Stake phishing - page 7. | Bitcointalksearch.org

decodx

hero member

Activity: 1456

Merit: 940

🇺🇦 Glory to Ukraine!

Quote from: Maxbet1 on September 02, 2023, 04:22:30 PM

I have wise up and checking every link I click on.
Hope this post can help next person looking for answer who gets phished on stake because stake is too busy to explain all this.

It's good that you want to warn people about such attacks, and hopefully, you've become more cautious moving forward. But, I'm not entirely sure what you expect Stake platform to do in this situation. Phishing attacks are incredibly common, possibly one of the most common online threats. I receive phishing emails almost daily, targeting services I've never even used. Given that Stake is a highly popular online gambling platform, it's only logical that it's a prime target for phishing attacks.

Nevertheless, the primary responsibility for protecting yourself falls on you. You mentioned using 2FA, which is good. However, even with 2FA, you should never enter your login credentials on fake websites. My recommendation is to consider using a password manager; It can greatly reduce the risk of falling victim to such situations in the future.

YOSHIE

legendary

Activity: 2128

Merit: 1775

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

Be safe out there and try to avoid suck irresponsible site.

OP, first of all I would like to thank you, who have reminded us about the dangers of betting phishing, which could happen at any time without us realizing it, as you said, that is the importance of this gambling discussion, so that we know what to avoid when gambling in the name of bonuses, winnings and so on, in the end it's all phishing.

As a whole and anyone involved in gambling, phishing attacks may be an easy target for them, to defraud users, because of usernames, data is often leaked and almost average in publications and it will be easy for them/phishing to carry out their actions to hack, hopefully we all here can always be vigilant and avoid these actions, phishing is really bad.

cabron

hero member

Activity: 2800

Merit: 595

https://www.betcoin.ag

Quote from: panjul07 on September 08, 2023, 10:14:57 AM

Quote from: goldkingcoiner on September 08, 2023, 07:47:07 AM

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.
Peace .

If you have proof of this, then I think the casino will refund you. But proving that you got phished might be difficult as in the eyes of the casino, you might just be looking for a refund after a bad streak. In the future you should use more secure practices to avoid falling for such dumb traps. I am not saying that phishing is an easy thing to look out for, but as long as you remain vigilant, maybe set up 2FA and don't hand out your main email for every little thing. And make sure your website address is always correct.

I hope you have better luck in the future!

I dont think it is possible to get refund even if he can provide solid proof, it is completely his own responsibility and the casino is not responsible for such case IMO.
If he gets a refund then it will lead into a big problem for the casino if there are many victims of the phishing like him.
Nothing he can do now except accept the fact that he has lost the money, an expensive lesson learned ofc.

Stake requires email codes in order to withdraw, pretty sure Stake will allow the hacker to withdraw the lump sum in his stake account if the hacker had access to his email not just his stake account. Stake may also think it's not their fault why the hacker got access to his email and casino account. Thus no refund for it.

But this appears to be an orchestrated post in the forum about Stake. The casino got hacked as well which is not a mere coincidence, stake is targeted by its competitors.

panjul07

legendary

Activity: 3500

Merit: 1354

Quote from: goldkingcoiner on September 08, 2023, 07:47:07 AM

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.
Peace .

If you have proof of this, then I think the casino will refund you. But proving that you got phished might be difficult as in the eyes of the casino, you might just be looking for a refund after a bad streak. In the future you should use more secure practices to avoid falling for such dumb traps. I am not saying that phishing is an easy thing to look out for, but as long as you remain vigilant, maybe set up 2FA and don't hand out your main email for every little thing. And make sure your website address is always correct.

I hope you have better luck in the future!

I dont think it is possible to get refund even if he can provide solid proof, it is completely his own responsibility and the casino is not responsible for such case IMO.
If he gets a refund then it will lead into a big problem for the casino if there are many victims of the phishing like him.
Nothing he can do now except accept the fact that he has lost the money, an expensive lesson learned ofc.

Mr. Magkaisa

sr. member

Activity: 952

Merit: 303

Quote from: Maxbet1 on September 02, 2023, 04:50:29 AM

I was viper out. Hacker made 1st limbo bet it was winner. And he made 2nd bet on mines which was looser, 3rd limbo again looser. All bets were made in LTC 160, 155 and 168 ltc . After 3rd bet 29$ left in my account out of 10500 USD..

