Guild Wars 2

@Mercury, any link to that thread?

I got one similar to that one. Im assuming it’s a fake one. Anyone who can confirm?
I’ve googled for huixinghulian.info ( the actual link ) it seems to be owned by some asian whatever

This is the mail I got

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:

//link here

If you ignore this mail your account can and will be closed permanently. Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

A notice was posted last week: https://forum-en.gw2archive.eu/forum/info/news/E-mail-from-ArenaNet

Sidar, you may want to edit your post to remove the link, which may cause many other players to lose their accounts from clicking.

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/

Some just love old news. But yeah it’s good to remind some players about this from time to time

RAWR.4273:

A notice was posted last week: https://forum-en.gw2archive.eu/forum/info/news/E-mail-from-ArenaNet

Sidar, you may want to edit your post to remove the link, which may cause many other players to lose their accounts from clicking.

The actual link was something else, that was just the text they used to lure me in. I edited it but clicking on it would just send you to a error page now on this domain. If I click on it in my email client it appears to look like the “official” website. At least a clone of the looks and feel. But in the address bar the website address was extended with .huixinghulian.info. So watch the address bar first!

If you happen to click on one of these links check the address bar. The email I got redirected me to a Guildwars 2 address with the extention .huixinghulian.info. The login page looked pretty much identical. It almost fooled me, so always check the address bar and do a search on of the words if it seems out of place.

i had an email today saying anet is worried about my account, and to click some link, Dont worry i never clicked it, but thought i would bring this top the attention of you folks to keep an eye out, Take a look at the picture i linked, with the url bottom left Showing you its Fake

Well they got me and i use the link.The problem is they asked for they account name in game and the code and they can reset my password how can i fix this.

Guess I wasnt’ the only one to get this fake email. I was just going to come in here and announce a warning too.

@Coyote…you should contact support immediately and apprise them of the situation. Also change your passwords for your game and email. Now. Best of luck to you.

I’ve been getting alot of these mails, just this week. What I’m most curious about is how they get the “noreply@guildwars2.com” adress as sender. Or am I missing something?

Me too i received this mail.

I’m sorry for my english i’m french

This has been going on for a while. Big thread here: https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read

Getting almost a scam a day this week, all trying to get my GW2 password. Hafta say, it may be a good sign in a way- only a successful game would see its playerbase get scammed so hard. I certainly don’t get any phishing attempts on my old PWE account, but I still get spam regarding WoW, and I haven’t played that in years.

I am curious how they make the sender address appear genuine. I’m worried if I block them, I won’t get e-mails from the real thing…

Dezen.6598:

I’ve been getting alot of these mails, just this week. What I’m most curious about is how they get the “noreply@guildwars2.com” adress as sender. Or am I missing something?

With many email services and programs you can specify any email address as the sender regardless of whether you have access to that email address’s account.

helloz folks…
i had the same email but in an other mail box.
since anet should use the mail from my acc creation and noting else this made me be suspisius.
so my question is if anet asks for second email by the time we create our account couse i dont really remember.
just to be sure for the future.

thx in advance for any1 answer my question

@DJ

You might want to edit that picture so that it doesn’t show your email address for all to see.

When I signed up during beta I was only asked for one email address. I don’t recall ever signing up for any service, game or otherwise, that asked for 2 email addresses.

If you want to check your GW2 account, access the site directly (you’re already signed in if you’re posting here). Don’t click any links in your emails.

Yeah, I just got a couple of these, though the idiots sent it to the wrong email address than the one I use for Guild Wars 2.

Hi

I got new scam email that i go locked and i need to login on link to reactivate my account. Link in email goes to different link that shown in email and it ends with
en-account .pw

Email:
Greetings!
Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:
https:// account.guildwars2.com/account……….

Step 2: Secure Your Computer

Ensure that your computer is free from any malicious programs, as a password change alone may not deter future attacks. Visit our Account Security website to learn how to protect your computer from unauthorized access.

