Guild Wars 2

@Nightshadow…it would be prudent to edit your ‘spoiler’ to remove your email address. Giving out personal information enables hackers to more easily access your account. =)

Inculpatus cedo.9234:

@Nightshadow…it would be prudent to edit your ‘spoiler’ to remove your email address. Giving out personal information enables hackers to more easily access your account. =)

Good catch. I will do so, and encourage everyone to do as well- luckily this email isn’t associated with my game account, and is my “sign up for this site blah blah” email, which is probably why I got these phishing attempts in the first place :P

Happy to be of service. =)

Good day I recivied a email stating as follows Greetings!

It will be ongoing for further investigation by ArenaNet’s employees.

We are concerned about whether your account has been stolen. In order to guarantee the legitimacy of your account, click the link below.
https://account.guildwars2.com/account/login-support.html

Once your account authentication has been completed, we will check your account and let you know what we can do for you.

Need help or have questions about your account? Visit our support site: http://support.guildwars2.com/.

The Guild Wars 2 Team

This looks like a legit arena net email even a guild wars 2 template is used however if you click the link

Snip
edit links removed

Please remove the links to prevent anyone from inadvertently visiting the phishing websites. There are already threads concerning this issue, one of them stickied. Thank you. =)

i just got a email titled Guild Wars Account-Notice? saying
Greetings!

It will be ongoing for further investigation by ArenaNet’s employees.

We are concerned about whether your account has been stolen. In order to guarantee the legitimacy of your account, click the link below.
https://account.guildwars2.com/account/login-support.html

Once your account authentication has been completed, we will check your account and let you know what we can do for you.

Need help or have questions about your account? Visit our support site: http://support.guildwars2.com/.

The Guild Wars 2 Team
is this real or fake i mean i havent been logged on for acouple months

Desertfox.1954:

i just got a email titled Guild Wars Account-Notice? saying
Greetings!

It will be ongoing for further investigation by ArenaNet’s employees.

We are concerned about whether your account has been stolen. In order to guarantee the legitimacy of your account, click the link below.
https://suspiciouslink

Once your account authentication has been completed, we will check your account and let you know what we can do for you.

Need help or have questions about your account? Visit our support site: http://suspiciouslink

The Guild Wars 2 Team
is this real or fake i mean i havent been logged on for acouple months

Please edit out your links, as they are indeed to a phishing website, and we wouldn’t want someone to inadvertently click on them. And to answer, yes this is a phishing attempt. I too received this email. Check the source of the email, and you will see it comes from someone who is very obviously not related to Anet. If you’re wondering what the source looks like please refer to my post on page 6.

Hello, i just received a email from Arenanet asking me for a confirmation of my account.
I want to know if there are any cases about people hacking gw2 acc and if Anet send users emails like this one.
Also I marked on the print the link I was going to be redirect if I had clicked.
Almost sure it isnt a “oficial” email.

thats a scam email trying to steal your information, ANET doesn’t send emails telling you they think you have been hacked to my knowledge; they send requests to allow or deny a login attempt from a different ISP address than on file.

There’s a new round of these emails going out – especially to players who have thankfully never had this happen to them before. Anet did have one of their login databases compromised (though I doubt they’d admit it) and emails were taken resulting in a new round of people (including those with very secure accounts) receiving emails telling us to login and change our passwords due to our accounts being locked. The email is a fake – if you carefully look at the login link provided, the top-level domain is .pw where-as all NCSoft and GuildWars sites’ top-level domains are .com.

I personally received one of these emails, and this is the first time I ever have. The email address associated with my account is a dummy address ONLY used for this game and nothing else. I’ve spoken to a couple of others who have also received this email to their addresses – addresses which are also solely used for this game and nothing else. Since the people I’ve spoken to and myself have never used these email addresses or shared them with others, and have exercised diligent security bordering on paranoia- the only option left, no matter who much we don’t want to believe it, is that Anet has had a database compromised.

Thanks for the answers guys

Just received the same email as the last few people here. I doubt it was a breach of info on areanet’s database, since the mail came through on a different email than what’s linked to my GW2 account.
Pretty sure it’s just a mass mail going out.

I’v had 5 today all from different addresses.
I just put them in my spam folder.

I’m sure anet won;t send us that type of e-mail anyway,they prob just suspend our accounts and we have to contact them.

upper part missing cause it bit long to fin in my screen, i got it after i logged in after uninstalling Vista & installing Win7, it shod be real

I got this today, should I worry

Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:

Step 2: Secure Your Computer

Ensure that your computer is free from any malicious programs, as a password change alone may not deter future attacks. Visit our Account Security website to learn how to protect your computer from unauthorized access.

Step 3: Secure Your Email Account

Choose a new password for your email account and review your email for any filters or rules you did not create. For more information on securing your email account, visit our Account and Computer Security page.

