What will Blizzard ask in emails and what they won’t:

There are a couple of things that will instantly pop up the question if a mail is from Blizzard or not. Most of the times fake emails will ask for your password; Blizzard will NEVER asks for these things! DO NOT reply to these kind of emails!

Blizzard however will sometimes ask for things like:

• Your account details
• Other Character details
  Etc..
  
  Unless the email you received is a direct response to an email you have sent, never reply to such emails.

Known email addresses:

Blizzard emails will ALWAYS come from @blizzard.com! Here you can find a list of known email addresses that are valid:

• WoWAccountReviewEU@blizzard.com (used for EU account reviews)
• WoWAccountReview@blizzard.com (used for USA account reviews)
• Newsletter@email.blizzard.com (used by Blizzard insider)
• Newsletters@enews.blizzard.com (used by Blizzard insider)
  
  So for example email addresses below are not valid:
• blizzard@gmail.com
• WoWaccountreview@msn.com
• wow_account_review@hotmail.fr
• BlizzardVerification@gmail.com

Technical information about the email addresses:

If you are still not sure about the email address you can check some technical information.

Blizzard US
DNS: ob3.blizzard.com
IP: 216.148.0.68

Blizzard EU
DNS: eu-smtp02.blizzard.com
IP: 80.239.172.105
Or
DNS: eu-smtp01.blizzard.com
IP: 80.239.174.216

Blizzard insider
DNS: info.cme.vugames.net
IP: 12.129.240.41
Or
DNS: email.blizzard.com
IP: 12.129.200.219
An example:

OK here’s an example of an email scam.
http://img99.imageshack.us/img99/741/fakewlkuj9.jpg
http://img99.imageshack.us/img99/5829/fakewlk2fb6.jpg

As you can see in the images this a beta invite for WLK (or so it seems). But do note the following things:

• Typo in the email: World of Warcraft
• The URL is a spoof (check the link in the email and note the link left under)
• The header data says it’s from wotlkBETA@blizzard.com but the received from says another address
• The received SPF says it’s not permitted nor denied. A real Blizzard email shows up as accepted.
  
  So remember, keep your eyes out for such things!
  

Check the links:

The mail sometimes contains links. BEWARE that you are sure it’s a valid link. For example:

• WoWaccountReviewEU@blizzard.com (while it links to worldofwarcraftaccountrevieweu@gmail.com)
• https://www.wow-europe.com/account/ (while it links to www.imstealingyourpassword.com)
  
  Always double check the link you are going to click! Also note the difference between a “0” (zero) and “o” (for example w0w-europe.com) or a “1” (one) and “l” (for example 1inks.wow-europe.com). Also as of lately scammers use www.vvovv-europe.com & www.vvorldofvvarcraft.com (two "V"'s next beside each other instead of a "W").
  
  This is also known as “Phishing”. For more details read this page: http://en.wikipedia.org/wiki/Phishing
  
  To make sure a link is valid; Blizzard always used a secure connection. You can recognize this by the link provided is “https://”. Both Firefox and Internet Explorer display these website locations with a lock-icon.