Most cybersecurity advice was written for the office. Change your password, watch for suspicious emails, think before you click. None of that language lands with a twelve-year-old being offered a free skin by a stranger in a game lobby. The threats have moved into gaming culture, and the advice has not followed. That gap is why cybersecurity in gaming needs campaigns built for players rather than employees.

The threats have moved into the game

Gaming accounts, chats, marketplaces and community servers are now targets in their own right. Phishing arrives as a fake login page for a favourite title. Account theft follows a shared password or a leaked code. Scams promise rare items, discounted currency or a giveaway that never existed. Social engineering wears the face of a helpful teammate.

The scale is not hypothetical. BCG reported that 72% of children surveyed had experienced at least one online threat. These risks reach children through the same screens their friendships and progress live on, which makes them easy to miss. A young player often does not recognise the danger until an account is gone or money has moved. Parents and teachers frequently do not see the threat at all, because it never looks like the email fraud they were warned about.

Individual advice does not scale to a lobby

The instinct is to hand each child a checklist and hope it sticks. It rarely does. Risk in gaming spreads through shared spaces, group chats and peer pressure, so isolated advice struggles against a culture that rewards trust and speed.

A public campaign works differently. It sets a common reference point that players, parents and teachers can all hold at once.

  • It names the specific tricks in the language players already use, from fake links to account-recovery scams.
  • It reaches whole communities through the platforms and creators young people already follow.
  • It gives parents and teachers a way into a subject they often feel locked out of.
  • It shifts the norm, so declining a suspicious offer reads as sensible rather than rude.

Financial harm is part of the picture too. Ofcom found that around one in five gamers who made purchases using someone else’s money said they did so without permission. A campaign that normalises talking about spending and account access does more than any single warning buried in a settings menu.

Campaigns work when they sound like gaming

A cybersecurity message fails the moment it sounds like a memo. Young people tune out institutional language, which is exactly why so much good advice never reaches them.

The campaigns that land borrow the tone of the space they live in. Creators explain a scam they nearly fell for. A short clip shows the fake login page next to the real one. A tournament pairs the competition with a quick session on account protection. A school esports club runs the same message for players who then carry it home to siblings and parents. The topic stays serious while the delivery stays native to gaming culture. Public bodies, brands and platforms each have a role: governments bring reach, brands bring resources, and platforms bring the surface where players already spend their time.

Cybersecurity in gaming will not be solved by one warning screen or one worried parent. It calls for sustained, public, culturally fluent campaigns that treat young players as an audience worth speaking to on their own terms. The organisations that fund and run that work help build a generation of players who spot the fake link before they click it.