Hi there,
Sorry to hear you are experiencing this, it is happening because hackers are attempting to access your account. Here’s some info posted by Epic detailing the hacking attempts (and successes unfortunately) being carried out by a group of Russian hackers, and what Epic is doing to combat it. There were large “dumps” of email account username (or email addresses) and passwords posted to some hacking forums a while back and the hackers use “credential stuffing” (automated injection of breached username/password pairs in order to fraudulently gain access to user accounts) to gain access to accounts on other websites that use the same password.
The hackers are targeting Epic account holders with payment options to fraudulently purchase Fortnite V-Bucks, which they are then reselling on some shady websites.
First thing to do is change your email password (if you haven’t already done so). If you use the same password as your email account on any other websites change those passwords AND your email password immediately to prevent more accounts being hacked. That includes your password on this website. See the security bulletin I linked above for more details.
Next enable 2 factor authentication on your account here to further prevent them from being able to access your account. Whenever you log in from a new computer you will need to enter a code that Epic will email to you before you’re allowed access, this provides an additional layer of security. Doing this should also reduce or eliminate the number of unsuccessful alert emails you receive. I also highly recommend adding 2FA to all of your critical accounts (email, banking, credit card, PayPal, etc).
If 2FA is already enabled here it probably means they know your password since the 2FA screen is only shown after entering your user/pass. Changing your password (make it completely different, they use automated programs to guess passwords similar to your current one) should eliminate these emails.
You can also check whether your email account(s) have been exposed to hackers. The haveibeenpwned.com website will allow you to see whether your email address has been included in any of the data breach “dumps”. If it has you do not need to stop using the account (unless it concerns you) but you should increase your security on that email account by using a stronger/longer password (preferably with a mix of upper/lower case letters, numbers, and symbols), and changing your passwords regularly. I recommend using a password manager such as LastPass, Dashlane, 1Password (those 3 need to be purchased), or if you’re on a budget try KeePass. I use KeePass myself and it works just as well as the paid products to store your passwords, and they even include a random password generator to create strong passwords.
Lastly please make sure you do not have any payment options saved to your account, especially if you are getting the “unsuccessful login attempt” emails. You can add them back in when you need to buy something, but make sure you remove it again afterwards. Leaving this info stored in your account is a potential security risk that just isn’t worth it.
Hope that helps to stop the emails.