Banned for no reason and dont know why

#0 - Jan. 12, 2010, 6:23 a.m.
Blizzard Post
hi this is my friends account (dw i haven't hacked his account hes right next to me) my account got banned for no reason and i don't know how long it will be for im only new to this game and have done nothing wrong ive sent so many e-mails to the admin and have got no reply so plz if some1 is able to help me that would be great. oh and i am pretty sure i have gotten no warnings at all. so plz can you help can anyone help me
#5 - Jan. 12, 2010, 6:51 a.m.
Blizzard Post
Q u o t e:
it said spamming and advertising and it said it was closure or something like that(soz im only a kid and cant spell stuff well) i got it like 3 am yesterday if i could only work out when it said i did this stuff cause i know i got off my com at 10 pm. soz but thats i know from it.


That is actually a very common use of stolen accounts.

I'd recommend you look over the following information carefully. This is the basic information compromised players will need. You may not need all of it, but please pay particular attention to the security bits, and the account restoration portions.

-----------------------------------

If an account has been merged to a Battle.net (not your own), or if an email has been changed, or an authenticator added (and it wasn't you that added it), one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 8AM – 8PM Pacific Time, 7-Day Support
E-mail Support - Billing@Blizzard.com
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Our Billing Support page can be found at http://us.blizzard.com/support/article.xml?locale=en_US&articleId=20606

Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful. I'd also recommend doing your scans with the launcher open and some junk entry in the account ID. We've seen some nasty keyloggers pop up lately that don't want to show on scanners unless the launcher is active.

I also highly recommend changing your email password once you are certain your system is secure. They don't need into a system once they can dip into an inbox.

Also, if you have used the same password/ID anywhere else, that is a very dangerous practice - especially on websites, or social sites like Facebook or MySpace. Please do not reuse the same password you've used anywhere else.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will keep anyone else out of your WoW account. Not to mention core hounds make adorable pets!

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

Even more core-hound goodness can be found here!

http://forums.worldofwarcraft.com/thread.html?topicId=21726114509&sid=1


I do wish you all the very best.
#12 - Jan. 12, 2010, 7:13 a.m.
Blizzard Post
Q u o t e:
kk hang on 1 more thing soz 2 bother u's but i got the email and it said immediately contact me does that mean by phone or wat does it mean?? cause i sought of trying 2 keep this a secret from my parents so yeah.


You should immediately inform your parents.

If this was caused by malware and your family uses an infected system - far more than just a WoW account could be at risk.

What exactly does the email say?
#21 - Jan. 12, 2010, 7:50 a.m.
Blizzard Post
Q u o t e:


and they know i play wow so dw i ask my mum and said its in my dads name :P so there


If the system you are playing on is infected, that is a huge security risk, your parents need to know about this immediately.
#23 - Jan. 12, 2010, 8 p.m.
Blizzard Post
Q u o t e:


i scanned it with 3 different virus scanner and told them so everything a ok um gm guy(soz couldt think of any name 2 call u) i got a question how long do u think it will take 2 get my account bak up and running they said they would contact me straight away but they still haven't done it


What exactly did you receive in an email?

Phishes are another way this happens often. Have you gotten any messages or emails ingame or out asking you to go to a website that wasn't under our domain?
#26 - Jan. 12, 2010, 8:07 p.m.
Blizzard Post
That my friend is a phish - that is NOT from us.

A hyphen in a domain name is treated like a letter, it's an extension of the name - not a period.

*insert handy-dandy phish information here*

This is what is commonly referred to as a phish. That quite literally means someone is ‘fishing’ for information and hoping they get a bite :)

If you look at the top of this forum you’ll see a library of ones that are commonly used (or close variants thereof) under “Fake Emails from Blizzard”

http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1

The proper email to report these is hacks@blizzard.com – you can forward the email, headers intact, to that address.

Phishes rely on two primal human emotions and hope they get you to react before you think through what is being asked, greed and fear. They’ll either try to entice with an offer or intimidate with a threat.

We never ‘threaten’ an account action. If we have sufficient cause to think an account has been tampered with or needs locked down, we do it first – we don’t threaten with an ‘or else’ email.

WoW accounts are certainly not the only target of phishers. They send them out purporting to be banks, credit card companies, shipping companies – all aimed at obtaining information the thief can use to your detriment.

We will also NEVER ask for your password, or ask you to sign into some website somewhere not under our domain to login. If a URL has a hyphen in it, that's NOT the same thing as a period in a domain. They are hoping to catch folks unaware that just breifly glance at the URL. Cleverly misspelled domains are another trick often used.

One way to check any email is to open up the header in your email program and check to see the actual route and sender. This is done in various ways, depending on your email program, but all can do it. Internal email addresses (what you see at the top of an email) can be spoofed very easily. Where it says it came from under sender is not necessarily true. The header of that email will show the true sender. Many spam programs actually use a comparison of these to flag suspicious emails.

Links in an email are also incredibly easy to spoof and/or redirect. Just because the URL looks legit doesn’t necessarily mean that’s where it really goes. Before clicking ANY link, in ANY email, mouse over the link and look at your bottom browser bar to see where it is reported to actually be destined.
#29 - Jan. 12, 2010, 8:23 p.m.
Blizzard Post
Q u o t e:
omg i need an one of those autho omg im stressing out and cant rember how to spell it omg no wonder my acc is banned but by the looks of i think my armors still there and how do u change your secret question


You cannot change your secret question, you can change your password and email address.

Calm down, this can all be addressed, but it's very important that you learn what to look for in an email.

Look at your email program, there should be a way to pop open the routing header. The internal email address that shows at the top of an email as the sender means nothing, I could easily send you one proclaiming myself as Santa :)

The internal header has a bunch of technical looking stuff, but it will show you the true sender. If it's not Blizzard or Battle.net as a domain - it's not us.

Also, be very careful of hyphenated URLs. xyz-blizzard.com is NOT the Blizzard domain, it's the domain of xyz-blizzard. Hyphens in URLs are not treated as a period, they are treated like any other letter in a domain name.