Fake E-mails from "Blizzard Entertainment"
by Vrakthris | 15/08/2007 00:15:51![]() Occasionally, players may receive official-looking e-mails asking for their account name, password, and other account information. These e-mails, which are made to look as though they come from Blizzard Entertainment, sometimes threaten dire action unless the player provides his or her login information (perhaps to verify the legitimacy of the account). Do not fall for these scams!
For more information, please review the following thread:
[[ Account Compromise Info Center ]] In the following posts, you will find an ever-growing list of the phishing e-mails that have been reported on the Customer Service Forum. Receive a phishing e-mail not listed in the posts below? Or have a question regarding the legitimacy of an e-mail? Let us know by creating a new thread on the Customer Service Forum!
[ Post edited by Syndri ] * * * * "Summoned, I take the place that has been prepared for me. I am Grey. I stand between the candle and the star. We are Grey. We stand between the darkness and the light." |
by Malkorix | 14/03/2008 11:24:53![]() Also, from the Wrath of the Lich King forum: Wrath of the Lich King Beta Scams
Face the facts. Then act on them. It's the only mantra I know, the only doctrine I have to offer you, and it's harder than you'd think, because I swear humans seem hardwired to do anything but. - Q.F. |
by Vrakthris | 12/06/2008 01:25:23![]() Here is a sample of an e-mail that is usually sent.
Here is another example of a phishing e-mail:
I can not stress this enough: No employee of Blizzard will ever ask for your password. Even if the e-mail looks legit, if it asked for your password it is not from Blizzard Entertainment. [ Post edited by Aredek ] * * * * "Step up to Red Alert!" "Sir, are you absolutely sure? It does mean changing the bulb. " |
by Vrakthris | 24/06/2008 07:14:53![]() And here we have yet another sample, thank you, Kraevac. Outside of an initial mistake with the greeting the links look to be real. Unfortunately what you see isn't necessarily what you get. The link to the Account Management site actually takes you to www.worldof v v arcraft.com/account if you click the worldofwarcraft.com\account link found in the e-mail.
* * * * The red, green and blue alert signs are all flashing. What the heck does that mean? Well either we're under attack sir, or we're having a disco. |
by Malkorix | 25/06/2008 19:47:51![]() And yet another (thanks Simpuhl)! The link on this one leads to a screen similar to the Account Management login screen, and is designed to trick you into entering your login information. If you receive a suspicious email, it's always a good idea to check with an official Blizzard source prior to following such links. Please keep in mind that we do not currently request ownership confirmation via the Account Management page, nor will our staff ever ask for your password.
"It is a very inconvenient habit of kittens (Alice had once made the remark) that whatever you say to them, they always purr."- Lewis Carroll |
by Vrakthris | 26/06/2008 02:20:27![]() And yet another one, thank you, Maeglin.
* * * * The red, green and blue alert signs are all flashing. What the heck does that mean? Well either we're under attack sir, or we're having a disco. |
by Vrakthris | 30/06/2008 06:58:09![]() Let it be known that you can not identify these fake e-mails by grammar alone. :( If ownership of the account was in question we would not ask you to visit a website and enter your information. A password alone doesn't prove that you are the registered user of the account, just that you have the password. Depending on the validity of the claim we would either reset your password new one sent to the registered address for your account or lock the account and you would need to fax or send by postal mail the retrieval form along with a copy of your ID (possibly with a request of notarization). Here is a copy of the fake e-mail received. Thank you for the example, Trponmytotem.
* * * * The red, green and blue alert signs are all flashing. What the heck does that mean? Well either we're under attack sir, or we're having a disco. |
by Reythur | 06/07/2008 01:37:33![]() And we have yet another one going around. As with a few of the others, the links are not as they seem; please make sure to check where the links in e-mails are actually directing you to before clicking on them. This one has quite a few grammatical issues as well, but as mentioned above that is not the only way you can determine what is fake and what is not.
“Well, I suppose one ought not to employ a magician and then complain that he does not behave like other people,” said Wellington. Mo. |
by Syndri | 13/07/2008 17:36:48![]() The below attempt is very, very convincing. Its grammar and diction are on par, and the links appear legitimate. The one to be incredibly wary of is the first, which looks like a redirect to Account Management. It instead sends you to a location ending in "freehostia.com/verify.html," requesting then for an account name and password. Please note: Should ownership of an account come under question, the account will first and foremost be locked to prevent further access which may be unauthorized. If your account is still accessible and you receive an email of this nature, please proceed with caution. With this, we will never request for verification through either a link or through an email address which does not end specifically in "@blizzard.com".
