|
Yesterday I was asked to be part of a cross-realm RBG group by someone off-server. Since I am x3 glad x2 hero, at first I thought this was a legitimate offer.
Upon adding this person to realID, I was later asked to add someone else who was 'handling invites'. This person quickly began to ask me what my secret answer is, and somehow already had access to what the question was. He claimed it was needed to send calendar invites but I am positive this is someone trying to steal my account (naturally I didn't give it to him). Presumably he found out the question by trying to log under my email and trying to change the password, at least that is my first guess. So basically my question is this: This person now knows my email address, and my real name. Is there any way he can use this information to assume control of my account, and what should I change in my account information after removing this person so that he cannot do this again? I am extremely worried. Although I have a physical authenticator, this does not sit right with me. |
|
changing your name on your account is a pain to do. and upon changing any passwords he will need more information than your name and email. Dont give any more information out about what it could be. if he were to call blizzard they will ask for much more information than that to authorize a password recovery.
|
|
Change the e-mail associated with WoW and distance yourself from these people. No one should ever ask for your secret question answer. NEVER give that out to them.
|
|
This ^. Easiest way is to create a free email account...I use gmail for my game accounts there are other options. Or possibly your ISP allows you to have multiple email accounts and you can create a new one there. One other thing I do is to ONLY use an email account with 1 game account and never use that email for registering with forums, websites, etc. Tends to give an added layer of security and that email isn't plastered all over the INET ;p. |
|
I have two email accounts that I use with B-Net and RealID. There is my normal B-Net email, that I only use for B-Net. Then there is my throwaway RealID email. If there is someone I want to send a RealID invite to, I change my B-Net email to the throwaway account. Then after they accept the invite, I change it back yo my normal B-Net email.
|
This is the reason the Real ID system was designed for people you actually know. Furthermore, just change the email address if you are worried, unless you tell them your password you really don't have anything to fear. This person is simply playing the odds you will be foolish and give him information he asks for. Wait until the Battle.net Tag system is released, that system will be designed for "internet" friends and will work exactly like the Real ID system except they won't know your "real" name, There is NO WAY they can access your account unless you give them the information they seek. |
Support Forum Agent
|
I heartily second this. NO ONE should ever ask you for that or your password. |
#8
2/22/2012
|
|
1000 times this. Please open a GM ticket and report it if you haven't already. Besides that, I recommend changing the email address associated with your account. Remove anyone associated with this scam from your RealID list. You may also consider getting an authenticator if you don't already have one. In the future, when the Battle Tag system goes live with WoW, you'll be able to use that to have preform cross-realm groups with people you meet in-game. Until then, keep in mind that the RealID system is intended to be used only with people you know and trust in real life. |
I changed everything, went so far as to terminate the old email so that it could not be compromised as well. I have an authenticator, and removed the persons in question immediately after they asked me for my info. However, their knowledge of my name has me terrified that they can acquire additional information to contact blizzard and pretend to be me. I do not know what else I should do, any help is appreciated... |
|
Knowing your real name is not enough to compromise your account directly with Blizzard. However, if they really wanted to, they could search the net for relevant info for you to try and learn what your SQ/A is. For example, if your secret question is "What is the name of your high school?" or "What is the city you were born in?" and you mention it on facebook, that can lead to a possible compromise.
Your authenticator should protect your account quite well, though. Just do not hand out the serial number to anyone and unless you publish your new email anywhere (like using it on a wow related site or giving it to friends to put in their address book, you cannot trust their security) knowing the SQ/A is fairly useless. |
Knowing your real name is not enough to compromise your account directly with Blizzard. However, if they really wanted to, they could search the net for relevant info for you to try and learn what your SQ/A is. For example, if your secret question is "What is the name of your high school?" or "What is the city you were born in?" and you mention it on facebook, that can lead to a possible compromise. I will never type my new email anywhere but the login text box. I am henceforth swearing off RealID, and now think of people less than I did initially. Thanks very much for helping ease my mind on this, its much appreciated. |
Too bad it is the only medium through which to organize cross realm RBG's though... Which makes it perfect for scammers like this. |
|
Things like this are why I refuse to enable RealID on my account. Do NOT give it to people you don't know. I wouldn't give it to anyone at all, personally. It's understandable why it happens, with all these new features being linked to it. Just not worth the risk in my eyes. When the BattleID system comes out, hopefully things like cross-realm RBGs will be doable without requiring half of someone's login information to accomplish.
|
Theoretically though Soon (tm) you'll have battletags no Account info required :D |
|
Okay, I get it, I gave my realID because its the only way to do cross-realm RBG's right now and I wanted to have a decent group to do this content with again. I'm an idiot, please stop making it worse. I just want to have blue confirmation their possession of my real name alone is not enough for them to claim to be me to blizzard, and that these people will be dealt with. This whole scenario has me very upset and worried.
|
|
Virral, you're not stupid. You didn't know that this was going to happen and from what I've read, you've given them nothing except your e-mail address and perhaps your name. I have no doubt that this has been a learning experience for you.
That is definitely not enough to steal your account. Just imagine how many friends play this game. If it was that easy, people would just call up Blizzard, give their friends name and make erroneous claims. Blizzard is much much smarter than that. Best thing for you to do is remove them from your Real id (if not already done) and then change your e-mail address associated with your account. Then all they have is your name. I can call Blizzard right now and claim to be the John Smith who owns Perl's account and it will not get me far....not my real my btw ;) Blizzard unfortunately cannot confirm that these people will be dealt with as they have a privacy policy preventing them from doing so. Rest assured, if they are caught trying to steal peoples' accounts, those accounts involved will be locked up pretty quickly once reported. |
You're not stupid! We've all made mistakes please don't feel like we're saying that. I apologize if that's the way I came off :( |
|
Edited by Virral on 2/22/12 6:39 PM (PST)
I know that there are sites that can you the address, birth date, zip code, etc. of people if you want it. How much information would someone need to successfully fool blizzard into thinking that a hacker is me? A friend of mine had someone do this to them in wotlk and it took over a week to get his account back after having to make multiple phone calls and faxing legal documents... Is this going to happen to me now? Will get hacked and lose my 30/60 gems for the last part of the legendary chain, my top 10 on battlegroup arena team, and my warglaives and be unable to have any of it recovered? FML...FML so much. =*( All I wanted was to do rated bgs again...
|
