Apart from stealing cookies ; which has been an issue for a long time , and 2fa will prevent some login issues - Why are your payments team or security allowing a new card to be added and able to withdraw to same card. The security measures that are in place to stop this type of fraud was put in place for that very reason. Even if every player logs on with enhanced 2fa, if this gets by passed your internal checks , will fail.
Does this mean all and any anti-money laundering, fraud protection and closed loop is no longer a procedure ? Or clearly compromised internally at VS.
You clearly have a catastrophic failure of internal controls ; if VS payments team was running correctly , the withdrawal would not even be possible.
What are the reasons to the closed loops backstop failing ?
Sorry to say your payments team are honestly the worse, in my own case they cannot update withdrawal details , and have told me it’s IMPOSSIBLE to do (Note you told me the same thing in January and I got the COO of YOUR own business partner Gigadat to contact VS to walk you through how to fix , yes eventually got fixed it took 4 months, 10 weeks ago I sent the same instructions and contact details of COO of Gigadat to the payments team and STILL could not do, And clearly emailing the Chief Operating Officer was clearly too complicated a task to resolve !)
If the payments team can not perform a very SIMPLE task to the withdrawal process, changing details, I am not shocked you are having failures with other basic payment team task , I predict this will get worse
Around 30–35% of our customers add and use multiple payment methods, so this is perfectly normal behaviour and not something that should automatically be considered suspicious.
Regarding the recent attacks, the issue has primarily involved one specific payment method, Trustly. As the attackers have managed to gain access to customers’ devices and sessions, they have been able to operate within what appears to be a legitimate customer session.
When customers deposit using payment methods that do not support withdrawals, we must provide an alternative way for them to withdraw their funds, such as a bank withdrawal through Trustly. Unfortunately, this is one of the methods the criminals have been targeting.
As mentioned previously, we are already working with payment providers to introduce automated verification of customers’ KYC details through API integrations. This will allow us to perform additional verification of withdrawal details and further strengthen our protection against these increasingly sophisticated attacks.
I also want to highlight something important:
To date, no customer has suffered any financial loss as a result of these attacks. In every case where criminals have successfully withdrawn funds, we have refunded the affected customer in full, and we will continue to do so. Protecting our customers is our priority, and we remain committed to ensuring that customers are not financially affected when they become victims of these types of criminal activities.
Our AML, fraud prevention and closed loop procedures remain in place. However, cybercriminals are constantly developing new techniques, and we continuously review and enhance our security measures to address emerging threats.
Regarding your own case, I’m not familiar with the details, but I will personally look into it during the day to better understand the situation and why it has taken so long to resolve.
