* * * Bitstamp is a fraud company...beware!! * * * - page 2.

kmahesh

newbie

Activity: 11

Merit: 0

undeadbitcoiner: Let me clarify..

1. I had 2FA enabled on my bitstamp account
2. I did not receive any trade confirmation email...the thief was an insider (bitstamp)...look at my original post, the thief logged in...placed a limit order AND THEN changed password

nefron: My guess is as good as yours...the thief perhaps knew there was money deposited in my account & quickly decamped with bitcoins.

Yes Microsoft does provide IP's and I have asked for details including mails received/ deleted.

Quote from: undeadbitcoiner on January 01, 2014, 08:35:30 PM

Quote

2013-12-27 17:26:07 96.47.226.22 Logged in
2013-12-27 10:32:48 122.172.192.2 Logged in

Quote

If seed in server database got compromised, then every ones account in Bitstamp is also compromised, not only his account & so far no one complained except him.

That is what the proof of his account was either not secured (2FA Enabled but not was Activated) and his Email also was either in control of others or 2FA was not enabled.
We doing trade of just 100$ we use to activate 2FA and till now everything is well and every time we are been notified how could he invest 1500$ and just leave it its just like you have a Diamond Necklace you keep in your room, you are staying in your leaving room so windows of your room are open so anyone could hookup and take it out so latter in night you cant say that I was in my house but still my Necklace lost.
When you have 1500$ worth necklace in you room do you leave you window open? of course not. In such case you would be blamed not that thief.

CYPER

hero member

Activity: 812

Merit: 502

Until OP provides proof he had 2F auth enabled, it is to be assumed he hadn't.

undeadbitcoiner

sr. member

Activity: 896

Merit: 272

Undeadbitcoiner Will not DIE until 1BTC=50K

Quote

2013-12-27 17:26:07 96.47.226.22 Logged in
2013-12-27 10:32:48 122.172.192.2 Logged in

Quote

If seed in server database got compromised, then every ones account in Bitstamp is also compromised, not only his account & so far no one complained except him.

That is what the proof of his account was either not secured (2FA Enabled but not was Activated) and his Email also was either in control of others or 2FA was not enabled.
We doing trade of just 100$ we use to activate 2FA and till now everything is well and every time we are been notified how could he invest 1500$ and just leave it its just like you have a Diamond Necklace you keep in your room, you are staying in your leaving room so windows of your room are open so anyone could hookup and take it out so latter in night you cant say that I was in my house but still my Necklace lost.
When you have 1500$ worth necklace in you room do you leave you window open? of course not. In such case you would be blamed not that thief.

nefron

newbie

Activity: 58

Merit: 0

my guess is your email id has been compromised, as soon as you received the mail(to which he had access to) stating the funds are transferred, he logged in made a buy and ran away.

am not sure whether microsoft provides list ip addresses from which user login took place like in gmail, if there is such option check those logs too, you might find a clue.

dishwara

legendary

Activity: 1855

Merit: 1016

Quote from: escrow.ms on January 01, 2014, 02:32:22 PM

Quote from: dishwara on December 31, 2013, 07:52:18 AM

With 2FA enabled its impossible to hack your account unless, some one also gains access to your mobile also.
Its really confusing.

What if 2FA was enabled on a infected pc that was recording all keystrokes or grabbing forms.
XD

As americandesi said 2FA is useless if seed is already compromised by some hacker.

I think you cant use same 2FA generated code many time. Its not password, its OTP. I think it expires after 5-10 mints, not sure.

Besides his logs says the log in happened in a 7 hours gap.

Quote

2013-12-27 17:26:07 96.47.226.22 Logged in
2013-12-27 10:32:48 122.172.192.2 Logged in

If seed in server database got compromised, then every ones account in Bitstamp is also compromised, not only his account & so far no one complained except him.

kmahesh

newbie

Activity: 11

Merit: 0

I'm 100% sure my laptop is not infected.

