AionSource.com - Powered by the Tower of Eternity: List of Fake NCsoft Emails - AionSource.com - Powered by the Tower of Eternity

Jump to content

  • 5 Pages +
  • 1
  • 2
  • 3
  • Last »
  • You cannot start a new topic
  • You cannot reply to this topic

List of Fake NCsoft Emails Don't fall for these! Rate Topic: -----

#1 User is offline   Aion Bunny 

  • Supreme Commander
  • PipPipPipPipPipPipPipPip
  • View blog
  • Group: Nyerk Resolution Experts
  • Posts: 2522
  • Joined: 24-June 09
  • Race :Undecided
  • Server:Telemachus

Posted 28 January 2010 - 10:38 AM

List of Fake NCsoft Emails
Written for Aion NA/EU

Written by: Bunny



Greetings all~

Over recent months we've all seen a noticable increase in the amount of "fake" NCsoft emails being received by people in the community, some of which has increased dramatically since the recent wave of Aion website attacks (read more here).

As many of you know, these "fake" NCsoft emails are part of a wider issue called "Phishing" where companies are working hard to trick players into giving up their account details accidentally. You can read more about phishing and how to protect your account in the post created by our Knite, as well as the NCsoft Play Smart page and the recent posting by the Game Surveillance Unit.

The purpose of this thread is to consolidate and document all the known phishing emails that we have seen or heard about on this forum. Each of the emails have been proven to be fake for one reason or another, most of which are obvious but some of which are not. With some luck, this post will help to spread awareness even further.

Remember, it is up to you to educate yourself about phishing emails. To get you started with the basics, here are some tips about the things phishing companies often do:

  • Yes, they can spoof an email address to make it look like it has come from NCsoft's official email address. Never assume an email is legitimate just because it says it is from support@ncsoft.com! (thanks to Broom, aka Linna, for the link!)
  • Yes, they can disguise a link in an email so that it appears to be legitimate. Just because a link says it is https://secure.ncsoft.com in the email doesn't mean that is where you will end up when you click it!
  • Yes, they appear to declare war on the english language in every email they send. Anyone involved in phishing doesn't appear to be able to write grammatical english to save their lives, so if you notice the odd word or punctuation missing then you should immediately be suspicious!


Posted Image


List of Fake NCsoft Emails:


Below is a full list of all the fake, phishing related emails we have heard about from the Aion Source community over the past month. We have tried to make the list as complete as possible, however if you have seen something different in your inbox lately then please drop me, or one of the other mods, a PM to let us know about it.

Remember: These emails are ALL FAKE. None of them are genuine. None of them came from NCsoft.

Safety: As a precaution, we have removed all the unsafe material (phishing website links) from these emails.

1. Fake Account Identification Notice *MOST RECENT*

Quote

Subject: Aion Account Identification-NO.57507
From: NCsoft Support <support@ncsoft.com>
Date: Wed, June 16, 2010 4:52:30 AM

When you receive this message at the same time means that you have a routine account of our recent examination, we found a security risk to your account may have been compromised.In order to guarantee the legitimacy of your account, we need you verify your account information at [insert bad link here] as soon as possible or we will suspend your account.We hope to see you!

The NCsoft Team


2. Fake Account Reset Token
*MOST RECENT*

Quote

Subject: NCsoft Address Verification
From: NCsoft Support <support@ncsoft.com>
Date: Thu, June 10, 2010 5:38:25 PM

Your NCsoft email verification code is: udpdt9yx

If you have already completed registration, please log in to "NCsoft Account Management" at https://secure.ncsof...plaync_login.pl and visit the "Account Profile" section where you can verify your e-mail address.

If you have any questions about the registration process, you can visit the Support Center at http://help.ncsoft.c...ser/std_alp.php.


3. Fake Account Reset Notice

Quote

Subject: Aion Account Change Notification
From: noreply@ncsoft.com <noreply@ncsoft.com>
Date: 7 April 2010

This is an automated notification regarding your Aion Game Account. Someone at 220.21.232.44 has reset your account options.

If you made this change to your subscription type, please disregard this automatic notification.

