# WoW password Phish or real? **URL:** \ **Category:** The Game Room\ **Created:** [August 1, 2010, 1:09am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754 "2010-08-01T01:09:15Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![BunnyTVS](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@BunnyTVS](https://boards.straightdope.com/u/BunnyTVS)\ **Post date:** [August 1, 2010, 1:09am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/1 "2010-08-01T01:09:15Z")
Several years ago I played World of Warcraft for a few months, then kicked it into touch. Today I received the following email: "Hello, Blizzard Entertainment recently received a request to change the e-mail address used to log in to the [Battle.net](http://Battle.net) account with the username [my email address]. The e-mail address k\*\*\*@hotmail.com has been specified as the new username for this [Battle.net](http://Battle.net) account. An email has been sent to this new address containing a verification link to complete the change. Once the new address has been verified, the e-mail address [my email address again] can no longer be used to log in to this [Battle.net](http://Battle.net) account or any World of Warcraft accounts merged with this [Battle.net](http://Battle.net) account. If you did not initiate this request, please click (http:// us.blizzard. [webmailsupport.us](http://webmailsupport.us) /battlelogin.html) to contact the Blizzard Billing & Account Services team immediately. Sincerely, The [Battle.net](http://Battle.net) Account Team" When I click on the link I get taken to a login screen. Here’s my two problems: 1. It’s so long ago I played a Blizzard game I’m not sure what my login password is. I could use the ‘forgotten password’ link, but I’m worried it might send an email to the new email mentioned in the link. 2. I could possibly work out what password I originally used, but is this site the real deal? Could any of you guys help me? I don’t use this account at present, but I would like to keep it _mine_, in case I want to take advantage later. **Moderation:** Link broken to avoid people from following it accidentally. This has been confirmed by consensus to be a phishing attempt. For more, follow the discussion below. - Gukumatz Game Room Moderator ---
**Author:** ![Max\_the\_Immortal](https://avatars.discourse-cdn.com/v4/letter/m/6de8d8/32.png) [@Max\_the\_Immortal](https://boards.straightdope.com/u/Max_the_Immortal)\ **Post date:** [August 1, 2010, 1:25am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/2 "2010-08-01T01:25:04Z")
That is the email you get when you change your [battle.net](http://battle.net) email address. If you didn’t initiate it, it’s probably a hacker at work. If you try to contact Blizzard customer service, they won’t ask for your password, just your “secret question” answer. They seem to be short-staffed at customer support; be prepared to be on hold for a while. When you do get through, though, they’re very helpful. P.S. When in doubt about link authenticity, go to [www.worldofwarcraft.com](http://www.worldofwarcraft.com) and follow the links from there. ---
**Author:** ![E-Sabbath](https://avatars.discourse-cdn.com/v4/letter/e/e19adc/32.png) [@E-Sabbath](https://boards.straightdope.com/u/E-Sabbath)\ **Post date:** [August 1, 2010, 1:36am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/3 "2010-08-01T01:36:20Z")
http:// [us.blizzard.webmailsupport.us](http://us.blizzard.webmailsupport.us) /battlelogin.html … phiiiish. Note that it is the _last two_ entries that define the address. [webmailsupport.us](http://webmailsupport.us) is _not_ [blizzard.com](http://blizzard.com) at all. At least, I don’t think it is, and I would be horribly suspicious of it. **Mod’s note:** Broke link to avoid people following it accidentally. - Gukumatz, Game Room Moderator ---
**Author:** ![Max\_the\_Immortal](https://avatars.discourse-cdn.com/v4/letter/m/6de8d8/32.png) [@Max\_the\_Immortal](https://boards.straightdope.com/u/Max_the_Immortal)\ **Post date:** [August 1, 2010, 2:04am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/4 "2010-08-01T02:04:14Z")
Oh, I didn’t even mouse over the link. I’m pretty sure that all legit customer support from blizzard is either [blizzard.com](http://blizzard.com) or [battle.net](http://battle.net). I just checked the email I got from when I changed my [battle.net](http://battle.net) email address a few weeks ago. The legit “click here” link is [Can’t log in?](http://www.battle.net/account/support) . ---
