-Hime- says...

Live chat on their site.
Not in game.
Talked to a hacker who worked for a meso selling site who spoke unusually good engrish who told me that was how they made a lot of their mesos. They set up a livechat on their site and since it's a IRC channel (private), it asks you if you want to run java for the IRC. That downloads a keylogger as well as enabling java to run.
I have odd conversations occasionally.

And those are scams. Both OG/Swag don't even request java. I've gotten calls from both organizations who would tell me that the package is ready. I'm sorry but it's these assumptions players make that allow nexon to scapegoat, and frankly they are more reliable than nexon itself.