Fake Blizzard Whispers, Phishing Links and Account Theft: How to Stay Safe

When an account is taken over, its gold and items are stripped, and the character is sometimes used to scam friends. The damage is far worse than with other scams.

Trick 1. Fake Blizzard whispers

A whisper like "This is the Blizzard security team. Your account is about to be suspended, so verify it at the link below." Blizzard does not ask for your password or login through whispers. Report these whispers and ignore them.

Trick 2. Fake login sites

Free mounts, event rewards or "confirm your guild application" are used to send you to a fake site that looks like the Battle.net login. Check that the domain in the address bar is really battle.net, and never log in through a link from game chat.

Trick 3. Suspicious addons and programs

Addons from unofficial sources, or programs promising "auto gold" or "price analysis," sometimes contain code that steals account details. Only download addons from well-known distribution sites.

Security settings to turn on

• Turn on the Battle.net Authenticator (two-factor authentication). It blocks logins even if your password leaks.
• Use a Battle.net password that is different from every other site.
• Never share your account with anyone. That includes handing it over for power-leveling.

If your account was already hacked

1. Change your Battle.net password right away and turn on the authenticator.
2. Contact Blizzard support about the account takeover.
3. Scam messages may have been sent from your character, so warn your friends and guild.