***If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
http://help.ncsoft.com/aion

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact NCsoft Support Services for advanced assistance.
Regards,
The NCsoft Team


4. Fake Account Change Notice

Quote

Subject: Account Change Notification
From: NCsoft Support <support@ncsoft.com>
Date: 4 April 2010

Greetings!

This is an automated notification regarding your Aion account. Some or all of your contact information was recently modified through the Account Management website.

*** If you made recent account changes, please disregard this automatic notification.

You can login to Account Management at the following link to review your account settings:
https://secure.ncsof...plaync_login.pl

*** If you did NOT make any changes to your account, please contact support immediately at support@ncsoft.com.

5. Fake 72 hour ban

Quote

Subject: NCsoft Account Fraud Notice Of Termination
From: NCsoft Support <support@ncsoft.com>
Date: 29 March 2010

Dear aion player, your account due to suspected fraud. Will be banned within 72 hours.
Fraud Evidence: many times in the game using the game chat function induced to provide the game to deceive the other players offer accounts and passwords.
If you do not fraud, as soon as possible to verify your account login https://secure.ncsof...plaync_login.pl.

Aion Services Department

6. Fake account locking threat

Quote

Subject: NCsoft Support
From: support (support@ncsoft.com)
Date: 25 March 2010

When you receive this message at the same time means that you have a routine account of our recent examination,was cecking your account we have the evidence to prove that involved in the controversial game currency transaction so we had to take the necessary measures Please visit our web site as soon as possible to activate your account or we will suspend your account
Please visit http://secure.ncsoft.com/ verify your account, or we will lock your account.

The NCsoft Team.


7. Fake Game Account Payment Failure

Quote

Subject: Game Account Payment Failure
From: NCsoft Support (support@ncsoft.com)
Date: 21 March 2010

Your game account for Aion has payment failure.


If you would like to continue playing, you may reactivate using Account Management at
http://secure.ncsoft...laync_login.pl.

We hope to see you again soon!


- NCsoft Team


8. Fake account reset notification

Spoiler

9. Fake account change notification
Spoiler

10. Fake password recovery reset email

Spoiler


11. Fake account check offering prizes
Spoiler

12. Fake user warning

Spoiler

13. Fake support response
Spoiler

14. Fake bug report

Spoiler

15. Fake password reset 1
Spoiler

16. Fake account activation
Spoiler

17. Fake password reset 2
Spoiler

18. Fake account investigation

Spoiler

19. Fake account suspension
Spoiler

20. Fake account suspension 2
Spoiler

21. Fake hacker warning
Spoiler

22. Fake account check
Spoiler

23. Fake security warning
Spoiler

24. WoW account inspection from NCsoft...lol?
Spoiler

I think we all had a good laugh when we saw this last one lol.

A genuine NCsoft email:

Now, I thought about whether I should post a copy of a real email from NCsoft and I decided not to. Why? Well, I suppose I don't want to go ahead and make it easy for the phishing companies to start getting their emails correct. Sure, phishing folks will figure out the exact wording for themselves if they really want to, but I'll be damned if I'm going to make it simple for them!

When it comes to real emails from NCsoft support, here are some tips:

  • NCsoft will NEVER ask you to follow a website link to login and verify your account details!
  • When you reset your game account passwords via your NCsoft Master Account, you will receive an email that ONLY recommends to contact support@ncsoft.com via email if you didn't make the change (i.e. no web link will be given, they will only ask you to contact them via this email address).
  • NCsoft may have a few flaws but, as a company, their support staff DO tend to be very literate so you won't see genuine emails from NCsoft riddled with ridiculous spelling and grammar errors.



The End~
:kiss:
Posted Image
We are each of us angels with only one wing, and we can only fly by embracing one another.

Have You Been Hacked? | Automatic Support Tickets | Aion Installation FAQ | AionSource Rules
0

#2 User is offline   Dasiel 

  • Soldier
  • PipPip
  • Group: Members
  • Posts: 79
  • Joined: 04-December 09
  • LocationNot Spain or Portugal
  • Character:Dasiel
  • Legion:Onslaught
  • Race :Asmodians
  • Server:Perento

Posted 11 March 2010 - 04:13 PM

Check out this fail fake email :P Why the f they sent me WoW version too? I never played WoW.

