Gil stolen from FC after one of the member was hacked

[Imora]

I've noticed a lot of games won't help in cases like this.

Basically, the stance is, you gave them permissions to take stuff out, it's your own doing.

Blizzard USED to have it so that you could set ranks to have to have an authenticator, so you could restrict withdrawals to those that had them, but you can't anymore for some dumb reason. I don't recommend letting people take that kind of money out of the bank.

I had it happen to my guild in EQ2 and I'd been the primary contributor of materials, spell books and platinum. It sucks. But I learned to not let people have those kinds of withdraw limits.

What would you expect them to do? That's my question. They're not just going to recreate the gil out of thin air.

[JOsha]

Don't get me wrong but isn't this your FC Member's fault? I doubt SE Can do anything in this regard.

[FudoMyoo]

I got hacked a while back while copying and paste a link from fc mates. Luckily I wasn't an officer in FC so they couldn't touch our FC chest. I submitted a ticket to SE and NOTHING HAPPENED! (NO RESPONSE)

[KageTokage]

I would not copy-paste links from anybody, not even friends or FC mates if they're just shoving it in your face with no prior conversation or context. It's especially applicable if they're trying to link you to the forums, though.

If someone gets "hacked" and does not immediately repossess their account or get it locked from someone reporting it, the phishers will continue using it for a prolonged period of time and they seem to prioritize phishing anyone on the player's friend/FC list before they start going through player search.

[Ravor]

Really? my bad, it only happened once concerning asking someone to help teaching me how to subscribe monthly for the first time..... I changed my password after that

Please dont banned me =(

[kaynide]

Really? my bad, it only happened once concerning asking someone to help teaching me how to subscribe monthly for the first time..... I changed my password after that

Please dont banned me =(

Don’t worry about it. The ToS has a lot of blanket rules they don’t really enforce unless there is already some other problem.

As long as your character wasn’t logged in and playing 24/7 or being obviously played by multiple people in an unfair way, they do not care.

It’s a lot like parsers; they don’t care unless it’s a problem, then they can say “well we said no 3rd party programs...”

[MorionQ]

If a high ranking FC member had the stuff yoinked via official channels, how can you expect SE to know it was an actual hack and not them screwing over the FC? The answer is, you can’t, and much of the fault, unfortunately, is on the hacked player for not securing their account despite the responsibilities and privileges they had in their position in the FC.

And yes, it absolutely sucks that it works that way. Google Authenticator is a great, new option for one-time passwords.

[Saefinn]

Sadly resolving this would present some complications such as verifying that they were 'hacked', though it was very unlikely a hacking but something like a phishing scam or the person using the same account details they've used elsewhere and that's been compromised because I've not heard of FFXIV's account security being hacked and people's data compromised. So things would likely look legit on their end.

Whilst they could check IP addresses and maybe transaction logs, but if they did this, they'd be opening an exploit eg:
Person logs into a VPN and changes location: "I will trade you 3 million gil for 'x'"
Transaction happens
"Help I've been hacked"
-gets 3 million back-

And this is all money that ends up in the game's economy too.

Arguably the best solution they have is prevention and they offer that through a 2 factor authentication, which you need to set up. And there is much information going around about account security and safe passwords in general on the internet such as unique passwords and changing your password every so often. 2 factor authentication methods do add a tonne of extra security.

Sadly their account security is their responsibility...it really sucks and I feel bad for the FC because it's a lot to lose, but a case of cutting your losses I'm afraid and the user learning a lesson.

[Shibi]

Did they misunderstand or is that really that SE doesn't help when you get hacked?

Hacked isn't following a link that says forum.square-enix.com-idi.ot/ffxiv/threads/427211-I-am-gving-1away-10million-gil That's called phishing.

FC leaders really need to impress on their officers to READ THE LINK and don't ever blindly click stuff. Until they know this, a rank without gil withdraw is fine.

[Rinhi]

what's downright sad is how people with probably thousands of hours falling for that extremely obvious phishing scam, like... what? do they go back in time when they saw the internet for the first time and believed everything they read on it just because it says 300m gil?