My account got hijacked....

[DiamondGeezer]

Is it possible you got compromised through using Wi-fi? I think it would be more likely someone got to view your webpages rather than a keylogger attack. I am certainly no expert though! Perhaps the computer experts among us could elaborate.

Far more likely to be your end than at the Casino IMO. If ever it happened at a casino it would be more likely to be on a much bigger scale I would guess. Obviously this is just a guess but the odds are it was much more likely you got comprimised your end.

[steffigraff77]

Yeah..thats the problem...impossible to say what caused it?
I do use wi-fi but it is secure ? I suppose if a thief wants to break in they can always find a way.

All i can do i think is to make sure i do not have more than a few hundred in my account from now on.

[XOXOXOXOXOX]

Originally Posted by steffigraff77

Has anyone else had this kind of experience?

Someone hacked into my moneybookers account. Luckily i had not funds there at that time. MB immediately blocked all outgoing transactions. I received 1.5K winnings from a casino and not able to make a withdrawal since their investigation takes forever.

I posted before that my Visa was compromises as well. I believe it could be related since MB had the details of my visa.

[AussieDave]

Originally Posted by steffigraff77

I do use wi-fi but it is secure ? I suppose if a thief wants to break in they can always find a way.

I was using wi-fi for 5 weeks back in Feb 2008. I was sure I was secure but alas I was not. Some scum bag managed to piggy back the signal and had a jolly time at my expense.

Fortunately I'd been with the same telco for years. Was easy to see I only used 2.5 - 3 gig max d/l a month for the last 5 years. That saved me forking out $1,500AUD.

So believe me it is possible.


Cheers
T

[vinylweatherman]

Originally Posted by steffigraff77

This is the response i got from the casino ..(again i have held back the names..): Sorry i may not have been clear above but i meant above that they were keeping the amount they could not recover.

We have reviewed your poker account and the gameplay and can see that your account had £2100 deposited from your ***** account and this was passed through to another account on the network.

We have investigated into this and have recovered funds from the account in question and this has been credited back to your poker account. A total of £1907.40 has been recovered and this has been re-credited to your account

Unfortunately £192.60 has been played by the account in question and these funds have been lost to various other players in the network which we can not recover.

We will not be refunding the £192.60 as the breach was unfortunately on your end outside the ****** Network and as per our terms and conditions Clause 5.1 Articles (viii) and (ix) it is a player sole responsibility to maintain the integrity of their usernames and account numbers as well as their passwords.

The funds are sitting in your account and as it has been compromised we can not re-open it until we issue you a new password. However this can not be done until we have your confirmation that your email address is secure and not been compromised and if it has please provide us with a new email address for us to update your account and we can send your new password to this relevant email address.

Can you please at your earliest convenience confirm whether your email has been compromised and if so supply us with a new one so we can send you a password so you can back into your accounts

Thank you for your time and I look forward to your correspondance

Regards


There is no evidence that my email has been compromised. Just their hunch i think. I have written back with vinyl's thoughts...In other words how do they know its my end??? It could have been an inside job at this particular casino. Its a fairly reputable place btw...( afaik)

This is not so bad (could be better though).

BEFORE getting too confrontational, recover the money they say they HAVE recovered & placed back into your poker account. This is all but £200 of what was taken. Change your email address if at all possible, and then get them to send you a new password. It is a bit silly that they think it OK to use what might be a compromised email address to do this, because if someone HAD compromised it, you are handing your NEW email address to them, which they can hack in order to get hold of your NEW password.
I would therefore add another stage. Once they have sent you a new password, change it again through the software, and if possible, change your email address again. This means the new email address you created to reset the account is a "one use" one, a bit like those virtual credit cards that produce a new number for each transaction.
None of the above will be of use though if there is a serious breach at your end. Scan your computer with anti-malware software and keep a log of the results (evidence). Check the security of your internet connection. Check access to your PC, if someone can get into your property, they can usually get onto your PC, often this would be an "inside job" at your end.
If you can find nothing untoward at your end, it weakens the casino's case that it was YOUR fault. There have been a few cases where the casino/poker room have stuck to their guns that any problems are at the player's end, or are just not there, and later on it has turned out to be at THEIR end, usually rogue employees. The Absolute Poker scandal was one where the breach involved higher level rogue employees, rather than the low paid bottom rung of CS. A casino's databases can store enough information to allow this. You can see this when you go into banking and see that all the deposit methods you use have been "registered". To appear to you in the banking menu, they have to be stored on a database at the casino's end, and databases like this are often the target of thieves.

