Call of Duty Mobile scam uses fake free points to steal player accounts

A phishing campaign impersonating a Call of Duty Mobile giveaway lures victims to a fake site that requests full Activision login credentials and then uses a real-time credential relay to capture triggered 2FA codes, enabling account takeover and access to linked payment methods and other gaming accounts. The report highlights indicators of a fake site, impact to users, and provides mitigation steps such as checking URLs, using official apps, changing passwords, and reviewing linked payment activity.