The not-so-great sparkle pony scam of 2010
With more people using authenticators to protect their accounts, scammers, hackers, phishers and thieves are getting increasingly aggressive in their tactics to snare new victims. The latest attempt making the rounds is the following authentic-looking email:
Hello, thank you for shopping at the Blizzard Store!
World of Warcraft® Mount: Celestial Steed : 314159265358979323846
To use this key to activate the pet, simply follow these instructions:
* Create a Battle.net account (or if you already have one, log in) at http://www.worldofwarcraft.com
* Verify your e-mail address. (If you have previously verified your address, skip this step.) From the main Account Management page, click the 'verify this e-mail address' link. Then, check your e-mail account for a verification e-mail. Click the link in this e-mail to verify your e-mail address.
* Return to the Battle.net account management page, then click on 'Code Redemption'.
* Enter the above Pet Key in the code field.
* Once you have successfully redeemed this code, you will be able use the pet in World of Warcraft.
NOTE: If you have previously chosen to gift your digital purchase, attaching this key to their Battle.net account will prevent the gift recipient from being able to redeem this key with your Battle.net account.
Customer Account: firstname.lastname@example.org
Order Date: 2010-7-11
Order #: 3778397
(1) World of Warcraft® Mount: Celestial Steed - $25.00
Credit Card Number : ****-****-****-2663
Credit Card Type : Visa
Item Subtotal: $25.00
Shipping & Handling: $0.00
Shipping Tax: $0.00
Grand Total: $25.00
If you have any questions or concerns about your order, please contact us at:
Phone: Toll-free at (1-800-592-5499)
Live phone support is available seven days a week, 8:00AM - 8:00PM Pacific Time.
Thanks for shopping with us!
Blizzard Customer Service
Instead of helping you redeem your free sparkle pony (or, alternatively, file a request to have this faulty transaction taken off your credit card), the links included in the email will whisk you away to a sketchy land of horror, where honest and kind World of Warcraft
players have their gaming experience exploited and destroyed for the profit of gold sellers.What to do if you are a victim
If all the items, gold and equipment you own are missing -- or worse yet, if you can't log into your account at all because it's asking for an authenticator you didn't request -- you're probably a victim of a hacking attempt. You can recover your account (and sometimes the items that are missing), but it will take some time. Here's what you should do:
Tips on protecting yourself
- Contact Blizzard Customer Service. You can get a lot more information about the appropriate people to contact by visiting the World of Warcraft compromised account page. From there, you can learn how to contact Blizzard by phone, email or web to start the account recovery process.
- Contact your guild, if you have one. Most hackers go after guild banks if they can. Taking the extra step of contacting your guild can save everyone a lot of headaches.
- Consider buying an authenticator. Well over 99% of hacking and phishing attempts could have been prevented if the victims had purchased and installed an authenticator on their accounts. Better yet, some mobile phones like the iPhone and Android are capable of downloading a free authenticator app.
[A special hat tip to all of you who sent us emails about the scam. Thanks!]
- Never give out your password to anyone other than your parent or guardian. Blizzard employees and GMs will never ask for your password in game.
- Don't follow web links from strangers in game.
- If you receive an email from Blizzard about your account, do not follow any of the links present in the email itself. If you believe the message may be legitimate, type the worldofwarcraft.com or battle.net address directly in your browser's address bar.
- Blizzard does not run in-game prize drawings. If someone is offering anything to you for free, chances are it's a scam. Don't follow links given to you in game via tells, trade chat or dead gnome corpses strangely floating in mid-air outside the Stormwind auction house.
- Blizzard GMs do not contact people using level 1 characters and tells/whispers.
- Even the most cautious of people can still get hacked by accidentally downloading a keylogger by visiting the wrong site or clicking the wrong link. Make sure your computer is protected with trusted anti-virus software.