Topic: OKPAY is scam (probably not) (Read 14066 times)

OKPAY just started to work under Cyprus license. I found this info on their website in news section. Does any one know how it will effect on online banking?

OKPAY is decent but it requires lots of documents, with very inefficient customer services, I did the identity verification for a week. And one of okpay recommended exchange is a scam.

The email is just a scam to get the login details of a user. I don't own an apple iphone but still get mails saying that your account needs verification LOL. This is just to get the login details and the moment you login to your account from that link, your balanced is transferred automatically. One needs to beware of such phishing emails.

Not a scam but terrible customer service  and near impossible verification for me even though i am fully verified with moneypolo with same id. gave up on them in the end probably not scam but just shit and wouldnt trust shit with a penny

i use sometimes okpay , 15700 usd inside my account , i never had any problem using their services (virtual credit card + physical credit card). May be you used a phishing link .

I don't know? I use OK PAY all of the time and it is a main payment system for many legitimate Bitcoin platforms. 

Many people WOT reported having their accounts frozen.
In addition to the support service is a drug.
Could it be that the money deposited in OKPAY is to a very high risk of being stolen?
https://www.mywot.com/en/scorecard/okpay.com?utm_source=addon&utm_content=rw-viewsc#page-1

lucky you - for me okpay selected me to be scammed

sad to hear that. i got 5600 in okpay and so far no problems at all. 2 year customer and almost 43k in transactions. got virtual and psychical debit card. its true i have to declare my money every 2 months but in rest all is ok so far.
i hope will stay that way

i like to update this post, it is now december 7, 2013

the short message is: okpay is a scammer company who is keeping my wired funds of $2000 and ignoring me of all my support tickets, i am not alone, other folks in this forum are also waiting for their funds to get credited, the sad story is - most likely we will never get credited, okpay need to be arrested by the authorities/anti-fraud/anti-scam group

sadly there will be more victims, so this is my way of sharing to everyone who reads this - wait for a good reputable bitcoin/altcoin exchange - the top exchanges right now are questionable and risky

here is my story:

i am a victim of okpay which i used to fund my btc-e account, btc-e introduced me to okpay, its the lowest way to fund my btc-e account, i inquired to okpay and they were quick to answer, once i sent my funds by wire, that's it, goodbye money, they do not answer anymore, they ignore my support tickets, and delete any new support tickets i make

i called their phone no. and it turns out to be just an answering machine and london phone no. that is an answering machine

i check their office address and its a po box number in the british virgin island - very convenient to hide from the authorities and the from the police

i make several more support tickets and okpay deletes my new support tickets

they have a forum.okpay.com - posted complaints there - after a few hours - they have a forum admin who cleans up all the negative post, so its always clean, a shiny forum of forum.okpay.com - all negative post deleted, victims go here and they will see okpay is such a good company - beware they are not, they are a scammer company

the tipping point of how i know i was scammed is this article about btc-e:  http://www.coindesk.com/btc-e-exchange-banking-issues/

this tells me a lot about btc-e and okpay and any bitcoin exchange who uses okpay - one such exchange is the famous  mtgox.com

you can fund your mtgox.com account using okpay - if you do - most likely you will be a victim as well

some say okpay is a selective scammer, search reddit.com - selective or not - okpay is still scammer, doing selective scamming gives them plus points in forums from okpay customers who are not victims - a scammer company strategy

okpay is also in ripoffreport.com

okpay to my surprise has a green color in mywot.com - which makes mywot.com a flawed reputation tool - i believe you can buy yourself reputation points in this site (green color as of nov-dec 2013)

sadly i did all this checking after i got rip offed my $2000 by this scammer okpay.com

life lesson for me - hope you get to read this.. before sending any money to okpay

Have you noticed that the MX record for mail.regall.net is empty, as in non-existant?
They probably meant to say mx:regall.net
And you are correct, in this case it doesn't make sense. And it's about THIS case we are talking about.
This would work "v=spf1 a mx ip4:173.224.112.179 ~all" and it would save external servers from resolving hostnames to find the IP addresses.

They would probably do a better job if they asked their mail service provider to write the SPF for them instead of just guessing.

But yeah, I'll just STFU and let them be.

No, I could have an A for mail.example.com pointing to 192.168.1.1 and an MX for mail.example.com pointing to not-mail.example.com, and not-mail.example.com could be on a different IP address (192.168.1.2). Yes, in this case it may not make sense, since they are the same, but it allows for the MX for mail.regall.net to be on a different host and still send mail.

I won't get into why this is a bad idea though, too much ot.

That would be true if they used IP addresses or different hostnames. Given that they are using a hostname, using the same value on both is redundant, even if the hostname resolves to 10 different IP addresses (which isn't the case).
I didn't word it correctly, sorry about that. I fixed my statement on the above quote.

It's possible for both values to be different, and happens often with large installations.

Only the fact that they list an A record followed by a MX record that resolves to the same IP as the A on their SPF says everything. The +all at the end is just the icing on the cake lol

Yep, thank you!

Well, at least now you have your DNS configured with SPF properly (and thus the next attempt if there is one will likely go to my spam box):

"v=spf1 a:mail.regall.net mx:mail.regall.net ~all"  (reportedly was +all before, per MagicalTux above).