However there is just one possibility; I installed 2 bitcoin price tracker add-ons in Firefox...could this be logging key strokes? Huh

http://i44.tinypic.com/23kvgbc.jpg

-Mahesh

escrow.ms

legendary

Activity: 1274

Merit: 1004

Quote from: dishwara on December 31, 2013, 07:52:18 AM

With 2FA enabled its impossible to hack your account unless, some one also gains access to your mobile also.
Its really confusing.

What if 2FA was enabled on a infected pc that was recording all keystrokes or grabbing forms.
XD

As americandesi said 2FA is useless if seed is already compromised by some hacker.

kmahesh

newbie

Activity: 11

Merit: 0

Just to be on the safer side I have raised a support request to Microsoft to provide me all IP addresses of successful logins from my email ID and all emails received/ sent/ deleted during the period 24 - 30 Dec '13.

I can confirm I haven't received an email for temporary password on bitstamp or the transaction verification email etc.

Something is very very strange.

americandesi

hero member

Activity: 518

Merit: 500

BTC < > INR & USD

Quote from: dishwara on December 31, 2013, 07:52:18 AM

With 2FA enabled its impossible to hack your account unless, some one also gains access to your mobile also.
Its really confusing.

It is not impossible. It is still possible. What if the 2FA Seed file itself is compromised on the server database. Then the attacker can generate the OTP code. (Remember the famous RSA Secure ID hack from 2011.?)

Another possibility is, when you login with 2FA from your computer, then usually your browser cookie will be cached and if your computer has been infected with all the new bitcoin related malwares surfing up, then it is possible that the user's computer was a zombie in the hands of the hackers.

dishwara

legendary

Activity: 1855

Merit: 1016

With 2FA enabled its impossible to hack your account unless, some one also gains access to your mobile also.
Its really confusing.

subvolatil

hero member

Activity: 546

Merit: 501

Cypherpunk and full-time CryptoAnarchist

Quote from: ajax3592 on December 31, 2013, 05:18:48 AM

That's the first time I've ever heard a bad experience with Bitstamp.

If I were to buy a Bitcoin now, they are the ones I'll wire the money onto as first priority.

Gotta be more careful maybe.

I think we should maintain a thread here for buying/selling bitcoin - the old fashioned way. Everyone put's their buy sell orders and OP updates it on the first post.

I had one running a few months back let me bring it back alive.

Edit : use this

https://bitcointalksearch.org/topic/purchase-sale-thread-for-bitcoin-bid-0000ask-0130-inr-194102

ajax3592

full member

Activity: 210

Merit: 100

Crypto News & Tutorials - Coinramble.com

That's the first time I've ever heard a bad experience with Bitstamp.

If I were to buy a Bitcoin now, they are the ones I'll wire the money onto as first priority.

Gotta be more careful maybe.

I think we should maintain a thread here for buying/selling bitcoin - the old fashioned way. Everyone put's their buy sell orders and OP updates it on the first post.

escrow.ms

legendary

Activity: 1274

Merit: 1004

Quote from: kmahesh on December 31, 2013, 02:22:47 AM

Bitstamp is blaming it on malware...I'm using my office laptop which has no dodgy software on it and has Symantec running.

Clearly...bitstamp is to blame for my loss.

Symantec is worst anti-virus dude and no anti-virus can keep your pc safe.
Also are you sure that no one else except you accessed that laptop or your email id? Possibly someone that knows you personally did this.
I will advice you to install malware bytes anti malware and scan your pc. If you have downloaded anything recently scan it on virustotal.com and btw do you have Java enabled in your pc?

laserwolf

newbie

Activity: 54

Merit: 0

Quote from: kmahesh on December 31, 2013, 02:22:47 AM

Amitabh: My bitstamp account was compromised. With a few minutes of me receiving an email from them saying they had deposited the funds in my account, bitcoins were purchased & withdrawn. I did not receive any email in my account. Yes I had enabled 2 factor authentication!!

Bitstamp is blaming it on malware...I'm using my office laptop which has no dodgy software on it and has Symantec running.

Clearly...bitstamp is to blame for my loss.

