Gil stolen from FC after one of the member was hacked

Hey everyone,

A high ranking member of our FC was hacked and all of her Gil and the 29 million Gil we had in our FC chest was stolen. We wrote to support and they basically told us too bad so sad for the Gil in our FC chest. Did they misunderstand or is that really that SE doesn't help when you get hacked?

If I was to suspend my disbelief for a moment that this isn't a troll post: Did the person whose account that got hacked get it back?

hacked? meaning the password is leaked? the support team have no way to help us in that regard, keeping our account password secured is our own responsibility after all, I changed my password quite frequently especially after someone else use it, i change it immediately after our business is done

Euhm someone else using your account password??????
Besides the fact letting someone else use your account is a serious security risk, it may also be against the terms of your subscription.

Reduce/eliminate risk of any unauthorised login and get the fysical authentication token or use the app.

I suspect its not that they dont care, but what would you expect them to do?

I imagine its not unheard of for person A to give out their password to their RL friend, person B. person B logs in, clears everything out, hands it off to person A's alt account. Person A then screams OMG HACKED!! basically, things like that are why we cant have nice things.

I am in no way saying that is what happened here, but I am sure if there is a way to get something for nothing, yelling "hacked" has probably been beaten to death and the game companies just have gotten to the point of saying "wow, sorry to hear that"

They cannot police the FC chest for you, thats not their job. if it gets stolen, or taken out, legitimately or otherwise, thats on the FC leaders, not SE.

Quote:

---

Originally Posted by Ravor

hacked? meaning the password is leaked? the support team have no way to help us in that regard, keeping our account password secured is our own responsibility after all, I changed my password quite frequently especially after someone else use it, i change it immediately after our business is done

---

this is a brave thing to admit / post on public forums when piloting someone's account is against TOS lol

We actually have a rank we use for players who haven't logged in for 3 months we call "fear of hacking" that has all privileges stripped. If someone logs back in and asks for their old rank back they can have it, but if they get an old password compromised, it prevents a total theft.

However, you're doomed if someone fell for one of the scams like "click this link to be entered in for a 10 million gil."

I'm guessing that they weren't "hacked" and instead fell for one of those tell scammers.

It's outstandingly difficult for people to get into your account if you don't feed them information somehow.

But yeah, the GMs will only reimburse you on a personal level. They won't help you with anything FC-related because they can't easily be 100% positive of who owns what in the FC chest.

Thanks for all your constructive feedback. Since SE flagged the account and restricted her access due to suspicious activity and that the money was taken during said suspicious activity while no one else was logged in, I assumed they would help, but as most of you so kindly mentioned, that was a dumb assumption.

F in the chat

I've noticed a lot of games won't help in cases like this.

Basically, the stance is, you gave them permissions to take stuff out, it's your own doing.

Blizzard USED to have it so that you could set ranks to have to have an authenticator, so you could restrict withdrawals to those that had them, but you can't anymore for some dumb reason. I don't recommend letting people take that kind of money out of the bank.

I had it happen to my guild in EQ2 and I'd been the primary contributor of materials, spell books and platinum. It sucks. But I learned to not let people have those kinds of withdraw limits.

What would you expect them to do? That's my question. They're not just going to recreate the gil out of thin air.

Don't get me wrong but isn't this your FC Member's fault? I doubt SE Can do anything in this regard.

I got hacked a while back while copying and paste a link from fc mates. Luckily I wasn't an officer in FC so they couldn't touch our FC chest. I submitted a ticket to SE and NOTHING HAPPENED! (NO RESPONSE)

I would not copy-paste links from anybody, not even friends or FC mates if they're just shoving it in your face with no prior conversation or context. It's especially applicable if they're trying to link you to the forums, though.

If someone gets "hacked" and does not immediately repossess their account or get it locked from someone reporting it, the phishers will continue using it for a prolonged period of time and they seem to prioritize phishing anyone on the player's friend/FC list before they start going through player search.

Really? my bad, it only happened once concerning asking someone to help teaching me how to subscribe monthly for the first time..... I changed my password after that

Please dont banned me =(

Quote:

---

Originally Posted by Ravor

Really? my bad, it only happened once concerning asking someone to help teaching me how to subscribe monthly for the first time..... I changed my password after that

Please dont banned me =(

---

Don’t worry about it. The ToS has a lot of blanket rules they don’t really enforce unless there is already some other problem.