 - http://en.wikipedia.org/wiki/Sender_Policy_Framework

https://www.okpay.com/en/company/news/okpay-aml-scam-prevention.html

The situation is exactly as described. Security department found illegal activity (fake documents and money laundering case) in order to resolve the situation and clear the transaction a scammer was asked to complete verification steps.

Wow, what a dick move.

Nice, now the disgruntled customer (or scammer or whatever) is claiming "OKPAY is closing".  Got this email:


Nice try!

Typical black PR. 'I got scammed, here is zero proof'
I know a few WMZ and LR exchangers that use OKpay bank accounts as their own for receiving wires and sending funds in huge amounts and no indication they've been scammed everything biz as usual

v=spf1 a:mail.regall.net mx:mail.regall.net +all

+all means "everybody welcome"

I bet had he wrote the same one the forum, he would have had help getting his money back and OKpay would have been in much worst situation.

Must me some 13yo kid ... with 11000$ ? well whatever.

Yes, that is what happened. That is confirmed by the information provided by dexfor.

There have been other leaks as well, (e..g, pool that had its user database list stolen), so the sender might have sent to additional addresses than just the nearly 40,000 email addresses leaked durign the June 2011 Mt. Gox breach but at least this indicates that it wasn't a new breach that somehow identified specifically who is using OK Pay.

I got the same email but never had an account there. Probably from the leaked info from MT Gox last year.

That indicates that some noob didn't set up SPF correctly, and so gmail is allowing the mail to pass normally because of the error.

Got this to an email address that was specifically used for MtGox and has never been used anywhere else.

It's from the MtGox hack. Similar emails have been sent to that list before.

Please explain this to me:

I got the email too and don't have an OKPAY account.  Maybe it was sent to every address from the MtGox and/or Intersango email list leaks.

Here's how my copy looked.  It was CC'ed to me, and sent to [email protected].

Now that you point it out, that is very lame. + is only for testing, and as you noted it allows all senders. They should be using - or ~ which either fails hard or fails soft respectively. Someone should email them and tell them they are doing it wrong.

Actually, because of that +all, it says that all mail servers are valid senders for okpay.com. NEVER put +all in your spf record. That alone says that you should avoid OKPAY at all costs, since their security is likely just as bad.

Whoever wrote it certainly didn't lend themselves any credibility by faking the return address.

The weal thing is the email comes off as just trollish.

Sending something which looked like it came from a govt agency regarding freezing accounts owned by OKPAY and money laundering charges would have done more damage.

Lucky for OKPAY the idiot who wrote it comes off as less legit than a nigerian scammer.

Not hacked, just impersonating. If they have a good SPF record, most filters will catch it and delete it.


^That tells mail server to ignore email purporting to be from okpay.com, UNLESS it comes from "mail.regall.net". However, many servers ignore this option, since it was tacked on to the protocol after SMTP was initially created.

Got it also, from [email protected].

The email wording made it sound like someone who was pissed about the account being frozen, but it's very possible it was frozen for legitimate reasons. And definitely hacking their email server is not cool... so I'd reserve judgement either way in this case.

Got it also.  I love the occasional spam from my leaked e-mail.  I never get anything as interesting from anything else.

got it too.. oh joy all we're on the bitcoin scam spam list :/

Got it too. Never used OKPay, but my e-mail was on the compromized gox list.

Besides, if they're trying to discredit OKPay, there should've been some more details to back up their claims.

I got it; my email was on the MtGox list; I've never used OKPAY.

Every time I get another scam/phishing email to this address it's just another reminder of why it's perfectly reasonable to not trust Mt.Gox with sensitive information like, say, a scan of your passport.

ME ! I was not a user of MtGox (In other words, I was not signed up on MtGox) when the leak happened and still got the OKPay Is a Scam email :/ maby OkPay got leaked

Has anyone received this email who was NOT on the mtgox leaked emails list?

I think the emails are from the mtgox leak - I got the email as well, and have never used OKPay and rarely any other services associated with bitcoin.

Someone must be very pissed because he goes through this kind of effort...

Probably this. OKPAY deals in Bitcoins these days too.

This mail came to my mtgox email (okpay email is different).
It is possibly on mtgox leaked list.

I dont have one, I had never heard of it before this email.

ok thanks
i would be interested if someone got that mail and does not have an okpay account. this would prove it.

Nope, 69.194.161.228 is a SolarVPS set up to look like an okpay mail server. Probably your email got guessed by the usual spamming programs, did you see that it was addresses to "AOL User"?

I got this as well. I am curious as to the "To: AOL users" part.

lol

the question is: where did they got my email from (ok thats not that hard): but how did they know i have a login there?

maybe its just a pissed employee

So some unsolicited user sending you an email causes you to believe everything contained therein? BRB, need to send some more 419 emails

I got it too

EDIT: it seems someone just want to discredit okpay

hi,

i just got a very interesting mail

i used opkay once but stopped it as they dont really offer any benefit for me. but i think its funny that this mail is sent from okpay support (ok its probably faked)

EDIT: i forgot to obfuscate my email