Bitcoin Forum

Just read on lcb forum (https://lcb.org/onlinecasinobonusforum/casinos/email-scam-alert-bitcasino-io-warns-about-fraudulent-emails-targeting-deposits), that BitCasino.io issued a warning about circulating email scam.  " It’s important for you to know that the email contained fraudulent Bitcoin and Ethereum wallet addresses where you were asked to deposit funds to receive future interest. These are NOT BitCasino.io wallet addresses, please do not transfer any funds."

"BitCasino.io's investigations have confirmed that their third-party email software Customer.io was compromised, which resulted in fraudulent emails being sent out to a pre-defined group of players.

Currently, BitCasino.io found out that in 24 hours three transactions were made to the fraudulent wallet addresses, totalling 0.00037299 BTC and 2.0665 ETH. This situation and wallet address will be monitored further"

This is not good, how did it happen?

Thanks for the information. In turn, I am surprised why people continue to be inattentive and do not pay attention to the original email. Dozens of emails with similar spam come to me daily.

"BitCasino.io's investigations have confirmed that their third-party email software Customer.io was compromised, which resulted in fraudulent emails being sent out to a pre-defined group of players"

They should refund the people who fell for the scam. It was their responsibility to keep their mail servers safe, they failed to do so, and resulted in a monetary loss of their customers.

Besides, the amounts lost were completely trivial in the grand scheme of things so it would be good PR for them to do it. Not that it is their duty to do it, but acknowledging the situation and reimbursing losses instead of just glancing over the issue is much more sensible. Ofc, certain protocol would need to be followed to ensure that the perpetrators themselves are not taking advantage of the situtaion.

But yeah, I've never seen any gambling site directly ask for funds through an email in return for more money. If you receive such a notice, it is 100% a scam.

If it really is their fault that people fell for the scam then they should refund the people who use their platform but if the site does give warning to the people about this scam problem and still there are people fell for the scam then they don't have the responsibility to refund the scam victims. Most casinos warning gamblers to be responsible on what they do.

I cant believe that in 2019 people still got scammed by e-mail... I thought it was an era of y2k.

How can scammers have a list of "pre-defined group of players" ? Did they have a man "inside" Bitcasino? What do you think ?

Yes they should keep their mail servers secure but it's really not the hack that caused the loss... people who sent money to those scammers probably would fall for any forged e-mail. The hack maybe made it easier to target specific users but phishing/scamming e-mails are nothing new, people should really know better by now. Is it even possible to determine who sent those funds? Could be scammers themselves trying to making it look like it's a legit offer.

I got the same email. Tbh I am amazed that there were still people who sent money to those scammers. It takes you like 30 seconds to check the official Bitcasino website to see that there is no such promo/offer

agreed,Customer.io or BitCasino, or both, should refund the players.

An official update for you all:

On Saturday 28th of September, our third-party software we use for sending out promotional emails, Customer.io, was compromised leading to a mass fraudulent email being sent out to predefined player groups. Within a matter of hours, our team had uncovered the situation, locked-down our account and let our players know via an onsite notification and a follow-up email.

As a tool for sending out promotional emails, Customer.io only had access to a set of email addresses and language preferences, no other personal player information such as KYC documents, passwords or any other sensitive data was available to this third-party.

As a result, we can confirm that your account on Bitcasino.io is not at risk from this incident.

Since the discovery and lock-down of the services, our teams have been working round the clock to evaluate and reinforce all security protocols, as well as thoroughly investigate the matter with any players affected. We're extremely sorry that this happened and will work with in-house specialists and the community to strengthen our internal security protocols.
Currently, we have discovered that in 24 hours three transactions were made to the fraudulent wallet addresses, totalling 0.00037299 BTC and 2.0665 ETH. We will continue to monitor the situation.

Bitcasino will never ask you to deposit to a wallet address in any communication. You should only ever deposit to the address displayed in your account cashier. Our Support Team is always on hand 24/7 to take any questions you have regarding this.

