Quote:
Originally Posted by Agricola
Here is my (weird) experience with Neteller:
So I opened an account for depositing money to my poker account. I didn't use it very often as I played quite seldom and not very seriously - always with small stakes.
So one day I log in and find out that somebody-definitely NOT me-had used an unknown credit card to transfer $260 on my account. Not once but several times. The amount came to my account and was always deposited to an online poker room (I don't remember which one).
I checked the itemization and found out that this procedure had been taken place for a some time already. The amount came always from the same credit card and was immediately forwarded-by a mysterious intruder-to the poker account.
So the intruder had acquired an access to my account and was using it as a shield for stealing money from somebody's credit card. I naturally informed Neteller and they started an investigation. I was pronounced innocent, which indeed was the case, and my account was closed.
Until now I have no idea, how it was possible for somebody to find out my Neteller user name, account number and secret code. In a worst case scenario I could have been blamed for stealing money or even money laundering.
Neteller offered me a possibility to start a new account but I have to say I just didn't feel safe with Neteller anymore after the episode.
|
There have been many complaints about lack of security at Neteller, and one player even stated that a reply from their CS contained the words "we are not a secure service" as an excuse for what happened in their case.
Clearly, it was posible to use a THIRD PARTY credit card on your account to make deposits, and immediate transfers to the poker room. This should have rung alarm bells, but seemingly no-one heard them at Neteller HQ.
Neteller should have had something in place to prevent deposits coming from a card that does not bear the Neteller account holder's name.
The details could have been gained through a Trojan keylogger or screenscraper on a PC used to access the Neteller account, and this would have been enough to compromise it without you ever having any idea. The thief would probably then have changed the registered Email address to prevent you from being alerted by the credit card confirmations that are sent whenever Neteller receives a transfer in from a credit card.
The thief would have to be using another IP address to access Neteller, and normally this would trigger a security lockout and request to confirm that you are using the account on another PC. There is an extra secret question code needed when phoning Neteller, and this can NOT be stolen by a Trojan as it is not used for normal logins.
Perhaps because the account was rarely used, there was not enough information for the security systems to determine that the account had switched access IP addresses and PCs.
YOUR PC IS PROBABLY STILL COMPROMISED!!!!!
Checking this should be a top priority.
The only way to guarantee freedom from Trojans would be to reformat the hard drive and reinstall everything from scratch, including some security software, or even a hardware firewall, before using the PC online again.