Quote

This is an automated notification regarding your Aion Game Account. Someone at 220.78.232.57 has reset your account options.

If you made this change to your subscription type, please disregard this automatic notification.

*** If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
Support | NCsoft

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact NCsoft Support Services for advanced assistance.

Regards,

The NCsoft Team
Aion | NCsoft
Hello,

This is an automated notification regarding your World of Warcraft account. Your account options was recently modified through the Account Management website.

If you made this change to your subscription type, please disregard this automatic notification.

*** If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
http://www.worldofwa...ft.com/account/

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for advanced assistance.

Billing & Account Services can be reached at 1-800-59-BLIZZARD (1-800-592-5499 Mon-Fri, 8Am-8PM Pacific Time) or at billing@blizzard.com.
Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account.
In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Regards,

The World of Warcraft Support Team
Blizzard Entertainment
Blizzard Support

0

#3 User is offline   Jerk 

  • Lieutenant
  • PipPipPipPip
  • View blog
  • Group: Curse Premium
  • Posts: 669
  • Joined: 20-July 09
  • Character:Josh
  • Race :Asmodians
  • Server:Siel

Posted 17 March 2010 - 02:49 PM

Posted Image
The new one, they have the wrong region for US servers :/
Join it -> Aion NA Steam Group <- Join it

Siel: Thott 50 SMN (Un-retired), Josh 50 SIN (Retired because of 1.9...)

Bring the Diamond Poop back!
0

#4 User is offline   alenko 

  • Human
  • Pip
  • Group: Needs Introduction
  • Posts: 9
  • Joined: 12-December 09

Posted 18 March 2010 - 05:44 PM

this:
Someone at 211.191.168.49 has reset the password and/or the password hint questions and answers for your NCsoft account *myusername*. If you did not make this change, please contact support immediately at support@ncsoft.com.

just 20 min ago. i am going crazy with this mofo hackers.

wth!

Did not used any programs that can be called like kayloger, got my antivirus and full security ON!

Did not visited any lame websites or register, if i did somewhere i used unique passwords and usernames!

So what is going on. Am i one of 10000 players that got hacked. This ip traced is kinda from korea or something!
0

#5 User is offline   HolyAegis 

  • Commander
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 2308
  • Joined: 19-September 09
  • Character:Aegis
  • Legion:Awakening
  • Server:Undecided

Posted 18 March 2010 - 05:51 PM

That e-mail is froma keylogger. Don't click it or use it at all. Junk it.

Instead check your masteraccount information at the OFFICIAL ncsoft site you normally go to. Don't click anything on that e-mail.

Edit: Or maybe this is from ncsoft since it says to e-mail them asap. Bah, cannot even tell anymore.
Posted Image
0

#6 User is offline   alenko 

  • Human
  • Pip
  • Group: Needs Introduction
  • Posts: 9
  • Joined: 12-December 09

Posted 18 March 2010 - 05:54 PM

View PostHolyAegis, on 18 March 2010 - 05:51 PM, said:

That e-mail is froma keylogger. Don't click it or use it at all. Junk it.

Instead check your masteraccount information at the OFFICIAL ncsoft site you normally go to. Don't click anything on that e-mail.

Edit: Or maybe this is from ncsoft since it says to e-mail them asap. Bah, cannot even tell anymore.


but my informations were changes, cant login.
0

#7 User is offline   Sailormars 

  • Star Officer
  • PipPipPip
  • Group: Members
  • Posts: 330
  • Joined: 01-January 10

Posted 18 March 2010 - 05:57 PM

Are you not able to log in and actually check to see if the account password has been changed? If not, open up your email and send them a message by typing support@ncsoft.com into the To: field yourself, not by following the link in the email.


e: ah so it really was changed. Thought you were not able to do so since you asked if you were hacked. Just email them as soon as possible and ask for them to ban the account since it is not you. Then prepare to not play Aion for a week or two, since it usually takes them that long to fix things.
0