Step 4: Choose a New Password

Change your password to resume using this Guild Wars 2 account, as your former password no longer grants access to any login-protected Guild Wars 2 account service or game. Visit our Password Reset page to begin the password change process.

Once you’ve regained access to your account, you can add additional security with Mobile Authenticator, a free service that allows you to unlock your Guild Wars 2 account on your own with a few simple steps. For more

information, see the Account Protect FAQ

—The ArenaNet Team

Need help or have questions about your Guild Wars account? Visit our support site:

Yes, it is a phishing email. Please remove all links from your post so that others do not inadvertently click on them.

https://forum-en.gw2archive.eu/forum/support/account/A-Note-about-Phishing-Emails/first#post1964978

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/page/7#post1968989

So as long as I do not do anything my account/bank card is safe

If you have concerns about account security, you might find this educational:

https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

and you can look through the different topics on account security here:

https://en.support.guildwars2.com/

my fear is my bank account is it safe, aslong as I do not follow the email

To make sure any account is safe, always use a secure password, and email address if required. Receiving the phishing email doesn’t make you any less safe, clicking on links may or may not make you less safe. If you have concerns about your bank account, speak to your bank representative. Good luck. =)

I strongly suggest using a different email address AND password for your GW2 and bank accounts if you aren’t already doing that. If someone tries to get into your email account and is successful, and your bank account uses the same login info, they’ll be able to access your banking info.

Always use a different password, and ideally a different email address, for any service that you really really really want to keep secure.

I’ve just been looking through my junk mail and was surpised to see over 20 messages from arena net claiming they suspect my account to be selling gold or to be stolen and requesting me to follow a link. I’ve looked at the address and it says ‘noreply@guildwars.com’. Whereas it should be noreply@guildwars2.com, would this be for my guild wars 1 account or just some sad loser trying to hack me?

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/first

Recently, I got a lot of email from “noreply@guildwars2.com” with the message

Greetings!

It will be ongoing for further investigation by ArenaNet’s employees.

We are concerned about whether your account has been stolen. In order to guarantee the legitimacy of your account, click the link below.

Once your account authentication has been completed, we will check your account and let you know what we can do for you.

Need help or have questions about your account? Visit our support site:

The Guild Wars 2 Team
__________________________________________________________________

Which I’m not sure if it was really from ArenaNet or not because I just got disconnect during the game and it won’t let me log in because IP got changed during the internet connection error. When I sent the ticketed to support. They told me to unblocked noreply@guildwars2.com in-order to activate the authenticate mail system. And I was able to log in again after the authentication. Since that problem solved about one week ago I kept getting the same email from noreply@guildwars2.com every day asking me to confirm my authenticate mail, which I did couple of times.

Until today my account finally got hacked after I logged out from my last session for 7hrs I tried to logged in and found out that my password got changed and I had to reset my password in-order to log in and found out that all of my characters got a naked and karma, golds and items were all gone. But I got lucky that the hacker left his/her trail. Because my friend list got one new account name added. Hopefully the support team can investigate that account ID and do something about it.

ps. sorry for the long text. I just want to share my experience.

That’s a phishing email that has several threads on it. ANet says they will never contact you in such a manner. There is a red stickied thread about those types of emails. Sorry you got hacked. Contact support and get a account rollback to get your stuff back. Good luck.

Yah, I first blocked noreply@guildwars2.com because I don’t trust it until the last week IP address log in problem occured. Since I never receive authenticate activation mail. The support team told me to unblock noreply@guildwars2.com to be able to received mail for authenticate activation. Since then I kept getting the mail from above and I though it was safe enough to click on the url and re-confirmed my account. Maybe that’s how it happened.

Yah, it’s the one about verifying your account ownership, or whatever they say. It looks official and people have fallen for it. Just have to be careful. At least they have the account rollback in place now. However it’s a once in lifetime thing. So if you have a new account it might be better to start over and save it in case you get hacked when you have played for a long time.

ArenaNet will never contact you about your account, unless you have contacted them first. Never click on links in emails, without first ascertaining where it is they actually lead. Please remove those links from your post, to prevent others from visiting potentially harmful sites. I hope you have changed your passwords and email address associated with your game account to keep your account safe from being compromised again. Best of luck to you in the future. =)

Both of them are from noreply@guildwars2@com. How do I know which is real or fake? Since I unblocked noreply@guildwars2@com I got both real authenticate activation mail and account notice mail coming or I just have to ignore when they ask me the same thing like the above mail?

