Anyone ever do a rollback? I got phished..

Hello, i have a question so i got phished... yeah.. they hacked into my account luckily i emailed square and they removed the token and i changed all my stuff and got my account back.
I logged backed in and all my gill was gone alot of it so i filled the forum for a rollback but now I'm seeing that it takes a super long time and really have no idea where the rollback would be, i am wondering if anyone has experience on this.... my whole thing is to with the ffxiv collab event coming up i don't want to miss that's like 10 days away and whatever i do get will just be deleted nothing more i have been waiting to get that regila for a long time LOL

Also any advice or information or experience would truly help on this matter thank you guys.

i know i feel so stupid...... i took precautions now.. what's done is done.

I don't have personal experience, but someone has come here before saying the rollback didn't happen until three months later and they lost everything they'd done in that time.

I'm not sure if it's possible to cancel the process once you start it, but if so then you may need to make a choice between your gil and (not waiting another year or two for) the Regalia – and for progress in Endwalker, for that matter.

Considering we can make gils anytime, I would rather try to get the Regalia (if the Regalia come back one day, I'm afraid the next time it be in the cashshop).

The event will last something like six weeks, you can consider to make an alt.

Yeah rollbacks take a while, and you're advised not to play until it happens because... it'll get rolled back.
Depending on how much you lost, and whether or not you have the Regalia, you might want to just take the damage and carry on.

A member and officer of my FC got phished over a year ago. Took 60 million gil from her and made an alt, invited them into the FC and took 25 million from the company chest. She got rolled back and yeah it took about a week. The FC's gil however was SOL. She did reimburse the FC for the lost gil.

My best advice is don't make officers have access to the FC gil in the chest. Only have the leader with access to the FC gil. That way if one of your officers accidentally falls for a phish, than the crook can't promote themselves to a rank that has access.

Also you need 200k mgp for the regalia car. So that's good. Enjoy your car. =)

Quote:

---

Originally Posted by Plushy

Sorry this happened to you.
Though I wonder how do people even fall for these things?

---

I swear people think randoms are actually gonna give them gil.

How does this keep happening randomly?

Quote:

---

Originally Posted by Gameovers

How does this keep happening randomly?

---

People are naive, that’s how. I bet OP doesn’t fall for it again.

well they got me with a raffle type phish like come do this raffle on the forums. and well i already put in the request for the rollback so don't think i can cancel it. i will just have to hope that it gets done before sep 13- oct 20th or however long the event is just some people have been saying it takes up to three months for rooll back and that's way past endwalker release date i think i would cry myself to sleep at that point lol... a week or two i can deal with but three months? thats crazy.

you know i was just in air head mode when i did it i seriously feel so stupid. got a link for a raffle ... oh yeah lets do that . derp ...

also if i get the mount on a alt its not account wide is it?

https://media.giphy.com/media/meMhNL...giphy.gif&ct=g

Well, hopefully you learned a valuable lesson for the internet and life here.

The mount is not account wide, no. If you contact square enix support, there is a small chance they might be able to cancel the request, but I wouldn't hold my breath on that. Not much you could lose by trying though, besides however much time you have to waste talking with a representative.

While it's unfortunate you got phished, make sure to learn from it as a lesson to always scrutinize links anyone sends you, no matter what. Especially in these days when friends falling for a phishing scam can easily send you links with their hijacked accounts so you'd lower your guard.

I haven't had my account hacked but it did happen to one of our FC members last year. Her rollback happened 2 weeks after her account was restored to her, and she was pretty upset that she lost everything she had earned during that two weeks.

It's a pretty glaring problem SE has when handling account compromises. Rollbacks should be done within a couple of days, not weeks later.

Quote:

---

Originally Posted by DylanStorm

also if i get the mount on a alt its not account wide is it?

---

The Regalia is not account wide. You will need to do the event and buy it separately for each character. Since the event will last a month, you should be okay.

believe me i have learned my lesson hard lol.. i appreciate the responses guys i truly do i hope this all works out.

Never trust a link that's sent to you randomly from people you don't know/remember. Also look at the URL carefully. An example is the fact that the URL has '.com-tp.eu' in it isn't a normal type of link (that's from the dozens of tells I got from that kind of raffle thing)

I kept a list of the people that sent me those tells, and all of them have been people with multiple level 80's on their characters. I feel bad that it happened to them, so at the very least I check if they're still in an FC and contact their FC members to spread the word about it. But a lot of the times people are too trusting with random things sent to them in tell, so be sure to spread the word at the very least and tell people to change their password right away if they have gone to any of those links.

