Hey everyone, notspencer here, the Support Director over at Proguides. Not trying to bump this post, but just want to clarify what happened here, as it was an isolated incident.
[{quoted}](name=inFamous Zion,realm=EUNE,application-id=3ErqAdtq,discussion-id=AmBwEss2,comment-id=,timestamp=2016-07-20T13:21:41.191+0000)
When you create an account there, firstly you receive 7 day free trail and you have to type your credit card info, so when those 7 days are over, it starts a subscription. After i did so, i had an issue logging in so i contacted a support.
Yes, this is mostly correct, but when you register an account with us, you are actually selecting the subscription you wish to receive. Similar to other subscription services, we offer monthly subs or annual subs - the users select which they wish to sign up for. Every subscription that registers with paypal or by the normal credit card method is also eligible for a 7 day free trial, where their subscription is not charged until after their trial period ends. Users have the ability to cancel at any point they wish - and they are not charged at all if they cancel during their trial.
After he said to tell him my mail on which i created an account and last digits of credit card to verify its me i got another email. Note that this is a conversation between me and a support only, so unless a support or i put another person in the conversation, there can be no interference in there.
When users contact our live support technicians, if there are issues with account permissions or payment details, then our techs will leave me a note so I can personally look into it and manage the support requests. Several users had the same issue, so I typed up an email response - requesting 4 digits of their card info to locate their accounts and added each user to the BCC field. However, one email address was accidentally placed in the TO field - therein lies my mistake(which I claimed responsibility for in a follow up email to each of the users). In the same response email, I made clear that each user should only be sending emails to [email protected] and no other addresses.
In the email i got from that conversation was a full credit card information, which wasnt mine. And as i wasn't looking from who email is, since i got an email from that conversation, i responded with the my correct info, since i thought support made a mistake. It turned out, support joined a conversation with me and another random guy having a similar issue. He said they told him that i was supposed to help him, and since i didn't put this person in this conversation, the only one who can is a support. Note that we both just exchanged our information to each other thinking we are each others support. He was confused and so was i. In the end he said it doesn't matter, you don't know my password so you can't do anything and i didn't care since i said only the half of the info (1/3 of it).
One of the users(User #2) replied to my original with an email to OP including their own card info. OP, then replied to User #2 with their card info, but not to the [email protected] email.
Fearing the worse i blocked my credit card. Now, 7 days later, i get a message from my bank that someone from proguides just tried to transfer 60 USD from my card! (montly subscription is 7 usd, which i clicked on from the start). Annuall is 60$ (around 5$ monthly). Numerous times i emailed to support about this issue and to stop my account, so i don't go into that subscription mode and didn't get a single message.
The charge mentioned was for the annual subscription that OP selected upon registration. In addition to that, I offered to provide OP with a refund if he wanted, despite the fact that no emails requesting a cancellation existed. Should also note that OP’s charge never actually went through.
This concerns all of League players that want to use proguides or using it. Why? because similar thing can happen to you, you can also get involved with another random guy and give away your credit card information, and that someone might use it. Since i'm a respectful guy, i deleted an email completely that had full credit card number of that person. But you or someone you know, might not be that lucky.
Proguides has only been around for about a year and a half so far, so we are a growing team, working hard to provide all of our users and future users with a quality learning experience.
We value every one of our members, and each of our partners who genuinely see our vision of helping players improve at League of Legends. I apologize and fully accept responsibility of my own mistake months ago, and hope you understand that we take account security very seriously at Proguides.
If you have any questions or concerns, please contact me directly at [email protected] - I respond to every single email personally.