[ Post edited by Syndri ] Work it harder. Make it better. Do it faster. Makes us stronger. More than ever. Hour after— Our work is never over. |
by Vrakthris | 15/07/2008 06:13:19![]() And we have another one. :) Thank you, Davejohnsan.
The odd phrasing is a clear indication of a fake e-mail. For those with questions about WotLK Beta you should review our post regarding the Beta Opt-in. Wrath of the Lich King Beta Opt-In Now Open * * * * "We will rule over all this land, and we will call it... 'This Land'." "I think we should call it...your grave!" "Ah, curse your sudden but inevitable betrayal!" |
by Aredek | 19/07/2008 15:04:33![]() Unfortunately, additional phishing e-mails are being sent out in response to the clamor surrounding the Wrath of the Lich King beta. Once such e-mail is as follows:
[ Post edited by Aredek ] Each bird likes his own nest best. |
by Reythur | 21/07/2008 04:25:09![]() And here we have another Wrath of the Lich King Beta invitation e-mail that is most definitely fake.
Notice the bad grammar of the first sentence: "you are have been accepted". While bad grammar does not always mean that it's fake, it definitely raises suspicion. The key factor with this one is the link being fake as well as this portion:
The beta has already entered it's beginning phases and we have not published an end date as of yet. Please be very cautious when looking at the invitation e-mails. [ Post edited by Reythur ] "There was so much to grok, so little to grok from." Mo. |
by Aredek | 28/07/2008 22:28:17![]() We've seen a few different variations of the Beta scam. Check out this e-mail:
Similar to the post above, the e-mail lists a set beta period; however, no such dates have been set. Be careful, everyone. Each bird likes his own nest best. |
by Aredek | 31/07/2008 18:40:55![]() Sadly, we have another to add to our collection:
This e-mail looks fairly legitimate. Unfortunately, however, the links used within the e-mail are very deceptive. Just because a full link is posted does not mean that clicking it will lead to that destination. In the above email if you were to click http://beta.wow-europe.com/expansion you would find that it leads to an address other than http://beta.wow-europe.com/expansion. In most cases, you can see the destination of a link in the lower left-hand corner of your web-browser. If the destination does not match the text version of the link do not click it. Please proceed carefully when you receive a "beta invite". For more information on how to identify phishing e-mails, please review the following support page: http://us.blizzard.com/support/article.xml?articleId=25133 [ Post edited by Aredek ] Each bird likes his own nest best. |
by Syndri | 13/08/2008 16:22:09![]() We've been getting quite a few concerns about whether or not specific e-mails have been legitimate or not in regards to the Beta. Please make sure that you are visiting http://beta.worldofwarcraft.com ONLY to enter the key you received. Also, please make sure to check: Fake E-mails from "Blizzard Entertainment" If you goto enter the key and it provides you with the error message that the key does not exist, it's more than likely a fake e-mail that you received. If you're receiving the error message: "Login Error", please make sure to use the password you had on July 15th, 2008. Work it harder. Make it better. Do it faster. Makes us stronger. More than ever. Hour after— Our work is never over. |
by Syndri | 19/08/2008 17:19:46![]() Here's another attempt, and it's quite tricky. Note: The sending address is not valid, nor is the reply-to. The signature line—courtesy of "Account Administration"—is incorrect, as well. Although http://beta.wow-europe.com/expansion is a valid link, it likely contains a hidden URL that will provide a redirect.
Work it harder. Make it better. Do it faster. Makes us stronger. More than ever. Hour after— Our work is never over. |
by Syndri | 20/08/2008 23:43:58![]() And here's our North American version. :) Note: The signature is not valid, and the sending address—"noreply"—does not apply to Beta invites.
Work it harder. Make it better. Do it faster. Makes us stronger. More than ever. Hour after— Our work is never over. |
by Syndri | 26/08/2008 21:05:21![]() Latest email. This one has a few key elements: - wowgametimesurveys@gmail.com - invalid link - inaccurate signature Blizzard Entertainment possesses its own domain; valid emails will come from "@blizzard.com" and not from popular hosts. With this, the link is not Blizzard-sanctioned and the signature from Account Administration—although a common set-up for these fake attempts—has never been used in any of our departments' correspondence.
