Protecting your account and your hard-earned items is just as important as leveling up. Scammers often use deception to trick players into giving away their passwords or valuable gear. This guide outlines the most common threats and how to stay safe.
The most important thing to remember is that official Server Staff will NEVER ask for your password. Whether through in-game chat, Discord, or email, any person claiming to be a GM or Admin who asks for your login credentials is a scammer. Staff members have no reason to ever ask for your password to assist you with an issue.
Phishing involves creating fake websites or messages that look official to steal your account data.
Fake Websites: Scammers may send links to websites that look identical to our official server page. Always double-check the URL (madrigalheroes.com) before entering any information.
Fake Staff Messages: You may receive a private message (PM) or a "Shout" from a character with a name similar to a staff member (e.g., "GM_Admin" instead of "Admin"). They may claim your account is "under investigation" and ask you to log into a link to "verify" your identity.
Promise of Rewards: Be wary of links promising free Penya, items, or Cash Shop currency. These are almost always traps to capture your login details.
Trading requires your full attention. Always "Inspect" items before clicking the final trade button.
The Item Switch: A scammer may place a valuable item in the trade window, then cancel the trade or distract you with chat. When they reopen the window, they might place a look-alike item with much lower value (e.g., substituting a standard weapon for a unique one).
Penya Manipulation: Watch the number of zeros in a trade or private shop. Scammers often list items for 100,000,000 hoping you mistake it for 10,000,000, or they may quickly change the amount in a trade window before you click accept.
Vending Shop Deception: Always read the item name in a player's shop. Some players name their shop "Selling G.Sword" but actually put a regular level 60 sword inside at a high price.
Market Price Manipulation: Be cautious of players "shouting" to buy or sell items at prices that seem too good to be true, as they are often trying to bait players into a rushed, poorly inspected trade.
Empty Box Scams: When buying items from player-owned shops, always hover your mouse over the item to verify the stats and name, as shop titles can be intentionally misleading.
Official Discord Only: Only use the official server Discord link (discord.gg/madrigalheroes) for support, as scammers often create "clone" servers to lure players into voice chats where they ask for account details.
Email Verification: Remind players that the server will never send an automated email asking for a "password reset" unless the player specifically requested it through the official website.
Middleman Scams: Players should never use "middlemen" for trades unless they are verified staff members or players, as scammers often have a friend pose as a trusted third party to steal items.
Two-Factor Authentication (2FA): Activate this feature immediately. This adds a vital second layer of protection beyond your standard login credentials, ensuring that even if your password is compromised, unauthorized users cannot access your account.
Logging Out in Public: Advise players to avoid sharing screenshots that show their login ID or character name in combination with sensitive guild information that could be used for social engineering.
Public Computer Risks: If playing from an internet cafe or a shared computer, players must ensure they do not click "Remember Password" and should restart the computer after their session to clear the cache.
Beyond avoiding scams, you should take these proactive steps to secure your account:
Unique Passwords: Never use the same password for this server that you use for other games or websites. If another site is breached, your account here will be at risk.
Never Share Your Account: Lending your account to a "friend" or a guildmate is the #1 cause of lost items. Staff will not assist in the return of items if you willingly gave someone else access to your account.
Download Caution: Never download "bots," "hacks," or "auto-clickers." These programs almost always contain keyloggers designed to send your username and password directly to a hacker.
If something is too good to be true, it probably is.
If you believe you have been the victim of a scam, take a screenshot of the chat and the trade window immediately. Report the incident to the staff via a support ticket in the discord. While we investigate all reports of fraud, the best defense is always a cautious player.