Step 3: Secure Your Email Account

Choose a new password for your email account and review your email for any filters or rules you did not create. For more information on securing your email account, visit our Account and Computer Security page.

Step 4: Choose a New Password

Change your password to resume using this Guild Wars 2 account, as your former password no longer grants access to any login-protected Guild Wars 2 account service or game. Visit our Password Reset page to begin the password change process.

Once you’ve regained access to your account, you can add additional security with Mobile Authenticator, a free service that allows you to unlock your Guild Wars 2 account on your own with a few simple steps. For more

information, see the Account Protect FAQ

—The ArenaNet Team

Need help or have questions about your Guild Wars account? Visit our support site: http:// en.support.guildwars2. com/

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read

just delete the mail from inbox

gassy.8975:

With many email services and programs you can specify any email address as the sender regardless of whether you have access to that email address’s account.

Oh, I wasn’t aware of that. Thanks!

As someone else said earlier, they seemed to appear after the leaderboards launched.

Inculpatus cedo thank you for the help and a big thank you to the support team i changed e mail password everything and thanks a lot for that and the trouble i got you.If anyone has any kind of that trouble contact the support team they will help you

You are most welcome, Coyote. I am glad everything worked out well. =)

This email keeps coming to me and im currently trying to get my account rolled back for being hacked and all my stuff being sold off.. the sender is exact with arenanet and the account page matches guild wars 2 website, and the senders address is noreply.guildwars2.com.. but they warn of something similar to this on the forums.. anyone else receiving this type of email with impressive resemblence to the actual guild wars 2 team? This may be official but im just not sure.

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:

{REDACTED}

If you ignore this mail your account can and will be closed permanently. Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Thanks! —The ArenaNet Team

This is a phishing email. It would be best if you removed the link as it leads to a scam website. If you entered any information there, immediately change your passwords for the game and your email. It would be even better to change your game log-in email address. You might want to contact support, as well, if you gave away your game information.
There is a sticky and a large thread about these emails on this forum.

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/page/6#post1876207

got it too

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:

and the link has the IP stated in this thread
wanted to look it up tho since the email actually is noreply@guildwars2.com and i got my activation mails from that same email so i was worried it was legit even tho the text was copy paste from over 9000 wow and diablo accounts i presumably had

Hasn’t even been 24 hrs since I bought the game, and I’ve already gotten one of these emails. Nearly fell for it because I don’t have many legitimate emails to reference with. Did not see any notice about it on the main page or login screen. This seems to be a major problem recently and I can’t imagine how many people have fallen for it as they don’t read forums. Might be good to make the message more accessible.

You are welcome, Gaile. And thank YOU for being so patient and helpful and just all-around great! =)

I would like to know how these scammers got our e-mails in the first place?

Anyway i got a new one today different than the normal ones.
Gw 2 questionnaire.
The usual stuff click this link and log in and answer the questions bla bla bla.
I just hope ppl don’t fall for these stupid scams.

XxTAFxX.6741:

I would like to know how these scammers got our e-mails in the first place?

I have my own domain name that I use for email. This makes it easy to use a different email address whenever I register at a web site. Most of the spam and scam emails I get are addressed to one of the following:

- admin/email/owner/some-other-generic-word @ <mydomain> — I don’t actually use these email addresses but get spam there anyway.

- email addresses I used at sites currently in existence. I don’t want to name them as I don’t want to suggest they had security breaches or sold my email addresses. Sometimes I’ll start getting spam from a site after it is transferred to another owner.

- email addresses I used for sites that are no longer in existence, such as those stupid “freebies” sites from years ago during the dot-com boom.

I get a ton of spam and I’ve had a lot of email addresses over the years, at least several hundred. I’ve never received spam/scam emails at the email addresses I’ve use for GW1 or GW2.

i got spammed 24/7 with those e-mails.

Today only i recieved 5 times the e-mail.