If you read these threads, you will get helpful information about how to detect URLs that are fake. =)

https://forum-en.gw2archive.eu/forum/support/account/A-Note-about-Phishing-Emails/first#post2002741

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/first

Inculpatus cedo.9234:

ArenaNet will never contact you about your account, unless you have contacted them first. Never click on links in emails, without first ascertaining where it is they actually lead. Please remove those links from your post, to prevent others from visiting potentially harmful sites. I hope you have changed your passwords and email address associated with your game account to keep your account safe from being compromised again. Best of luck to you in the future. =)

Sorry I did not see the message when I wrote the earlier message. I already changed the password ,but not email. I will take note about the “ArenaNet will never contact you about your account, unless you have contacted them first.” as a life lesson. Thx both of you for answering my problem.

Not a problem. =) I hope you have many hours of pleasure adventuring in Tyria!

yun.6701:

Inculpatus cedo.9234:

ArenaNet will never contact you about your account, unless you have contacted them first. Never click on links in emails, without first ascertaining where it is they actually lead. Please remove those links from your post, to prevent others from visiting potentially harmful sites. I hope you have changed your passwords and email address associated with your game account to keep your account safe from being compromised again. Best of luck to you in the future. =)

Sorry I did not see the message when I wrote the earlier message. I already changed the password ,but not email. I will take note about the “ArenaNet will never contact you about your account, unless you have contacted them first.” as a life lesson. Thx both of you for answering my problem.

The only exception I can think of will be emails along the lines of “We’ve detected your account doing X, we’ve suspended/banned your account. Please submit a ticket at support.guildwars2.com to appeal”

The email you see as the origin can be spoofed, so no need to block the noreply@guildwars2.com address, just only go to their site (or your banks, etc) by typing in the website URL.

I’ve been receiving these emails for a while too and today I happened to trace the ip address it came from and guess what, China.

Anyone reading this thread and using Hotmail accounts I would advise you to change to something else. I say this because it’s the only email address where I get tons of spam and all these GW2 phishing mails (Funny thing is my GW2 account isn’t even hotmail).

Other members of my family have Hotmail too and they receive similar mails (they don’t play GW2).

another dead give away is that Real Anet members actually sign mail with their names instead of “Anet Team or Anet Admin”

Just got this..

Dear Players

This is the Guild Wars 2 team for further investigation be.

We appreciate that your account has been stolen concerned. To ensure the legitimacy of your account, click on the link below.
https://account.guildwars2.com/account/login- support.html

Once your account is complete certification, we will check your account and let you know that we can do for you.

Need help or have questions about your account? Please visit our: https://support.guildwars2.com/.

The Guild Wars 2 Team
******************************************

Obvious forgery, but just a heads up..

see sticky: https://forum-en.gw2archive.eu/forum/support/account/A-Note-about-Phishing-Emails

emails have been going out for a few months probably

Yep, been going around for a while and I still havn’t got any.

I feel so left out.

Just got this obviously fake email. I can only assume it is a scam…. If you are going to try to phish an email, you might want to use proper “Eng-rish”

Dear Players

This is the Guild Wars 2 team for further investigation be.

We appreciate that your account has been stolen concerned. To ensure the legitimacy of your account, click on the link below.
https://account.guildwars2.com/account/login- support.html

Once your account is complete certification, we will check your account and let you know that we can do for you.

Need help or have questions about your account? Please visit our: https://support.guildwars2.com/.

The Guild Wars 2 Team

Yea, I got the same one earlier..

yup, seems someone else got the same one too, maybe a new round of em, better to be safe than sorry I suppose ;-)

see sticky: https://forum-en.gw2archive.eu/forum/support/account/A-Note-about-Phishing-Emails

Yep, got that one last night. From noreply@guildwars2.com

I’ll be honest, if it weren’t for their atrocious mis-use of the English language, I might have clicked the links. From now on, just to be safe, I won’t click a kitten thing.

Thanks for the info.

Something to be aware of. When you mouse over the link in a suspicious email, it may show the proper destination. This can be faked with JavaScript tricks. DO NOT CLICK THE LINK, DO NOT CUT AND PASTE IT. If you want to verify it, visit the GW2 site and login like normal and go from there.

puts away soap box

I recently recived an email from nonreply@guildwars2.com about my account being stolen? Its not written really well, like who ever wrote it was not very good at English. Im worried about my account now! Should I change my password?

Wow, even Gaile’s not safe from the phishers.

Well, I got this one as well, so I’m in good company it seems. Even if we didn’t fall for it, I guess it’s prudent to change our passwords, yes?

By the way, the recent one links to account(dot)guildwars2(dot)pw and is hosted on 198.204.236.149. The email seems to have come from 204.152.198.72 and was sent to an email address which wasn’t used for Guild Wars 2.

Edit:
Return-Path: account@guildwars2.com
From: “ArenaNet” <Account@guildwars2.com>

i get an email from anet telling me that my account has been hacked and that further investigation will fallow..but my acount is still under my control and i have mobile security on it aswell what should i do?