Guild Wars 2

A few of my guild members and me have received official e-mails stating that our PW’s have been changed, the e-mail states:

“You’ve successfully changed your Guild Wars password.

If you didn’t request this change, please contact the Guild Wars Support Team immediately.

Need help or have questions about your account? Visit our support site: (removed)

Sincerely,

The Guild Wars Support Team"

The web link takes me directly to the official website, so I’m not really sure how this is a phishing scheme or key logger….

Thought?

Do you have the SMS or other warning system that someone is trying to access your account? Is it this account? You have to use your password to log on to the forum so it can’t have changed.

At any rate, since you’re on the forum here you can go to the password change site and change your password if you wish.

I got this as well several days ago, from taking a second look it seems like a phising scam. You can always check your account settings on this site, you can see what IP’s can/have logged into your account, change your password manually if you want, and very important get mobile authentication if you havent yet. You can also login to the game, to see if you anything was changed, and run a virus/malware scan on your computer.

If your logging into the forums, and havent used a different password, then its likely just a bug, but its not a bad idea to check some stuff out as a precaution.

Just a flesh wound.3589:

Do you have the SMS or other warning system that someone is trying to access your account? Is it this account? You have to use your password to log on to the forum so it can’t have changed.

At any rate, since you’re on the forum here you can go to the password change site and change your password if you wish.

I do have the SMS active and did not receive a message so I’m not too worried about it. I just found it odd to actually come from the official e-mail!

Never, ever, ever use a link in an email to check your account. Go to your account page via a self typed url, or by a book mark or what have you to check. If you have any concerns contact support. But again don’t do it from an email url. Just because it looks like the real thing dose not make it so.

Since you need to log into your account to even post this I can only assume you used your known password to do so making this a fake email. Had the PW been changed you wouldn’t be able to post this here as it would likely require you to log in with the new password that probably wasn’t in the email.

grifflyman.8102:

Just a flesh wound.3589:

Do you have the SMS or other warning system that someone is trying to access your account? Is it this account? You have to use your password to log on to the forum so it can’t have changed.

At any rate, since you’re on the forum here you can go to the password change site and change your password if you wish.

I do have the SMS active and did not receive a message so I’m not too worried about it. I just found it odd to actually come from the official e-mail!

If you have SMS active, then it’s an attempt at phishing you. Try taking a look at the email’s source (the actual email address) as opposed to whatever these people are trying to pass it off as. The other and vastly unlikely scenario is that they successfully guessed the random key you were sent in the time before it was invalidated.

grifflyman.8102:

Just a flesh wound.3589:

Do you have the SMS or other warning system that someone is trying to access your account? Is it this account? You have to use your password to log on to the forum so it can’t have changed.

At any rate, since you’re on the forum here you can go to the password change site and change your password if you wish.

I do have the SMS active and did not receive a message so I’m not too worried about it. I just found it odd to actually come from the official e-mail!

Obviously your password was not changed since you used it to log onto the forum. So it was either a bug or it was a site made to look official, password change site and all.

BrotherBelial.3094:

Never, ever, ever use a link in an email to check your account. Go to your account page via a self typed url, or by a book mark or what have you to check. If you have any concerns contact support. But again don’t do it from an email url. Just because it looks like the real thing dose not make it so.

Exactly what I was going to say.

If it is fake chances are the link will take you to a fake page which looks identical to the real one and has a very similar URL (but with a little, tiny, almost unnoticeable extra bit at the end, which won’t appear in the email but will be in your address bar). And when you type in your login details it’ll send them to the people who sent the email, so they can take control of your account.

As a general rule if there’s any doubt about an email like this it’s best not to click any links or open any attachments. Go to the page by a different method, log in and see what it says there.

I took another look at those emails, I got 2 of those in the same day, one telling me to about activating an account, the other telling me my password was changed and it does indeed look like a phishing scam. Like others have mentioned do not use those links, block the email address if you can.

There also a new cryptolocker type virus going around that generates emails that look authentic. Click the link and the malware is loaded locking down all your files. These not specific to GW2 but just be wary of any emails you get.

Just to mention, there wasnt any clickable link, it was all plain text, the link itself was copy and paste. Of course dont do that either.