One of my trusted FC members got Hacked and now all our FC gil is gone

[Naria]

There has been a phishing scam going on in game for a few months now, I've reported the two tells I've received. One of them was earlier tonight. While the 2FA normally can stop these things, from my understanding this scam has you enter that in as well. In general a good rule of Internet safety is not to use a link from anyone/where you don't trust and if it is for any sort of service that requires a log in go to the website yourself and search for what they want you to do not via a link or by copy/pasting an address that has been sent to you.

[RyuSaarva]

Why in the world didn't they have a security token activated? That literally makes no sense, its free and you get a free teleport for having one.

I think you need to buy a smartphone for this poor fellow so he can get one for free.

[Scox]

I think you need to buy a smartphone for this poor fellow so he can get one for free.

or he can buy a physical security token SQE security token

[RyuSaarva]

or he can buy a physical security token SQE security token

it's not free though so there are plenty of reasons why people would not have it.

[AduroT]

Also, again, those tokens don’t help in this instance. The phishing sites ask you to put the code in along with your name and password, and then use all that to promptly take your stuff. All the security in the world will do nothing if you give them your keys.

[Mavrias]

Why in the world didn't they have a security token activated? That literally makes no sense, its free and you get a free teleport for having one.

The phishing scam asks for your security token as well. This is common knowledge at this point. It wouldn't have helped.

[Gemina]

I don't trust a face I've never seen. I love my guildmates, but I don't know any of them personally. When one of them asked for my home address so she could send me something she made me, I gave her a PO box outside the city I live in instead. She is now no longer playing the game, and I never received anything from her. That doesn't mean she had ill intent, but I also wasn't going to find out if she, or he did or not. I make it well known that I am here just to play the game, so any attempts at getting to know me personally, meet me, or asking for RL information about myself are immediately shut down.

I also don't put anything in the company chest that I am not willing to give away. We've never been robbed that I know of, but there have been times where things were taken and the FC leader got very upset. I did warn her to keep what she needed instead of placing it in the chest, and that restricting tabs only serves to give the impression that she doesn't trust her own guildmates.

I am really sorry to hear about the circumstances. You would like to think you can trust people, but they show time and time again that privileges need to be earned.

[Deceptus]

This is the exact reason SE advocates using the one time password (2 factor authentication) system.

[Awha]

Question is it really hacking if you manually give them your password?

[MistakeNot]

Question is it really hacking if you manually give them your password?

It is if they trick you into doing it. A classic hacking method known as Social Engineering.
One of the most effective methods to bypass security.