PSA: Don't click/follow links in chat

[Dzian]

Like I said. They're growing up in an age where the internet is largely safe for them. Or, at least, not as "dangerous" as it once was. When you don't grow up with that danger, you can't really learn to spot it. Preying on their trusting nature as they take everything at face value. Scams may seem obvious to most, but there's always someone willing to give the benefit of the doubt.

it's mostly common sense though.. a fake website address is pretty easy to spot. www.ffxiv-forum.com-sqare.biz/whatever DO NOT CLICK (cant remember how to plain text urls)

Most young people should easily recognise as fake because they're tought about domains and things at school so they should instantly recognise that address as pointing to a ffxiv-forum sub domain on a com-square.biz domain which should immediately throw out alarm bells as any official page would be on the square-enix domain...

if people are unsure then they should make use of 2FA on there accounts. either via the security token or the otp app. then even if they do fall for such a scam they should be safe. as typically an otp will only work for ~10 minutes.

There's a 3 step rule to whether something is genuine or not. which many companies are now conforming to.

1: does it come from a recognisable source..
2: does it refer to you specifically by name
3: does it contain any specifically identifiable information.

using these fakes are easy to spot.. if you get an email from megabank for example the 3 steps above will always tell you if its genuine..

1: do yourecognie the company?
do you even have an account with megabank? if yes go to 2. if no delete email.

2: does it mention you specifically by name.?
Dear James Smith... for example? if yes go to 3. if no (i.e dear customer) delete email.

3: Does it conatian any specificly identifiable and verifiable information?
suspicious activity detected on your megabank gold account XXXX4321? if yes and that information is accurate (i.e your account ends in 4321) you can treat it as genuine email. if no then delete the email.

it's basic common sense.

most companies these days make sure to conform to these 3 rules in any correspondance they send.

[Raiya]

It STILL kills me how so many people seem to fall for this crap. Clearly enough do or they wouldn't keep running these scams.

I'd say only younger players might be duped by this kinda carryon, it hasn't a hope on working on Experienced Veteran's who's been dealing with their BS since the early days of FFXI.

[Ravenblade1979]

I made a thread last year about giving warnings to players. I was quickly told there is a link buried in the info about scams on twitch on lodestone.

You would think all the vast array of reports that's been given about this phishing scam would warrant that link renamed so people actually go into it and not avoid it.

[MilkieTea]

Some are, sure. But, there's a funny thing going on, I think, and it has to do with the new young generation(s) that have basically grown up on the internet. Just a couple generations back, we all grew up knowing the stories of sketchy sites and viruses lurking in every suspicious link or email and never give away personal info, etc. But, kids got it easy these days. Makes 'em easy prey for the old tricks when they think they can trust their safety to the internet.

Unfortunately, statistically, it's not the younger generation that falls for this.

[Jojoya]

it's basic common sense.

As the saying goes, common sense isn't common.

What really protects us is experience, not some innate instinctive ability to know what is a scam and what isn't.

When many parents don't understand how to be safe on the internet, it shouldn't be surprising that children fall victim. There are no internet safety classes incorporated into our education system to help them learn.

I made a thread last year about giving warnings to players. I was quickly told there is a link buried in the info about scams on twitch on lodestone.

You would think all the vast array of reports that's been given about this phishing scam would warrant that link renamed so people actually go into it and not avoid it.

When I start up my launcher, third item under the news feed in bolded text is "Be wary of suspicious links on Twitch" so it's very visible in a spot everyone can see any time they decide to play the game. No need to make a conscious effort to visit the Lodestone.

But it should be updated to "Be wary of suspicious links in-game and on Twitch".

[Ravenblade1979]

But it should be updated to "Be wary of suspicious links in-game and on Twitch".

Exactly. A simple change then it's on the player to be smart

[Awha]

Exactly. A simple change then it's on the player to be smart

It is still on the player to be smart, even without warnings.

[Ravenblade1979]

It is still on the player to be smart, even without warnings.

Hate to tell you this but the message the phisher sends is worded in a way that tantalizes the person. Latest is entering some 300mil giveaway but gotta go post a number on some obvious fake forum site.

Why do you think scams worldwide are lucrative. Not everyone thinks on the same level and lots are susceptible to them. Since you can't outright click they just copy and paste or put in their mobile device for some hopes to win that 300mil. In reality they just gave away credentials. My roommate has a friend like this and the stuff she falls for would make you shake your head.

I agree with changing the link name. I mean want me to Amp it up. Make one time password mandatory. Have the launcher have a unique identifier when downloaded on the players pc or laptop. Then have it so you gotta do one extra click then login.

I mean this is the last ditch effort and would ensure but I'm honestly not that mean. A simple change in that link name would probably help alot more then hiding the link concerning these phishing scam in a topic labeled to beware of scams on twitch.

[Vahlnir]

Hate to tell you this but the message the phisher sends is worded in a way that tantalizes the person. Latest is entering some 300mil giveaway but gotta go post a number on some obvious fake forum site.

Why do you think scams worldwide are lucrative. Not everyone thinks on the same level and lots are susceptible to them. Since you can't outright click they just copy and paste or put in their mobile device for some hopes to win that 300mil. In reality they just gave away credentials. My roommate has a friend like this and the stuff she falls for would make you shake your head.

I agree with changing the link name. I mean want me to Amp it up. Make one time password mandatory. Have the launcher have a unique identifier when downloaded on the players pc or laptop. Then have it so you gotta do one extra click then login.

I mean this is the last ditch effort and would ensure but I'm honestly not that mean. A simple change in that link name would probably help alot more then hiding the link concerning these phishing scam in a topic labeled to beware of scams on twitch.

If something sounds too good to be true, it usually is. That's a lesson for life that people should be taught very, very early on in their lives. Common sense is not common as someone else has said.

[Ravenblade1979]

If something sounds too good to be true, it usually is. That's a lesson for life that people should be taught very, very early on in their lives. Common sense is not common as someone else has said.

I love how in one paragraph you ended up insulting your elders. People of all ages fall for this stuff. Even those who were taught that lesson.

I mean do you or that other person know what scams look like these days? If not might wanna watch kitboga vids on YouTube and learn just how they can get to people.

Face it. People want that type of gil. I mean to someone that could be what they need to buy a fc with gil leftover. Some probably think that people are being nice. I run into people commenting about this now in game when I sell levekits because I don't screw people. I'm honest and give as much info as I can. They always say there needs to be more helpful and nice people.

So blame the person all you want. Don't see you trying to help the problem but be cold and herp derp their fault. Let's hope one day it's not your account stolen because you couldn't tell the difference and fell for it