A Note about Phishing Emails

A Note about Phishing Emails

in Account & Technical Support

Posted by: Gaile Gray

Gaile Gray

ArenaNet Communications Manager

Next

Players report that they receive emails that pretend to come from us with various claims. These are phishing attempts, and we want you to know a few things about them.

We will not send emails that state that your account will be terminated if you do not respond. We will not send emails that state that an account has been compromised (unless we are responding to a player). Emails of this type are almost certainly malicious in intent.

To protect yourself from phishing attempts, please consider the following:

  • For matters related to account security, access the official, secure account page by typing account.guildwars2.com. Log in through that page and secure your account.
  • To see if a link is suspicious, hover over the URL and carefully review the precise details of the hidden, underlying link in your browser. If the URL in the email is different than the underlying link, DO NOT click the link.
  • To be extra secure, type the URL into your browser instead of clicking a risky link. Alternately, you can copy and paste the visible link into your browser. (Take care you do not copy and use the hidden, bad link.)

We suggest you take the following steps to make sure both your game account and your email account are secure:

  1. Scan your hard drive for viruses, keyloggers, and any other sort of malware, having made sure that your anti-virus software is up-to-date.
  2. Change the password of your game account to a complex password you haven’t used before and that you use only for this game account.
  3. Make sure you are using the additional email authentication for your game account. You can find further information here: https://en.support.guildwars2.com/app/answers/detail/a_id/9192/kw/Authenticator
  4. Alternatively, you can use two-factor authentication if you own a mobile device. You can find additional information about two-factor authentication here: https://en.support.guildwars2.com/app/answers/detail/a_id/9238/kw/Authenticator
  5. Change the password of your email account. You should follow similar rules for choosing your email password that you following in choosing your game account password.
  6. If your email provider offers any two-factor authentication or similar options, take advance of those to further strengthen the security of your email account.

Further information about account security can be found in this article: https://www.guildwars2.com/en/news/tips-for-keeping-your-guild-wars-2-account-secure

And an in-depth look at security can be found in this post by Mike O’Brien: https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

(edited by Gaile Gray.6029)

A Note about Phishing Emails

in Account & Technical Support

Posted by: gassy.8975

gassy.8975

Unless an ArenaNet employee specifically asks you to post phishing URLs, please do not post them!! If someone clicks the link and at some point either now or later enters their info thinking it’s a legit site, they will likely lose access to their account.

Please do not make it easier for phishers to steal people’s accounts.

There’s also a thread already open for discussing these emails: https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read

A Note about Phishing Emails

in Account & Technical Support

Posted by: Wynter.5431

Wynter.5431

To avoid the emails about it – a trick i have learnt is to:

Right click the email (not the link, the actual email) → then click “View message source” → proceed to read until you find an IP Address (usually on the second line) and copy paste IP into google and search for the country it is from (most fakes are from China)

Hope this helps keep people from clicking false links!

A Note about Phishing Emails

in Account & Technical Support

Posted by: Paulytnz.7619

Paulytnz.7619

To avoid the emails about it – a trick i have learnt is to:

Right click the email (not the link, the actual email) -> then click “View message source” -> proceed to read until you find an IP Address (usually on the second line) and copy paste IP into google and search for the country it is from (most fakes are from China)

Hope this helps keep people from clicking false links!

Very handy info this is. I just did this with my most recent email from them and sure enough it is from China.

I can see the part that can trick a lot of people out there is that it shows that “noreply@guildwars2.com” sent the email which of course we know is bogus.

Since when did this business of being a hero become being a business?

A Note about Phishing Emails

in Account & Technical Support

Posted by: Peregryn.6578

Peregryn.6578

I got a stack of several of these emails just in the last week. I have more than 1 e-mail address so I find it quite curious that the e-mails came not to the e-mail connected with my ArenaNet(GW2) account but the email address I use for Non-Gaming issues.

Needless to say I know they are bogus.

A Note about Phishing Emails

in Account & Technical Support

Posted by: McBob.5071

McBob.5071

Does ArenaNet not have an address for us to forward phishing emails to? Most online games do, so they can shut down the site as soon as possible.

A Note about Phishing Emails

in Account & Technical Support

Posted by: Stupidity.9153

Stupidity.9153

Assuming your computers aren’t compromise on your end, Is it possible to set up openPGP (GnuPG or the like) on your end to ensure future emails can be validated?

A Note about Phishing Emails

in Account & Technical Support

Posted by: bluestocking.6148

bluestocking.6148

It’s baffling how all these people with super-secure unique emails are getting hit with these, meanwhile my GW2 email is the same one I’ve used for a dozen other games (including WoW) and I haven’t had one yet. I’m almost insulted.

I am destruction itself. I also bake cookies.

A Note about Phishing Emails

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Does ArenaNet not have an address for us to forward phishing emails to? Most online games do, so they can shut down the site as soon as possible.

We do not. We do not have many options for shutting down independent sites that try this sort of shenanigans, and in some cases, they spring up again almost immediately on another host, even in another country. We do pursue misuses of our IP, and this certainly falls into that category, but it’s different than a company using our art for their game, which we have far more success pursuing.

However, you ask a valid question, so I will inquire about whether we want to have such an email address in the future. I can tell you if we did set up a mailbox, it’d be monitored but not answered, due to sheer volume.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet