Account compromised email... is it legit?

#0 - March 10, 2010, 9:21 p.m.
Blizzard Post
I cannot log in to one of my accounts. I was sent an email saying my bnet pw was changed by a GM because they believed my account was compromised. Talking to a guildmate I found that no one has logge don that character tho.


I reset my password, but the emails say I need to send in the form and a copy of my DL. I am hesitant to send this to just anyone. Am i able to call in for this (on hold now).


The first email was sent from [email protected], and the second was [email protected]
--------------------------------
First email

It has come to our attention that your account security may be at risk. In an effort to combat this, we have reset your password as a preventative measure.

To limit the amount of interruption this may cause, we have taken the liberty of sending a new password to this account's registered email address.

We have also forwarded your account information to our character specialists for further investigation and potential restoration. Please keep in mind that, due to the nature and complexity of these investigations, it may take several days for us to contact you with the findings of our investigation. We appreciate your patience and understanding in this matter and apologize for any ensuing delay.

----------------------------------

STEP 1: SECURE THE ACCOUNT, YOUR COMPUTER AND YOUR EMAIL ADDRESS

We recommend you read over and apply the following tips to protect yourself and the account in the future. Account compromises can occur when a player shares login information with an unauthorized third party or plays on a computer that has a virus, Trojan, or key-logger.

- Keep your login information confidential. Account access can only be shared with one minor of whom you are the parent or guardian. Sharing access with anyone else is a violation of the game's Terms of Use. You are also responsible for every use of an account on which you are listed as the registered player, whether the use was authorized or not.
- Use up-to-date firewall, antivirus, and anti-spyware software to scan your system regularly for viruses, Trojans, and key-loggers.
- Keep your operating system and other software up-to-date and be careful when downloading new software.
- Be wary of "spoof" and scam websites and e-mails that pose as Blizzard Entertainment and request account or personal information. As a reminder, Blizzard Entertainment representatives will *never* ask you for your password.
- Use separate, unique passwords for your email, World of Warcraft, and any other online accounts.
- Change your passwords regularly and keep World of Warcraft account information updated using the Account Management page at http://www.worldofwarcraft.com/account/.

For additional security tips and information, please visit the following sites:

- Account Security: http://us.blizzard.com/support/article/21131
- Unauthorized Account Access Policy: http://us.blizzard.com/support/article/20460
- World of Warcraft Account Security: http://us.blizzard.com/support/article/20572
- Email Address Security: http://us.blizzard.com/support/article/28585

If you are looking for an added layer of security, we currently offer the Blizzard Authenticator, an optional device that can help prevent unauthorized account access. For more information about how the Authenticator works or how to add one to a World of Warcraft account, please visit the Blizzard Authenticator FAQ at http://us.blizzard.com/support/article/24660.

STEP 2: SUBMIT ACCOUNT RECOVERY DOCUMENTATION

Before we can restore access to this account, we must first verify that you are the registered player on the account. Please download the Account Recovery Form (http://ftp.blizzard.com/pub/WoW/other/WoW_Account_Recovery.pdf), follow the instructions in the form, and then email, fax, or mail the form and required identification as directed.

If you are having difficulties downloading the form, reply to this message and we will send the file as an email attachment.

In order to view the form once it has been downloaded, you will need Adobe(r) Reader(r). You can download the latest version for free at www.adobe.com.
#1 - March 10, 2010, 10:33 p.m.
Blizzard Post
It looks like several elements of that e-mail are from legitimate e-mails from us, Myteddy, though it looks like at least two different e-mails were combined.

If we thought your account may be compromised and reset the password I don't believe we would also lock the account. Odds are the address to the Account Management page linked in the e-mail leads you elsewhere, either that or the link to the PDF file.

Is your account locked?

Fake E-mails from "Blizzard Entertainment"
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1

#3 - March 10, 2010, 10:56 p.m.
Blizzard Post
That is strange, I can't imagine why you would be sent something like that, the two seconds of the e-mail don't seem to mesh up. O.o

I'm sure your call to Billing helped straighten it out.
#6 - March 11, 2010, 12:20 a.m.
Blizzard Post
Q u o t e:
No, like I said they had no answers. Only could tell me that they did in fact send that email and to fill it out and send it in =/


Ah, I see it, Myteddy. You have another account attached to this Battle.net account. That one has been locked and requires ID verification. It looks like the account name is in the second e-mail that was sent to you on the 9th of this month.
#7 - March 11, 2010, 12:21 a.m.
Blizzard Post
Q u o t e:
It's 100% fake. I can show you the list of those e-mails I receive every day with those exact wordings. Don't forget. Blizzard has always taken action first then ask questions later.

Edit: also if you hover over the links they provide you in the e-mail (don't click) look towards the bottom left of your browser and it's a completely different url.


It's real, Gluttony, the information simply comes from two different e-mails received on the same day. :)
#9 - March 11, 2010, 12:34 a.m.
Blizzard Post
Some of these phishing attempts are using actual e-mails in an attempt to gain account information. In this case though the OP listed two different e-mails which I had taken as only one. /blush
#11 - March 11, 2010, 12:41 a.m.
Blizzard Post
Q u o t e:

Trickery. I blame you for me falling for it too.


*laughs*

I'll take that. :P