I don't think you had enabled 2-factor authentication. Did you register your phone, and do you get a 6-digit code on it that you need to enter when logging on?

undeadbitcoiner

sr. member

Activity: 896

Merit: 272

Undeadbitcoiner Will not DIE until 1BTC=50K

Quote from: Benson Samuel on December 30, 2013, 11:17:13 PM

Quote from: undeadbitcoiner on December 30, 2013, 03:34:50 PM

Sorry to hear about your loss
But Did you activate your 2 Factor?
when you invest that money you must have activate your 2 Factor in Bitstam account and even in you Email.

I actually have some Damn Question
How you Deposit money in your Bitstamp Account from India its hard to transmit money (As i know and as i heard some news)
Quite Interesting point is for every small transaction bitstamp send SMS and even Email to verify transaction so how your account activated and how your transaction took place?

Someone on reddit had also confirmed making a deposit into Bitstamp from India.

May be bitstamp have different activating option for different country.

Quote from: kmahesh on December 31, 2013, 02:22:47 AM

Amitabh: My bitstamp account was compromised. With a few minutes of me receiving an email from them saying they had deposited the funds in my account, bitcoins were purchased & withdrawn. I did not receive any email in my account. Yes I had enabled 2 factor authentication!!

Bitstamp is blaming it on malware...I'm using my office laptop which has no dodgy software on it and has Symantec running.

Clearly...bitstamp is to blame for my loss.

2FA was activated but you didnt get any information? How is it possible?
If you really activated your 2FA still your account was compromised then its a big issuee.

kmahesh

newbie

Activity: 11

Merit: 0

Amitabh: My bitstamp account was compromised. With a few minutes of me receiving an email from them saying they had deposited the funds in my account, bitcoins were purchased & withdrawn. I did not receive any email in my account. Yes I had enabled 2 factor authentication!!

Bitstamp is blaming it on malware...I'm using my office laptop which has no dodgy software on it and has Symantec running.

Clearly...bitstamp is to blame for my loss.

Benson Samuel

legendary

Activity: 1890

Merit: 1000

Landscaping Bitcoin for India!

Quote from: undeadbitcoiner on December 30, 2013, 03:34:50 PM

Sorry to hear about your loss
But Did you activate your 2 Factor?
when you invest that money you must have activate your 2 Factor in Bitstam account and even in you Email.

I actually have some Damn Question
How you Deposit money in your Bitstamp Account from India its hard to transmit money (As i know and as i heard some news)
Quite Interesting point is for every small transaction bitstamp send SMS and even Email to verify transaction so how your account activated and how your transaction took place?

Someone on reddit had also confirmed making a deposit into Bitstamp from India.

undeadbitcoiner

sr. member

Activity: 896

Merit: 272

Undeadbitcoiner Will not DIE until 1BTC=50K

Sorry to hear about your loss
But Did you activate your 2 Factor?
when you invest that money you must have activate your 2 Factor in Bitstam account and even in you Email.

I actually have some Damn Question
How you Deposit money in your Bitstamp Account from India its hard to transmit money (As i know and as i heard some news)
Quite Interesting point is for every small transaction bitstamp send SMS and even Email to verify transaction so how your account activated and how your transaction took place?

Amitabh S

legendary

Activity: 1001

Merit: 1005

Sorry for your loss.. But we'd like to know more about what happened to help others in future.

Was your bitstamp account compromised? or was your email account compromised.

Please share more details.

thenoblebot

sr. member

Activity: 364

Merit: 252

Sorry to hear about the situation bro .......... will keep in mind about what you said. I was considering the same about transferring some funds.

Maybe this is the wrong time to ask you, but what did you tell the HDFC bank officials when sending the money ? I mean the purpose ... just curious if they didn't frown when you wrote the purpose of transmitting the money .. cause I was thinking the same with another bank.

Anyways what happened was bad ..... try forgetting about it and concentrate on trading ... maybe you will make up for the loss ... whats gone is gone , especially true in the crypto world.

Good luck and cheer up.

Topic: * * * Bitstamp is a fraud company...beware!! * * * - page 2. (Read 9343 times)