Work it harder. Make it better. Do it faster. Makes us stronger. More than ever. Hour after— Our work is never over. |
by Aredek | 30/08/2008 15:35:07![]() From Beta to Authenticators... We have a new phishing e-mail to bring to your attention:
Game Master ☼ In-Game Support Each bird likes his own nest best. |
by Syndri | 03/09/2008 20:46:26![]() Here's the latest and greatest (not really):
Game Master · In-Game Support Work it harder. Make it better. Do it faster. Makes us stronger. |
by Aredek | 04/09/2008 16:46:43![]() Sadly, another phishing attempt has appeared in our a few players' in-boxes. Please be wary of the following e-mail:
Game Master ☼ In-Game Support Each bird likes his own nest best. |
by Reythur | 11/09/2008 05:04:06![]() Another Beta Phishing e-mail. =/
Game Master â™’ In-Game Support Are we so alone, So distant, So forgotten, As we think ourselves to be? |
by Syndri | 20/09/2008 22:13:20![]() This attempt is a bit more intricate, as it pulls from a format we use in legitimate email queries. Note, however, the requested information. As stated many times in the past, Blizzard Entertainment will never, ever, ever-ever-ever, EVER, EVA-EVER ask for an account password.
Game Master · In-Game Support We speak of stories ending, [...] when in truth it is we who end. The stories go on and on. |
by Syndri | 23/09/2008 20:20:51![]() The newest Beta attempt:
Game Master · In-Game Support We speak of stories ending, [...] when in truth it is we who end. The stories go on and on. |
by Syndri | 01/10/2008 20:59:37![]() And yet another attempt:
Game Master, Customer Service Forum · In-Game Support |
by Syndri | 07/10/2008 20:19:57![]() One more:
The link provided within redirects to a website which is in no way affiliated with Blizzard Entertainment. Game Master, Customer Service Forum · In-Game Support |
by Aredek | 03/11/2008 15:53:27![]() A scary edition to the collect:
Game Master, Customer Service Forum - In-Game Support |
by Vrakthris | 20/11/2008 23:22:41![]() We haven't seen a truly original phishing attempt in a long time. I give you the following:
Game Master, Customer Service Forums - In-Game Support |
by Vrakthris | 12/12/2008 06:11:19![]() And the attempts at getting your account information keep on coming. Below is a fake alpha invitation.
[ Post edited by Vrakthris ] Game Master, Customer Service Forums - In-Game Support |
by Aredek | 16/01/2009 14:52:31![]() Sadly, a new phishing e-mail has been created and distributed to a number of our players.
Please do not click any links contained in this e-mail -or- send any of the requested information via e-mail. Remember: Blizzard will never ask for your password Game Master, Customer Service Forum - In-Game Support |
by Aredek | 25/01/2009 16:10:25![]() Sadly, a new phishing e-mail has entered circulation. Please review the following e-mail:
Game Master, Customer Service Forum - In-Game Support |
by Malkorix | 03/03/2009 22:02:12![]() Another variation on the common phishing theme. Please never follow links, nor provide information requested by an email of this nature. Should Account Administration take action against an account, they will simply do so. They will not send emails requesting any kind of verification, and a Blizzard Employee will never request your password. Finally, Account Administration will typically only contact an account owner via the email address registered to the account, and will not request this information either. It is essential that you refrain from following links to a potential 'spoof' Account Management page, and please never enter your information should you do so. You should only ever enter your information in Account Management after following a link from our official website itself; not even the forums.
[ Post edited by Syndri ] Game Master Customer Service Forum · In-Game Support |
by Aredek | 12/03/2009 20:14:33![]()
[ Post edited by Syndri ] Game Master, Customer Service Forum - In-Game Support |
by Malkorix | 24/03/2009 18:53:28![]() And another. (We hope that noone would believe we'd use grammar and spelling like this!) Still, it's not unreasonable to expect that this theme will be refined further. As always, we will never, ever ask for your password.
[ Post edited by Malkorix ] Game Master Customer Service Forum · In-Game Support |
by Vrakthris | 25/03/2009 00:27:02![]() It looks like we have a new version of an old favorite. As always, we will never tell you that we suspect you of violating our Terms of Use or EULA. Either the account has been found in violation or it hasn't. If it has appropriate penalties will be applied and it is up to the account holder to contact our Account Administration Department to dispute the penalties.
