Success getting Gil restored that was removed by a compromised account?

[lezard21]

Paranoia is not a bad thing. It's what keeps people from clicking on "I'm leaving the game and throwing a 500M gil raffle" links.

And again, it's not flagrantly obvious. I can very easily contact you through Discord or any other 3rd party app, give you my account name and password and then claim that my account info was stolen. From SE's side they will verify that indeed my account was logged in from a different IP/region/through different nodes than what it usually logs in, but that is not certain proof that it was phissed. I know this for a fact because this happened to a friend in TERA whose ex (then boyfriend) decided he was not playing the game anymore so he left my friend his account and password and after they broke up IRL he sent a ticket saying his account was hacked and Enmasse restored the account to him and my friend lost all the items and money he had put into that account.

[RitsukoSonoda]

Literally any other MMO would have restored the currency by now. This absolute paranoia does not justify refusing to assist your player base when it is flagrantly obvious what happened.

I checked back in on Aion recently and even their support was leagues better that Square’s. That shouldn’t be acceptable to anyone playing this game, especially as FFXIV gains popularity.

I've had accounts on 2 MMO's in the past that had items and money stolen from them due to compromise that was actually caused by a confirmed database leak or compromise on the provider's end (numerous accounts effected all at once).

I had to wait over a month before the restoration was completed on either of them and by then I had lost interest in those games and moved on to something else. I believe Aion's publisher was NC soft and one of the games involved in my scenario was another title published or hosted by them.

[Berkilak]

At the very least, a reply that actually takes into account the specifics of the case should be warranted. Not a copy/paste reply that is only tangentially relevant and has me questioning if they’re even read or understand the issue.

[Packetdancer]

Wait, so are you saying that someone got their account phised and then whoever phised that account hacked the game code to give themselves access to FC bank? Cause that's an entirely different and more grave issue from "someone with bank access got their account phised" that would require SE to investigate their servers' security.

I think Rivertasashi was trying to draw a distinction between "someone in the FC was given access to the chest, then that person stole all the gil" versus "someone not in the FC obtained illicit access to an account that is in the FC (via phishing or whatever) and then used that compromised account to take all the gil". Both are problems, and both result in "the FC lost all their gil". But you might be able to make a stronger case trying to justify the latter being reversed.

Unfortunately, from a pure FC-chest-transaction-log standpoint, the two are functionally identical.

[Arazehl]

The good news is your friend will get reimburse the gil they were out. The bad news you can kiss the FC gil goodbye. SE see's this as the fault on the leaders part for giving access to FC funds to any other, but the leader of the FC. How do I know this? It happened to me and one of my officers who is a irl friend awhile back. The FC had 29 million gil taken from the Company Chest.

I change the access to FC to only myself now and everytime I see a post like this concerning someone getting hacked/pished I speak up in those threads too. Do Not give gil access to officers, friends,your dear Memaw or anyone other than the leader of the FC. This isn't about a trust issue, you jepordize the FC gil when you do and SE won't be responsible for it.

Fortunately my friend/officer reimburse what the FC was out over time and she did that on her own without a word or me asking her to.

To add the person with the hacked account, they invites an accomplise partner into the FC with the hacked account they are now on. Then the phisher ranks them if they need to, to the rank of whatever rank has access to the FC's gil in the Company Chest. It's all rather a neat and tidy crime. You can probably even see the Company Chest History to see exactly who took it, but still SE won't reimburse the FC gil ,saying it was the leaders fault for giving anyone access other than the leader.

Oh and one more thing. SE saying that any gil earned by your friend after the incident will be lost is because of the rollback your friends account will get. That includes gear, items or any gil after he regains control of his account. It can take up to a week to 10 days to rollback. Your friend just needs to be patient for that long.

[Arazehl]

And again, we'd be fine with the gil being restored to the character that withdrew it. It doesn't have to be added back directly to the FC chest. I've already been rebuffed on that front...

Was the FC's gil in on your friend's account/retainer? Then there is a chance, but if it got taken from the Company Chest directly sadly it's gone. Yep and I still have my screenshot of the gil being taken by someone with the initials A. L. being the culprit. Won't give the full name due to forum rules. If your friend's compromised account hacker took it out of the Company Chest, with the friends character than maybe, but I doubt it. The Leader Only rule may still apply. Yes this is RMT's little racket they got going.

[Berkilak]

Oh and one more thing. SE saying that any gil earned by your friend after the incident will be lost is because of the rollback your friends account will get. That includes gear, items or any gil after he regains control of his account. It can take up to a week to 10 days to rollback. Your friend just needs to be patient for that long.

That's the thing - they rolled back their character without really reading the fine print or checking to see if the FC chest was compromised. So their character did withdraw the 70 million, but then they rolled back their character to right before they did so.

[Misutoraru]

I've had accounts on 2 MMO's in the past that had items and money stolen from them due to compromise that was actually caused by a confirmed database leak or compromise on the provider's end (numerous accounts effected all at once).

I had to wait over a month before the restoration was completed on either of them and by then I had lost interest in those games and moved on to something else. I believe Aion's publisher was NC soft and one of the games involved in my scenario was another title published or hosted by them.

I remember my account of Lineage II got stolen because the publisher got data leak. Lost most of my stuffs and in game currency, contact the CS team and never get any rollback

[LianaThorne]

Pretty sure the general stance is:

If you gave someone permission to take money out of the chest through the FC and that person used that power to remove funds, it's basically your problem. Square views that as fine and dandy because you gave their character the original permission. This is why it's strongly encouraged to ONLY give those perms to the owner of the entire FC and make sure they're educated on how these scams work.

[Berkilak]

Pretty sure the general stance is:

If you gave someone permission to take money out of the chest through the FC and that person used that power to remove funds, it's basically your problem. Square views that as fine and dandy because you gave their character the original permission. This is why it's strongly encouraged to ONLY give those perms to the owner of the entire FC and make sure they're educated on how these scams work.

Which is an asinine policy - they shouldn't even have the option to collectively store gil if you're essentially supposed to lock it down entirely because they do nothing to protect that gil from scams.

But here's the thing: he took the gil, fine. Should it not be restored to him on the character rollback? They overtly confirmed that his account was compromised. Why shouldn't that gil be restored to him, if not to the FC?