GIL DISAPPEARED?

I was inside main scenario roullette with friends! when iw as kicked offline!?
i asked my friends in discord if they could tell the party to wait for me!
they was confused that i wasnt in party anymore and there wasnt a vote kick for offline asked! so i couldnt log in for a min! and was confused when i did finally get back in i noticed i was in uldah instead of limsa lominsa where i qued into the main scenario roullette out! so i was like wth is happening how did i get here!? and then my first thought was i think i might of been hacked? so i checked my inventory nothing was missinG!
then i checked my gil! and all my gil was gone! i had like 1.2 mil in my inventory and another 18 plus gil in my retainers! all of it was gone!

now im broke and i was saving to get a house for my fc! what am i suppose to do!? how do i fix this! who do i contact! no one has messaged me back in game support! so im trying here im really freaking out! i changed my password! as well! ive been playing this game a really long time and this has never happen to me before!

you were hacked? or you inadvertently gave your login info/password to a phishing site login.

do you have the OTP/2FA enabled? if you fell for a phishing login fake screen though it wouldn't have helped you.

First thing you should immediately change your password. Sounds like you were the victim of a phishing attack. Next up I'd contact a GM and see if there is anything you can do to recover your gil.

Dont they look at IP address logins in cases of hacking like this and find out where your IP address is and go after the unusual IP addresses/ban accounts associated to those IP addresses?

You can verify the last IPs that logged in to the game, there's an option in the MogStation, do it before using the game again because it only records a few entries.


If you see any IP you do not own then that should be the hacker!.

yes change your password then check your login history on the mogstation.

There’s a packet exploit (which square Enix still hasn’t fixed I see) that allows people to “increase” their Gil amount. But the Gil isn’t “increasing” out of thin air. The “increase” is happening due to basically stealing it from other players. Pretty sad how they prioritize reducing 2B’s bottoms, but don’t prioritize House Botting, Packet Exploits, and the like.

Quote:

---

Originally Posted by Nandrolone

There’s a packet exploit (which square Enix still hasn’t fixed I see) that allows people to “increase” their Gil amount. But the Gil isn’t “increasing” out of thin air. The “increase” is happening due to basically stealing it from other players. Pretty sad how they prioritize reducing 2B’s bottoms, but don’t prioritize House Botting, Packet Exploits, and the like.

---

Have any proof of this? Cuz he's describing getting kicked out like when someone else logs into your character.

As far as I know, your packet exploit with gil was fixed years ago, that was common around market boards in limsa especially. I don't think I've heard that mentioned since 2014...


OP likely had a weak password or a compromised account elsewhere with the same username/password.

Posting in the forum like this doesn't seem very productive. Wouldn't filing a report and talking to a GM be more productive? Sending a bug report with all the details?

Quote:

---

Originally Posted by Nandrolone

There’s a packet exploit (which square Enix still hasn’t fixed I see) that allows people to “increase” their Gil amount. But the Gil isn’t “increasing” out of thin air. The “increase” is happening due to basically stealing it from other players. Pretty sad how they prioritize reducing 2B’s bottoms, but don’t prioritize House Botting, Packet Exploits, and the like.

---

...I mean, I would imagine that its two different departments taking care of something like adjusting models and fixing code issues... so its not so much prioritizing one of the other but more "Okay, 3D-modeling-guy, please fix this model and code-fixing people you need to take care of this issues" - and 3D-model-guy might have had less on their plate or had an easier job.

Why do people seems to think that everyone in the team can do everything and that a new hairstyle is preventing getting some bug-fixes done?

(Not that I dont agree that technical issues shouldnt be fixed asap, but claiming they dont get attention because gear-models do just seems silly...)

Quote:

---

Originally Posted by Valkyrie_Lenneth

Have any proof of this? Cuz he's describing getting kicked out like when someone else logs into your character.

As far as I know, your packet exploit with gil was fixed years ago, that was common around market boards in limsa especially. I don't think I've heard that mentioned since 2014...


OP likely had a weak password or a compromised account elsewhere with the same username/password.

---

What I’m describing does just that. Each character has a medius ID, and (I’m obviously not going to show a full tutorial on the forums on how it works) when you reverse that, and make that ID your own, the player is kicked, but in the process their Gil is stolen.

This exploit was found recently, and the exploit you’re thinking about isn’t the same thing. I like reverse engineering, but I don’t like it when people use it to cheat or troll players online with it.

Quote:

---

Originally Posted by Nandrolone

What I’m describing does just that. Each character has a medius ID, and (I’m obviously not going to show a full tutorial on the forums on how it works) when you reverse that, and make that ID your own, the player is kicked, but in the process their Gil is stolen.

This exploit was found recently, and the exploit you’re thinking about isn’t the same thing. I like reverse engineering, but I don’t like it when people use it to cheat or troll players online with it.

