Topic: Duelbits.io | WEIRD Withdrawal (Read 261 times)

Well obviously user is at most times at fault, but in the rare case where casino is at fault, how would the user even proof that? There is no ways so yeah. Duelbits should just activate Email Codes for non-2FA accounts and this shit wouldn't have happened. Since my E-Mail has 2 Factor Authentication.

The wallet that received the withdrawal, later sent the XRP to a wallet that belongs to ChangeNOW.
https://xrpscan.com/account/rKKbNYZRqwPgZYkFWvqNUFBuscEyiFyCE

You can file a report but I am not sure they will be willing to help you for an amount only worth $150.

It is common that if a single user loses funds from any gambling site, it means they have nothing to do for that user as that has been done by the users or by the users' mistakes. But you are correct that if the same case happens for several people at the same time, then they will check, and if they come to know it was a system issue of them, then they must have recovered the loss for the hack.

Unfortunately casinos don't refund generally because it's usually very hard to determine if the hack is real or if it has been done by the customer himself, alone or with the help of an accomplice living overseas. But if other people report similar cases than what you've undergone, a security breach from their part could be revealed and they would have to compensate aggrieved customers. Your password hasn't been changed as I understand, so it's surprising to get hacked yourself if you were mainly using your smartphone to gamble there. Are you using a password manager? Which one? Was your password registered into it?

OP, I'll repeat, is there any other issue that you'd like to point out here and have it discussed and attended? If there isn't, I am highly encouraging you to lock this thread to keep it away from meaningless, borderline spamming, posts.

I do not think that changenow will be able to resolve the problem as the scammer if anyone scam you has transferred the fund to changenow and took other crypto to his/her account which is not reversible.
And I could not understand how you have been hacked but I think you should take necessary steps while you have received the email.

There was an old case where a player of a very big casino got hacked and their fund drained despite they've activated 2FA, so basically their case is even more severe than yours. Not saying this to downsized your case, just to tell you that there was a similar case [with different casino] with an even more serious breach. And AFAIK, the casino didn't make it public about how the hacker bypassed the 2FA. If they made an investigation and get to the bottom of it, they keep the notes internally.

I've activated 2FA so I don't think theres anything else I need to do right now. As for the reimbursement I know your theory makes sense in a way but they should be able to chase down the transactions or atleast make find out how my account got breached. It's impossible for my devices to be malware infected especially the iPhone.

Also proving would be hard but it's pretty simple to make your theory just a theory in this case. I would file a police report and get that dude to pay up for his crime so how would that benefit me or him if he was a friend of mine especially for 160$. Would it be like 10k or something I would understand it obviously but yeah.

Also the support is very hard to talk to they won't give me any answer except wait 7 days for the account suspension to go away.

What the casino will do is some research to ascertain how exactly your account was breached, if they come to the conclusion that it was a fault from their end, they should reimburse you and fix the flaw asap. If it's not, it will be concluded that you made a security risk which exposed your account and they are not obligated to compensate you for your loss.

I will advice you wait to ascertain the exact cause of the breach before making another deposit. The scammer could still have access or is able to regain it, and may still be able to withdraw any money sent into that account.

I personally don't believe you will get reimbursed for what happened, and it's going to be difficult to prove how it happened. The devices you use may have been infected with some malware from before. I doubt that someone randomly attempted to log in to your account and managed to guess the password.

The problem with these types of incidents is that the casino can't know that it wasn't you who was behind everything. You might have given a friend or a relative in a different country access to your account and told them to withdraw the remaining funds. After that, you can claim the money got stolen or mysteriously disappeared and ask for reimbursement. I am not saying that's what you did. I am expressing a theoretical possibility of that happening.

Unfortunately, I am not that close with Duelbits representative, so I can't talk to them for possible reimbursement as a good gesture. And again, they don't have to do it.

If I may suggest, though, the best course of action you can do right now, instead of looking for reimbursement, is to secure your account. I read that it's currently locked and I assume you and the team do that to secure it. Once opened, and suppose you're willing to stay with Duelbits, I'll strongly suggest 2FA. This also apply to other casinos you're currently playing or intending to sign up in the future.