Funny thing is this exact scenario was reported aprox 6 to 8 months before and I was suspecting player made it and lost it and now producing stories. As the bets were huge . I exactly remember player claimed it was not him.

Stake definetly has more genius devs than me so I asked them to look up IP and devices associated with those bets but they refuse to reply. I only play through my phone and all other sessions it says android and location except that 1 login.

Funny thing is I was actively trying to go in slots at this point and when I see balance I freaked out went straight to support asking if anybody withdrew or tip and support showed me I made 3 beta and lost.

2 questions I had at this time
1) I was betting in USD so how suddenly it chabged to LTC value suddenly.
2)It was merely 20 seconds to load slots so sxammer waited till I was done playing with game I was playing patiently?

I still can't digest this whole situation and not getting any response from their tech devs

- 10500 dollars is a big amount to me, I already have a house here in our country if I have that amount. Do you have evidence against what happened to you using their platform? It seems hard to believe what you are saying, even though stakes.com has had issues many times with people like you who have not been able to release their funds from the stakes platform.

Then just now I read a similar issue where from USD it was suddenly converted to LTC. How did that happen? Does that mean someone else is handling your stake account? Then why are you still playing there even though that's what happened to you? This is one of the more surprising ones, to be honest.

Agbe

legendary

Activity: 1106

Merit: 1372

This will also teach us to check the casino account before clicking phishing email. Scammers are using bonus to attract gamblers and if anyone fall they scam him. And you have fall because of bonus. Please be careful next time. 2FA helps people to secure their accounts but if the hacker penetrate to the account information they take all. They do not think of big or small amount, anything they see in the account or wallet they would transfer all. Left you with empty wallet.
If stake really said the security of the account is on the owner's custody then that is bad because the account owner is not the developer of the website. And stake has all the login details of the site plus the security information and the clients can only sign up and login to do their activities and left and not to secure their accounts.

goldkingcoiner

legendary

Activity: 2268

Merit: 2050

A Bitcoiner chooses. A slave obeys.

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.
Peace .

If you have proof of this, then I think the casino will refund you. But proving that you got phished might be difficult as in the eyes of the casino, you might just be looking for a refund after a bad streak. In the future you should use more secure practices to avoid falling for such dumb traps. I am not saying that phishing is an easy thing to look out for, but as long as you remain vigilant, maybe set up 2FA and don't hand out your main email for every little thing. And make sure your website address is always correct.

I hope you have better luck in the future!

arwin100

hero member

Activity: 2632

Merit: 787

Jack of all trades 💯

Quote from: piebeyb on September 08, 2023, 06:24:19 AM

Quote from: tjtonmoy on September 08, 2023, 04:22:44 AM

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

Yes just because of his mistake he blames it entirely on Stake , it's weird even sounds like dropping Stake , anyway no screenshot even though before he came back to this thread and asked how to give screenshot , but it doesn't show up and looks again , but even so it's still his mistake because won't waste time asking live support about the authenticity of that email.

Just because of his greedy behavior that allowed him to quickly click on the link without asking questions and ended up being phished by fraudsters and then he blamed the casino, it's funny to hear that, maybe this is a thread that can teach beginners not to carelessly click on any link obtained from Email or Social media, make sure it's genuine and ask questions on live support, I'm sure it won't be a waste of time.

Live support is always available and he will not caught by those phising site if he just directly go there then verify the information he receive. So he can't blame anyone for experiencing that so maybe that serve a lesson to him and to anyone that always check the message they receive since there are scammers take advantage on every situation. To many incident like this happen so better we should learn from this unfortunate incident so that we will not feed those scammers ego and try the same act.

piebeyb

legendary

Activity: 2464

Merit: 1039

Bitcoin Trader

Quote from: tjtonmoy on September 08, 2023, 04:22:44 AM

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

Yes just because of his mistake he blames it entirely on Stake , it's weird even sounds like dropping Stake , anyway no screenshot even though before he came back to this thread and asked how to give screenshot , but it doesn't show up and looks again , but even so it's still his mistake because won't waste time asking live support about the authenticity of that email.

