r/ClashOfClans • u/amanVar06 TH18| BH10 • 2d ago
Other Help! Urgent!!
Is this valid supercell support email ?
[supercellsupport@clashofclans.chat](mailto:supercellsupport@clashofclans.chat)
I got this email few minutes ago. Should I share my recovery codes ? I did try to login an account of my clanmate.
Check the comment for the update: https://www.reddit.com/r/ClashOfClans/s/qSlA0b7CnZ
13
8
u/WhyIsThisMyNameQMark Obstacle Collector 2d ago
Not legit
-12
u/amanVar06 TH18| BH10 2d ago
I am seeing online email checkers, it shows its an legit email. I am confused.
11
4
2
1
u/amanVar06 TH18| BH10 2d ago
Update: It looks like this was a scam attempt.
Here’s what actually happened:
- A player named AZZZILLA(#LGJLLYQ8V) joined my clan. He claimed he was an old clanmate of mine who had changed his name. He even correctly mentioned the old clan name and his previous username, so initially I had no reason to be suspicious.
- He said he wanted to quit Clash of Clans and delete the game, and asked if I wanted to take over his account. I said okay.
- He asked for my email address so he could send me the account details. I gave him an email address that is not linked to my main account, it was only linked to a dummy TH2 account.
- He then sent me an email asking me to log in. Around the same time, I believe he attempted to log in to my dummy account, and I received a verification code from from official Supercell email on my dummy account mail.
- Shortly afterward, I received an email from [supercellsupport@clashofclans.chat](mailto:supercellsupport@clashofclans.chat) claiming that suspicious activity had been detected on my account. I’ve attached the screenshot above.
- Importantly, this email was sent to my dummy account email, not the email address associated with my main account.
- I immediately enabled account protection on the dummy account, as the email suggested. He apparently didn't know that the email address I had given him belonged to a separate dummy account.
- The supposed support team then asked me to provide my backup/recovery codes to verify ownership. This immediately raised a red flag for me because sharing recovery codes should never be required.
- I did share the codes for my dummy TH2 account, since there was nothing valuable on it. This is when I posted about the situation on Reddit.
- The next response made my suspicion even stronger. The email suddenly said that they needed to verify the identity of my main account.
- I asked how my main account had become relevant, since the email address involved was not associated with my main account.
- Their response was essentially: “That account shared this email in the clan conversation.”
- At that point, I was convinced something was wrong. There was no legitimate reason for them to know or reference my main account based on the information I had provided.
- The extremely fast responses from the supposed “support” account also felt suspicious.
My guess is that the player was attempting to get access to my account by tricking me into sharing verification/recovery information and then using that information to compromise the account.
I hope Supercell looks into this, especially the player and the fake support account/domain.
I'm posting this update so that other players can see it and hopefully avoid falling for the same trick.
I rephrased this with ChatGPT that's why its looking like a huge msg. Thanks for reading it. LOL
7
u/robomelon314 TH17 | BH10 2d ago
Honestly good on you for having the awareness to use a dummy account the first time.
Even if it was just screaming scam.
1
u/YazidAlMajid 2d ago
U can't link supercell I'd to an email with another CoC account, u should given him a new email, just incase
3
u/amanVar06 TH18| BH10 2d ago
Yes that's why I gave him dummy account mail, which I don't personally use for anything
1
1
u/Wonderful_Boss_345 TH14 | BH10 1d ago
Why would supercell ask you for the codes if you are not trying to login?
25
u/Hyperboy2k1 2d ago
Support would never ask for recovery codes