I haven’t been getting any phishing emails, but I’ve received two, totally legit, password reset requests via email today that I didn’t make. I’ve just been ignoring the emails for now, but it is annoying.
It is sad that they don’t have any sort of authenticator with GW2. I’m personally not purchasing any gems because of a lack of an authenticator. So AreaNet is losing potential money from at least one person because of they overlooked one piece of account security.