As long as your character wasn’t logged in and playing 24/7 or being obviously played by multiple people in an unfair way, they do not care.

It’s a lot like parsers; they don’t care unless it’s a problem, then they can say “well we said no 3rd party programs...”

If a high ranking FC member had the stuff yoinked via official channels, how can you expect SE to know it was an actual hack and not them screwing over the FC? The answer is, you can’t, and much of the fault, unfortunately, is on the hacked player for not securing their account despite the responsibilities and privileges they had in their position in the FC.

And yes, it absolutely sucks that it works that way. Google Authenticator is a great, new option for one-time passwords.

Sadly resolving this would present some complications such as verifying that they were 'hacked', though it was very unlikely a hacking but something like a phishing scam or the person using the same account details they've used elsewhere and that's been compromised because I've not heard of FFXIV's account security being hacked and people's data compromised. So things would likely look legit on their end.

Whilst they could check IP addresses and maybe transaction logs, but if they did this, they'd be opening an exploit eg:
Person logs into a VPN and changes location: "I will trade you 3 million gil for 'x'"
Transaction happens
"Help I've been hacked"
-gets 3 million back-

And this is all money that ends up in the game's economy too.

Arguably the best solution they have is prevention and they offer that through a 2 factor authentication, which you need to set up. And there is much information going around about account security and safe passwords in general on the internet such as unique passwords and changing your password every so often. 2 factor authentication methods do add a tonne of extra security.

Sadly their account security is their responsibility...it really sucks and I feel bad for the FC because it's a lot to lose, but a case of cutting your losses I'm afraid and the user learning a lesson.

Quote:

---

Originally Posted by Kehdato

Did they misunderstand or is that really that SE doesn't help when you get hacked?

---

Hacked isn't following a link that says forum.square-enix.com-idi.ot/ffxiv/threads/427211-I-am-gving-1away-10million-gil That's called phishing.

FC leaders really need to impress on their officers to READ THE LINK and don't ever blindly click stuff. Until they know this, a rank without gil withdraw is fine.

what's downright sad is how people with probably thousands of hours falling for that extremely obvious phishing scam, like... what? do they go back in time when they saw the internet for the first time and believed everything they read on it just because it says 300m gil?

It really blows my mind how people are still falling for stupid gil scams. Like...realllyyyyyyyy stuns me at this point.

Technically the fault is entirely on whoever is in charge of your FC for not educating your officers/leadership on the scams. So....take it as a learning experience and do better next time.

Good luck rebuilding your funds.

Quote:

---

Originally Posted by LianaThorne

It really blows my mind how people are still falling for stupid gil scams. Like...realllyyyyyyyy stuns me at this point.

---

The worst part is, they're all so obvious from a single glance. And it's not just the ones here, all the repeat internet scams going back some 25 years. Even if they weren't already so neon-glowing in their obviousness, they're the same basic script over and over; known quantities! There's really no other answer to it other than that some people are born chumps.

We really need a big, pinned post about the difference between being hacked and falling for a phishing scam.

I simply unable to have sympathy on people that fall for the low level of phishing scam you saw in FF14.
I just can't

Quote:

---

Originally Posted by MorionQ

yes, it absolutely sucks that it works that way. Google Authenticator is a great, new option for one-time passwords.

---

Sad thing is that even people with 2FA/OTPs are not safe because the phishing links also demand those from you...which should just be an additional sign that they're scams because normal websites ask for 2FA AFTER you successfully enter your account name/password.

Quote:

---

Originally Posted by Rinhi

what's downright sad is how people with probably thousands of hours falling for that extremely obvious phishing scam, like... what? do they go back in time when they saw the internet for the first time and believed everything they read on it just because it says 300m gil?

---

Thankfully, it's become so routine that the GMs will not permaban accounts being used for phishing and the owners almost always get them back eventually...just minus the gil.

A friend of mine as well got hacked with those tells links and same situation our fc gil and his gil were stolen...
He submited a ticket and some days later SE did a rollback to his character a day before everything happened so he recovered the stolen gil, after that he activated the one time password.