Once you have managed to recover what you can back to your web wallet, you might consider closing down your casino account. You should then change your security information with the web wallet, or even close it and use a different deposit method.

Use of a credit card is safest in terms of your ability to get redress if screwed over, but it does mean that casinos ask for more documentation from you.

If the casino really valued you as a customer, you might even be offered back the remaining £200 as an incentive to come back to them if you DO close your account because of this episode.

[Jasminebed]

It might take a bit longer, but ask the casino to snail mail you your new login password, and withdraw what money there is PRONTO. You might make this request by telephone even.

I've received emails with other player's account details. I never made any attempt to log in or guess passwords, but then again I am not a thief.

The casino acknowledges that someone STOLE your funds. Since they lost a couple of hundred bucks to other players they can't ask the other players for their winnings back. I know if I played and won at XYZ Poker and later had the casino email me...sorry, we would like $92 back that you won from player ABC on July 9th since he was playing with stolen funds, and therefore you didn't win, I'd be right miffed.

Please keep us posted on how this progresses. I'm glad your losses were not the entire $2100...but I have accounts I don't log into for more than a month at a time.

Good luck at recovering all of your lost funds.

[steffigraff77]

Ok, the lastest is that Mansion casino have returned the funds they have recovered to my neteller account. They are not responding regarding the missing £200 or so.

Neteller are dragging their feet regarding my re-opening of my account.

I have asked them to cover the loss and they haven't given me a reply either way yet.

[vegetagirl2008]

Originally Posted by Trezz

I was using wi-fi for 5 weeks back in Feb 2008. I was sure I was secure but alas I was not. Some scum bag managed to piggy back the signal and had a jolly time at my expense.

Fortunately I'd been with the same telco for years. Was easy to see I only used 2.5 - 3 gig max d/l a month for the last 5 years. That saved me forking out $1,500AUD.

So believe me it is possible.


Cheers
T

I would put a password on your WI-FI if anyone tried to connect they would have to have a password. Its sad you have thieves out there who steal bandwidth.

[vinylweatherman]

Originally Posted by steffigraff77

Ok, the lastest is that Mansion casino have returned the funds they have recovered to my neteller account. They are not responding regarding the missing £200 or so.

Neteller are dragging their feet regarding my re-opening of my account.

I have asked them to cover the loss and they haven't given me a reply either way yet.

Now that Neteller have the money, you can refer the issue to the FSA. If Neteller fails to respond, tell them they have 14 days to respond to you, or you will consider the issue in "deadlock" and take it to the Financial Ombudsman.

Normally, financial institutions will cover the losses of customers who are victims of fraud. Neteller have to prove you were negligent, rather than be allowed to assume it.

Neteller have a history of bad practice, which makes their customers easy prey. Among these are:-

Sending emails to their customers, sometimes addressed "dear customer", asking them to "click here to register" for a promo. I checked a couple of these with Neteller, and they said they were GENUINE WTF

Since Neteller customers are expected to "click here" in GENUINE emails, and also give out security details when Neteller phone THEM, Neteller themselves show breathtaking negligence when it comes to demonstrating good security practice to their customers. Scammers who know how Neteller operate will find it unusually easy to hook victims by sending FAKE promos, some of which will find genuine Neteller customers.
In one case at least, I found a Neteller promo could ONLY be accessed by using the "click here" link the email, and could NOT be accessed through the website, not even when logged in!

[steffigraff77]

Yeah..good points.. My main issue with them is why they send secure ID's via email and don't give you the option of changing them? Or indeed they are just are just digits rather than letters and digits..so possibly negligent?

I have about 5/6k in there, most of which i will withdraw and then start the FSA idea if things don't get resolved.