**Author:** ![Jaico](https://avatars.discourse-cdn.com/v4/letter/j/cab0a1/32.png) [@Jaico](https://boards.straightdope.com/u/Jaico)\ **Post date:** [August 1, 2010, 2:17am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/5 "2010-08-01T02:17:47Z")
Its not real. I got that email today and I don’t even have an account there 😉 ---
**Author:** ![enigmatic](https://avatars.discourse-cdn.com/v4/letter/e/898d66/32.png) [@enigmatic](https://boards.straightdope.com/u/enigmatic)\ **Post date:** [August 2, 2010, 8:33am UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/6 "2010-08-02T08:33:50Z")
I’d strongly suggest that someone break the link in that OP ---
**Author:** ![Raza](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/raza/32/213_2.png) [@Raza](https://boards.straightdope.com/u/Raza)\ **Post date:** [August 2, 2010, 1:30pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/7 "2010-08-02T13:30:16Z")
Not exactly the same, but related, and since we’re discussing WoW hacking: a friend/guildmate got hacked yesterday. After some interrogation, I found the technique: they sent her an in-game mail inviting her to participate in the Cataclysm (upcoming expansion) beta test, and included a link in that message. She went to the link, “signed in”, and you can guess the rest. She too got an email like the one in the OP. This time, though, it really WAS from Blizzard because the hackers had changed her account email. ---
**Author:** ![Gukumatz](https://avatars.discourse-cdn.com/v4/letter/g/74df32/32.png) [@Gukumatz](https://boards.straightdope.com/u/Gukumatz)\ **Post date:** [August 2, 2010, 2:23pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/8 "2010-08-02T14:23:20Z")
Broke link in OP and added last sentence to post. Gukumatz, Game Room Moderator ---
**Author:** ![Amblydoper](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@Amblydoper](https://boards.straightdope.com/u/Amblydoper)\ **Post date:** [August 2, 2010, 8:31pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/9 "2010-08-02T20:31:10Z")
Its a good idea to NEVER supply log in details for any site that you visit from an email link, unless you know for certain that it is legit. This goes for games, shopping, banking, etc. ---
**Author:** ![BunnyTVS](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@BunnyTVS](https://boards.straightdope.com/u/BunnyTVS)\ **Post date:** [August 3, 2010, 12:08pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/10 "2010-08-03T12:08:32Z")
Sorry for not breaking the link. It honestly never occured to me. I’ve been out fishing something near 100 times. Never caught a thing. I think I’ll let them buggers do the same. Thanks for the advice folks. ---
**Author:** ![Max\_the\_Immortal](https://avatars.discourse-cdn.com/v4/letter/m/6de8d8/32.png) [@Max\_the\_Immortal](https://boards.straightdope.com/u/Max_the_Immortal)\ **Post date:** [August 3, 2010, 5:29pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/11 "2010-08-03T17:29:20Z")
> [@Raza](#): > > Not exactly the same, but related, and since we’re discussing WoW hacking: > a friend/guildmate got hacked yesterday. After some interrogation, I found the technique: they sent her an in-game mail inviting her to participate in the Cataclysm (upcoming expansion) beta test, and included a link in that message. She went to the link, “signed in”, and you can guess the rest. > > She too got an email like the one in the OP. This time, though, it really WAS from Blizzard because the hackers had changed her account email. My understanding is that if you get into the beta, you log into your [battle.net](http://battle.net) account without clicking any links in the message they send you. In fact, a good rule of thumb is to never click on any unfamiliar links when it comes to WoW. They’ve even disabled links on Blizzard’s forums; you have to copy/paste urls so you have an extra second and a half to think about whether it’s legit. ---
**Author:** ![Zeriel](https://avatars.discourse-cdn.com/v4/letter/z/58956e/32.png) [@Zeriel](https://boards.straightdope.com/u/Zeriel)\ **Post date:** [August 3, 2010, 5:39pm UTC](https://boards.straightdope.com/t/wow-password-phish-or-real/548754/12 "2010-08-03T17:39:16Z")
I get these all the time–and usually, the “changed from” e-mail address cited isn’t even mine.