PSA: Don't click/follow links in chat

So a lot of us have seen the Tells/Yells about some outrageous forum post that we should go follow this (fake) link and give our opinion. I've seen the warning about Twitch links but I have yet to see a warning about forum links, which are more harmful since this is how accounts get stolen (and likely sold). Tonight I got a Tell about some huge gil payout free raffle, where you go post a number in the forum (fake link) or bump the post in order to win. Of course, being a forum user I could tell the link was bogus right away but someone who doesn't might not, so I'm posting this warning to get the word out. -Please don't follow links in chat, or at least be very cautious--especially if it ends up requesting a login.

I'm not trying to kill fun things like streaming links and such, just trying to spread awareness so that your account doesn't get compromised. Stay safe everyone.

Normal people do not just shove links in your face without so much as a greeting, so I'd like to think some are smart enough to recognize the scam without being active forum users.

Quote:

---

Originally Posted by KageTokage

Normal people do not just shove links in your face without so much as a greeting, so I'd like to think some are smart enough to recognize the scam without being active forum users.

---

Some are, sure. But, there's a funny thing going on, I think, and it has to do with the new young generation(s) that have basically grown up on the internet. Just a couple generations back, we all grew up knowing the stories of sketchy sites and viruses lurking in every suspicious link or email and never give away personal info, etc. But, kids got it easy these days. Makes 'em easy prey for the old tricks when they think they can trust their safety to the internet.

It STILL kills me how so many people seem to fall for this crap. Clearly enough do or they wouldn't keep running these scams.

Quote:

---

Originally Posted by Hasrat

Some are, sure. But, there's a funny thing going on, I think, and it has to do with the new young generation(s) that have basically grown up on the internet. Just a couple generations back, we all grew up knowing the stories of sketchy sites and viruses lurking in every suspicious link or email and never give away personal info, etc. But, kids got it easy these days. Makes 'em easy prey for the old tricks when they think they can trust their safety to the internet.

---

The weird thing here is. Given how the younger generations have basically grown up on the Internet. They should be able to spot a fake url with ease

Quote:

---

Originally Posted by Vahlnir

It STILL kills me how so many people seem to fall for this crap. Clearly enough do or they wouldn't keep running these scams.

---

i know right? you'd think people would have enough common sense to spot a trap but then again we live in a society that thinks its ok to eat tide pods so it doesnt surprise me in the least that people still fall for scams

Quote:

---

Originally Posted by Dzian

The weird thing here is. Given how the younger generations have basically grown up on the Internet. They should be able to spot a fake url with ease

---

Like I said. They're growing up in an age where the internet is largely safe for them. Or, at least, not as "dangerous" as it once was. When you don't grow up with that danger, you can't really learn to spot it. Preying on their trusting nature as they take everything at face value. Scams may seem obvious to most, but there's always someone willing to give the benefit of the doubt.

Quote:

---

Originally Posted by Hasrat

Some are, sure. But, there's a funny thing going on, I think, and it has to do with the new young generation(s) that have basically grown up on the internet. Just a couple generations back, we all grew up knowing the stories of sketchy sites and viruses lurking in every suspicious link or email and never give away personal info, etc. But, kids got it easy these days. Makes 'em easy prey for the old tricks when they think they can trust their safety to the internet.

---

I'm continuously flabbergasted about how much personal information youngsters freely post on the internet - down to their legal surname and the school they attend. It wouldn't surprise me if, as you say, the victims of these scams are mostly youngsters. They seem to be extremely trusting of strangers on the internet.

As a teenager I know I was more gullible...I know I fell for a couple of things back on RuneScape, fortunate nothing as bad as Phishing scams, but I did lose a load of loot, including my best armour. So I expect it's likely there are people they can catch out.

The other thing is the URL's are often very close to the real thing. If you mindlessly don't spot it, I think that can catch somebody out, though I know I'm always suspicious of links that come from strangers, but then I am well versed on the interwebs to be suspicious of people. The ones I've often received have been poised as "there is this outrageous thing SE is doing, comes to the forum and be heard" or something along those lines. And Phishing sites are often hard to distinguish from the real thing, it's the URL that's the giveaway.

I think it's safe to assume that it's mostly kids falling for this stuff. They probably see the ad and go "OMG FREE GIL??? YESSSSSSS!" and run to it like a dog chasing after a fox.