---

Well I hope you filed a bug report then, cuz it's pretty hard for them to fix something that hasn't been reported.

Quote:

---

Originally Posted by Valkyrie_Lenneth

Well I hope you filed a bug report then, cuz it's pretty hard for them to fix something that hasn't been reported.

---

Sure did. I personally hope OP’s issue is an account-compromise. But from what I’ve read, I really don’t think so. Whoever did this, I just hope they realize that MMO exploitation that interferes with other player’s gameplay can get them in some serious legal trouble..

I do hope the TC actually gets back about this matter because if he really was a victim of the exploit/hack that's been mentioned it needs to be dealt with ASAP.

Something like that could easily start being used with targeted malicious intent and the GMs/STF wouldn't even necessarily be able to do anything about it (Considering how bad they are at handling other matters involving gil transfers).

When you could previously crash the entire server from simply catching a fish or leaving a message in someone's guestbook I feel inclined to give people the benefit of the doubt when it comes to anything related to shoddy coding, especially if hacking is involved.

Quote:

---

Originally Posted by Nandrolone

What I’m describing does just that. Each character has a medius ID, and (I’m obviously not going to show a full tutorial on the forums on how it works) when you reverse that, and make that ID your own, the player is kicked, but in the process their Gil is stolen.

This exploit was found recently, and the exploit you’re thinking about isn’t the same thing. I like reverse engineering, but I don’t like it when people use it to cheat or troll players online with it.

---

Sounds like you're mixing up FO76 with FFXIV. This "theory" of yours, which you're claiming as fact, smells so much like BS that I'm looking around to make sure I'm not actually in a shop with easily destroyed porcelain...

Quote:

---

Originally Posted by Hezkezl

Sounds like you're mixing up FO76 with FFXIV. This "theory" of yours, which you're claiming as fact, smells so much like BS that I'm looking around to make sure I'm not actually in a shop with easily destroyed porcelain...

---

This......

Quote:

---

Originally Posted by Nandrolone

[...]MMO exploitation that interferes with other player’s gameplay can get them in some serious legal trouble..

---

Legal trouble? Over video game currency? Mind to elaborate?

Also, the OP has many posts about connection issues and errors in his post history. Maybe stealing his neighbours unprotected Wifi or from the Starbucks underneath his appartment..

Quote:

---

Originally Posted by Nandrolone

There’s a packet exploit (which square Enix still hasn’t fixed I see) that allows people to “increase” their Gil amount. But the Gil isn’t “increasing” out of thin air. The “increase” is happening due to basically stealing it from other players. Pretty sad how they prioritize reducing 2B’s bottoms, but don’t prioritize House Botting, Packet Exploits, and the like.

---

Wait what?! That's a pretty serious exploit, hope they come down on them like a ton of bricks if they manage to catch the people doing it. To the OP, I do hope the GMs can resolve things for you.

Quote:

---

Originally Posted by Nandrolone

What I’m describing does just that. Each character has a medius ID, and (I’m obviously not going to show a full tutorial on the forums on how it works) when you reverse that, and make that ID your own, the player is kicked, but in the process their Gil is stolen.

This exploit was found recently, and the exploit you’re thinking about isn’t the same thing. I like reverse engineering, but I don’t like it when people use it to cheat or troll players online with it.

---

I’m not sure if the vulnerability you described exists or not. However, the symptoms the OP describes, removed from party, logged in at a different location then was last, missing Gil from both character and retainers, sounds more like a compromised account then what you are describing.

OP,

There has been some good advice here. Provided your account was compromised, you should be able to get a 1 time rollback that will restore most of what you lost, depending how far back they have to go. I would add that you should run a virus scan on your PC in case there is malware that stole your login information.

Quote:

---

Originally Posted by Melichoir

Dont they look at IP address logins in cases of hacking like this and find out where your IP address is and go after the unusual IP addresses/ban accounts associated to those IP addresses?

---

IP addresses are not exclusive identifiers, can be a publicly facing connection point for multiple users, typically are not static for most home connections, and are easily spoofed. While requiring additional steps for login when an IP address changes has some value, banning entire accounts due to being associated with a specific IP address is ignorant.

Quote:

---

Originally Posted by MrKusakabe

Legal trouble? Over video game currency? Mind to elaborate?

Also, the OP has many posts about connection issues and errors in his post history. Maybe stealing his neighbours unprotected Wifi or from the Starbucks underneath his appartment..

---

Right, because anyone with connectivity problems is a thief.

Potatoes, potatoes... It always has to be potatoes.

Quote:

---

Originally Posted by EithanPowers

... i think i might of been hacked? ... what am i suppose to do!? ...

---

Enable 2fa and your account stolen issues will vanish.

Quote:

---

Originally Posted by LalaRu

Enable 2fa and your account stolen issues will vanish.