#8 User is offline   alenko 

  • Human
  • Pip
  • Group: Needs Introduction
  • Posts: 9
  • Joined: 12-December 09

Posted 18 March 2010 - 05:59 PM

View PostSailormars, on 18 March 2010 - 05:57 PM, said:

Are you not able to log in and actually check to see if the account password has been changed? If not, open up your email and send them a message by typing support@ncsoft.com into the To: field yourself, not by following the link in the email.


e: ah so it really was changed. Thought you were not able to do so since you asked if you were hacked. Just email them as soon as possible and ask for them to ban the account since it is not you.


i did.
i never use links click.
we i will see. probably tomorow.
0

#9 User is offline   Sailormars 

  • Star Officer
  • PipPipPip
  • Group: Members
  • Posts: 330
  • Joined: 01-January 10

Posted 18 March 2010 - 06:02 PM

http://na.aiononline.com/

Go here and look up your character as well. You can see changes to your gear and stigmas almost immediately. I remember equiping a stigma, going to the page and it was already updated on there. If you were looted or are in the process of being looted, you will know.
0

#10 User is offline   DojoMax 

  • Lieutenant
  • PipPipPipPip
  • Group: Members
  • Posts: 637
  • Joined: 27-September 09
  • LocationLas Vegas, Nevada
  • Character:Hax-n-Strip
  • Legion:Trollz
  • Race :Asmodians
  • Server:Zikel

Posted 18 March 2010 - 06:29 PM

211.191.168.49 is found in Korea, Republic of
"Aw dammit im a grape again."

NCsoft is bad, and Aion sucks, if you don't like my OPINION you can always report me. <3 Dojo.
0

#11 User is offline   tickledpink3 

  • Human
  • Pip
  • Group: Needs Introduction
  • Posts: 1
  • Joined: 19-March 10

Posted 19 March 2010 - 03:49 PM

Just wanted to post that I have never had an account with neither Aion or ncsoft but received this email:

Greetings!
This is an automated notification regarding the recent change(s)

made to your Aion Account. NCSoft system scan to your account insecurity, in order not to affect the normal use of your account, please log NCSoft safety net to verify your account information, or else NCSoft will stop using your account's rights . Certification of Aion Account information site of NCSoft:
https://<removed for security>
NCSoft staff will verify your account information submitted in two days, please do not modify your account information during this time . It will not affect your game uptime.

Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, NCSoft representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Please retain this e-mail for your reference.
If you have any questions about the account information, please contact Support@NCSoft.com.

The Aion Team

If you mouse over the link, it actually states: secure.ncsolt not soft.
0

#12 User is offline   Beldin2 

  • Officer
  • PipPipPip
  • Group: Members
  • Posts: 151
  • Joined: 02-May 09
  • Character:Xelianne

Posted 20 March 2010 - 09:37 AM

The most idotic try i've seen till now, since everyone should really know that Guildwars has no monthly payments Posted Image

Attached File(s)


Posted Image
0

#13 User is offline   Aion Bunny 

  • Supreme Commander
  • PipPipPipPipPipPipPipPip
  • View blog
  • Group: Nyerk Resolution Experts
  • Posts: 2522
  • Joined: 24-June 09
  • Race :Undecided
  • Server:Telemachus

Posted 21 March 2010 - 04:45 AM

Alrighty, I have fixed this thread. It got a bit screwed up after the transfer over to IPB, where my original post with the massive list of fake emails was buried on page 30 or something. Not ideal when you want people to be able to find the list quickly!

Anyhoo, I have split off my post and a few more recent replies and popped them into this new sticky. As always, keep PM'ing me privately to tell me the "real" fake website that the links point to, as well as posting a "safe" copy (naughty links removed) of the email you recieve.

Thanks in advance :)
Posted Image
We are each of us angels with only one wing, and we can only fly by embracing one another.

Have You Been Hacked? | Automatic Support Tickets | Aion Installation FAQ | AionSource Rules
0

#14 User is offline   SilverKnight 

  • Star Officer
  • PipPipPip
  • Group: Members
  • Posts: 492
  • Joined: 15-July 09

Posted 29 March 2010 - 01:43 AM

Quote

Dear aion player, your account due to suspected fraud. Will be banned within 72 hours.
Fraud Evidence: many times in the game using the game chat function induced to provide the game to deceive the other players offer accounts and passwords.
If you do not fraud, as soon as possible to verify your account login http://yourkeys.imal.../lolnublet.php.