Just because of his greedy behavior that allowed him to quickly click on the link without asking questions and ended up being phished by fraudsters and then he blamed the casino, it's funny to hear that, maybe this is a thread that can teach beginners not to carelessly click on any link obtained from Email or Social media, make sure it's genuine and ask questions on live support, I'm sure it won't be a waste of time.

tjtonmoy

sr. member

Activity: 1008

Merit: 366

Aren't you the one at fault here? It all started when you clicked on that phishing link. Hackers may keep an eye on you before doing anything and collect information on whom they try to hack. But it's all random. They do not target any specific person or can see your personal balance of the platform's security measurements.

Phishing is a 50/50 chance thing same as gambling. It depends on whether the victim will click on it or not. You made the mistake of clicking that link and giving access to the hacker. Now the fact about not withdrawing your funds from your account. Maybe that hacker is unable to do it because of security issues or he just wants to tell the platform that he can do such things. Who knows?

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

Mahanton

hero member

Activity: 2730

Merit: 632

Quote from: Maxbet1 on September 03, 2023, 02:32:45 PM

How do I add screenshots here?

You can make use of this https://www.talkimg.com . Copy pasting that BB code

but of course you would really be needing to be a copper member to do that
https://bitcointalk.org/index.php?action=credit;promote

If you dont want to pay up a penny then you could always make use of
https://imgur.com and have that share link and let other people do see on what you are liking to show
if we do speak about proofs.

Phishing is common and this is why you should really be careful on hiding those important credentials or log-in information
so that you would really be able to avoid such possible exploits.

Hispo

legendary

Activity: 1162

Merit: 2025

Leading Crypto Sports Betting & Casino Platform

Quote from: pawanjain on September 06, 2023, 12:04:56 PM

Quote from: Hispo on September 02, 2023, 09:44:27 AM

Quote from: pawanjain on September 02, 2023, 08:03:00 AM

Quote from: Kakmakr on September 02, 2023, 05:16:50 AM

Damn, this is really bad.... and it can happen with anybody, because this month Stake gave 3 x Monthly bonuses, so you would have thought that it was one of them.

You should think that a hacker would realize that the 2FA stopped them from withdrawing the money, so they would leave the money ...but it is as if the anger let them deliberately sabotage your account, by betting all of it.

Stake even blocked the tipping of the money without the 2FA ...so they cannot even tip an Alt account to withdraw it from another account. Tongue

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. Sad

That is a very screwed up situation and the first time I have read something similar happening in any casino.
The amount OP had in his account was big enough for the scammer to try to steal his 2FA somehow through a targeted emails or social engineering , but the fact they decided to gamble away money which could not steal makes me assume the scammer was not only evil and selfish but also a victim of problem gambling to some extend. Roll Eyes

The scammer may or may not have a gambling problem but the reason he gambled away all the money was only because of anger and ego.
Since he was not able to withdraw the amount he lost it all in gambling deliberately.
I haven't seen such a cruel scammer.

All scammers are cruel in my eyes anyways. Anyone who would be willing to steal that way is scum.
Ironically, all this could have ended up with the scammer earning money for OP in a very sustancial way while trying to make him lose money, if OP was aware of all what was going on with this account, then he could have even logged in on time to take advantage of such hypothetical situation. It would be such a interesting thing to tell others, many would not believe it.

One being a victim of phishing and ending up winning money because of it . Sadly, this was not the story of OP.

pawanjain

hero member

Activity: 2702

Merit: 716

Nothing lasts forever

Quote from: Hispo on September 02, 2023, 09:44:27 AM

Quote from: pawanjain on September 02, 2023, 08:03:00 AM

Quote from: Kakmakr on September 02, 2023, 05:16:50 AM

Damn, this is really bad.... and it can happen with anybody, because this month Stake gave 3 x Monthly bonuses, so you would have thought that it was one of them.

You should think that a hacker would realize that the 2FA stopped them from withdrawing the money, so they would leave the money ...but it is as if the anger let them deliberately sabotage your account, by betting all of it.