Game Master, Customer Service Forums - In-Game Support |
by Vrakthris | 30/03/2009 05:57:30![]() Well it has been a long time but it seems that we have a relatively new phishing e-mail. This one talks about a pending suspension. O.o
Game Master, Customer Service Forums - In-Game Support |
by Vrakthris | 31/03/2009 04:07:20![]() Looks like we have a new one. This has been based off of an actual e-mail that we do send. It has been changed a little to reflect a "warning of pending action" though. I should also point out that the e-mail addressed Wor1dofwarcraft.com is not an actual Blizzard website.
Game Master, Customer Service Forums - In-Game Support |
by Vrakthris | 07/04/2009 02:34:10![]() It looks like we have another example.
As you can see the grammar is atrocious, which is a dead giveaway. It also requires you to visit a website to verify your information. Always check the URL's that you are being directed to, what is listed in the e-mail isn't always where you go if you click. [ Post edited by Vrakthris ] Game Master, Customer Service Forums - In-Game Support |
by Malkorix | 08/04/2009 22:56:54![]() A new, and particularly devious iteration. As always, please confirm URLs before you follow them!
Game Master Customer Service Forum · In-Game Support |
by Aredek | 09/04/2009 16:35:23![]() It appears that a few changes were made to one of the more popular phishing e-mails of late.
Unlike previous e-mails, the malicious party is coyly asking for considerably less information in hopes that you'll provide it. Remember, even e-mails that don't ask for your password can be malicious. Game Master, Customer Service Forum - In-Game Support |
by Aredek | 18/04/2009 18:39:34![]()
[ Post edited by Aredek ] Game Master, Customer Service Forum - In-Game Support |
by Aredek | 23/04/2009 15:59:05![]() The following phishing e-mail has recently popped up. Please be on the lookout for this, and similar e-mails from malicious parties.
Game Master, Customer Service Forum - In-Game Support |
by Syndri | 29/04/2009 18:32:14![]() Here's a new one!
Note the following section:
Account Username: Account E-mail: Secret Question/Answer: First name and Last name: Remember: Blizzard will never ask you for your password through e-mail! This particular format is not in used within official correspondence, so please proceed carefully if receiving an email similar or identical to the above. [ Post edited by Syndri ] Game Master, Customer Service Forum · In-Game Support |
by Aredek | 30/04/2009 17:14:50![]()
Game Master, Customer Service Forum - In-Game Support |
by Aredek | 07/05/2009 18:48:30![]() Children's week is the latest target for phishing e-mails. Keep an eye out for the following malicious e-mail:
As always, do not click any links contained within the e-mail. Thanks! [ Post edited by Aredek ] Game Master, Customer Service Forum - In-Game Support |
by Aredek | 09/05/2009 15:31:14![]()
Game Master, Customer Service Forum - In-Game Support |
by Aredek | 10/05/2009 20:01:36![]()
[ Post edited by Malkorix ] Game Master, Customer Service Forum - In-Game Support |
by Syndri | 24/05/2009 17:46:34![]() Replete with odd "?" and all.
[ Post edited by Syndri ] Game Master, Customer Service Forum · In-Game Support |
by Syndri | 24/05/2009 20:30:51![]()
Game Master, Customer Service Forum · In-Game Support |
by Syndri | 27/05/2009 19:15:52![]() New variation of Fake E-mails from "Blizzard Entertainment"
Game Master, Customer Service Forum · In-Game Support |
by Aredek | 01/06/2009 14:14:03![]() We have received word that another phishing e-mail is hitting our players' inbox; this time malicious parties are offering a promotional offer. Unfortunately, the only promotional offer they're able to provide is an account compromise. Be on the lookout for the following FAKE e-mail:
Game Master, Customer Service Forum - In-Game Support |
by Vrakthris | 03/06/2009 06:50:51![]() It's been awhile but I believe we have found a new phishing e-mail! Thank you, Goliâth.
Game Master, Customer Service Forum - In-Game Support |
by Malkorix | 06/06/2009 03:33:39![]() Yet another phishing attempt:
Game Master Customer Service Forum · In-Game Support |
by Aredek | 21/06/2009 14:13:21![]()
[ Post edited by Syndri ] Game Master, Customer Service Forum - In-Game Support |
by Syndri | 01/07/2009 21:03:48![]()
Game Master, Customer Service Forum · In-Game Support |





Recent Blizzard Announcements