Aion Services Department

Is it bad that I actually laughed when I read this?

Quote

Hmmm, several players of questionable intelligence versus six mobs that are surely dumb as bricks, but hit like trucks?

Oh look, the road we're currently being slaughtered on slopes downward. How convenient. Let me make use of that.
0

#15 User is offline   Malackai 

  • Officer
  • PipPipPip
  • Group: Members
  • Posts: 183
  • Joined: 22-April 08
  • Character:Mezra
  • Legion:Pwnage
  • Race :Asmodians
  • Server:Telemachus

Posted 29 March 2010 - 01:52 AM

no I laugh too when I get them

hell i am even getting wow phishing mails and i haven played that game seriously since last year sept >_>

not to mention its send to the wrong email address too XD
Posted Image
0

#16 User is offline   Sashimi 

  • General
  • PipPipPipPipPip
  • View gallery
  • Group: Members
  • Posts: 850
  • Joined: 05-January 09

Posted 29 March 2010 - 01:58 AM

1 0 c h a r s
<< The "Find the active Zorndorf sockpuppet" game >>
March 2011 results: mmorpg.com: Kre01, Theshadow04 - Massively: Georgio, Bossy - Aionsource:v**********

Contribute via PM and get your name branded on another sockpuppet!
0

#17 User is offline   Eshmoon 

  • General
  • PipPipPipPipPip
  • View blog
  • Group: Members
  • Posts: 946
  • Joined: 19-February 08
  • Locationwaiting GW2 *sigh*
  • Legion:Chosen Alliance
  • Race :Asmodians
  • Server:Castor

Posted 29 March 2010 - 02:02 AM

i receive one wow account suspension ,control, daily and i did never play WoW not even for one sec
Posted Image
Every man dies, not every man really lives
http://www.chosenalliance.net
0

#18 User is offline   SilverKnight 

  • Star Officer
  • PipPipPip
  • Group: Members
  • Posts: 492
  • Joined: 15-July 09

Posted 29 March 2010 - 02:28 AM

View PostSashimi, on 29 March 2010 - 01:58 AM, said:

This wave will produce atleast one "I got hacked, but did nothing wrong. Never happend to me before . I have Antivir and a firewall. Just look at all the other threads I'm not allone!" -topic, and the OPs uninvolvement as usual supported by AS housetrolls, bumping the thread over weeks and then take screenshots of them as "proof how bad the situation is"...

Quite frankly, if anyone falls for a scam that bad, they deserve everything they get. That's like:

Posted Image

Quote

Hmmm, several players of questionable intelligence versus six mobs that are surely dumb as bricks, but hit like trucks?

Oh look, the road we're currently being slaughtered on slopes downward. How convenient. Let me make use of that.
0

#19 User is offline   Draca 

  • Star Officer
  • PipPipPip
  • Group: Members
  • Posts: 315
  • Joined: 04-June 08
  • Character:Krachera
  • Legion:--Inactive--
  • Race :Elyos
  • Server:Perento

Posted 29 March 2010 - 02:43 AM

Got that mail today too. I'm also getting WoW scams tho i never played WoW. The scams even get stuck in the spamfilter.
[SIGPIC][/SIGPIC]
Life is a Hazard game, you roll the dice and see what happens.
0

#20 User is offline   Nuclear 

  • Soldier
  • PipPip
  • Group: Members
  • Posts: 73
  • Joined: 25-August 09
  • LocationThe Great Island of New Zealand
  • Character:Nuclear
  • Legion:Rofasaur
  • Race :Elyos
  • Server:Undecided

Posted 29 March 2010 - 02:51 AM

I got that one too. Pretty fail because they won't give you 72 hours to transfer all your stuff, they would just ban you right after they detect you of fraud.
0

  • 5 Pages +
  • 1
  • 2
  • 3
  • Last »
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users