treasure Event Checker" with the headline "TREASURE HUNTERS IS HERE."

  2. A "Tap the targets" puzzle sits in front of the site. Automated checks of the address saw only the puzzle, so scanners that do not solve it never reach the login page.

  3. A "collection checker" asks for an Epic Games username and returns an estimated V-Bucks value, labelled "illustrative", with the line "your full breakdown is one step away." It returned a result even for a made-up username.

  4. The sign-in page copies Epic Games' layout, including the console and social sign-in buttons, but only the email option works. Every other button shows "Method Not Eligible" and pushes the visitor to type an Epic Games email and password.

  5. The "Create an account" link sends visitors to the real Epic Games registration page, which makes the copy look more genuine. The privacy policy link leads back to the sign-in page.

  6. When test account details were entered, the browser console showed messages in Russian and an "Invalid account credentials" response. Where entered details are sent was not established.

  7. epic-treasure[.]info was registered on November 6, 2026 through PDR Ltd. (PublicDomainRegistry.com), with the owner's details hidden by privacy masking, and uses DNSPod name servers. A urlscan.io search of the server it was hosted on showed other Fortnite-themed addresses. Those addresses were not reviewed for this record.

  8. A VirusTotal URL scan dated November 10, 2026 shows 2 of 93 vendors flagging the address: DNS8 as phishing, and alphaMountain.ai and Fortinet as spam.

  9. The address was still online on November 13, 2026. The overall record remains Active, because similar pages appear on new addresses.

Other variations of this scam

Other reported versions of this scam.

Related scams

Other patterns in the same category, or that share a brand with this report.

How this scam works

  1. 1

    Step 1: A link or page uses a familiar company's name, logo or colours.

  2. 2

    Step 2: The address is not the company's real website, even when the brand name is part of the address.

  3. 3

    Step 3: The page asks you to sign in or register with a username, phone number or email, and a password.

  4. 4

    Step 4: Details entered on that page go to whoever set it up, not to the company being copied. The documented variation does not establish a completed sign-in.

✓ Do this

  • Open the real company's app or type its official website address yourself before signing in.
  • Look at the full web address, not only the logo or the colours.
  • If you already entered a password, change it on the real account from a device you trust.

✗ Avoid this

  • Do not enter your password on a page you reached from an unexpected link or a look-alike address.
  • Do not trust a login page because it uses a familiar name or colour scheme.
  • Do not reuse that password on other accounts if you already typed it in.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

  1. 1Excerpt 1
    Tap the targets. Click the shapes in the order shown in the thumbnail strip.
  2. 2Excerpt 2
    TREASURE HUNTERS IS HERE.
  3. 3Excerpt 3
    Get 13,500 V-Bucks for your first check.
  4. 4Excerpt 4
    enter your username and get a precise estimate of your inventory
  5. 5Excerpt 5
    estimated value ≈ 561,234 V-Bucks (illustrative) your full breakdown is one step away.
  6. 6Excerpt 6
    Sign in to Epic Games
  7. 7Excerpt 7
    Method Not Eligible This login method is not participating in the current promotion. Please sign in using your Epic Games email and password to claim the reward.
  8. 8Excerpt 8
    © 2020–2023 Treasure Event Checker. All rights reserved.