A newly emerged scam we discovered recently is one where the fraudsters try to impersonate Moonton – a well-know game developer company – to steal user accounts and sensitive data. After doing some research on it, we came to the conclusion this is a pretty standard, run-of-the-mill email scam, similar to the Apple Approval Notice Scam or the Apple Pay Pre-Authorization Scam, yet many users have been targeted by it and some have already fallen victim to its fake claims.
In case you’ve recently received a strange email claiming that someone tried to enter your Moonton account and now you need to secure it, do not trust it. It’s almost certainly the Moonton Account scam in action. It’s even possible that you don’t have a Moonton account and still receive such an email. The scammers behind this scheme are casting a wide net, hoping to randomly reach actual Moonton users who are inexperienced enough to fall for this ruse.
Since this particular scam seems to have become quite widespread since it first emerged and since such schemes are really common, I strongly suggest you read the rest of this post to learn more about how they work, so you can better protect yourself in the future.

What Is the Moonton Account Scam?
Like most scams, the Moonton account scam preys on fear and urgency to trick victims into acting without thinking. The email looks legit at first glance – coming from what seems like an official Moonton domain – but that’s exactly how phishing works. It’s designed to fool you.
Here’s the setup:
- You get an email saying someone is trying to access your Moonton account.
- There’s a six-digit OTP attached, making it seem like a real verification request.
- The email pressures you to act immediately – either by clicking a link or entering the OTP.
And that’s where they get you.
Click the link? It redirects you to a phishing site that looks like Moonton’s real login page. Enter the OTP? That could give scammers direct access to your account (if you actually have one).
What makes this scam extra sneaky is how wide they’re casting their net. These emails are going out en masse, hitting Moonton players and non-players alike. This suggests that email lists have been leaked or sold, meaning your address might have been scooped up from some other data breach.
Oh, and every scam email? It references the same IP address from Singapore. That’s fishy. A real hacking attempt would come from different IPs, depending on where the attacker actually is. This is a classic phishing campaign – not a real security breach.
What to Do If You Received The Moonton Scam Email
In case you did get a Moonton scam email, it’s important to know what to do and what not to do. We still don’t know too much about the scammers’ operation, so even though it seems somewhat low-end and low-effort, you should still approach it approach it with care. Here are the main tips we’ve got for you if you’ve been targeted by this scam:
Do Not Click Anything or Enter the OTP
- Just because the email looks real doesn’t mean it is. Ignore the message. Clicking a phishing link can install malware, and entering the OTP could give hackers access to your account.
Secure Your Moonton Account (If You Have One):
- Change Your Password – If you do have an account, update your password immediately.
- Enable Two-Factor Authentication (2FA) – This adds an extra layer of protection, making it harder for hackers to get in.
Mark the Email as Spam and Delete It:
- Report it as phishing in your email client (Gmail, Outlook, etc.).
- Deleting it ensures you won’t accidentally interact with it later.
Stay Alert for Future Scams:
- Scammers don’t stop. If they targeted you once, they might try again.
- Be skeptical of any security alert that comes out of nowhere.
How to Report The Moonton Scam
Help shut this operation down by reporting phishing emails to:
- Your Email Provider – Flagging it as phishing helps improve spam filters.
- Cybercrime Agencies – If you’re in the USA (FTC), UK (Action Fraud), or Australia (Scamwatch), report it to your local fraud agency.
Lastly, if you do have an account, let the folks at Moonton know so they can warn other users.

How the Moonton Scam Tricks Victims
The Moonton scammers know how to make their messages look convincing. Here’s what they’re doing to reel people in:
Posing as a Real Company
They slap on an official-looking Moonton domain name, making the email appear trustworthy. The branding looks right, the wording sounds official – it’s all a facade.
Creating Panic with Urgency
Scammers want you worried and rushing. If you stop to think about it, you might realize something’s off. That’s why they make it seem like you must act now or risk losing access to your account.
Sending Fake OTPs as Bait
The six-digit OTP in the email? Completely fake. It’s just there to sell the illusion that this is a real login verification request.
Targeting People Who Don’t Even Have Accounts
Yeah, you read that right. Plenty of victims don’t even own a Moonton account, yet they still got the email. If Moonton doesn’t recognize your email when you try resetting your password, then why would they send you a login alert? Exactly.
Repeating the Same Fake IP Address (Singapore)
Every scam email contains an IP address supposedly from Singapore. But let’s be real – VPN services let users fake their location, so the scammer could be anywhere. If this were a real hacking attempt, the IP would be different each time.
Recognizing the Red Flags
Phishing scams have patterns, and once you know what to look for, you can spot them a mile away. Here’s what should instantly raise suspicion:
- You get an OTP email when you didn’t request one
Didn’t try logging into Moonton? Then why are they sending you a verification code? That’s your first clue. - You don’t even have a Moonton account
If Moonton doesn’t recognize your email when you try to reset your password, they wouldn’t be sending you security alerts. Simple as that. - The email includes a Singapore IP address
Every single scam email has the same IP from Singapore. That’s not how real login attempts work. This is mass phishing, not an actual breach. - Suspicious links leading to phishing sites
Scammers want you to click now without checking where the link actually leads. Always hover over links to see the real URL before clicking. - The email pressures you into acting immediately
Real security alerts don’t rush you. If an email says “Act Now or Lose Access”, it’s probably a scam.
Something important you must remember in case you already got scammed – if someone contacts you after your account got stolen, claiming they can restore it for you, don’t trust them. This is definitely a follow-up recovery scam, so you should directly block that person and ignore their messages.
Final Thoughts: Don’t Let Scammers Win
Here’s the deal – scammers rely on fear and impulsive reactions. They don’t need to be smart, just convincing enough to make you act before you think.
The Moonton phishing scam follows a well-worn playbook:
- Fake urgency
- Phony OTPs
- Bogus security alerts
- A dash of fear to push you into clicking
But once you see through it, it loses all power.
So, next time an email like this lands in your inbox, take a breath, slow down, and question everything. Because at the end of the day, the best defense against scams is staying one step ahead.
Leave a Reply