Bitcoin Forum

Hi. I just wanted you to know that BTC-E is not secure and you shouldn't use it. I did some exchanges with it and it worked but more recently my account got totally hacked into. I didn't lose any coins but it's just not worth using. My username and password are not easily guessable, my password is around 25 random chars. All the time I get emails from BTCE telling me I successfully logged into my account, like this:


I've changed my password but it just happens again. I also tried to email them about the security issues but I got the response "what is the response you would like" ?? Very helpful. I also asked them to delete the account but received nothing.

thanks for the heads up

Were you using any trading platform?
Did you give permission with api keys to anything?

BTC-e seems to have quite a lot of bad reviews now..

Why don't you use a 2fa? Also are you sure that it's not your computer that it's compromised

Maybe you have keylogger on your computer?
And they never answers messages write in english.

was your account actually compromised? where was the IP situated? you realize they send you those emails every time YOU log in, right?

Where did you get that?

OMG!
Whenever I login to BTC-E I receive e-mail, that someone logged in to BTC-E from my ip! I even checked the time, it matches!

Could this someone be me??

No. It can't be. Someone invisible is sitting in my room with invisible computer and logins to BTC-E using my ip at the same time as I log in.

Wait, invisiblity does not exist. Must be something else. I know. Hackerz exist!

HAAAAKZZZZZZZZ!!!!!

I have heard this couple times at this forum.

Are you sure the IP isn't yours? Are you sure you didn't log in at the EXACT SAME time?

You realize that if you were infected with a remote administration tool, they are capable of using your network as a socks proxy and login with your IP? Think about it.

Sorry to hear that, iv been using btc-e for months already and still no problems

It's either you logging in, or you have a virus.  The fact that they send you the email straight after you change your password again, also probably indicates the emails are from your own logins.

Although OP probably misunderstund things that reply still bothers me. I mean is it even possible for an exchange to answer like that  :o

I don't know what I've done to deserve the barrage of abuse, I wonder how many of these replies are sock puppets, as they are the ones using broken English. Every time you log in to BTC-E they send you an email to confirm a successful login. But I keep receiving these even though I haven't been on BTC-E in months, why would this be? Sometimes this would happen several times in one hour, why on earth would I do this?

The only answer I have is that an automated script is logging into people's accounts, checking if there have been any deposits and then trying to withdraw to their account somehow.

P.s. The reason I don't use 2fa is that it is broken! If I click on the link for Two-factor authentication nothing happens. Basically I just want to get out of this broken website.
PPs. But I realise that the IP is my own and the only way this could happen is if someone has spoofed my IP somehow. I doubt by pc is compromised as I have a good Firewall & Antivirus.

Keep in mind in order for the withdrawal to go successfully they need your email account as well since it needs to be confirmed

this doesn't make any sense, as most of this post

Many reports say only one thing - BTC-E is doing selective scamming.

So the logged ip's are yours and still you doubt that your pc is compromised. Well it may be haunted. Call ghostbusters.

Indeed Cryptsy is better and they will have direct dollar exchange soon :-)

Well.. instead of figuring out the reason of the issue, checking your PCs, setting up/looking in your router logs/etc, you blindly assume that issue is not on your end.
Basically, in my eyes, you are the kind of person, which screams that Windows sux, when.. dunno.. anything wrong happens ; )
I think that's stupidity without the option of learning, cause in order to actually learn you always must assume that you can be wrong or at least first you need to prove that you are not.

So.. since you can't be helped.. why not have a good laugh? ; )


Ofc, everyone who is not native english speaker is a 'sock puppet'. Right.
Btw, BTC-e is operated by russians! Probably communists! RED ALERT!!

Anyway, call ghostbusters!

If you're intent on not using BTC-E any further, have you tried Cryptsy? It's having some issues with servers, i.e. goes down/slow during heavy load ATM but once those problems are ironed out it looks like it should be a good service.

Thanks for sharing you experience with the site.  I've had some issues with btc-e in regards to logins probs but nothing with account hacking.  I will say this isn't the first I've heard about an account there being hacked but can't say the situations are the same just saying.

This was my exact ticket from BTC-E if anyone has trouble believing that they responded in this way:


That was it.

If it is yours ip what is problem?

You do realize that Btc-e is run by the russian mafia, don't you? And since that's the case, selective scamming is quite within the realm of possibility.

I dont get why they would scam, maybe if someone would have 1000's of btc in their BTCe account, otherwise why? They make a huge amount of money, legit. Also the exchange is a huge help for them to launder money and skip taxes.

thank you for the heads up man !!!

Exact same for me.

I had my btc-e account hacked yesterday, and I have probably lost the $200 worth of coin I was trading with.  I didn't have 2FA so it's my fault.

I was thinking however, that it's possible that BTC-e could simply assume a select number of accounts very easily and I am not sure if 2FA would prevent this as they admin the site.

You said why would they bother with small amounts, but if they are doing this on a factor of a few hundred accounts a week it could add up.  It all depends on the volume of accounts, needs to be small enough not to raise too many flags.

Also, from a programming standpoint I have no idea how secure their code is, it might be very easy for certain people to compromise the accounts.

It's still wild west out there.  If support can't or wont help what other options do you have?  NONE.

That is insane how many times I've read claims of hacks from there.  It would be nice if the staff there were a little more open about issues but I don't even use that place much so I won't say much.

Are you using 2 step verification with google authenticator? Its a good practice for all exchanges/wallets-

Ive been trading on www.bter.com I haven't had any problems at all but I really don't trade that much ......

This! Always have that stuff on



And there has been alot of btc-e news lately(ish), but it's also possible that the huge jump in users is straining their infrastructure

Or you could get a new HD install the OS and the basic application to access your account, if your wallet has funds export and import into the new HD. If all is ok the problem is the setup in your original HD. As for the support you are getting it sounds like they don't have the resources to hire help desk with good english and good manners.

I did try to use this but clicking the 2FA link does nothing in Firefox. I haven't tried with other browsers. I don't even have any funds in there but it's just weird that every now and again I get emails saying I've logged in but I haven't.

they answer in english, it takes some days, but hey, they're russians...

also, account deletion is not possible, i asked them for it.

if you don't like btc-e, use cryptsy (https://www.cryptsy.com/users/register?refid=61513)...

Where I can create ltc paper wallet? Like bitaddress.org for litecoin.

You didn't show us the message that they were responding to. I'm willing to bet that their response is completely appropriate.

dont worry I will never use BTC-E.

Use OTP and be happy

Indeed Cryptsy is better and they will have direct dollar exchange soon :-)

I think this could just be that I'm visiting BTC-E without logging in and it's remembering my IP from the previous day. Then it's sending out the automated email, almost as though I had logged in.

@E521 you make a good point about his grammar problems ;D anyways you guys should stop to trade anywhere without awerness.