For Neopets ONLY discussion.
Topic locked

Mon May 29, 2006 7:26 pm

If you're using a Hotmail account, don't put your state and zip code in your Hotmail/MSN profile and don't use the simple Password Retrieval Question such as "Pet's Name." That's how I got my hotmail account cracked/scammed into a couple of years back. Luckily I had MSN messenger open as well so I could tell that the person was getting into it.

Mon May 29, 2006 7:47 pm

I just made a new e-mail account specifically for Neopets. Thanks for the "scared spitless" approach, guys. :oops:

Tue May 30, 2006 4:35 am

patjade wrote:Request your PIN and it will be sent to your email.

I noticed that you use MSN for an email address. Microsoft email, such as MSN and Hotmail can be hacked by someone using MSN messenger. I have seen that problem, where someone on your messenger talks to you on IM, and in the background downloads all your Internet Explorer logins and passwords. Especially if you have them set to be remembered and have cookies saved.

Once they get your email password, they can then ask for a lost password and get your Neopets password.

About a year ago the NTWF had someone hack several member's accounts using that method. It took a lot of work comparing and sharing IP addresses with some of Neopet's staff to pinpoint the thief, and cost some people a lot of items before we could get accounts restored. We tracked the perpetrator to Belgium, BTW. Some kid with an add-on program for Windows Messenger.


No one on my MSN list knows I play Neopets as they are all offline friends and I dont accept randoms unless they email me first so I seriously doub the possibility of my e-mail getting hacked.

Where do I go to request my PIN or what email adress do I write to?

Tue May 30, 2006 5:00 am

PINs are a function on Neopets that you can activate by going to Help => User Preferences => PIN Preferences. There should be no need to write to anybody about it.

0_o

Tue May 30, 2006 2:15 pm

If you're confident of remembering your password, what I would do is change it to a non-existant email address. this way, even if they try to request your password, it won't get sent as no such email address exists. all you'll get is a neomail saying the mail bounced back.

Tue May 30, 2006 10:19 pm

^^This is actually not the best approach as it is foreseable that someone could create that email (although I guess if you use a completely gibberish address with a odd domain name it might be ok)

I still wouldn't reccomend it though, you never know what Neo might do in the future (look at the birthday debacle for an idea) they might decide in a year from now to send out an email to every account for verification (or something like that)

Tue May 30, 2006 10:26 pm

I've just had someone go into my MSN account and change the password so I can't get in. My MSN addy was (though isn't anymore) up on my profile here. I also noticed Gorky that it's quite easy to find out your username from here, (as it is for me) so I guess that just makes it easier for people to try and steal accounts :( Thankfully I don't use that email for my Neopets account, and it has a separate password, but I'm still really angry because I have to get a whole new MSN account so I can talk to my friends. Just a heads up anyway.

Thu Jun 01, 2006 12:18 am

I hardly use MSN messaging to talk to people, but when I do, I use an alternative program. It's called "Trillian", I started using it when friends reported me poping up on MSN when it was impossible as I was out driving.

There are probably other alternative programs that are compatable with MSN and other chat programs. So I suggest looking into it if you chat online often.

Also beware of new people adding you. I personally see no reason to give out my chat information unless we've swaped a few mails first to get to know each other better. Keep that in mind. If the person is asking too many personal questions, then they may be trying to extract information from you for malicious perposes.

Thu Jun 01, 2006 1:58 am

Ms Manic wrote:I've just had someone go into my MSN account and change the password so I can't get in. My MSN addy was (though isn't anymore) up on my profile here. I also noticed Gorky that it's quite easy to find out your username from here, (as it is for me) so I guess that just makes it easier for people to try and steal accounts :( Thankfully I don't use that email for my Neopets account, and it has a separate password, but I'm still really angry because I have to get a whole new MSN account so I can talk to my friends. Just a heads up anyway.


Aww, I am sorry :( That stinks. I hope nothing bad happened with your old MSN account.

I am not a fan of putting personal information "out there" on forums or anywhere else (like some people have done on their lookups). To me, that's just asking for problems. Whether it's from an individual trying to get your information or from "bots" that troll things like forums looking for emails to add for their spam lists.

I don't use MSN messenger, mail or hotmail - my roomie's hotmail was cracked once and she was a victim of identity theft. Fun, fun - NOT. Part of the problem was that she insisted on using the same screen name for everything and I think only used a different password for 2 things.

If possible, use different emails for different things. Use different names and definitely use completely different passwords. If your email has a security question option (most do), feel free to use one of the default questions. But make the answer something absolutely ridiculous that has nothing to do with anything.

As to your PIN on Neo or anywhere else - don't use your birthday, your home address, part of your phone number ... nothing that's personally identifiable to you.

I have everything written down and I also have just about everything on a notepad. I c&p some user names for things, all passwords and PIN. I don't type any of those in, there's no password or other saving allowed on this computer ever since my roomie's debacle.

Lastly, be careful who you talk to on IM. Don't just have it open and showing for the "world". You should try to set it up so only people who you know are able to see/contact you. And if someone you don't know does contact you, you should be able to block them and never, ever follow any links they might give you or accept anything via IM (pics, etc.).

Thu Jun 01, 2006 4:36 am

Just got another email today saying my password was requested lol whoever it is.. if you are reading this... have fun =P It hadnt been read either which means the person does not have access to my email.
Topic locked