EDIT: The mail mentioned below is NOT fake.
Unfortunately CD PROJEKT RED chose a communication method that most users who have a clue about security would think was highly suspicious. I don't seem to be able to modify the topic to something less alarmrist - sorry.


ORIGINAL POST:
Hi

I just received a mail station I needed to merge my account - I rings all the warning bells for phishing.

Sender (spoofed): teamgwent@playgwent.com
Sender (real): cm.2220566247736.blttluk.yhlhittjju.d@cmail19.com

Mail contents:

Dear users,

To provide our forum community with the best possible user experience, we periodically perform a range of maintenance activities — from updating the forum engine and performance optimization, to improving existing features, to introducing new ones.

Very soon, as part of said maintenance activities, we’ll be removing inactive and invalid user accounts. If your account was created before March 9th, 2015, and hasn’t been used to post any content or merged with a GOG.com account, it will be deleted on May 24th, 2018.

To continue using your forum account, you need to merge it with a GOG.com account before May 23rd, 2018, 11:59 PM CEST — you can do this by logging into the CD PROJEKT RED forums here.

Keep in mind, both accounts (your forum account and GOG.com account) need to be associated with the same email address. For more information, please visit our Account Merge FAQ.

Merge your accounts
If you have any questions, please feel free to contact us.

Best regards
CD PROJEKT RED Forums Team

Haha. Nobody would fall for that.

LOL, ice cold. Sorry gog. :P

That band sucks!

My senior year in high school 99% of my class were huge fans. And people wonder why I never go back to the reunions.

I know they did an account merge before on the Witcher forums. This may be legit. Best thing to do would be to go to the Gwent forum and ask since that's the forum they're talking about they actually work on.

You guys send mail form that strange mail id (based on the op)?

Edit: Not you (GOG) but CDPR. :)

Not them, CDPR.

Right. EDITED. LOL.

That's Campaign Monitor. They're one of the few emailers that are (usually) anti-spam. It may have been better if you had included the headers to the email. To be honest, as someone who has the lovely joy of dealing with spam and other email forms of abuse for over 2 decades, I would have just hit delete and moved on.

A quick google of the cmail19.com domain would have shown that this is a legit and (usually) anti-spam mailer. A suggestion which you'll probably ignore: Maybe editing the thread's title to something like "if you get an email telling you to merge your accounts...." would be a good idea.

Ah! Now I see it. Business email provider? right?
Thank you Good Sir.
:)

For the sake of this thread, yes. They're involved with other areas as well.

I think I've mentioned that we run a Spam Assassin install for our clients that rates emails on a 1 to 5 scale with 5 being 100% spam. They're like a +.2 on the scale while much of the rest of the Amazon IP range which google says is what they use is like a +2.1.

They do have the occasional problem though but, keeping an eye on the occasional "Spam is cool" forums, they seem to have a bit more leeway on who they accept as clients.

edit: Having said that, if that's the entire contents of the email, it does have some issues with CAN-SPAM (ie physical address missing, unsubscribe missing, etc.) but pointing out stuff like that is going to fall on deaf ears anyway.

How do we now you are not with them??

Anyway, the forum says I only registered today, which is a bit strange since I had an account for a bit longer. Even longer than here.. Wasn't active there anyway so not a big loss.

Normally this is where I would provide links to such things like their twitter account and announcements on their forums about the pending merge and suggestion how one could verify such.

But they didn;t do either of those.

I guess the lessons learned about the profiles didn't take.

Actually I've checked and merged my account a few hours ago, wasn't really suspicious. Simply used provided link in incognito mode and then logged in using https://forums.cdprojektred.com/ address.