Happens quite often.....

#1 - May 21, 2013, 7:26 p.m.
Blizzard Post

Recently when logging in i have had to verify my IP address a few times every day for some reason. I’m not sure what the issue is or if I am getting hacked.

I have also been getting many Emails saying im trying to sell my account (which i am not) and that i need to secure my account which seems to be a bit fake but I am not entirely sure.

Any advice and help would be much appreciated i just recently got the game and have been enjoying it and the thing that i want least right now is to get hacked

#4 - May 22, 2013, 10:20 a.m.
Blizzard Post

Any emails that address your account that are not responses to queries you sent into Customer Support are fake and phishing emails. ArenaNet will never contact you about your account unless they are responding to you. For extra security, you can always change the passwords to your account and the email associated with your game account. Welcome to Tyria! =)

Please let’s be clear.

There are two emails. The first is probably ok if you are being asked to verify IPs that you’re using (for example, you have a dynamic IP). The second is not, it’s a phishing attempt that tries to scare personal info out of the user by telling him he’s accused of breaching the UA through attempting to sell the account.

If someone has added authentication to his/her account, then there will be occasional verification emails sent in response to (1) a new or unknown (not previously approved) IP or (2) an attempt by an unauthorized individual to access from a different IP than those previously approved by the account holder.

I believe that the email mentioned in the first post is legitimate. It is part of the authentication system. The reason that it’s ok is that you’re only asked to do something consciously, and with full information and you are not asked to give any personal information, like a phishing email would seek. IOW, you’re not asked to click a (suspicious) link and input your account name and/or password. You’re asked simply “Do you want to approve this? Here’s the location and the IP — is that ok?” And you have the option to actively approve or to do nothing and not approve that request.