Guild Wars 2

Inculpatus cedo.9234:

Any emails that address your account that are not responses to queries you sent into Customer Support are fake and phishing emails. ArenaNet will never contact you about your account unless they are responding to you. For extra security, you can always change the passwords to your account and the email associated with your game account. Welcome to Tyria! =)

Please let’s be clear.

There are two emails.

1. The first is probably from us, and it may suggest that someone has your credentials and is attempting to steal your account.
2. The second is not, it’s a phishing attempt that tries to scare personal info out of the user by telling him he’s accused of breaching the UA through attempting to sell the account.

So about the first email asking for verification of an IP:

If someone has added authentication to his/her account, he or she receive occasional verification emails sent in response to (1) a new or unknown (not previously approved) IP or (2) an attempt by an unauthorized individual to access from a different IP than those previously approved by the account holder.

I believe that the email mentioned in the first post is legitimate. It is part of the authentication system. The reason that it’s ok is that you’re only asked to do something consciously, and with full information and you are not asked to give any personal information, like a phishing email would seek. That is, you’re not asked to click a (suspicious) link and input your account name and/or password. You’re asked simply “Do you want to approve this? Here’s the location and the IP — is that ok?” And you have the option to actively approve with a click (and no input of private info) or you may disapprove the attempt (usually from Asia) by not doing anything. The default is, “If this player does not actively tell us that it’s ok for someone to access from XXX IP address, we will not allow it.”

The second one, accusing you for selling your account, is covered in this thread: https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/first#post1807876