Japan Pokémon TCG Warns of Phishing Emails Spoofing Campaigns: Fake Login Pages Bait with Monetary Rewards

The official Japanese Pokémon Trading Card Game website warned users on November 6, 2026, that multiple phishing (fraudulent) emails impersonating a "Pokémon Card Game campaign" had been identified. According to the notice, these emails direct users to web pages at addresses other than the official membership service "Players Club," asking them to register or log in and claiming that monetary rewards can be received upon logging in.

Three Characteristics of the Fake Emails

The notice outlined three "characteristics of suspicious emails." The official criterion for determination is the web address. The Players Club page begins with https://players.pokemon-card.com/, and any page with an address that does not begin with this is not the official Players Club.

| Category | Details Stated in Notice | |---|---| | Prompting registration | Asks users to register on pages other than Players Club (addresses not starting with players.pokemon-card.com) | | Prompting login | Asks users to log in on pages other than Players Club immediately after registering or if already a member | | Monetary bait | States that users can receive monetary rewards upon completing login |

The company stated that the confirmed emails were "sent by a third party spoofing the sender address" and were not sent by the company. This means that even if the sender displayed in an inbox appears to be an official address, that alone does not verify the email as genuine. The notice did not provide specific examples of the circulating email subjects or sender addresses.

Company: "No Unauthorized Server Access or Personal Data Leak Confirmed"

The company stated that no unauthorized access to its servers or leaks of personal information have been confirmed at this time. However, the announcement used the phrasing "no facts have been confirmed at present" and did not disclose where the recipient list originated or how many people were affected. This report also makes no definitive claims regarding those aspects.

The preventive measures provided in the notice are as follows:

If you receive a suspicious email, do not click on URLs or links, and delete the email itself.
Even if there is an attachment, never open it.
Even if you have already opened the link, never enter your ID, password, credit card information, personal information, or similar details.

For Users in Korea

This notice concerns the Japanese official website (pokemon-card.com) and its membership service, Players Club. As of checks conducted on November 8, no notice of the same content was found on the official Korean website (pokemoncard.co.kr), which handles the Korean version, under its notice and card game news lists. The most recent post under Card Game News was dated November 3.

For those who hold a Players Club account to participate in events in Japan, official guidance advises checking whether the address begins with https://players.pokemon-card.com/ before clicking any links whenever an email promoting a "campaign" or "reward" is received.

Sources

This article was written with the help of AI based on public sources. Responsible: 김태희 기자 AI principles →

Three Characteristics of the Fake Emails

Company: "No Unauthorized Server Access or Personal Data Leak Confirmed"

For Users in Korea

More in News