One of my trusted FC members got Hacked and now all our FC gil is gone

[RareItems]

I saw that fake website waaay back in January when it was a 500 mil gil giveaway scam. The guy was spamming free 5mil just check the forum link. I already entered my info and was about to hit the login screen till i double checked the website link and saw the .xyz. That's when i realized it was a scam lol. Came this close to losing everything. SE needs to have way more GMs monitoring this.

[Vahlnir]

I saw that fake website waaay back in January when it was a 500 mil gil giveaway scam. The guy was spamming free 5mil just check the forum link. I already entered my info and was about to hit the login screen till i double checked the website link and saw the .xyz. That's when i realized it was a scam lol. Came this close to losing everything. SE needs to have way more GMs monitoring this.

With that much gil being given away I would think THAT would be the first and biggest red flag, along with everything else. Wouldn't have bothered checking it myself based on the amount and spam. If something sounds too good to be true, 99.9999999% of the time it is, especially on the internet.

[Iscah]

This is the exact reason SE advocates using the one time password (2 factor authentication) system.

As others said use a one time password it fixes all the problems besides phishing sites.

And as others have said in reply to the people who said to use a one-time password - repeatedly whenever the discussion comes up and in this very thread - two-factor authentication will not save you from this particular scam.

It is designed to get you to hand over that one-time password, which they will immediately use while it is still valid.

[BristolRuss]

Very easy way to fix this. If you log into your account from a new location/IP Address, regardless of whether you used an OTP or not, then you need to verify that this is an authorised login. The easiest way would be by entering a code that they text to you. Could also be by email for people who don't have phones, but emails are easier for scammers to get access to as a lot of people reuse passwords, so go with the text message route if possible.

[Awha]

I saw that fake website waaay back in January when it was a 500 mil gil giveaway scam. The guy was spamming free 5mil just check the forum link. I already entered my info and was about to hit the login screen till i double checked the website link and saw the .xyz. That's when i realized it was a scam lol. Came this close to losing everything. SE needs to have way more GMs monitoring this.

GM's cannot help people from their own ignorance. Sadly these sre lessons that much be taught the hard way for some.

[SamSmoot]

Why in the world didn't they have a security token activated? That literally makes no sense, its free and you get a free teleport for having one.

I use the token, but the SE version is a pain in that you have to enter the number every time. WoW's system is superior, in that you only have to re-enter the authenticator number if the IP address changes, and then, with the app, all you need to do is tap a button if a number request is pending, and it sends it automatically. The only time you have to manually enter a number is when your phone doesn't have an internet connection and your user IP address has changed.
You can set it to request a number every time if you live with someone who might log in on your PC and mess with the game.

[Yue_Amariyo]

I use the token, but the SE version is a pain in that you have to enter the number every time. WoW's system is superior, in that you only have to re-enter the authenticator number if the IP address changes, and then, with the app, all you need to do is tap a button if a number request is pending, and it sends it automatically. The only time you have to manually enter a number is when your phone doesn't have an internet connection and your user IP address has changed.
You can set it to request a number every time if you live with someone who might log in on your PC and mess with the game.

My Wow account was hacked with token attached. I never was on any iffy sites, gave out my info but people bought them stupid shiney ponies mounts through my account. lucky fir me i had already quit. i just saw a pop uo in my email one day with something being bought.

[Canadane]

Sadly not enough people have learned the harsh realities of internet scams.
It's a shame when it happens but hopefully lessons learned so nothing of actual value (real life information or money) will be lost in the future.

[Vahlnir]

My Wow account was hacked with token attached. I never was on any iffy sites, gave out my info but people bought them stupid shiney ponies mounts through my account. lucky fir me i had already quit. i just saw a pop uo in my email one day with something being bought.

I've used a WOW token (physical and digital) for 11 years. Not once have I been hacked since getting one.

[Jojoya]

I've used a WOW token (physical and digital) for 11 years. Not once have I been hacked since getting one.

Neither have I but it doesn't mean it never happens. Nothing is foolproof.

The authenticators, whether software or physical, are an additional layer of protection that help reduce the risk. I don't have a mobile phone so I had to get the physical token. Do I regret paying the $15 for it (which included the shipping/handling fees)? Not one bit. Do I think my account is 100% secure because I have one? Of course not. I still need to use common sense in my online interactions. Even normally careful people can make mistakes sometimes.