Skip to main content

Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines
(+1)

I am not sure what you are trying to say. Maybe a translation issues again. Did you get a captcha maybe? There are no "google messages" of any kind involved with the interactions on itch. Also, moderators on itch have that blue badge next to their username.

But itch.io is ultra-secure, in my opinion.

It is not. Accounts get hacked all the time. And malware gets uploaded all the time. Itch is a honey pot for malware spreaders.

I didn't receive any captcha, but only an email message from Google on my smartphone. It was a generic message about the security of websites in general, precisely to avoid the existence of accounts with malware or those dealing with computer privacy. They don't accuse me, but they also gave mandatory guidelines for VAT, the purpose and characteristics of what you would like to sell.

And I intend to follow them, even if I'm a little late.

(+1)

... and this has what exactly to do with Itch??

If you have business dealings with google, like selling on the playstore, they might send you stuff like this. Otherwise, this sounds like a phishing attack.

Also, to be technical, you did not receive it on your smartphone. You received it on your email account. If you received it "on your smartphone", I would be extra sceptical.


---

Or, translation issues again, did you per chance get an email from itch to your email adress, that just happens to be a gmail adress. If so, please do not confuse the sender of the mail with the isp that you use for email.

..and what exactly does this have to do with Prurito??
If you do business with Google, such as selling on the Play Store, they may send you things like this. Otherwise, it looks like a phishing attack.

I understand. I don't sell on Play Store but I would like to sell on STEAM. I didn't read Google's message carefully, it seems authentic to me, but I have locked hacker attacks on my accounts in the past; Some time ago I had a computer stolen. Now the situation seems to be under control. I reported it to the police, but I don't know if they caught the thief.

Then I changed phone, changed number, but the email remained the same. I changed my password and activated 2-step verification.

Also, to be technical, you didn't get it on your smartphone. You received it on your email account. If you received it "on your smartphone", I would be very skeptical.

You're right, it's called email account. I was wrong.

Or, still translation issues, you accidentally received an email from Itch to your email address, which just happens to be a Gmail address. If so, don't confuse the sender of the email with the ISP you use for email.

Thank you. I'll check. Good evening.

There is translation errors. 

"did you per chance get an email from itch" does not convey the same meaning as "you accidentally received an email from Itch" in the context I used it.

The chance involved was the chance of me guessing it right. Not the chance of you getting the email, and certainly not the implication of getting the email as an accident.

To be honest I do not know how much google is involved in the usage of itch, but I would find it surprising, if developers would be contacted by google directly for their itch activity. Itch does use some google analytics though.

While this might be too technical or complicated, anyone can try to check if a mail is non genuine by checking the header of the mail. You read the header from bottom to top and read the first few "from". There are IP adresses written. The first non local ip adress there should be the sender. And then you look up who owns that ip adress. Sometimes you can spot obvious scammers this way, especially from the big internet companies. Someone claiming to be such a big company would not send from an ip belonging to small servers in far away countries or ip adresses used by private home networks. In theory, those ip adresses could be faked, but I never have seen such a scam/spam. It is hard to fake ip adresses and most people do not know how to check for that anyways, so they just fake the sender and the content of the mail. Usually by invoking some urgency and prompting the recipient to click on links in the mail.

If there was no link in the mail for you to click, it probably was not a scam. But maybe it was a misunderstanding what this email was about. 

(1 edit)

There are translation errors.

"you accidentally received an email from Itch" does not mean the same as "you accidentally received an email from Itch" in the context in which I used it.

Yes, I was wrong. Excuse me.

The possibility in question was the possibility of my guessing. Not the possibility of you receiving the email, and certainly not the implication of receiving the email in error.

To be honest, I don't know how much Google is involved in the use of itch, but I would find it surprising if developers were contacted directly by Google about their itch activity. However, Itch uses some data from Google Analytics.

Look, you're very smart, congratulations. I think you got it right.

While this might be too technical or complicated, anyone can try to verify if an email is not authentic by checking the email header. Read the heading from bottom to top and read the first "from". There are written IP addresses. The first non-local IP address should be the sender. And then you look up who owns that IP address. It is sometimes possible to spot obvious scammers this way, especially from large Internet companies. Someone claiming to be such a large company would not send from an IP belonging to small servers in distant countries or IP addresses used by private home networks. In theory, those IP addresses could be spoofed, but I've never seen a scam/spam like this. It's difficult to spoof IP addresses, and most people don't know how to verify them anyway, so they simply spoof the sender and content of the mail. Usually invoking some urgency and asking the recipient to click on links in the email.

I think it's just like you said. I don't know much about telematics. I'll send you a screenshot of the message.


If there was no link in the email to click on, it probably wasn't a scam. But perhaps there was a misunderstanding about the topic of this email.

Yes, the connection was there.

Thank you so much.

P.S. What should I do ?

Remove screenshots that potentially show private information about you. Like your merchant id.

Did you register a merchant account? https://www.google.com/retail/solutions/merchant-center/

If so, visit it, and look if it demands any updates from you. But do not use the links provided in the mail, unless you can read urls and can spot malicious urls.