You can read more about the situation here: https://bitcasino.io/help-center/help-terms-and-conditions/security-incident-28th-of-september-2019 (https://bitcasino.io/help-center/help-terms-and-conditions/security-incident-28th-of-september-2019)

Thanks,

Karl

This is really bad news for gamblers who have sent fund to scammer. Both party is responsible for this incident, everyone should confirm the website if there is any promotional offer before sent money. I do not see any reason why someone should sent fund to the address provided by emails. Any legit website or gambling sites will not ask that.

However, bitcasino should send another warning email to gamblers as soon as possible. Since there is warning on website so I think most of gamblers already know that issue. Those peoples got scam, I think they are much greedy. Bitcasino should increase their security system in order to avoid further incidents.

Email scammers like that will be found again and again in the future. We could prevent the scammers by being careful to respond to the email. Once we forget to check everything, we will be the next target, and we will get into their trap. That is a lesson to all of us to be careful in the future and make sure we contact the Customer Service of the website, so we know if that is true or not.

Personally i got this email few days ago and a bit weird to me because my first experience to see a casino offering free bitcoin or free Eth with 22% interest profit in a month without playing and luckily the owners has been clarificate it so people wouldn't confuse again

But aside on this scammed happen here is the Bitcasino.io support explaining what really happens.
Sometime we can't avoid these incidents, even big exchange like Binace has been scammed and probably this is not impossible with gambling sites. It should be doubled your security system.

^ Good thing to know that the issue was in very fast results.

When messages from a platform arrive to you, what you should do is confirm if the information is authentic, it is simple, just contact the support to see if the emails were sent by them, so you can avoid a possible scam.

No surprise! even you do believe that majority is already wise and smart about scams there were always a dumb person who do easily believe out specially when talking with
good offers. Its already mentioned above and read it up again that their third party software been hacked thats why people able to received out those fraud email.
Good thing that they had able to stop and spot it out later on and also only a small amount of money where these scammers milked out.

Really appreciate all your feedback guys.
As mentioned before, we're currently working with in-house specialists and the community to strengthen our internal security protocols to avoid this from happening in the future.

Thanks again,

Karl

They already have sent emails to all the gamblers about the incident and not to trust the earlier message. The email was a straightforward ponzi offer email so anyone who still believes in ponzis are the only one who sent. I was going to start a thread about it the moment I received the email that whether Bitcasino has gone ponzi? But someone went ahead and  bitcasino answered letting us know the whole situation.



Good, I think first step to start from is to not to trust third parties sites for services so that you don't get share of blame for others.

Right, in fact there are still many lay people who are still not familiar with technology. Limited education about information is also used by this scammer to exploit. I also still often hear cases of scam via email, especially those who are more attacking credit card holders.

So steps that bitcasino has taken have been very precise and alert, but I also recommend to announce through their site. If the announcement can be made a popup when you first access the site, so that everyone can see news and be more careful, at least the announcement can be posted a week.

Even in year 2030 people will still fall for those scams. They would have stopped the scamming already if no one trapped in it.

They just send it to 1000's of users and if just 1% are trapped they keep doing it.

I received that email as well and it was indeed sent from original bitcasino email address: so it was quite an elaborate scam as they managed to hack email provider.
But luckily seems like average (crypto)Joe is not so ignorant :

these are the two addresses the email was comunicating :

BTC Deposits: 19tj29CzDNntm8axEtqNP84YLgmLra48wy
ETH Deposits: 0x53B48Fa8c831135a6C21d88833DD89A2A1700790


and, as you can check by yourself, at the moment I'm writing this they only collected 0.00037299 BTC and 2.066 ETH

Even though it was just language preferences and email addresses leaked it's bad for the crypto community because these hackers will most likely use these email addresses in the future to scam more customers from other gambling sites or even just exchanges and Bitcoin services.

From time to time I get emails about some promo or some fake withdraw and the fake email seems legit and it wants you to click a link and asks for logins, if I didn't notice the fake URL I might of fell for it.

This is what I see happening with these email addresses, they will most likely target people who might use Binance since it's a popular exchange or other large gambling sites like Primedice, Fortunejack, Bitsler, etc.

