As a regular poster in the WoW Customer Service forum, I see every day how upset people can be when their account is stolen from them. Keeping your account safe is a really important thing. One way that people can hack into your account is by spamming your e-mail with realistic looking posts that claim to be from Blizzard, but are really designed to steal your account information. Even smart people can fall victim to scams (sorry 4haelz). Our friendly druids over at themoonkin repository are also finding that they are getting spammed by scammers, too!
Here are a couple easy ways to spot an e-mail scam:
- If you aren’t 100% sure if an e-mail is from Blizzard you can ASK before replying and/or clicking links! A good way to ask is to post the text of the e-mail (without identifying information/malicious links) in the Customer Service forum. The regular posters & the blues are all pretty good at playing “spot the scam.” If you don’t want to post things on the CSF, you can also e-mail it to email@example.com, and wait to respond until you hear back from them.
- That said, how we play the “spot the scam” game is by looking for things like typos. Usually, people typing the scam things are bad at spelling (edit: Brent says they’re even learning how to spell!). They also tend to put in links to regions that your account isn’t in (ie. if you are from a US server, they’ll sometimes say it’s from an EU representative).
- Remember that Blizzard will NEVER ask for your name, password, or other personal information by e-mail. If they do ask for information, it’s usually because your account is already locked/banned.
- They will never threaten to ban you if you don’t respond to an e-mail. They lock first & ask questions later. To avoid having to click on links on possibly malicious posts, please go directly to the Blizzard support page here. Anything that Blizzard would be linking you to is already on their support page and you can find it directly by searching for key phrases rather than clicking on links. You can also log directly into your account management page rather than clicking on links there.
- The e-mail address should be from Blizzard.com. However, it’s pretty easy to “spoof” something that looks like it’s from a real e-mail address, so be careful even if it looks like the real thing.
- If you spot a scam, forward it to firstname.lastname@example.org . This is the department where they handle all of those kinds of bad things that are floating around the internet.
- If you DO get scammed, please also visit the customer service forum for directions on how to check for threats and/or recover your account (and please be nice to them over there, they really are just trying to help).
You can find additional information on scams by reading help stickies on the WoW Customer Service forums. The CSF is also a good place to go if your password gets stolen from either a keylogger or from a scam. Prevention is always the best way to keep your account secure!
I know it seems strange that in a thread where I told you not to click on links, I told you to click on MY links. To avoid having to click on any of these, you are welcome to just go directly to the CSF from the official WoW forums.