This may or may not be a serious issue; I haven’t spent enough time in the LOTRO Store to know if there is anything that can be bought for Turbine Points then sold or traded for in-game gold or if everything in the Store is bound, but… there is no additional security on the Store.
The few other F2P games I ever purchased “points” on — Runes of Magic, for example — have always had a secondary password for the Store which is separate from your login.
In LOTRO’s (and DDO’s) case, if your account is compromised and your account tied to your credit card, the hacker can buy all the Turbine Points he wants. Unlikely, perhaps, since the gold sellers committing these attacks just want to get in, get your gold, and get out as quickly as possible, but nevertheless there is a weakness just waiting to be exploited.
Posted in F2P, MMO by Scott Geeding with 4 comments.