No need to be too naive and believe in those offers that seem very profitable and enjoyable.  Not only an email, but also on Telegram, over the phone and other opportunities scammers use to trick too gullible people.  I also believe that such situations will exist constantly and will never stop, because there are always people who are scammers and those who believe these scammers.

I believe they are sent from the same email as bitcasino because they can create exactly the same email as the hacked email so it is pretty solid confirmatioj that you can get. But as I know there is no way any site will asking for money or any similar action because gambling site marketing skill is always by using competition to bring people to their site. Not asking more money depositing to X address, if you being sent this a few times you might be able to see some flaws on their site

It is a shame that people are smart enough to use crypto currencies but also at the same time dumb enough to fall for phishing scam. I always thought crypto as a fine IQ test. I guess we are still not there. Devs should make crypto harder to use, not easier. Remove GUI's, back to the command screen.

At least they didn't get away with a lot of money. 2 ETH and some Bitcoin change.
I really don't see much difference in this scam attempt from the twitter scams where a fake Vitalik Buterin account asks for 1 ETH and people send it. It doesn't matter who it comes from, you should never send your money to anyone who is 'promising' he/they will pay you back.
If a legit service wanted to collect funds in this way they would advertise it on all fronts well in advance and not send an email that is has started all of a sudden.

It's because we still have people who don't use their common sense and just believed everything they see on their email. And as much as we warn individuals around the crypto community, I'm sure majority will still fall for this kind of trap.

I suggest that Bitcasino will terminate their contract with this 3rd party because this is a no-no, hire someone more competent.

I have seen that before, but that is not from the gambling site.
I already get an email from the investment sites telling me to send some amount to get a bigger profit.
I don't trust that because nothing can give us a big profit in any investment, especially in 24 hours.
If there is any site like that, then you will lose your money if you follow.
What I did is just delete the email and forget about that.
You should not follow or do anything, just skip the email and delete it if you think it's not benefits to you.

But bitcasino.io should fix the email problem in their site, so this case does not happen again in the future. And for bitcasino.io, I hope they can search the email provider, which could give them protection so they can prevent the hacker from compromising their email account again.

There was no such man (and need not have been)

As explained in the first posts of the thread, the casino had been using a third party email service. That means, first, they ("the third party") knew the email addresses of the players (as all emails were going through them), and, second, the emails sent to these players were technically authentic as they were coming from legit BitCasino addresses (read, it was not some typical phishing stuff you see every other day). Hacking the email provider allowed the hackers to look and feel like they were the real casino

Bad news..

I do not understand what did they meant by stating that they will monitor the fraudulent wallet's address. What will happen by monitoring them? :D

Anyways thanks for sharing this important information with the community. It is better not to believe in any kind of email nowadays. I always ignore them.

Looks like only user email addresses and language preference were compromised and no other personal data has been leaked (or more stuffs and they are hiding it to keep themselves clean) according to the replies found at the thread. Too bad some people fell for this "fraudulent" email scam. I sometimes wonder how can people be this stupid and fall for these kind of obvious scam. Like yeah, some random dude saying he is from "this reputed casino" and will give you free money if you deposit to this "given address" - sounds 100% legit!

I also experienced this, dozens of fake e-mails came in from everywhere, from gambling sites, exchanges, and HYIPs.

the scammers will continue to do this, they will not stop, I also received this email a few days ago but I did not pay attention to the email.

do not be easily tempted, make sure first where the source comes from.

That is why I do not entertain emails and any other promotions that is sent to me. It is risky, there are a lot of emails which contain links that can cointain malwares or virus or can be a phishing site. Good thing that you were able to share this and spread awareness and only three transactions were only made. Just be cautious. Verify everything with the developers first if the announcment is legitimate or not before sendig any money.

Their email third party provider had been hacked thats why hackers do able to make use of those email list and sent out fake scamming emails all over the place.
For people who played on the site will surely receive it out and since they had read up that it do came out on an original email then there would be a few will surely
believe it out yet the offer is irresistible imho.Its always been a hit for you to back off everytime you do see some wallet address because no matter how legitimate the service was when the time comes you read up something like this then you should think twice or just simply ignore it.

