What these people are after is your gold. They will log into your account, steal all your gold and sell all your items for gold. These are the gold sellers. This is why it is very important to NEVER BUY GOLD. This is where the gold you are buying comes from, someone's hacked account. They will also message other players, from your account, with "Special Deals" or tell them they are "Lucky Winner" in an effort to get them to log into a website using their credentials so they can hack their account.
Make the game better for everyone, don't buy gold and never go to one of the sites that you receive in a message, in game e-mail, or any e-mail that is not from Blizzard Entertainment, you will end up with a key logger and a stolen account. E-mails from Blizzard will always end in blizzard.com or battle.net, accept no substitutes.
Blizzard will NEVER put "hot" links into their e-mails with instructions to click on it to verify your account information. Blizzard will NEVER ask you for your account information in an e-mail, in game e-mail or in game message, they already have your account information. And finally Blizzard will NEVER ask you for your password, EVER.
Here is the e-mail I received, you will notice a couple typo's, formatting issues and mis-wording. I am sure all Blizzards e-mails are proofed before they are sent out. I have removed the links for your safety. I highlighted the formatting, grammar and spelling issues in Yellow and the part where they are asking for my password in Red.
World of Warcraft -> Legal -> End User License Agreement
Thank you for respecting our position on this matter.
** We request that you verify your legitimate ownership of the account here:
Blizzard staff will verify your account information submitted in two days, please do not modify your account information during this time . It will not affect your game uptime.If you are unable to successfully verify your password . using the automated system, please contact Billing & Account Services at 1-800-59-BLIZZARD (1-800-592-5499) Mon-Fri, 8am-8pm Pacific Time or at ***Link Removed***.Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.
The World of Warcraft Support Team Blizzard Entertainment