Quote:

---

Originally Posted by Hasrat

Like I said. They're growing up in an age where the internet is largely safe for them. Or, at least, not as "dangerous" as it once was. When you don't grow up with that danger, you can't really learn to spot it. Preying on their trusting nature as they take everything at face value. Scams may seem obvious to most, but there's always someone willing to give the benefit of the doubt.

---

it's mostly common sense though.. a fake website address is pretty easy to spot. www.ffxiv-forum.com-sqare.biz/whatever DO NOT CLICK (cant remember how to plain text urls)

Most young people should easily recognise as fake because they're tought about domains and things at school so they should instantly recognise that address as pointing to a ffxiv-forum sub domain on a com-square.biz domain which should immediately throw out alarm bells as any official page would be on the square-enix domain...

if people are unsure then they should make use of 2FA on there accounts. either via the security token or the otp app. then even if they do fall for such a scam they should be safe. as typically an otp will only work for ~10 minutes.

There's a 3 step rule to whether something is genuine or not. which many companies are now conforming to.

1: does it come from a recognisable source..
2: does it refer to you specifically by name
3: does it contain any specifically identifiable information.

using these fakes are easy to spot.. if you get an email from megabank for example the 3 steps above will always tell you if its genuine..

1: do yourecognie the company?
do you even have an account with megabank? if yes go to 2. if no delete email.

2: does it mention you specifically by name.?
Dear James Smith... for example? if yes go to 3. if no (i.e dear customer) delete email.

3: Does it conatian any specificly identifiable and verifiable information?
suspicious activity detected on your megabank gold account XXXX4321? if yes and that information is accurate (i.e your account ends in 4321) you can treat it as genuine email. if no then delete the email.

it's basic common sense.

most companies these days make sure to conform to these 3 rules in any correspondance they send.

Quote:

---

Originally Posted by Vahlnir

It STILL kills me how so many people seem to fall for this crap. Clearly enough do or they wouldn't keep running these scams.

---

I'd say only younger players might be duped by this kinda carryon, it hasn't a hope on working on Experienced Veteran's who's been dealing with their BS since the early days of FFXI.

I made a thread last year about giving warnings to players. I was quickly told there is a link buried in the info about scams on twitch on lodestone.

You would think all the vast array of reports that's been given about this phishing scam would warrant that link renamed so people actually go into it and not avoid it.

Quote:

---

Originally Posted by Hasrat

Some are, sure. But, there's a funny thing going on, I think, and it has to do with the new young generation(s) that have basically grown up on the internet. Just a couple generations back, we all grew up knowing the stories of sketchy sites and viruses lurking in every suspicious link or email and never give away personal info, etc. But, kids got it easy these days. Makes 'em easy prey for the old tricks when they think they can trust their safety to the internet.

---

Unfortunately, statistically, it's not the younger generation that falls for this.

Quote:

---

Originally Posted by Dzian

it's basic common sense.

---

As the saying goes, common sense isn't common.

What really protects us is experience, not some innate instinctive ability to know what is a scam and what isn't.

When many parents don't understand how to be safe on the internet, it shouldn't be surprising that children fall victim. There are no internet safety classes incorporated into our education system to help them learn.

Quote:

---

Originally Posted by Ravenblade1979

I made a thread last year about giving warnings to players. I was quickly told there is a link buried in the info about scams on twitch on lodestone.

You would think all the vast array of reports that's been given about this phishing scam would warrant that link renamed so people actually go into it and not avoid it.

---

When I start up my launcher, third item under the news feed in bolded text is "Be wary of suspicious links on Twitch" so it's very visible in a spot everyone can see any time they decide to play the game. No need to make a conscious effort to visit the Lodestone.

But it should be updated to "Be wary of suspicious links in-game and on Twitch".

Quote:

---

Originally Posted by Jojoya

But it should be updated to "Be wary of suspicious links in-game and on Twitch".

---

Exactly. A simple change then it's on the player to be smart

Quote:

---

Originally Posted by Ravenblade1979

Exactly. A simple change then it's on the player to be smart

---

It is still on the player to be smart, even without warnings.

Quote:

---

Originally Posted by Awha

It is still on the player to be smart, even without warnings.

---

Hate to tell you this but the message the phisher sends is worded in a way that tantalizes the person. Latest is entering some 300mil giveaway but gotta go post a number on some obvious fake forum site.

