"Our Login System has detected a change in.."

#0 - Nov. 6, 2010, 5:32 a.m.

I get this error message when I try log onto my account. At the moment, i'm running a full computer virus scan.

"Our login system has detected a change in your access pattern. In order to protect the account, we require you to verify your identity via a message sent to the e-mail address associated with this account. For more information, please vist (website removed)."

I was playing this morning, but tonight i can't log in because of this. I check my email account (which i NEVER check), and there are a ton of obvious fake blizz emails from the recent month "free touring rocket"

Now, the most recent one is what i'm wondering about.

-------
Due to suspicious activity, the Battle.net account (email removed) has been locked. To restore access to this account, please follow these steps:

Step 1: Secure Your Computer

In the event that your computer has been infected with malicious software such as a keylogger or trojan, simply changing your password may not deter future attacks without first ensuring that your computer is free from these programs. Please visit our Account Security website to learn how to secure your computer from unauthorized access.

Step 2: Secure Your E-mail Account

After you have secured your computer, please create a new password for your e-mail account since it may also be compromised. Be sure to check your e-mail filters and rules and look for any e-mail forwarding rules that you did not create. For more information on securing your e-mail account, visit this Support page.

Step 3: Choose a New Password

You must change your password in order to resume using this Battle.net account. Please click this link to choose a new password:

(Website Removed)

*Note that your former password no longer grants access to Battle.net account management, World of Warcraft, or any other login-protected Battle.net account service.

If you still have questions or concerns after following the steps above, feel free to contact Customer Support at (Website removed)

Sincerely,
The Battle.net Account Team
Online Privacy Policy

----------------------

Is this real or fake? I removed the websites for because i think i have to?. The email address ended w/ @blizzard.com

I'm only posting here because this is way out of the ordinary. I'm hesitant to click on any links w/o knowing wtf they are.

Nevalistis

#1 - Nov. 6, 2010, 5:34 a.m.

Being extra cautious is always a good move, Xista. It looks like it should be the normal one sent when you receive that in-game message, but to be absolutely certain, you should check the headers. I've provided a link to our support site with tips and steps on how to do so. >^.^<

How to Identify Fake or Phishing Emails
http://us.blizzard.com/support/article/25133

If you like, feel free to post the headers here (being careful to remove your e-mail address whenever it's listed), and either I or one of the regulars should be able to help you decipher it!

Nevalistis

#11 - Nov. 6, 2010, 7 a.m.

Pahanda beat me to both answers. >^.^<

That message is there as a sort of fail-safe in case we see some kind of suspicious log in - a change in IP or location have both been known to cause this, but there's other factors involved as well. To keep that fail-safe working the best we can, I'm afraid I can't provide more information on the situation, as it would only benefit those who would seek to go around it.