Account Compromise

[AyameAndo]

I fell for it but changed my password the moment I noticed the discrepancies in the link. Account hasn't been compromised so here's hoping I made it out of that safe. I really should have known better than to follow a link from a random tell. I also added 2FA to my account when I changed my password.

[Mirhd]

You can't even "click" the link, as that is impossible to do. You have to physically copy + paste into a web browser, which... yeah. People still do this even though SE keeps warning people not to...

All I can say is "lesson learned" and to please be more careful going forward OP. If you know anyone else who plays, remind them as well not to copy+paste websites that people link to in game, regardless of whatever claims are made. If it sounds too good to be true... it generally is.

[Greyhawk]

It's 2022 - you really do need 2FA on your online accounts - any of them, not just FFXIV. It's just too easy anymore to 'snag a sucker'. Be vigilant in your examinations of links, and if it's too good to be true, it most likely is...

[Avatre]

It's 2022 - you really do need 2FA on your online accounts - any of them, not just FFXIV. It's just too easy anymore to 'snag a sucker'. Be vigilant in your examinations of links, and if it's too good to be true, it most likely is...

The problem is, that even with 2FA they can still get your account if you don't pay attention to how SE actually has these things set up(if you even went to the completely obvious fake web address).

Fake site - asks for username, password and 2FA code on same page(found out because I was bored one day and checked it on my old laptop that had recently been wiped to get rid of it)
Real site - asks for username and password, if those are valid and you have 2FA enabled it takes you to the second page to input said code

Also, if you are already logged into the forums and need to login to the "forums", that is a major indicator that you are on a scam site

[PharisHanasaki]

Found where the gil went on Jenova.

I hope they step on a lego.

And hope you get your money back

[Imora]

Just a heads up, rollback can take weeks to months.

[KayRadley]

Yes they use stolen characters to send out tells about the raffle, as it looks more legit coming from a "real" player rather than an obvious bot at level 1 fresh off the opening cutscene.
I hope you get your gil back and I hope they can ban the scammers.

Fresh off the opening cutscene with a name that's twelve characters long but only has one vowel.

[NanaWiloh]

I would recommend now that you have your account back adding the additional security yourself. Also some advice to lessen the chance of this happening again

1. Never click or follow in game links that are not part of the server message or in game menu's

2. If you watch twitch do not click links posted in chat unless the streamer or one of their moderators is the one positing.

3. Always search for the official FF14 site yourself never follow a someone linking it for you.

4. When watching a FF14 streamer make sure you are watching their actual channel and not someone pretending to be them.

5. GM's will never randomly message you in game links!!

[Faafetai]

Thank gods I never clicked on those links. I felt sleezy just looking up to see if paying for clears was actually a thing. Of course it is, and I still have my account. There are also shady looking websites with advertisements for buying gil that have crafting macros, but those also seem to be safe so far at least. I do not recommend going there, but understand the curiosity when bored sometimes and just to see if the link send you to an actual website. I wish you luck and hope you get your gil back, that is just not cool.

[Greyhawk]

The problem is, that even with 2FA they can still get your account if you don't pay attention to how SE actually has these things set up(if you even went to the completely obvious fake web address).

Fake site - asks for username, password and 2FA code on same page(found out because I was bored one day and checked it on my old laptop that had recently been wiped to get rid of it)
Real site - asks for username and password, if those are valid and you have 2FA enabled it takes you to the second page to input said code

Also, if you are already logged into the forums and need to login to the "forums", that is a major indicator that you are on a scam site

Hence, the second part of that same post.