|
Customer Service
|
Edited by Nephadne on 12/10/11 15:30 (UTC)
All new topics created regarding phishing mails/websites will be locked and redirected to this thread; please make sure you read the entire sticky before you post.
———————————————————————————————————————————————— TL;DR? We've turned some of the information in this sticky into a video on YouTube! http://bit.ly/qIJc3Y ———————————————————————————————————————————————— We have been seeing a troubling increase in the number of fake or ‘phishing’ emails being sent to players, all appearing legitimate and official and seemingly originating from Blizzard Entertainment. These emails, created for the criminally fraudulent process of attempting to acquire sensitive details (account names, passwords, or other account information), may promise exclusive in-game items, bonus game time, or ‘specially selected’ Alpha/Beta invitations to upcoming Blizzard releases. More commonly, and undeniably more worryingly, they may even threaten dire account-related action unless the player provides his or her login information, or follows a specified website link (usually to ‘verify the legitimacy of the account’). Please do NOT fall for these scams!
|
#1
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 05/12/10 18:02 (UTC)
I’ve received an email just like this – is it a fake? How can I tell?
So, this email comes from someone showing as @blizzard.com or @battle.net. That means it’s real, right?
In order to verify the actual sender address of any email you receive, you will need to check the email header information. What’s an email header? How do I find it, and what am I looking for?
For more information on how to check this data, including some specific details for some of the more common email providers, please see our Support site article;
http://eu.blizzard.com/support/article.xml?locale=en_EN&articleId=43010 OK, but the links in my email look right. You said something about needing to ‘double-check’ them?
Depending on your Internet browser or email client, you can sometimes see the destination URL a link will use displayed in the bottom corner of your window, or in a hovering tooltip. However, for a non-specific means of uncovering the URL that any hyperlink will direct you to, you may use the following steps; If you are ever in doubt about the veracity of a link, it is always safer to navigate there yourself. |
#2
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 05/12/10 18:05 (UTC)
Why am I getting these emails in the first place? I don’t remember giving my email address out to anyone.
The most reliable way to stop receiving these types of mails, and also to provide an extra bit of security to your account, is to consider creating a new email address purely dedicated to World of Warcraft and Battle.net use. During the creation process, do make sure that no part of the new address or password coincides with your previous email addresses, passwords, nicknames or profile information on any of the above sites, and that you avoid using this new email account for anything other than Battle.net in the future.
Right, thanks for all the information. I think I definitely have a fake email here, so what do I do with it now?
Please also copy and paste the email header into the message body in order to ensure that we can fully identify the source of the mail, and hopefully help prevent future phishing mails of the same type. Um, unfortunately I actually replied to one of these fake mails before reading this thread, and now they have my details (Secret Answer, CD Key, etc). Please help me!
http://eu.battle.net/account/management/ Then move on to either changing the password on your email account, or simply creating a new dedicated email account (see above) that you only use for World of Warcraft and Battle.net. At this stage, you should hopefully have restored your account to the same level of security as prior to the phishing email, but you may also wish to consider purchasing or downloading a Blizzard Authenticator (either physical token or mobile version);
I didn’t reply to a fake mail, but I just may have clicked on a dodgy link instead… Is my PC still safe?
However, at the earliest opportunity, please do take some time to read some of our Support site guides on securing your account, and related software to help you with this;
|
#3
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 21/01/11 14:31 (UTC)
If your account has been stolen or compromised, or you are wishing to read up on any information related to account theft, please take a look at our compromised account sticky on this very forum;
http://eu.battle.net/wow/en/forum/topic/900641512 For the remainder of this thread, we will continue to update with new examples of phishing emails reported to us.
Oh, and please REMEMBER: Blizzard employees will NEVER ask for your password. |
#4
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 21/11/10 21:30 (UTC)
Scam email examples incoming!
