What to Tell Someone who's Account has Been Stolen

Two members of my clan fell prey to a scam. A site promised free gems via a free itunes gift card if they provided some contact info. Once done the site directed them to a fake (but real looking) apple website where one needed to provide their log in credentials to obtain the gift card (I'm not clear what the android process is, but I imagine something similar).

One member, an iOS user had joint access to his Clash Village with the phisher for a period of time until, the member paid off the phisher $100 to leave him alone. Its been a week since then and so far the phisher hasn't broken their promise. Member has changed his apple ID password and phisher has said he's logged out of his gamecenter account. Is nightmare really over for this member? Since the phisher's device at one point loaded the village, will not knowing the new Gamecenter password keep him from logging into the village again?

Second member an Android user isn't as lucky. He had a higher level village. Member doesn't have ability to pay off the phisher. I don't believe hes gotten a response from COC support. Member no longer has access to his own village from his own device, the phisher has complete control. I'm not sure what to tell this member. If he is patient will COC support help him? Or is he permanently duped out of his village he invested time and money into?

"That's what you get for trying to take short cuts"

First of all, anyone who wants to exploit a game like this deserves what has happened. This is out of the hands of supercell though, since the phisher gained access to their gc/g+ account. To make sure the accounts are safe make them contact Apple/google directly to fight this. They can help you get the accounts back and with that, the villages.

Well I think its safe to say... those are 2 very stupid people. It is hilarious how many people fall prey to scams like this all over the world.

Hi,

I think you know what they have done is wrong - we don't need to do the "told you so" thing really.

The guy who has changed his password is probably ok - but if the thief still has your friends clash account on his device and is still logged into GC he can still pull it down and then transfer it over to android etc - i say probably as it's been a week he might have kept his word.

I would seriously advise both of them to contact support the first guy should ask for a recovery code so he can get it onto another game centre account.

But SC support can help they will de-activate both accounts until the guys send them evidence they own them - details about gem purchases etc and then get their account back.

Do they know the player tags for their accounts or have fairly un-common game names?

Quote:

---

Originally Posted by Lilschnookums

One member, an iOS user had joint access to his Clash Village with the phisher for a period of time until, the member paid off the phisher $100 to leave him alone. Its been a week since then and so far the phisher hasn't broken their promise.

---

Jesus Christ - ♥♥♥♥♥!!!

I appreciate the response. I can relay this and let them know there is hope.

Yes this situation is a shame. Member one is old enough and should have known better. Member two is a good hearted young kid from a country with very low crime. I hate to see kids taken advantage of like that, but it's a good lesson to learn.

Gamer tag is rare in that it is his real name... lol, although I've never seen it before, it can't be that rare.

I would immediately demote the 2nd player to member and watch out for changes in behavior in the 1st.
Contacting support might help if you can supply a good reason. Perhaps you can cooperate with the 2nd phisher and eventually retrieve the account back. It's a win - lose situation, the second phisher will probably require money too so no matter what the phisher comes out on top and you guys either lose a player or money.

Did 3 different people fall pray to the exact same website by chance on the same day, or did one of the clan members promote it? If it's the latter, kick them out. It may be a case of somebody playing the dope, so that nobody suspects he is the perp.

Not that I think this matters much, but makes for interesting drama if you're interested in knowing the timing of events. Only two people were affected.

Member 2... the Android user also a very long time member and co-leader, he independently found this site promising free gems. Once the phisher had his information, the phisher logged into the members account and posted a clan message promoting the website and to trust him cause he tried it. Well, we find out later this message really came from the phisher posing as the member.

Member 1... the iOS user and also another coleader, sees the clan email, he is especially close to member 2. Based on the convincing endorsement of what seemed at the time to be member 2, also checked out the site. Once member 1 was duped, the phisher also impersonated this member and sent more clan email spam. Member 1 had joint access to his account with the phisher, warned the clan about the ♥♥♥♥ing and had us demote him. Evidence of the phishing scam was corroborated when member 1 joined the clan with an alternate account and had a somewhat humorous "chat" when the phisher came on to the primary village to impersonate the account.

Once the phisher knew the clan was aware of the scam, He took member2's account, quit clan and joined a foreign clan. We didn't realize till shortly after that member 2 has lost complete control... doesn't even have joint access as member 1 had (perhaps factory reset his device trying to fix things?). As member 2 is a young kid, he doesn't have the means to pay off the phisher. The phisher on the other hand seems quite content living in his newly acquired village.