Phishing borrows familiar context
Messages may mention a trade, gift, team invitation, suspension, code, or tournament to make a login request feel expected. Visual similarity is easy to copy; the domain and official navigation path matter more.
Evidence for this section: INTERPOL - Social engineering scams (how fraud exploits trust)
Authentication codes are a target
A real two-factor code can let an attacker complete a login immediately. Support staff and coaches should not need you to relay a live authentication or recovery code.
Respond through official channels
Do not use the link in the suspicious message. Open the known official app or domain, review sessions, change exposed credentials, and contact official support if access may have been compromised.
Sources and review note
This page is reviewed for clear risk language and beginner usefulness. Publisher rules can change; use primary rules for game-specific decisions. Sources last checked .
Suggest a correction