Why do you think scams worldwide are lucrative. Not everyone thinks on the same level and lots are susceptible to them. Since you can't outright click they just copy and paste or put in their mobile device for some hopes to win that 300mil. In reality they just gave away credentials. My roommate has a friend like this and the stuff she falls for would make you shake your head.

I agree with changing the link name. I mean want me to Amp it up. Make one time password mandatory. Have the launcher have a unique identifier when downloaded on the players pc or laptop. Then have it so you gotta do one extra click then login.

I mean this is the last ditch effort and would ensure but I'm honestly not that mean. A simple change in that link name would probably help alot more then hiding the link concerning these phishing scam in a topic labeled to beware of scams on twitch.

Quote:

---

Originally Posted by Ravenblade1979

Hate to tell you this but the message the phisher sends is worded in a way that tantalizes the person. Latest is entering some 300mil giveaway but gotta go post a number on some obvious fake forum site.

Why do you think scams worldwide are lucrative. Not everyone thinks on the same level and lots are susceptible to them. Since you can't outright click they just copy and paste or put in their mobile device for some hopes to win that 300mil. In reality they just gave away credentials. My roommate has a friend like this and the stuff she falls for would make you shake your head.

I agree with changing the link name. I mean want me to Amp it up. Make one time password mandatory. Have the launcher have a unique identifier when downloaded on the players pc or laptop. Then have it so you gotta do one extra click then login.

I mean this is the last ditch effort and would ensure but I'm honestly not that mean. A simple change in that link name would probably help alot more then hiding the link concerning these phishing scam in a topic labeled to beware of scams on twitch.

---

If something sounds too good to be true, it usually is. That's a lesson for life that people should be taught very, very early on in their lives. Common sense is not common as someone else has said.

Quote:

---

Originally Posted by Vahlnir

If something sounds too good to be true, it usually is. That's a lesson for life that people should be taught very, very early on in their lives. Common sense is not common as someone else has said.

---

I love how in one paragraph you ended up insulting your elders. People of all ages fall for this stuff. Even those who were taught that lesson.

I mean do you or that other person know what scams look like these days? If not might wanna watch kitboga vids on YouTube and learn just how they can get to people.

Face it. People want that type of gil. I mean to someone that could be what they need to buy a fc with gil leftover. Some probably think that people are being nice. I run into people commenting about this now in game when I sell levekits because I don't screw people. I'm honest and give as much info as I can. They always say there needs to be more helpful and nice people.

So blame the person all you want. Don't see you trying to help the problem but be cold and herp derp their fault. Let's hope one day it's not your account stolen because you couldn't tell the difference and fell for it

Quote:

---

Originally Posted by Ravenblade1979

Make one time password mandatory.

---

That wouldn't necessarily help because the fake log-in page demands your OTP...which in itself should be a tell that the page is phony because the official log-ins ask for your OTP after it determines your account name/password are correct, not at the same time.

Quote:

---

Originally Posted by Ravenblade1979

ISo blame the person all you want. Don't see you trying to help the problem but be cold and herp derp their fault. Let's hope one day it's not your account stolen because you couldn't tell the difference and fell for it

---

I can sympathize at least a little bit while saying saying that someone screwed up, because they did. lol It sucks to be scammed and it is horrible, but it is totally preventable. I'd be willing to bet that my account will be just fine though. It doesn't get to be 8 years old without a mark on it by throwing caution to the wind. I'm not saying that everyone should be perfect. I realize that someone somewhere will end up making a mistake because we are all human, and I am also aware of the many scams going around. What is obvious to me might not be obvious to another. But I also know the world we live in, and I have no issue with saying that a lot of people need to wise up. Obliviousness isn't something that is age specific, so no, I wasn't insulting my 'elders". Perhaps I came across as a little abrasive, and I'm kind of sorry I guess? Still sticking by what I said regardless.

Yeah I very little sympathy for people that car things there too good to be true. LUL in the end one way to learn is to fall for one. Hopefully people learn from their mistakes.

Quote:

---

Originally Posted by KageTokage

That wouldn't necessarily help because the fake log-in page demands your OTP...which in itself should be a tell that the page is phony because the official log-ins ask for your OTP after it determines your account name/password are correct, not at the same time.

---

It would. You build it into the launcher and give the launcher a unique ID. Makes it harder that way. Kills the need for the app of dongle