---

2fa is a good thing to have, but it's not perfect. The youtube pages that were hacking people were linking to a page that looked like the login page. You put your information in, including the generated 2fa number, and the thieves instantly input it all and are in your account. Never enter you info into a linked page, always go through your saved pages or launcher.

Hey OP, make sure you run a virus scan BEFORE changing your pass, incase it was a keylogger.

You're on Excalibur right? After you get stuff fixed, I can give ya 500k or so, to help you get back on your feet :)

Quote:

---

Originally Posted by Pixiehawk

...The youtube pages that were hacking people were linking to a page...

---

Eh? Linking what? The only login you do is in the launcher, and maybe the mog station when you have business there. There is NO reason to follow links given by anonymous and if you do, you get what were you looking for. Troubles.

Unless you can be tricked by "FREEE FANTASIA! CLICK MHERE!" ads, if you do then the problem is not the game or the auth mode.

Quote:

---

Originally Posted by MrKusakabe

Also, the OP has many posts about connection issues and errors in his post history. Maybe stealing his neighbours unprotected Wifi or from the Starbucks underneath his appartment.

---

Because that’s definitely what’s going on here. Yep. Mhm.

No. I doubt OP is the Wi-Fi thief you’re claiming him to be. This 100% sounds like he put his login credentials into a website he shouldn’t have, and then suffered the consequences. I’ve seen several people post similar stories, and they were all people who were phished by the Twitch scams.

I’d be weary of giving any money. It’s a little strange he came to the forums instead of contacting a GM right away which would been more beneficial for him. Think about it

Something is really fishy and I don’t like it.

Quote:

---

Originally Posted by Pixelburst

I’d be weary of giving any money. It’s a little strange he came to the forums instead of contacting a GM right away which would been more beneficial for him. Think about it

Something is really fishy and I don’t like it.

---

He straight up said in his post that he reached out to support and hadn't heard back. My advice to him is to be patient for their response. My advice to you is to read posts.

Quote:

---

This 100% sounds like he put his login credentials into a website he shouldn’t have, and then suffered the consequences. I’ve seen several people post similar stories, and they were all people who were phished by the Twitch scams.

---

There was a MAJOR security issue with the first round of authenticator tokens that caused a lot of problems at relaunch (it was similar to the Blizzcon authenticator issue that Blizzard had at one point), but those have long been solved and its almost always a phishing incident now.

I did read it, but take everything you see/hear with a grain a salt. I don’t trust anything said since he hadn’t posted any proof.

Quote:

---

Originally Posted by SigmaOZ

You can verify the last IPs that logged in to the game, there's an option in the MogStation, do it before using the game again because it only records a few entries.


If you see any IP you do not own then that should be the hacker!.

---

It's here: https://secure.square-enix.com/accou...c/loginhistory (You need to be logged in of course.)

Why don't you have a 2auth token

Quote:

---

Originally Posted by MPK

Why don't you have a 2auth token

---

If he was phished, 2FA won’t really help him. I know that the Twitch scam links ask for your OTP as well as username/password.

Quote:

---

Originally Posted by Pixelburst

I did read it, but take everything you see/hear with a grain a salt. I don’t trust anything said since he hadn’t posted any proof.

---

You say that you read that, but I don't believe you since you haven't provided any proof.

Quote:

---

Originally Posted by Pixelburst

I did read it, but take everything you see/hear with a grain a salt. I don’t trust anything said since he hadn’t posted any proof.

---

The OP doesn't owe us any proof. We can't do anything about the situation.

This needs to be handled through SE Support. Any supporting documentation needs to be shared with them, not us.

Quote:

---

Originally Posted by Katalyn

There has been some good advice here. Provided your account was compromised, you should be able to get a 1 time rollback that will restore most of what you lost, depending how far back they have to go. I would add that you should run a virus scan on your PC in case there is malware that stole your login information.

---

A rollback might not be the answer. Not long ago there was someone here saying it took three months before the rollback was implemented, with such a lack of communication that they assumed it wasn't happening, so they started playing again and then lost all that progress when the rollback finally occurred.

Not that they should have been playing when told not to, but it does mean you might be left waiting that long unable to play at all.

So it's a good idea to weigh up how much you lost versus how long you might need to wait, and be sure you're okay with that possibility.

Quote:

---

Originally Posted by LalaRu

Eh? Linking what? The only login you do is in the launcher, and maybe the mog station when you have business there. There is NO reason to follow links given by anonymous and if you do, you get what were you looking for. Troubles.

Unless you can be tricked by "FREEE FANTASIA! CLICK MHERE!" ads, if you do then the problem is not the game or the auth mode.

---

That's prettymuch how it works.

The scammers convince you to put your details into their website with the promise of some kind of in-game bonus.

Once you put your details (including one-time password) into that fake website, they have your current one-time password and can use it to log in as you.

The password makes it harder for people to break into your account, but you just handed them the key.