Stake even blocked the tipping of the money without the 2FA ...so they cannot even tip an Alt account to withdraw it from another account. Tongue

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. Sad

That is a very screwed up situation and the first time I have read something similar happening in any casino.
The amount OP had in his account was big enough for the scammer to try to steal his 2FA somehow through a targeted emails or social engineering , but the fact they decided to gamble away money which could not steal makes me assume the scammer was not only evil and selfish but also a victim of problem gambling to some extend. Roll Eyes

The scammer may or may not have a gambling problem but the reason he gambled away all the money was only because of anger and ego.
Since he was not able to withdraw the amount he lost it all in gambling deliberately.
I haven't seen such a cruel scammer.

jostorres

hero member

Activity: 2576

Merit: 586

Quote from: Gozie51 on September 02, 2023, 05:49:18 AM

The balance in your wallet is inconsequential to think of making such excuse for that happening to you now. Scammers will send attractive message for you to get you to compromise which you did. I think this is where the issue on your account started, you have compromised your account by clicking on a phishing mail sent to you and that directed your account towards the hackers domain. You are knowledgeable that it was a phishing site but because of the bonus you got tempted to open it instead of verifying from the casino and or report it.

The balance in his wallet is not inconsequential because it was a large amount. But IDK maybe for you it is, because you are a whale player or a high roller? He already said that he got phished and we already know that phishers or hackers will always use sweet words for us to click on their links. Sadly the OP still click on it.

Anyway, it would be better if he can attached a screenshot of what is the email look like and on what folder did he received it? Was it on spam or in the primary/main folder? Now that he reported the issue here, I hope Stake will act quick to fix the mess in their security even though it is not the first time the issue occur as he stated. It can be our fault sometimes because we can provide our emails to some websites.

Quote from: Gozie51 on September 02, 2023, 05:49:18 AM

Well I think what you need to do is to reach out to stake and ensure your account is safe going forward

He did reach out Stake but he haven't received a single reply yet.

Quote from: Gozie51 on September 02, 2023, 05:49:18 AM

.Is a good thing you secured your account further with 2FA.

He did set-up a 2FA but his balance were still gambled to lose by the phisher/hacker.

rdbase

legendary

Activity: 2828

Merit: 1497

Join the world-leading crypto sportsbook NOW!

Quote from: Gozie51 on September 02, 2023, 07:06:26 AM

Quote from: Fivestar4everMVP on September 02, 2023, 06:44:56 AM

I hope I am really wrong about this but I think there is a way that hackers can bypass even the Google authenticator 2fa and still login into your account if you fall a victim to their phishing stuff, Now here it is...

All said, I can reiterate that it is the link op clicked that got him into this. He was gunning for the bonus while the hacker was targeting his account. If you click a phishing website link then you have invested in a troubled waters, unfortunately I think that was what happened from his story.
This is another lesson not to click just any link sent to you without verification of where it came from, I avoid them alot when they are sent through to my email. Sometimes they are not sent directly with the original site name but the link sent to you would bear the name and with such discrepancy, you don't need to click at all whether you activated 2FA or Google authenticator because these hackers are highly knowledgeable in tech.

Received links from twitter (x platform) by a twitter user whose telling you there is a new stake casino coin available right now. Feeding off the rollbit casino coin which increased individuals balances 10x fold from the most recent pump of their altcoin.
I was suspecting it was a phishing attempt so blocked those users and deleted those messages.
Should of reported them to twitter resolution team and also to stake support because it was them who they were trying to impersonate via their casino social media account.

Docnaster

hero member

Activity: 1638

Merit: 576

Leading Crypto Sports Betting & Casino Platform

Quote from: btc_angela on September 02, 2023, 08:04:47 AM

Just to reiterate though and not defending anyone, it's not the gambling platform's fault if you have been phished or something. For sure majority of them have good security, but if you have been phished and you click some links so that blame is on you.

That's why they will urge you to do 2FA and other security measures so that the hackers can't just simply withdraw your money without any alerts or red flag on your side. But just like what you said, just be very careful on any links that is unknown to us.

