From FlyFF WIki
There are numerous methods built into Flyff to prevent players from being scammed. The number one way to avoid it all together is to pay attention to what you are doing. Flyff Staff will not reimburse your items if you are scammed out of any in-game Item. Being scammed is 100% avoidable.
- Always check your trade windows and verify that the items you are expecting and sending are there.
- Always verify the penya amount is correct. Count your Zeros.
- Don't trust someone to "try on" an Item
- Don't trust someone to "pay you on another character"
- Don't trust someone to "upgrade your item"
- Don't trust someone to "mail you the penya"
- If it is too good to be true, it is.
Note: there are times that you can trust someone to do the above, but YOU are trusting them. If they run off with your item without paying for it, it is your fault and you will not be compensated for the loss.
Phishing is defined as attempting to fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. While this is illegal, the probability of any legal action is low. Your account security is up to you. It is up to you to keep your password secret. If you give out your password to a "friend" or a Phishing site, you are responsible for whatever may come of it. If you do find that your account was compromised please contact Customer Support by submitting a ticket, so they may make attempts to prevent it happening to anyone else.
Flyff Staff/WEBZEN & Gala-Net Employees (e.g. CMs) or MODs will NEVER ask you for your password. Do not give it out to anyone.
Avoid websites promising Free Gpotatos, Free Power leveling, Free Items, Exploits and Hacks. Flyff will never have you sign into a site other than ???.gpotato.com to verify your account information.