Someone tried to phish me - advice needed

Good catch, seriously. A lot of people would have just typed it in without thinking. That's exactly how these scams work — they rely on you being in a hurry or caught off guard. I've seen this pattern a dozen times now, and it's worth breaking down what to look for so you can spot it before you even click.

So let's talk about the red flags. Any message that asks for your password or full login credentials directly? Huge red flag. No legit vendor or forum mod will ever ask for that. Same goes for "verify your account" links that take you to a page that looks almost right but the URL is off by a character or two — like using a capital i instead of an L, or a .cc instead of .com. Another tell is the language itself: if the message has weird grammar, odd urgency (like "your account will be suspended in 24 hours"), or a generic greeting instead of your actual username, it's almost certainly a phish. They also love to play the "staff impersonation" card — fake usernames with admin-looking badges that they cobbled together in Paint.

Here's a scam pattern I see all the time: they'll hit you via DM or forum PM, claiming they're from "security" or "moderation team," with a link to "confirm your identity" or "reset your password due to suspicious activity." The link leads to a clone of the forum login page. You type in your user/pass, and now they have it. Then they use those credentials to post scam threads from your account or try to sell your account to someone else. Some even go further and try to reset your email password using info you've posted publicly.

Now for how to protect yourself. Number one rule — never, ever enter your password into any page you didn't navigate to yourself. Always type the URL directly or use a bookmark. Enable 2FA on your forum account if it's available — that alone stops most account takeovers even if they do get your password. Use a unique password for the forum that isn't reused anywhere else. If you're unsure about a DM, forward it to a real mod via a different channel (like a separate site or Discord) before replying. And if you've already clicked a suspicious link but didn't enter anything, run a malware scan just in case. Better safe than sorry.

Support only communicates through official channels

Report that account if you can