Better safe than sorry.

That said, is there other issue that you want to discuss about this incident?

I've just seen that the money went to changenow.io. I have wrote them the incident and hope they can maybe resolve this issue but I think the scammer already exchanged the money probably to monero or something and left the exchange already. I hope the account is under a real name so I can atleast knock off one scammer out of millions in this world..

I've got the link from the forum here. Registered over PC and have it saved here. I'm 100% sure a phishing link isn't the cause of this. Bruteforcing may be possible but that requires like 100+ (or more depending on sucess) attempts which IMHO should raise concerns who tries to enter the account, especially when I'm already playing live BJ.

Also another Session from a different country or place presumably should of just locked my account rightaway but I'm not working for the security team at Duelbits this is just a suggestion.

I just wanna prove it wasn't me that requested that withdrawal and maybe out of goodwill they will reimburse me hopefully. I'm plat 3 on Stake and Emerald 2 on Roobet. Wagered like 10k in a day at duelbits so the 160$ isn't very much but it's still money I can turn to 1k for example. My account is locked for the moment until further notice, I asked them now if there is a chance of a reimbursment or not, I'm not tryna wait like a week for 160$ that I could depo just now. Just wanna get the account unlocked so I can depo again and withdraw any winnings.

This is ofcourse a small amount of money to pay. I had 1.4k in the account before this happened but luckily cashed those out and only left 100$ inside. Talk about luck there.

Thanks anyways for your answers. I know it's my fault if you look at it that way, but there should be atleast some security concerns when you try to enter the account from a completely different place or try to login like 200 times in a matter of minutes, that just screams scam but yeah like I said I ain't working for Duelbits so maybe they could implement this.

You can never be so sure that you didn't do anything wrong and it's not their fault either to reimburse the lost amount. Probably someone had access to your email or it's just by random brute forcing either way you should have taken all the possible measures to secure your account. My opinion is you lost some money but it's not that much so just consider it as a lesson and never repeat the mistake anywhere.

How did you access duelbits right from the first day, the time you create an account, up to the time you got notification email? Did you manually type the address? Click a link from of the signature here? Typing "duelbits" on search engine and click the first result? Bookmark? I am trying to figure whether you accidentally accessed phishing link from a search engine.

As for will they reimburse you... well, technically it is not their fault and they are not the one who scam you here. So, IMO, no, they will not reimburse you. If they do, that'll be out of good gesture instead of obligation.

Hey Guys

Yesterday I created a account at duelbits.io. Have played and lost some money. Today I made 2 Withdrawals worth each 700$. At the second withdrawal I left 110$ in my wallet. With that balance I went ahead and played Duelbits Blackjack almost going all in every round. After about 15 minutes I get a E-Mail that a new Session has been started. At that time I was a little bit skeptic but I was gambling at bj and was betting so I just thought maybe it's a delayed E-Mail from when I logged into the phone or at my pc. I bet a bj hand for 60$ (balance was 160) and after accepting the bets the error came up that balance is not enough, immediatly after that I contacted support and I'm now in contact with them. I didn't have 2FA on my account on duelbits but I can't fathom how someone got into my account so fast and was able to withdraw that money.

I've sent support everything I have to prove to them that I couldn't even make the transfer.

How is this even possible? I haven't clicked any links I'm not that dumb. 2FA on E-Mail is active so they couldn't get it from there

My main question is will I ever see a reimbursement for this or no. Like if they really look into it they can probably see the session has be started from somewhere completely else than what I was playing from at that time at the blackjack table. Just wanna hear some of you who maybe had the same experience or have something similiar happened.

My acc got blocked for the moment. I changed password and have activated 2FA.

Thanks for any input

This is the wallet the withdrawal has been sent to. : rnBCYTU5zNi4jgYE9BJ3At4q23hUDMGaPK -> is there a way to find out which exchange that is? If yes there has to be a name to that wallet and I would atleast like to have someone file a report at said exchange. If it's a cold wallet obviously nothing I can do just trace the transactions until it''s somewhere