Is this a Phish?

#1 - May 22, 2013, 5:31 a.m.
Blizzard Post

I today received an email, which Hotmail determined was sent by a safe sender, from GW2, it looks really authentic but my “Spidey-sense” was tingling so I didn’t click on the link provided by it.

Does Arena net send out such “click this link to confirm your account” emails? because the email address was exactly the same as the one used to send prior official emails, suggests to me that scammers may have somehow been able to send emails that appear to be authentic.

I can provide the link address for you to check, I didn’t include it in this forum post for security reasons.

#9 - May 22, 2013, 10:29 a.m.
Blizzard Post

Do you have authentication on your account? Is the email asking you to confirm that you want someone to access from XYZ IP address? That would be legitimate, and it’s offered to give you a chance to add a new, approved IP address or to do nothing and the IP will not be accepted.

We do not send emails that ask you to “verify your account.” We send emails to verify that you want to allow an IP to access your account, but that’s entirely different.

#11 - May 22, 2013, 2:17 p.m.
Blizzard Post

I figured as much, I was alarmed purely because they had somehow hijacked the official email address hence it showing up as on my safe list.

They didn’t highjack our email address. They are simply inputting it as the sender. Anyone can do that. I could send a mail as Robert E. Lee, Catherine the Great, or Captain Kirk. So could you. This is because the sender name is never verified against the sending address.

So as a savvy email user, don’t look at what it says but examine the email’s behind-the-scenes properties by doing a right-click and then reviewing “properties” on the popup. You’ll see who really sent the mail, and in these cases, it’s not us!