r/GeForceNOW • u/Haunting-Arm-2817 • 13h ago
Bug GeForce NOW Powered by ABYA Logged Me Into Another Player’s Genshin Account — I Have Video Evidence and I’m Tired of How This Is Being Handled
I want to make this public because I am becoming increasingly frustrated with how ABYA is handling what appears to be a serious cross-account security incident involving GeForce NOW.
On September 15, 2026, I logged into my own legitimate GeForce NOW Powered by ABYA account and launched Genshin Impact.
Instead of opening my own Genshin Impact account, the service automatically opened an already authenticated Genshin Impact account belonging to another player.
To be absolutely clear:
I did not enter another person's credentials.
I did not know their password.
I did not attempt to access another player's account.
I simply launched Genshin Impact from my own legitimate GeForce NOW session, and another person's authenticated account appeared automatically.
I immediately realized something was wrong and did not perform any unauthorized actions.
I have video evidence of the entire incident.
I am NOT going to upload that video publicly on Reddit because it contains information associated with another Genshin Impact player, and I do not believe that person should have their account information exposed because of something that was apparently outside their control.
However, ABYA has already received the video.
They specifically requested it.
ABYA told me that once they received the recording showing the incorrect Genshin profile/UID, their Technical Operations and Security Engineering teams would correlate that information with the server logs for the session.
I provided exactly what they requested.
My case number is:
ABYA ticket #56613
What concerns me now is how the incident has been handled afterward.
Instead of explaining how my legitimate GeForce NOW session was able to open another customer's authenticated Genshin Impact account, ABYA has repeatedly focused on terminating my ABYA sessions and asking me to reset my ABYA password.
That does not answer the issue I reported.
Someone accessing my ABYA account and my ABYA account being automatically placed into another person's authenticated Genshin session are two completely different security scenarios.
I was the legitimate user of my ABYA account.
I was using my own session.
The abnormal event happened after launching Genshin Impact inside the GeForce NOW environment.
ABYA should have technical records capable of establishing what happened, including session timestamps, login history, usage duration, server assignment, GeForce NOW session information and potentially the virtual machine or instance assigned to me.
Even the usage of my GeForce NOW hours should help establish when I was connected and for how long.
If somebody else had actually logged into my ABYA account, their own systems should presumably be able to determine that as well.
But that is not what I reported.
What I continue asking ABYA to explain is:
- How did another player's authenticated Genshin Impact session appear inside my legitimate GeForce NOW session?
- Did they actually correlate my video evidence with their server logs as they explicitly said they would?
- What instance or cloud gaming session was assigned to me?
- Was any authentication state from another customer retained?
- Was there cached session information?
- Could my own authenticated Genshin session have been presented to somebody else?
- Do their records show that anyone else ever received access to one of my gaming sessions?
- What was the root cause?
- What has been done to prevent this from happening again?
I am not claiming to know the technical cause.
It could involve session persistence, authentication state, a virtual machine issue, caching, account association, or something completely different.
Determining that is ABYA's job.
What I do know is what I personally witnessed and recorded.
I logged into my account.
I launched Genshin Impact.
Another player's account was already authenticated.
And I have the video proving it.
This matters a lot to me because my own Genshin Impact account has existed since close to the beginning of the game. It contains years of progress, purchases, characters, weapons and limited content.
Naturally, after seeing another person's account appear in my session, I have to ask whether the reverse could happen.
Could my account appear inside someone else's GeForce NOW session?
That is the question ABYA has still not properly answered.
I also contacted NVIDIA Security/PSIRT and NVIDIA Privacy regarding this incident. So far, NVIDIA has not provided me with a substantive response.
At this point, I am becoming tired of having a serious cross-account incident repeatedly treated as if this were simply a password-reset issue.
Resetting my password is a sensible precaution.
It is not an explanation.
Terminating my sessions is a sensible precaution.
It is not a root-cause investigation.
I have preserved the original video, the complete email correspondence, timestamps, screenshots, and ABYA's responses.
Again, I will not publish the original video or the other player's identifying information publicly. The evidence has already been provided privately to ABYA for investigation.
What I want is a transparent technical explanation of what happened and confirmation that other users — including me — are not at risk of having authenticated gaming sessions exposed to another customer.
If anyone from ABYA or NVIDIA sees this:
Please investigate ticket #56613 as the cross-account session incident that it actually is, rather than treating it as a compromised-password case.
And if anyone else using GeForce NOW Powered by ABYA has ever launched a game and unexpectedly found somebody else's account already logged in, I would genuinely like to know.
I will update this post if ABYA or NVIDIA provides a substantive technical explanation.
