Recently, scammers have been sending PMs to other players that are made to look like mass-messages from staff members, and they ask you to install apps such as UDID+ to send information from your device to their email address.

If you receive one of these messages, please do NOT follow their instructions. Instead, block the sender, and report them for staff impersonation and asking for your Device ID. Also please tell us the email address they ask you to send your information to.

If you fall for their scams, your Graal account is likely to be hacked, and other personal information like home address and credit card details from other apps could well be accessible to them. Their actions not only compromise your Graal account's security, but they will also have the opportunity to commit identity fraud, which is in violation of digital privacy laws. If caught, the offender could be placed under an IP ban for up to a year.

---

Additionally, if you are already scamming other players in the way described above, I strongly recommend you stop what you are doing and erase all tools and stolen information in your possession.

UDID hacking can do more damage than just hack Graal accounts. In some cases, you will not be in trouble with just Graal staff, you may also be in trouble with the police.

Things like this are extremely easy to detect and trace, even with all of those "protection tools" you may find available around the Internet.

---

Also regarding scams in general;

It is difficult to verify what belongs to victims and to recover items lost from scams. The best staff can do is to disable the hacker and prevent scams from happening in the first place.

It is your responsibility to keep your account safe. You follow instructions given to you by others at your own risk.

With scams, remember - If the offer sounds too good to be true, then it probably is.

I usually just give them a old account with nothing inside and have the status saying "You really think I'm that stupid?" Works wonders.

ip ban doesnt work, there is ways to get unbanned

I fell for it and got a hacky instead :D

I think there should just be perma-bans honestly for hackers, if they want to **** with the game shouldn't play, and so what if that kills the player count, if they arent good players who cares.

Happened to me, sucked ;(

lol protip: if ur ip banned reset router

Yep indeed aha ^^

I know so many people who fell for this and the VIP account steal thinger

Thank you, could this be stickied?

It was stickied a few minutes after she posted the thread..

Want to learn me about UDID hack.
Actually I don't want my accounts anymore.
All I want is to run around as a noob.

So, yeah.
I want to learn me hack.
And hack myself.

Can I be more AWESOME!?

I always skip the pm and block the player if they ask me.. i was almost hacked a few years back and i had a pop-up that said person (i dont remember the name of the oplayer) has tried to access your account, but we have stopped this or something like that but i just hit like 1k and i was like **** **** **** **** **** when i saw that.

People also use a code in there sign (I forgot) and it says there ID (for example: Graal546.) Then they make someone touch the sign and tell them what it says to get there ID, then the owner can touch the sign to get his own ID and change his to the other person's ID to hack them and get there account. (PC only) So you might want to delete the code to put in a sign that tells you your ID.

I have a question if u give them your email can they hack u?

It depends on if that is the email adress you are using for your VIP subscription if it is you VIP email, then yes they can hack you. If you give them an email that is unrelated to your VIP subscription then no they can not.

I posted this in a different thread, but it's relevant here, so I'll repost it:

Rules in Graal only serve as a guideline, staff all have a good dose of common sense too to go with it.

Just because scamming is not explicitly prohibited in writing doesn't make it any more acceptable. My belief is that any action that defrauds or otherwise deceives another player and makes them lose something without their express consent or knowing for the gain of the scammer should be punishable.

This includes things like offering to farm but stealing gralats instead, or offering trades but not upholding your side of the deal when the other person has.

And that's the minor types of scams.

I have seen players openly scamming other players for private information, and thinking they're safe to do so.

I once caught a player in the act of asking a lot of other players for their Device ID numbers and iTunes login information. When warned, he replied "scamming isn't against the rules, u can't ban me, dumb***".

Normally, I would have just issued a simple warning for this, but the scammer's attitude and the fact that he had already obtained login data landed him a month-long IP-ban.

We get a lot of messages from scam victims asking to recover their lost items, but the important thing is that staff cannot return anything you lose if you fall victim to a scam. Your account information's safety is your own responsibility. It is your choice who to trust, and you should face any consequences.

Don't be fooled by greed. Remember - If an offer sounds too good to be true, then it probably is. No matter what they offer you; free VIP, free gralat packs, always be vigilant.

The best staff can do is disable scammers and prevent them from harming other players. We cannot get things back once the damage has already been done. We can't erase your login information from scammers' devices once you hand it over to them yourself.

IP Bans have been got out of by some players by resetting their router, account bans are more affective.

I have a pic of a udid scammer his name was XxrivernightxX something like that I can show if you want

Maybe
 

If your using a vip account then yes. But if you choose revoke access that needs an approval before they can use it

The thing i'm mad about is, on iEra and iClassic, i was banned for 3 days for supposedly "TRicking someone into giving me their UDID" When i never asked anyone. They said they had evidence, but they didnt. So they really just banned me without proof, or they had fake proof.

Dont use emails they give you. Once you use there vip they transfer stats snd revoke access.

Example of this scamming in action:

http://www.graalians.com/forums/showthread.php?t=4779

Who wants my udid number im giving my account away

Haha sure... with that you are giving away almost your whole iPod/iPad/iPhone.

Lol? If they give you their UDID, though, they could hack you. I know someone who could easily hack you if they give you their UDID.

Not possible, until they give you an app aswell which records your UDID and sends the data to them.

Actually, it is possible.

Graal is not the only app that uses UDID as a login for accounts.

If your UDID is in the hands of someone else, they can hack into your accounts on any other app that uses it to identify you. And if that app is used for shopping (with your credit card details recorded in it) or anything else that requires your personal information, then you will have given all that information away too.

Most people don't understand that UDID isn't simply Graal's login system, it is your device's and some of its apps' complete identity.

As far as I know it won´t work for iTunes so calm down guys ^^ Don´t know on which apps that does actually work but I think they are all (at least the most known ones) secured good enough.

I know that is true.

Update:
Apple will be slowly phasing out support for UDID as an access method for iOS apps, thus rendering UDID scams and hacks ineffective.

http://9to5mac.com/2012/03/25/develo...uld-in-august/

lucky for me, i have 2 routers, upstairs and downstairs, but I hope i won't have to go there lol :D

yes really all they need is one part of your information (email) is big. example

most people keep the same password for everything. so say you forgot your password for your hotmail or gmail. well its going to ask for your email. so once you put the correct email you have an option of changeing your email
or reciving the password you forgot. so then the hacker starts testing with your password like maybe useing this password for diffrent things like (games,banking accounts, and really a bunch of things) long story short all a experienced hacker, only needs 1 type of information. i would be careful who you give your email to ;)

or maybe make a world message on classic to also say dont give out emails as well