I bought into one of the email scams. It's not my proudest moment, but whatever, I can't change the past.

Someone who's not me has changed the email login to my battle.net account twice in the past few days. Now I have an authenticator on my battle net account, meaning they didn't just login and switch it. I recovered my account once with the help of billing and the authenticator was still attached (and my characters are still intact) and changed the email to a brand new email account. But then my the login was switched again later that day.

My computer is secure; I've checked with several different programs. I'm positive the attacker knows my first/last name and my secret question answer (I fell for the scam email) and is calling billing and pretending to be me in order to switch the email (first/last name and the secret answer are all you need to switch the email of a battle.net account). However, they don't seem to have enough information to get the authenticator removed from my account.

Can I change the secret question and answer? If not, the only two options I have are to call billing every time I want to login to my account, or spend $100+ moving my characters to a brand new battle.net account with a new secret question. Both of those options are sort of, well, you can fill in the blank.

So, that I can more fully understand your concerns, Garyoak, can you provide me the name and realm of character on the account in question? If you're posting on the account currently, just let me know. :)

Thanks for that added information, Garyoak. :)

While it doesn't appear as though an unauthorized party is actually calling in to have your information changed, it does look like the party is logging into Battle.net Account Management and updating the registered address there. I'm guessing that using the information provided in the phishing email, this party was able to recover your password and then login.

It also look like an unauthorized Authenticator was associated with your account. Given this fact, and your SQ/A concern, I would sincerely encourage you to give our Account Services department a call at your earliest convenience.

Billing and Account Services

Live Representatives Available 7 Days a Week, 8am to 8pm PDT
For phone assistance please call: 1 (800) 592-5499 || 1 (800) 59-BLIZZARD

• Players in Australia should call 1-800-041-378
  
• Players in Singapore should call 800-2549-9273
  
• Players in Chile should call 1230-020-5554
  
• Players in Mexico should call 001-888-578-7628
  
• Players in Argentina should call 0800-333-0778
  
• All other international players should call: (949) 955-0283

One trick of the trade for calling in is to spam redial. It sounds silly, but it's actually quite a successful technique. The reason I'm giving this heads up is because you may receive a busy message when trying to call in. The reason you may receive that message is because our phone lines sometimes become completely full. This means that all representatives are on the line with other customers and all "on hold" spots are occupied. The good news is that those "on hold" spots free up all the time. If you're willing to redial a few times, you're very likely to get through. :)

Also, be sure to take a peek at this guide for recovery assistance and know-how:

What to do if Your Account Has Been Compromised
http://us.blizzard.com/support/article/30796

For your case, I'd focus on the securing your computer/account bits, and the reporting any losses bits. I've already covered how to regain access. :D