Last week, someone on r/VALORANT posted screenshots of a site that promised them a free Elderflame Vandal. All they had to do was spin a roulette wheel and log in with their Riot account. They spun, they "won," they entered their credentials. Within 20 minutes their account was stripped of every skin and their linked email was changed.
This particular Valorant skin giveaway scam has been circulating hard in 2026, and the sites rotate domains fast enough that browser blocklists can't keep up.
How do fake Valorant skin giveaway scams work?
The setup is the same across dozens of these sites. You land on a page that looks polished, often mimicking Riot's visual style. There's usually a pro player name attached, most commonly TenZ or Shroud, to make it look like an official promotion. The page features a spinning roulette wheel loaded with expensive skins.
You click spin. You "win" something good. Every single time. The wheel is rigged so nobody ever loses. Then a login prompt appears asking for your Riot username and password. It looks close enough to the real Riot login page that most people don't think twice.
The moment you submit those credentials, they go straight to the scammer's server. Not to Riot. From there, the attacker logs into your account, changes the email and password, and either sells the account or uses it to send phishing links to people on your friends list.
Which sites are running this Valorant skin giveaway scam?
The specific domains change weekly because they get reported and taken down. Some of the more reported ones in recent months include Valbox.live, Valogray.com, and various sites ending in .gg or .pro that look like they could be legitimate gaming platforms.
They spread primarily through X posts and Discord DMs. A typical post tags popular Valorant accounts and uses hashtags like #ValorantGiveaway or #FreeSkins. Some of them even run paid ads that show up in your social feed looking like official Riot promotions.
Red flags that stay consistent across all of them:
The URL is not riotgames.com or playvalorant.com
You have to enter Riot credentials on a third party site to "claim" your prize
Every spin results in a high value win, no matter how many times you try
There's a countdown timer pressuring you to act before your prize "expires"
Why this works even on people who should know better
Valorant doesn't have a skin trading system. You can't transfer skins between accounts. The only way to get a specific skin is through the in game store, the Night Market, or buying a whole different account that already has it unlocked.
That frustration is exactly what these scams tap into. When you see a Champions Vandal sitting in a giveaway wheel, wanting it overrides the part of your brain that would normally be skeptical. The sites also copy Riot's UI accurately enough that a quick glance doesn't raise alarms. They use official artwork, proper fonts, and even fake "verified by Riot Games" badges at the bottom.
I've looked at about a dozen of these sites over the past month, and the quality has gone up noticeably. They used to look obviously fake, broken layouts and bad English. Now some of them are more convincing than actual third party gaming tools. A few even have working FAQ pages and fake Terms of Service documents to sell the illusion.
What to do if you already entered your credentials
If you've typed your Riot username and password into one of these sites, do this right now:
Go to account.riotgames.com (type it manually, do not click any links) and change your password immediately
Enable two factor authentication if you haven't already
Check your linked email address to make sure it hasn't been swapped
Review your purchase history for unauthorized VP spending
Submit a support ticket at support-valorant.riotgames.com if anything looks off
If you can't log in at all, the attacker already changed your credentials. File a ticket with Riot support and include proof of ownership: your original email, purchase receipts, and the approximate account creation date.
How to tell a real Valorant giveaway from a fake one
Riot runs official promotions through playvalorant.com and their verified social accounts. They never ask you to log in through a third party website. If a giveaway requires your Riot password on any domain that isn't riotgames.com, it is a phishing attempt. Full stop.
Legitimate creator giveaways distribute VP codes or gift cards. They never ask for account access. If someone says they need to log into your account to gift you a skin, that is a lie. Valorant's gifting system requires the gifter to buy from the store on their end.
The simplest test: if a free skin requires your password, it's not free. It's the price of your entire account.