What's worse is that kind of phishing scam was going around like a plague during the Make it Rain Campaign. When I was posting shouts about it in popular areas as well as making party finders to spread the word, 90% of the time I got people just trying to joke around about it. There's a time and place for joking, but informing people about a scam isn't one of those times.

so i contacted square enix through the chat system one day later and i'm surprised it was very slim chance and a chat rep named Daniel got the request to be escalated and canceled he went above and beyond and took care of it even though im taking a huge loss gill wise its not worth the roll back and possibly not being able to play for a couple months or even to endwalker. i lost in this battle overall but i can still play i have learned my lesson and now i just need to work my way back up.

Quote:

---

Originally Posted by DylanStorm

so i contacted square enix through the chat system one day later and i'm surprised it was very slim chance and a chat rep named Daniel got the request to be escalated and canceled he went above and beyond and took care of it even though im taking a huge loss gill wise its not worth the roll back and possibly not being able to play for a couple months or even to endwalker. i lost in this battle overall but i can still play i have learned my lesson and now i just need to work my way back up.

---

Sadly it's an expensive learning process.

If you need help getting gil again. One easy way is unlocking Desynth in game. You can break down almost any piece of gear, some furniture too, and get materials from it to sell on the market. When you have a high enough desynth level you can start getting some better materials from it as well.

There's also doing treasure map parties with friends, since everyone gets gil from those and the further in the map dungeons you get the more gil you can get. (And it's gil per person, so with 8 people that's 8x the gil you get per chest in those)

My roommate had to get a roll back on her account once and it LITERALLY took months of periodic backs n forths. Geez i think she was dealing with that for a good half a year.. so needless to say.. it could definitely take some time.

@OP

I'm really sorry this happened to you.

You mentioned that SE removed your token after you contacted them.
If you were using a security token, how did the perpetrator get into your account by phishing your password?

A OTP is active for a little while, so if you put all your details onto a phishing site, they can use a script to quickly log into your account whilst the OTP is active before it changes. From there they can change what they want.

lol i used to play PSU...we "did the rollback" all the time XD

Quote:

---

Originally Posted by Tierala

lol i used to play PSU...we "did the rollback" all the time XD

---

Devs: "Oh, you got that shiny new S-class weapon?...Well, that's just too dang bad. Better luck next time, champ. *hits the rollback button*"

God I hated that "feature".

Quote:

---

Originally Posted by DylanStorm

Hello, i have a question so i got phished... yeah.. they hacked into my account luckily i emailed square and they removed the token and i changed all my stuff and got my account back.
I logged backed in and all my gill was gone alot of it so i filled the forum for a rollback but now I'm seeing that it takes a super long time and really have no idea where the rollback would be, i am wondering if anyone has experience on this.... my whole thing is to with the ffxiv collab event coming up i don't want to miss that's like 10 days away and whatever i do get will just be deleted nothing more i have been waiting to get that regila for a long time LOL

Also any advice or information or experience would truly help on this matter thank you guys.

i know i feel so stupid...... i took precautions now.. what's done is done.

---

I had this experience back in wow classic in 90's, wen i didn't had a token, i clicked in a mail inside the game...they removed all my gold and armor, luckily i contacted support, they gave all my items back but gold was lost forever...this in classic wow was like a nightmare, but at least, after that, i never clicked in anything inside the game, delete suspicious mail, and bought a token myself to be safe. An advice for you: dont post links inside the game in your web browser. its better research by yourself than trust in links in the game.

glad you have your account back!

For anyone seeing this thread with questions as I did. I want to leave my perspective as the process can be mysterious. I was phished in a similar way to OP. Even though I had phishing training, I still let my guard down. I wasn't cognizant, perhaps half asleep.

Dec 28, received a tell about a community event through the forums. I blindly followed the link to see what it was about, it looked like these forums. The thread was indeed looked like a community event and there were multiple replies and updates to the page. In infinite hindsight the attackers went through extensive lengths to setup this phish. I was reading through some of the replies etc. Everything seemed pretty normal, not much looking like bots. It was several years since I've been to the forums, and the URL was similar to the actual forums URL but with a tiny difference. It wasn't obvious until after I tried to login.

It was immediate from the instant I hit login that I had been phished. There were several redirects until it landed me on the EU forums (I'm NA) with a bad one time token prompt. I was in game still at this point, and I got the black screen with the authentication error. It had dawned on me, sinking feeling and all.

I was quick to try to change my password from the launcher's "forgot your ID", it was too late. A token was added to my account (Yes I didn't have one, few years back I lost my phone, was a pain to get removed, still recommend one).

Using the launcher seems like a good Idea, but its very difficult to be fast enough to counter the attack. The phish also had a token field, attackers are advanced enough figure out the next entry on the token. The best counter for Sqex might to add email verify before new token is added as my email was never compromised.

