Please help, someone is on my account.

[Maulth]

Earlier this evening, after logging off to go play some DotA 2 with some friends, one of my buddies hops down in our Teamspeak and lets me know that my character - Maulthia Karadoc - is currently in New Gradinia spamming gold selling services for some third-world RMT site. After reading Reddit for the last week, and seeing firsthand how terrible customer service has been thus far into my FFXIV experience, I don't know what to do. I can't login to my account because someone is already logged in (worst feature I've ever seen by the way). They've logged off twice to my knowledge, even after I had changed the password twice and manged to get back on. I changed the password from two separate computers (one of which is a brand new installation of win7) and they're still able to login to my account, so I'm 100% sure it is not on my end. Routine virus scan came up with absolutely nothing from both AVG and Windows Security Essentials.

How do I fix this? IRONICALLY the only way I've read to contact a GM was in-game, which is passing idiotic considering you won't allow people to log back in when the gold spammers on their account.

[bonniebru5]

one time password perhaps?

[Xyphre]

I have a feeling they are getting through without a password. I saw this happen in Rift. Just a guess, but who knows.

[Maulth]

Well, one of my friends let me know as soon as whoever had it logged out, and I've retaken my account. So what do I do, stay logged in permanently to prevent this? I'm sure a lot of people reported my character for spamming so I'll likely get banned. How do I deal with all of this?

[Gonzothegreat198]

If you have a smartphone, get the SE Token App and apply it to your account. Until then, if you don't want to stay logged in permanently you can always deactivate the account after you log off, and then reactivate when you want to log back on. I would also change the password to your email account that you use for FFXIV, and check to make sure that email account is still registered in the mog station as the primary.

[Haystack]

Just for peace of mind I would try scanning your PC with malwarebytes. It's a free download which can find stuff that both AVG and Windows Security Essentials won't show.

[Aureliami]

I I changed the password from two separate computers (one of which is a brand new installation of win7) and they're still able to login

[Maulth]

If you have a smartphone, get the SE Token App and apply it to your account. Until then, if you don't want to stay logged in permanently you can always deactivate the account after you log off, and then reactivate when you want to log back on. I would also change the password to your email account that you use for FFXIV, and check to make sure that email account is still registered in the mog station as the primary.

How does one deactivate their account?

and by mentioning that I was using two seperate computers, I was saying that I know it's not a keylogger. The other computer first connected to the internet to download FFXIV, and antivirus. Meaning I hadn't even downloaded anything else. After I changed the password on that computer, they were still able to log off and then back onto my account.

[Maulth]

Actually, I just downloaded an Anroid emu for PC. Since I haven't had a smartphone for a bout a year now (relatives are annoying, who wants to talk to them anyway?) I'll have to see if I can get it working this way with the authenticator.

[ZohnoReecho]

It's possible they kept the session open so they didn't need to relog.
Change also your email account password from a safe PC and attach a token.