Fake E-mail Character Faction Change

#0 - July 14, 2010, 11:40 p.m.
Blizzard Post
I read through the fake e-mails and didn't see one like this so I thought I post it.
------------------------------------------------------------------------------------------------------------------------------------------------

Hello,

A Character Faction Change is now pending for the World of Warcraft account <removed> Please allow several days for the faction change process to complete. An email will be sent to you when it is done. You can also track the status of your request by signing into the Transaction page here: https://www.worldofwarcraft.com/character/faction-change-status.html.

Below is a summary of the transaction, which you may want to keep for your records.

------------------------------------------------------------------------------------------------------------------------------------------------

World of Warcraft Account Name: <removed>
TRANSACTION ID: 31516767

------------------------------------------------------------------------------------------------------------------------------------------------

Please note the following additional information:

- This account is not available for play while the faction change is pending.
- If you did not make this transaction, you should immediately check your account to prevent character lost.
- This account cannot change factions again until 3 days have elapsed.
- You can review this and other Account Management transactions by logging into Account Management and going to your Transactions page at https://www.wow-europe.com/character/faction-change-status.html.
- For more details on Character Faction Change, refer to the Character Faction Change FAQ located at http://us.blizzard.com/support/article.xml?articleId=39810.

You can find World of Warcraft Account Management at: https://www.worldofwarcraft.com/account

We hope you enjoy your new faction!

Regards,

The World of Warcraft Team
Blizzard Entertainment

mailkey htt4ef.l9ksmp7r.h
#3 - July 15, 2010, 11:05 a.m.
Blizzard Post
The more insidious variety of these use otherwise 'real' emails with subtle alterations - like doctored links to fake sites.

I recommend checking the internal routing header of ANY email that purports to be coming from Blizzard for the true sender.