Guild Wars 2

My friend’s account was hijacked on Saturday, he was in the hospital because his girlfriend was giving birth to their child, and he received and email saying that the email on his account had been changed, being in a hospital, he was unable to do anything about it.

Upon arriving at home, and trying to recover his account, he noticed that in order to retrieve his account, he would need a Serial key. He purchased the game online, and as a result he was supposed to have had the key emailed to him. The problem is that there is no email with his Serial key. He does, however, have an email with the paypal transaction ID.

Will he be able to get his account back? or is he SOL?

His ticket number is: Incident:120911-000117

He should have writed that down on a paper, just saying.

who could have expected their account to get stolen so easily? They did it without having access to his email, which IMO is a major cause for concern.

dagz.7215:

who could have expected their account to get stolen so easily? They did it without having access to his email, which IMO is a major cause for concern.

Actually, they must have had access to his account (ie. known his email address and password) to be able to do this. But to address your concerns: if he purchased the game from the official website, then it is indeed possible that he didn’t have an access code mailed to him. ArenaNet Support should be able to help him get the access code back so that he can log in. He’ll probably just have to provide some proof of purchase.

It’s impossible that they have access to the email, as he’s got his phone serving as a sort of Authenticator, so if someone tried to log in from a different PC, it would require a code that gets sent to his phone VIA SMS.

Veeber.3192:

He didn’t mean the actual account, just the game Login email and password.

Correct. They don’t have to be able to log in to your email to log in to your game. All it requires is either the owner not paying attention and authenticating the login attempt (once), or them being able to trick the authenticator into believing that the attempt came from a previously authenticated ip address.

I don’t think either of those scenarios are a possibility, now if they got the account info, I could believe that, but I don’t know how they would have, He’s not a member of any fansites, and he said he only entered his info on the guildwars 2 website upon account creation, and then in the launcher.