Blue Tracker
World of Warcraft Blue Posts
Diablo II: Resurrected Blue Posts
Diablo III Blue Posts
Hearthstone Blue Posts
Overwatch Blue Posts
Heroes of the Storm Blue Posts
Diablo IV Blue Posts
BlizzCon Blue Posts
Warcraft Rumble Blue Posts

Is this for real?

Forum Avatar
Daoud
#0 - Oct. 4, 2010, 7:21 p.m.
Blizzard Post
"An Account Recovery Form has been submitted for Battle.net account ####@###.com.


What does this mean?

We received a report that this account has been compromised, and we are taking the appropriate steps to help restore your access to this account as quickly as possible.


What steps did we take?

The password for this Battle.net account has been reset. Please check your email account for a message regarding your new temporary password. We strongly recommend that you create a new password after you log in.

In addition, we opened a Battle.net service ticket to restore your World of Warcraft character(s) and item(s). Your ticket number is #######. We'll send you another email when the process is complete, which under normal conditions usually takes 10 to 12 working hours (but please allow up to 2 working days). You do not need to open an in-game service ticket.


Why can’t I log into the game?

In some cases, including when the account was used in ways that violated our Terms of Use, you may not be able to log into some login-protected services (such as World of Warcraft) until all restrictions on the account have been removed.


What do I need to do now?

After you change your password, if you notice any unauthorized transactions on this account, please give us the time to address them from the service ticket prior to filing a duplicate request in-game. In addition, you can find some suggestions on improving your computer's security on our account security website, http://www.battle.net/security.

After that, we hope you can rest a little easier. You've just helped us get you back into World of Warcraft and this Battle.net account as soon as possible.

If you have any additional questions or concerns, our contact information can be found here: http://us.blizzard.com/support/cs.


Thank you,

The Customer Support Team"


I was hacked while my account was dormant last month (first time in 6 years). Everything was eventually restored and I added an Authenticator to the account and considered the matter closed. Now all of a sudden I get this email this morning. Is this a result of one of those hacking bots?

It says the password has been reset but I have made multiple logins to my account management screen subsequent with no issue. I can't determine if this is a scam or just a lost email that relates to the original hacking event and somehow took weeks to get to me (though I doubt it).

Not sure how to procede....
Forum Avatar
Zenlyth
#3 - Oct. 4, 2010, 7:27 p.m.
Blizzard Post
Heya Daoud,

You should always check the email headers of the emails you receive from us, here is some information that can show you how to verify if an email is legit or not.

    http://us.blizzard.com/support/article/25133

    What should I look for in the header?

    Email headers contain information about the sender (who sent the email message), the path the email took to reach your inbox, and things that may have happened to the email before arriving. This information is very important and can be used to determine whether or not an email is malicious.
    Once you've accessed an email's header information, you'll want to attempt to verify the sending address. To do this, look at the "Return-Path" or the "originating address" for the email. For most phishing emails, the email address displayed in this location will differ from the address displayed in the "From" field.

      A legitimate header from Blizzard Entertainment should look something like this:

      X-SID-PRA [email protected]
      or
      Return-Path: < [email protected] >
      Received: from smtp01.worldofwarcraft.com ([XX.XXX.XXX.XXX]) by…
      Received: from … by smtp01.worldofwarcraft.com …
      for <Your Email Address>; Tue, 29 Jan 2008 10:46:05 GMT
      From: [email protected]
      To: You’re Email Address


    If you believe you've received a phishing email, please forward the email to [email protected] , at your earliest convenience. When forwarding the email, copy and paste the entire email header into the message body to ensure that we are able to identify the source. This information will help us prevent future phishing emails of the same type.
For similar emails and what to look for when you receive emails from us, please visit this thread:
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1