Quote:

---

Originally Posted by LianaThorne

It really blows my mind how people are still falling for stupid gil scams. Like...realllyyyyyyyy stuns me at this point.

Technically the fault is entirely on whoever is in charge of your FC for not educating your officers/leadership on the scams. So....take it as a learning experience and do better next time.

Good luck rebuilding your funds.

---

Think that's bad think of all the idiots who fall for the Nigerian Prince and International Lottery Scheme... you'd think the world would learn but in reality they dont

Quote:

---

Originally Posted by Rannie

Think that's bad think of all the idiots who fall for the Nigerian Prince and International Lottery Scheme... you'd think the world would learn but in reality they dont

---

Didn't they finally figure out who did the Nigerian prince scams?

And yeah I don't follow random links unless I recognize them. And I don't recognize many. Lol.

It sucks, but consider it a learning experience.

If It was Account sharing both accounts will be suspended for investigation because it's against the tos. If it's phishing well its complicated to proof. He would need to tell the support the truth where how this could happen. But to my knowledge that almost never worked at least in case of " stolen Gil"


Hacked Accounts deleted chars yes, stolen Gil specifically almost never.


Reminds me of those Twitch link scams, promising Gil but instead accounts gets hacked.
PS.;

We had couple years ago in my Old FC a member working he's ass off for a Year, helping Members , Farming, Crafting for the FC and Moveing his Rank up, and one day he decided probably, well the FC Money belongs to him, takes it and leaves the FC. The support just said he had the rights to take out the Gil so they couldn't do anything about it.

This is why you use 2FA... Also don't click links kids.

A discord scam seems to be going around, beware of dms with random spreadsheet documents. Do not download/open as they contain a virus which steals data/tokens along with payment methods.

Quote:

---

Originally Posted by Shinzo

A discord scam seems to be going around, beware of dms with random spreadsheet documents. Do not download/open as they contain a virus which steals data/tokens along with payment methods.

---

To be fair a lot of the discord scam scares going around are really just versions of the whole “Send this email to ten people or your mom will die just like my mom did” that went around years ago.

They’re called chains (like chain mail).

Think about it this way: viruses like that spread like wildfire. They send themselves (that’s the whole point of it being a virus). There’s no use just sending it individually and not having that individual send it to others - meaning it would have quickly snowballed, especially one this obvious. And then it would be on the news, as it takes one person working for microsoft to open it. Or one person at an apple store playing around. If it’s not on the news, if discord hasn’t released a statement about it, it’s not real.

And before you think “well discord would want to protect its reputation!” And that they wouldn’t say anything - companies have, since the dawn of the internet, needed to be pretty open about this kind of stuff, otherwise you eventually end up with compromised accounts of high level government officials.

Basically, if you don’t see discord talking about it, it’s likely just a chain message that someone made for funsies.

define *hacked*

Quote:

---

Originally Posted by Kehdato

Hey everyone,

A high ranking member of our FC was hacked and all of her Gil and the 29 million Gil we had in our FC chest was stolen. We wrote to support and they basically told us too bad so sad for the Gil in our FC chest. Did they misunderstand or is that really that SE doesn't help when you get hacked?

---

SE generally doesn't get involved with theft from a FC chest. If the FC leader has given a member access and the member takes items or gil from the FC chest, it's not considered theft. This is true even in cases of account compromise because there's no way of knowing if the compromised was faked specifically to make the withdrawal without repercussion.

Best defense for a FC - do not give anyone access to withdraw gil from the FC chest outside of an officer using 2FA who has reasonable need for frequent access to the gil (such as they buy supplies for the FC on a regular basis). The FC leader should enable gil withdrawal only when needed then disable again as a safety precaution. Even 2FA is not foolproof protection.

Quote:

---

Originally Posted by Imora

Didn't they finally figure out who did the Nigerian prince scams?

And yeah I don't follow random links unless I recognize them. And I don't recognize many. Lol.

It sucks, but consider it a learning experience.

---

For every scam shut down, a new one will appear because people are just that gullible.

Did they click on a fake link sent to them? Did they share their acct info? If you set up ur FC ranks a certain way, SE won’t do anything. All on that player and the bad luck who was picked so to speak

Don’t put money in an FC chest
Don’t click random links in tells you get