How to Transfer a LoL Account Safely (2026)

Transferring a League of Legends account safely comes down to one idea: move full control to the new owner and lock out the old one. In practice that means changing the registered email, changing the password, and enabling two-factor authentication — in that order — the moment the account changes hands. But be clear before you start: buying, selling, or transferring accounts violates Riot's Terms of Service and can end in a ban. This guide walks the handover step by step and explains the security moves that reduce, but never fully remove, that risk.

Figures computed from live BuyAccount marketplace data, July 2026 — asking prices of active listings, 2% outlier tails trimmed.

First, the honest part: transfers break Riot's ToS

There's no way to make an account transfer "officially approved" — Riot's rules treat accounts as non-transferable, and enforcement can mean suspension. Across the 6,524 active LoL listings we track — spanning roughly $7 to $1,085 in asking price, with a median near $32 — every legitimate handover carries this same underlying risk regardless of price or seller. Whether you're moving a $7 smurf or a four-figure collector account, the security steps are identical. The steps below are about reducing exposure: taking control quickly and cleanly so the previous owner can't recover the account and so you're not flagged by obvious red-flag behavior. They are risk mitigation, not a loophole. If you want the measured, data-backed version of how enforcement actually plays out, read can you get banned for buying a LoL account before you commit.

Before the handover: what you need from the seller

A safe transfer starts with getting the original registered email account, not just the in-game login. Whoever controls that inbox controls account recovery, so the game username and password alone are not enough. Ask the seller for:

The account's login (username and current password).
Access to the original email inbox — the email address itself plus its password, so you can change it to one only you own.
Any recovery details tied to the account (security question answers, if set).

If a seller will only hand over the game login but not the email, treat that as a serious red flag — they retain the master key and can pull the account back later. Terms like "full email access" and "escrow" matter here; the glossary defines them if any are unfamiliar.

Step-by-step: securing a transferred LoL account

Do these in order, right after delivery, without stopping to play first:

Log into the original email first. Confirm you can actually reach the inbox the Riot account is tied to. This is the foundation for everything else.
Change the Riot account email to an address only you control, through Riot's account settings. This is the single most important step — it cuts the seller's recovery path.
Change the password to a new, unique, strong one you've never used elsewhere.
Enable two-factor authentication (2FA) on the Riot account so a password alone can't log in.
Update or remove old recovery info — security questions and any linked phone number that isn't yours.
Review active sessions and linked devices and sign out everything you don't recognize.
Lay low for a while. Don't immediately request a region transfer, drain RP, or make dramatic changes; behave like a normal returning player.

After the handover: the first week

Securing the credentials is the start, not the finish. For the first week or so, keep an eye on the registered email for any Riot security notices — a password-reset request you didn't make is the clearest sign someone else is trying to recover the account. Don't rush to change the summoner name, request a region transfer, or make large RP purchases right away; sudden, atypical activity immediately after a login from a new location is exactly the pattern automated systems tend to flag. Play a few normal games, let the account settle, and only then treat it as fully yours.

Why the email is the master key

Nearly every account-recovery flow — forgotten password, locked account, suspicious-login review — routes through the registered email. If the seller still has access to that inbox after the sale, they can trigger a password reset and take the account back, sometimes weeks later. That's why "change the email first" beats "change the password first": a new password on an inbox the seller still controls is a speed bump, not a lock. Move the email to your control, then rotate the password, then add 2FA as the third wall.

Red flags to walk away from

Some handovers are broken before they start. Walk away — or lean on buyer protection — if you see any of these:

The seller won't hand over the original email. Game login only means they keep the recovery key. This is the single biggest red flag.
"Rented," "shared," or "loaned" access. If more than one person is meant to use the account, it isn't a transfer and you don't truly control it.
Pressure to move off-platform. Being pushed toward irreversible payment methods with no protection removes your only recourse if the account is later reclaimed.
A price that's too good to be true. Deeply underpriced accounts are sometimes stolen or recovered-then-resold, and a stolen account can be pulled back by its original owner at any time.

A clean transfer looks boring: genuine email access, a normal price, an unhurried handover, and a platform standing behind it.

Buying safely: escrow, buyer protection, and a clean seller

The transfer mechanics are only half the safety picture; who you buy from is the other half. Buying through a marketplace with buyer protection means that if the handover fails — wrong credentials, an email you can't actually access, or a seller-initiated recovery — you're covered by a refund window rather than left with nothing. Every listing across our League of Legends catalogue ships with the original email and buyer protection for exactly this reason. If you're shopping specifically for a ready-made account to transfer, the LoL smurf accounts page is where those listings live.

None of this changes the core fact that the transfer itself is against Riot's rules — buyer protection covers your money and the handover, not Riot's enforcement. Go in with clear eyes, secure the account fast, and keep expectations realistic.

Transferring a LoL Account — FAQ

Is it against the rules to transfer a LoL account?

Yes. Riot's Terms of Service treat accounts as non-transferable, so buying, selling, or transferring an account violates the ToS and can lead to suspension. Securing the account quickly reduces exposure but does not make the transfer approved.

What is the first thing I should change after buying a LoL account?

The registered email, changed to an address only you control. Do that first, then change the password, then enable 2FA. Changing the email first is what cuts off the previous owner's account-recovery path.

Why does the original email matter so much in a transfer?

Because almost every recovery flow — password resets, locked-account review — goes through the registered email. If the seller keeps access to that inbox, they can reset the password and reclaim the account later, so you must move it to your own control.

Does enabling 2FA stop the seller from getting back in?

It helps significantly, but only as part of the full sequence. 2FA on top of a changed email and a new password means a password reset alone can't take the account, closing the most common recovery route.

What does buyer protection actually cover?

It covers the handover and your payment — a refund window if the credentials are wrong, the email is inaccessible, or the seller reclaims the account. It does not cover Riot's own enforcement of its Terms of Service.