No one will rightly fault the gambling company for a phishing scam. I was trying to understand the OP if he clicked a random link from his email purported to be from Stake. If this is the case, Op has himself to be blamed. But if Op was in the stake website when the phising link popped up, then it is Stake that needs to be blame.
One other thing is that when we try to have some cool money in a hot wallet or gambling site, exchanges as the case may be. We should avoid clicking links and remove our minds from bonuses or free money. It is from this that we often get hacked. If you don't in one way or the other introduce a foreigner to your house, it will be difficult for them to locate you.

o48o

legendary

Activity: 3080

Merit: 1178

Leading Crypto Sports Betting & Casino Platform

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

I wont doubht that because I am not the first one being phished and funds stolen/misused. I see time to time victims and stake does not try to improve its security or they don't care about their players at all.

After loosing funds I was so angry and try every avenue to acknowledge Eddie and their tech support but I havent even gotten 1 reply from them yet.

Just venting and warning other users that stake.com is not safe and more certainly they don't care if their security is poor. They will just say account security is players responsibility.

Be safe out there and try to avoid suck irresponsible site.

Peace .

So you did get phished by someone with fake url containing clone of stake casino or what? How is this the fault of the casino? I am geniuely interested why do you think that is.
If someone steals your car keys and your car, it isn't car company's fault. Or if you get our bank card stolen with pin number, is that fault of the bank if your money is being withdrawn from the account?

So what i am having trouble to understand, is what part of this phishing am you are blaming casino for?

You said that funds were stolen/misused, so which one is it? Were those gambled? As withdraw needs google 2fa it's hard for me to believe that they were withdrawn.
I am not sure how rules for tipping works, but i would assume it isn't an attack vector either.

khaled0111

legendary

Activity: 2744

Merit: 3097

Top Crypto Casino

Sorry for your loss OP but Stake is not to blame in this case.
The user is responsible for keeping his credentials safe and secure. I don't see how stake can prevent phishing attacks other than enforcing 2fa on login or use OTP.
I don't know what to say to reconfort you but just consider it an expensive lesson. At least now, you will be very carefull before clicking any link.

Odusko

hero member

Activity: 1106

Merit: 526

Leading Crypto Sports Betting & Casino Platform

Quote from: Hamphser on September 03, 2023, 04:11:18 PM

In overall, it was really at your fault and dont tend to point out your fingers on Stake just because you had been hacked due into your own negligence. Who would really be the one will be clicking out for some suspicious links sent out by someone? It is your total responsibility about the safety and security of your own gambling account. Good thing that they didnt able to withdraw but rather losing the balance you do have because of those lose bets made out by the hacker. Things might hurt more if you do know that they had stolen up your funds, so its not totally that their security is shit and thanks to that 2fa.
Arent accessing accounts on Stake does need up some email verification as far as i remember? Specially if it would be accessed on a new ip or correlates to that?

This is true because if you click any phishing link, you wont be protected by the casino or anyone since you are the one that gives the hacker the access to you account and not only on stake but even in the forum we have some hackers who will send you a link and once you click it you will be redirected to fake forum login page, and once you input your user name and password, the hacker has access to your account because your login detail will be revealed to the hacker at the back end.
So this form of hack is not new and most members of the forum are already aware of the possibilities and existence of such malicious attempts and how to protect themselves.

Hamphser

sr. member

Activity: 2604

Merit: 338

Vave.com - Crypto Casino

Quote from: Maxbet1 on September 01, 2023, 11:28:42 PM

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

I wont doubht that because I am not the first one being phished and funds stolen/misused. I see time to time victims and stake does not try to improve its security or they don't care about their players at all.

After loosing funds I was so angry and try every avenue to acknowledge Eddie and their tech support but I havent even gotten 1 reply from them yet.

Just venting and warning other users that stake.com is not safe and more certainly they don't care if their security is poor. They will just say account security is players responsibility.

Be safe out there and try to avoid suck irresponsible site.

Peace .

In overall, it was really at your fault and dont tend to point out your fingers on Stake just because you had been hacked due into your own negligence. Who would really be the one will be clicking out for some suspicious links sent out by someone? It is your total responsibility about the safety and security of your own gambling account. Good thing that they didnt able to withdraw but rather losing the balance you do have because of those lose bets made out by the hacker. Things might hurt more if you do know that they had stolen up your funds, so its not totally that their security is shit and thanks to that 2fa.
Arent accessing accounts on Stake does need up some email verification as far as i remember? Specially if it would be accessed on a new ip or correlates to that?

Topic: Stake phishing - page 7. (Read 1432 times)