Listen to the episode
TLDR
A phishing campaign is targeting Call of Duty Mobile players with a fake "10,800 free CP" giveaway page that mimics the official Activision site. Victims are asked to log in with their email and password, then prompted to enter the 2FA...
How it works
A phishing campaign is targeting Call of Duty Mobile players with a fake "10,800 free CP" giveaway page that mimics the official Activision site. Victims are asked to log in with their email and password, then prompted to enter the 2FA...
Red flags
- The promotion asks for an email and password instead of a real redemption code. Grammar errors such as "GET FREE POINT" and awkwardly worded instructions betray a fake page. Urgency language ("confirmed within 4 8 hours"), countdown timers, and a cosmetic live chat widget are used to rush victims past doubt
What to do
- 1Type the official Activision URL directly into your browser or open the app instead of clicking promotional links. Never enter a 2FA code on a page reached through a giveaway, ad, or direct message. If you already submitted credentials, change your Activision password immediately, revoke all active sessions, and review linked payment methods for unauthorized purchases
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/07/call-of-duty-mobile-scam-uses-fake-free-points-to-steal-player-accountsFAQ
Is Call of Duty Mobile phishing scam steals Activision accounts via fake free points a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
The promotion asks for an email and password instead of a real redemption code. Grammar errors such as "GET FREE POINT" and awkwardly worded instructions betray a fake page. Urgency language ("confirmed within 4 8 hours"), countdown timers, and a cosmetic live chat widget are used to rush victims past doubt
What should I do first?
Type the official Activision URL directly into your browser or open the app instead of clicking promotional links. Never enter a 2FA code on a page reached through a giveaway, ad, or direct message. If you already submitted credentials, change your Activision password immediately, revoke all active sessions, and review linked payment methods for unauthorized purchases
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.