It starts to annoy me.

I allreaddy pressed 5 times that this is a phissingmessage on hotmail. but they don’t care or w/e

I received an e-mail from: ArenaNet (noreply@guildwars2.com)
the e-mail address looked legitimate and the message had me slightly worried. I haven’t logged on in a while thanks to school, and it make me think someone stole my account. here is the e-mail message:

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

If you ignore this mail your account can and will be closed permanently. Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Thanks! —The ArenaNet Team

First I noticed it did not have the ‘s’ following the http, then I did not recognize the .ssco.pw in the url. I also noticed it loaded the css for the site late, and not well at all. Every time i have been on the actual guild wars 2 site, it was much cleaner. I would just like to know if anyone else has seen these e-mails and if they are actually from arena.net

Thank you

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/first

https://forum-en.gw2archive.eu/forum/support/account/A-Note-about-Phishing-Emails/first#post1862539

Molvoltinein.1574 please remove links that you posted and read others posts

Hi everyone,

We have removed the links from the post so that noone can click on the by accident.

Thanks for pointing this out.

I have been able to open some information behind the email using google chrome, saying it’s from “Guild Wars 2” with as subject “Accounts Questionnaire”.
You can view the message source and it shows all kinds of nifty information that I mostly don’t understand, but what I do know is that it shows the IP address it is sent from.

I know it is possible to send e-mails under a different one than your own. And I don’t know wether you can legally do anything with the IP or anything but if so I hope it helps figuring out who is behind this.

Edit:

Just got another e-mail sent under the name “Arena Net” with as subject “Account Security Alert: ArenaNet” from a different IP.

Hi all, I have received this Email and I’m wondering if it legit? can anyone confirm from ArenaNet about this, many thanks Ytee

It’s fake, and I’m sure the link points to a site that’s not ArenaNet’s. Hover your mouse over the link (but don’t click it) and see what your email program says the link is.

An ArenaNet employee would also tell you it’s fake, but of course you can wait for one of them to respond.

Thnx gassy for your reply.. I will try that now

Got the email myself and a few things tipped me off to it being fake. First off, why is only ONE url clickable? The latter URL that goes to the support page is just plain text.

The grammar is terrible, usually indicative of a Chinese or Taiwanese phishing scam. Read the first sentence a few times out loud and you’ll see what I mean.

Additionally if the account was under concerns of being stolen they would not put you to log in support, rather over to the IP validator. Last time I had that e-mail (due to ISP switching my IP) it went to the general guild wars site and gave me instructions on how to reach the IP validator.

There is a change in text size, looks like a 12pt font for the first two paragraphs 3rd one looks like drops down to a 10.5 – 11pt font.

“hxxp://***********.login.thar-game.pw/”

.pw is the country code top-level domain for Palau. [from wiki]

So yes it is in all likelyhood a phishing scam.

Edit – killed the url above, didn’t realize it would fully post and link out.

i have check it against your email and their identical. i can personally think of 2 reasons the email service providers IE ours (outlook, google, ecta) are compromised and creating fake entries or you have been compromised somewhere or that of your email service provider.

i base this on the difference between these ones and the blizzard fake ones which are a slightly different email which could also just be their old technique.

now i have to say this is some technique there using and quite dangerous as some people will believe it.

So I got an email stating that there was an account security issue and they had to verify that this account truly belonged to me and to please click on inconspicuous link hereinclosed. What Gaile was saying by looking at the source is this I’m assuming

Now look at the true “Received From” line… What also tipped me off (and it’s late so scared me at first xD) is the email I was receiving this in, was my junk email, the one I use to sign up on sites and what not. Luckily for me, 2 things cued in, I remembered reading about phishing attempts and then realized “Wait a tick, this ain’t the right email for my account xD”. Always view the source of where your emails are coming from.

Edit: Just looked on the email my account is registered with, which is never registered with anything outside of business and GW2 and no suspicious emails.