Greetings! We don't need your password – we have no use for it whatsoever. So if a mail asks for your password, it's not us! |
#5
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 21/11/10 21:30 (UTC)
Greetings, It is your responsibility to keep your login information confidential, but a trip to <fakewebsite.com> is not the way to do so. |
#6
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 21/11/10 21:30 (UTC)
Hello, Playing from Europe, with a European account, it is extremely unlikely you would ever receive any correspondence from an ‘Account Administration Team’ in California. We also haven’t changed the company name to “Blizzard Entertainmen”! |
#7
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 17/02/11 11:51 (UTC)
Greetings! We have verification the password for the World of Warcraft account associated with this email address. verification password, please click the following link and follow the instructions: Mails that require you to log into <websiteoffakeness.com> in order to verify your password are not standard Blizzard practice, nor especially logical either. |
#8
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 05/12/10 19:22 (UTC)
***Notice of Account Will Closure*** There is far more wrong with this mail than can be summed up in a single sentence, but real-looking links still do not necessarily equal real websites nor should the presence of some real links convince you that all the others must be. |
#9
21/11/2010
|
|
Customer Service
|
Edited by Nephadne on 21/11/10 21:31 (UTC)
Greetings, Please note: We do not anticipate that database upgrades or the Catacylsm expansion will prevent us from providing restorations. This is a "fake" e-mail. |
#10
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 19/01/12 15:00 (UTC)
To English-speaking players: With the recent announcement of the next expansion, players may start to see e-mails like the one above either inviting you to participate in a fake expansion or giving you the chance to play in the expansion beta. While tempting, keep in mind that these are very fake and there are currently no plans for any invites being sent out at this time. |
#11
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 27/01/11 10:56 (UTC)
Greetings! The structure, grammar and spelling of this mail should have already alerted you to the fact that it is a fake e-mail. Please also note that we will not take action on your account unless it is compromised or you have broken our policies. We will always take the action first and then send an e-mail to your registered e-mail address explaining the situation. Do keep in mind though that authenticators are a great way to protect your account and if you have not got one yet and would like one, you can find out more about them here. :) Battle.net Mobile Authenticator FAQ http://eu.blizzard.com/support/article.xml?locale=en_GB&articleId=35970 Battle.net Authenticator FAQ http://eu.blizzard.com/support/article.xml?locale=en_GB&articleId=36010 |
#12
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 27/01/11 11:51 (UTC)
Hello, This fake e-mail contains information that pertains to you and can make it seem more genuine than it really is. It is very important to remember that if you change information on your Battle.net account then the e-mail we send only mentions the change made, rather than providing what it was changed to. Should you receive this mails on your registered e-mail address, it may be worth changing your e-mail details in Battle.net to a brand new one to be on the safe side. |
#13
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 27/01/11 11:59 (UTC)
Dear <name> While it seems that you may have been caught by our security software, rest assured that this mail is fake and once again an attempt to steal your account details. The important thing to note about this particular mail is that the <date> and <IP address> are generic and will more than likely be the same information on all mails of this type sent. However, at first glance it might seem genuine as you may have indeed logged in at that time. Keep in mind though that many other players probably have also logged in at this time and is why it is easy to catch people out. If you are concerned that you might have unauthorised software on your machine, then you are welcome to take a look at this sticky and follow the instructions there. :) (Sticky)[Guide] How to SCAN and SECURE your PC http://eu.battle.net/wow/en/forum/topic/900641537 |
#14
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 27/01/11 13:39 (UTC)
Greetings, This is a common style of phishing mail which appeals to the player to stand up and be counted or face dire consequences to their account. It is very important to remember that we have no plans to delete accounts and this type of scaremongering is designed purely to steal your account details. Of course the language used and the spelling mistakes also highlight the fact that it is a fake e-mail. :) |
#15
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 26/02/11 10:42 (UTC)
Dear customer, A professional looking mail and containing just the right information to make it look legit. Beware though as this is also a fake e-mail. If you mouse-over the links you can see that they are being re-directed to a different site. |
#16
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 23/06/11 15:10 (UTC)
Dear, This one is actually using a genuine template mail that we use in order to bolster its authenticity but it is actually fake. Be very careful if you receive one of these mails to check the links and to check the name on it. If it is not a name you recognise or you haven't contacted us, then there is a much higher chance that it is a fake e-mail. As always if you are ever in doubt, please do not click the links and instead contact us directly. |
#17
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 06/08/11 10:29 (UTC)
Greetings! A fairly standard method of phising for your account comes with ways of promising you new and exciting gifts either for free or by entering a prize draw. Obvious grammar mistakes aside, this is not something we are offering and this mail is a fake. |
#18
21/11/2010
|
|
Customer Service
|
Edited by Tailyda on 19/01/12 15:04 (UTC)
Greetings from Blizzard Entertainment! Diablo III FREE for 90 Days - Offer Expires January 23 While these e-mails contain a lot of previous warning signs to show they are phishing mails, we've added them to the list due to the fact that a lot of players may start to receive these or similar mails in light of recent Diablo 3 events. To quote an earlier post, we don't need your password – we have no use for it whatsoever. So if a mail asks for your password or to verify your account, it's not us! |
#19
21/11/2010
|
