By using this site, you agree to our Privacy Policy and our Terms of Use. Close

Forums - General Discussion - Did a major a major EA Origin phishing attempt get through to my inbox, or am I just being paranoid? How would this have even happened?

Here is the e-mail, saw it in my Gmail last night:



I haven't clicked anything on it, because I'm presuming it's a fake (I googled the via address but found nothing), but I figured I'd have you guys take a look at it and see what you think... I have called EA at times, and I've helped my gf deal with EA Origin before, not sure if I ever called them or not... What is astounding is that not only did the e-mail get through, and into my inbox, but also that my Gmail marked it as "important" because of the sending line... Another thing that's interesting: the "via" tagline... last I recalled, in order to send an e-mail "via" someone else, you had to have access to that e-mail in the client you were using... Correct? So someone inside of EA (knowingly or unknowingly) put out a phishing ad? I hate to admit it, but if I'm right and this is fake, it's one of the best and craftiest fakes I've seen in a while...




Around the Network
BasilZero said:

Where did the link (from the confirmation number) take you to? Did it have a https:// on the url when you checked the link?

Just to be safe...might as well ignore it if you dont use Origin.

https://helporigin.uat.cs14.force.com/CpCasesPage?appcontext=browser&pagecontext=CpCasesPage&caseid=500E0000001N9AmIAK

^I didnt' click it. I don't know much about the Origin infastructure, but the link looks fake as hell when I copy it... Also, aren't DLC codes usually longer than 15 characters..?  BTW I dont' use Origin, buy my gf does. She plays Sims 3, which I may or may not have called (I don't recall, I usually do all the calling to CS because I'm better at it). Last time my gf had an issue with Origin was about 6 months ago iirc, so I don't remember if I called or not...




The help site is located at

"https://help.ea.com"

or

" https://help.ea.com/en/origin "

If you login and see a support ticket, then that is a legit. If it doesn't exist there, it's a scam.



I just logged in, and there was no ticket... Funny, I wasn't even sure if I HAD an Origin account, but apparently, I do... I just searched through my old e-mails and found one from EA saying "Your EA account is now your Origin account.". I had an EA account on that e-mail, so that makes sense now.

Not to mention, they got my first name that correlated with my account.. Has EA Origin had a leak that it hasn't addressed yet? I'm going to call EA tomorrow... This truly is concerning... I just checked and I'm glad I don't have any Credit Card info on Origin...

EDIT: Wow, they sent one to another one of my e-mail accounts, with the same name, but a different number... I just went to Origin and clicked "password reset", but I got nothing in my e-mail, so I guess I must not have one on that e-mail account... I have given it to a service rep to get a RB3 license e-mailed to me, so EA probably had it on file, with my name...

Overall, this does not bode well for EA's security rep, and is concerning, to say the least..