An idea for the site builders among us.

[Marauding Master]

Hello, I apologize if this has been suggested before. Also, I haven't tested this out yet. I'm merely trying to get the ball rolling. This scam is good for those who have less social skills but good other talents, it's also a more secure and easier way to scam, and people won't realize it that fast. The downsides are that you can get into legal trouble for doing this.

For this to work you would need:

-Site designing skills.
-$6 to buy a domain.
-Know your way around the popular forums

Basically, on big forums. There will linked to the WoW main page pretty frequently. I see a lot of potential in that. These are the steps I'd take to turn this into a pretty profitable scam.

1. Design a site.

Designing one is actually pretty easy. All you have to do is make it look exactly like Blizzard's site. So steal their shit. I would recommend this only to experienced designers who have a clue what they're doing. Make sure that you recreate a few pages for the actual site but doing all the links would be too much of a hassle so just let some link to Blizzard. Make sure that the account management pages are yours though and that you can tell if people entered info and what the info was.

2. Register a domain for the site.

Make it something like worldoewarcraft.com, something easily overlooked in the eyes of your victim.

3. Go to forums and start up a chat about it. Drop the link when the conversation seems suited for it.

4. They, for example, feel the need to go to account management.
This is where it gets fun. The site looks like Blizzard, the domain looks like Blizzard(I can assure you that most people won't bother to look at the domainame twice) so they'll think they're on the actual page. They log in, which will send you the account info. To avoid suspicion, add an error page when they've logged in. Something like:

Processing failed due to an unknown error.

An error report has been sent to our server for further investigation. Please wait a few minutes before attempting to log in again.

We apologize for the inconvenience.

In which time, of course. you'll have stolen all their info while they suspect nothing.

If anyone would try, I'd like to hear back results. Naturally, you could also create your own account creation page and steal creditcard numbers and gamecards. Depends on how much legal trouble you're willing to risk.

[Strupantwn]

You will only get there username and password though.. and how will people go to that forum?

[Murdok]

sounds good might have a go at it, i have tried something like this before. i tried to make it at college where it looked like the sign in page to get onto wow and when they put there user name and password it saved it in a file on the hand drive, which would be good to put on a internet cafe. but its a nice idea

[Marauding Master]

You will only get there username and password though.. and how will people go to that forum?

You could also make them register for a trial account where they will put up their creditcard info. And you do a lot of forums at the same time.

[PuffDank]

Pretty basic phishing 101 but I guess if no one has mentioned it here if it needed to be mentioned good post!