- Received an email which threatened to close my account if I didn't respond
- Received an email with details about a character transfer that was not requested
- Received an email saying that I won a Spectral Tiger
- Received an email saying I tried to sale my account
- Got an email saying Blizzard attached a temporary authenticator that would expire in ten minutes
Follow the steps on our Account and Computer Security page to make sure your account is secure. You should also consider attaching a Blizzard Authenticator and signing up for SMS Protect for added layers of security.
Phishing emails may appear as promotions that give you something for free (when you log in and "claim" the item) or threaten account suspension (which you prevent by logging in and "confirming" some account information). These emails may have simple mistakes that someone writing professionally wouldn't make, so check for bad grammar and spelling.
Do not reply to emails that ask for your account information. We only need to confirm account details through email if you're talking to a Game Master about a ticket.
Official Blizzard Entertainment emails come from one of four domains: @blizzard.com, @email.blizzard.com, @overwatchleague.com, or @battle.net. If you get an email from a different domain, you should be cautious. Even if an email appears to come from an official domain it still might be fake. You can check the email's headers to see where it actually came from.
If you receive a phishing email, please forward it to firstname.lastname@example.org. Copy and paste the entire email header into the message body so we can identify its source.
Don't trust a site based on how it looks—scammers make fake websites that look official. Our websites are hosted on two major domains: blizzard.com and battle.net. If you're asked to log in to a site that isn't on either of these domains, do not continue. Logging in to a fake website with your Blizzard account information will jeopardize your account's security.
If you're not sure if a site is legit, check PhishTank to see if it's been reported as a scam