I was on customer service fast. Within ~10 mins I was in customer support chat explaining the situation. The rep unlocked the account enabling login. I saw my characters gil missing and transferred to a different server. So the rep put my account on suspension since it was compromised. There were numerous identity verification steps in there, many password changes. I had read through various other third party forums and these ones that this suspension could take a long time, but for me it was 3 days.

From the lifting of the suspension on Dec 30th I filled out the character rollback form roughly within a quarter day from the lifting. It's only been 4 days since then so I'll update this when the character gets rolled back so there's an account of how long it took me.
I was advised not to play as I would lose progress, mostly stuck to that but have done raids/trials to get experience, passing on all loot as I wouldn't keep it. I created another character and have done some small leveling. I don't know if that character will be affected, I'm ok with it. Just practicing on a class I haven't played in forever.

Well, hopefully its not too long until my follow up on the roll back.

Advice: if you ever see those again, dont fall for those fake forum links from a scammer on a person’s hacked account name that sent you a tell/whisper about the 300M Gil giveaway, its fake to steal your logins. Blacklist them and go on about your day. These hackers are a lowlife pos. Sorry that has happened to you tho :3

Quote:

---

Originally Posted by Plushy

People thinking a random person really gonna give them 600mil gil from the forums of all places.
A massive red flag should be when you have to log in lol. But people some how fall for that.

---

When all it takes is to notice the forum link and how different it is from the official one. On the internet, every time there is mention of stupid amounts of money or currency, you should allways have your spidey sense tingling. It is 1000% of the time sketchy.

Ok so to follow up and give players an idea of how long to get a character recovered from a roll back based on my experience:

• 28 Dec 2021: Customer Service locked the account
• 30 Dec 2021: Suspension lifted and requested character rollback
• 4 Jan 2022: Email requesting confirmation of rollback
• 5 Jan 2022: Placed in rollback queue
• 18 Jan 2022: Character rollback finished

I am pretty thankful that the CS team got me back up and running in about 15 business days. There was an issue with the rollback where two of my job crystals are missing because the rollback landed before I started playing them, but I'm confident the GM's will help me out.

I've gotten tells of this sort at least three times already. I have ignored them and will continue to ignore them. However, is there nothing that SE can do to stop this vile activity?

Quote:

---

Originally Posted by Eraden

I've gotten tells of this sort at least three times already. I have ignored them and will continue to ignore them. However, is there nothing that SE can do to stop this vile activity?

---

They cannot control what people do. They can only respond to what has been done. In the end, the only thing that will stop scammers is for people to get smart and stop falling for the scams.

I know many have suggested SE should implement a message blocking system similar to chat filter plug-ins but that risks blocking legitimate communication between players. If the individual player wants to risk blocking chat messages, that's their choice.

Quote:

---

Originally Posted by Eraden

I've gotten tells of this sort at least three times already. I have ignored them and will continue to ignore them. However, is there nothing that SE can do to stop this vile activity?

---

Do you thinks police in real life can do anything to stop telephone scam?
You know, those with google voice telling you have trouble with law, parcel not pick up, etc etc.
Yeah , i don't think so

I've fallen victim to a phishing attempt myself. Not in FF, but honestly, where doesn't matter. It makes you feel like a royal idiot.

No matter the company, no matter the user-support dedication, it takes an unknown amount of time. There's an amount of human interaction they need to do with you that ties everything up. Even restoring/rollback is all human interaction based. That's an expensive manhour cost and they have to spend it.

Best thing you can do is enable two-factor. The tedium of it ensures an attacking vector can't take advantage of you. Make sure you're not lazy either by doing an auto push. Manually enter that number every time.

Quote:

---

Originally Posted by Stachiko

I've fallen victim to a phishing attempt myself. Not in FF, but honestly, where doesn't matter. It makes you feel like a royal idiot.

No matter the company, no matter the user-support dedication, it takes an unknown amount of time. There's an amount of human interaction they need to do with you that ties everything up. Even restoring/rollback is all human interaction based. That's an expensive manhour cost and they have to spend it.

Best thing you can do is enable two-factor. The tedium of it ensures an attacking vector can't take advantage of you. Make sure you're not lazy either by doing an auto push. Manually enter that number every time.

---

I myself just fell victim to a phishing scam - sent a whisper about a big gil giveaway, enter on the forums... I 1000% know better but I must have had my stupid had on today and fell for it. I have two-factor authentication enabled - OTP, I generate a token on my smartphone- but the hacker was so fast they were able to log me out and steal my gil before the token changed.

Just having two-factor authentication enabled doesn't protect you from being stupid. Only smartness and vigilance does that.

And I'll never fall for a scam like this again, but yes, I dayum well do feel incredibly stupid. Started the rollback process immediately and hopefully it won't take too long.