Maybe they trusted the email-sender since it is the bitcasino's 3rd party email software however the said email software has been compromised by some hackers and used the gathered email addresses to send malicious emails. Bitcasino is already working with this, and assured that the data being taken was only the email addresses and not the personal player's documents. Bitcasino also warned their players about emails that may contain deposit address.

It is my first time to encounter a problem with the 3rd party email-software, I also suggest Bitcasino to apprehend the customer.io after the data breaching incident.

Wow, sending it from an email that is exactly like the one that Bitcasino uses is an elaborate scam indeed. Some people mentioned they cannot believe people still fall for email scams, but I'd say that the amount of money the scammers received signifies that they actually don't! People did not lose much, even though they had reasons to trust the email, as it looked very official. I did not even know such scamming were possible! But in the end, only hundreds of dollars were sent to scammers' addresses. I did not receive such an email, by the way, even though Bitcasino sends me offers from time to time.

These are called phishing attacks and gamblers / online users need to be aware of it. When we receive an email, we should verify its source and the sender. Usually there is little different in domain names which can be noted if we carefully see the email id. The scammers know that there are people who will believe the email is real and will act upon it without any verification.

The real question is, did scammers sent this emails to registered BitCasino.io users,
or to some random people from witch collected emails?
Maybe someone was hacked and email stolen?
In any case you should always double check who is sending you emails, to avoid scams

This seems to be a different case

The sender was authentic because emails came from a legit source which had been hacked (at least, as far as domain names are concerned). In this manner, it is not a typical phishing attack (if at all) as you would find no difference in domains. That likely explains why people fell victim to this attack as they saw that the source was authentic but they didn't expect it to be compromised (hacked). Really, if you trust the casino with your money, you would trust emails received from them unless they ask you something which they explicitly made clear in advance that they would never ask under any circumstances

It was already mentioned and discussed how the hackers got the users' e-mail addresses. Maybe you want to re-read the post that you quoted to know the answer to your unnecessary question.


I think it's clear that he didn't read the full details. Your usual read the title and then comment posters.

You wouldnt really notice it and you will able to believe it since it do comes on original source same as you said but if you are really that
keen on anything you would really notice it out when theres already had some odd instructions that you would need to sent out some funds
and with that you would really already had questions on mind on why such thing happen suddenly?

This is why I don't easily trust announcements that are sent via email. My personal principle before I follow any instructions, I confirm first the email and ask my irl friend if he also receive that and we will both wait for the confirmation or like public announcement about it. It sucks to see that there are really people in every industry that will do this sort of things for personal greed. The reputation of not just that forum but also the whole industry is affected with this news.

This is so unfortunate and I hope that at least very few people responded and follow the instructions in the email. It had been difficult in the part of those people who followed because they thought it was real by the reason it came from the real email of the forum. I really feel bad about what happened and I hope that this will serve as a lesson not just to those who received those emails but also to the team that manages the forum.

How can you know the sender is the real one? Because I have had similar situation before and I got prefectly the same email that asking me to send some money because he said that I was winning like 1 btc from lottery from X site. And the second time my email was hacked and the second site ask me if I have asked them to retrieve a new password? Because it has exactly the same email and the same name asking for the new password. So I think everything is possible with the hacking. So like you said to trust everything on what they said on email(perfectly copied email from the site you are playing), this wont do good things for you

Define the sender here

If by that you mean an individual from the casino staff and not the scammers, then you can't know that. But you can't prove otherwise either as the sender's address is a legit one, i.e. the one belonging to BitCasino. In other words, this is not what is called address spoofing. As the Internet suggests, "spoofing is the act of disguising a communication from an unknown source as being from a known, trusted source". But these emails were not from an unknown source but from BitCasino itself (technically, from BitCasino's email service provider which had been hacked)

I received that email and it was formally authentic ( not spoofed or copied) but with a bit of common sense it was clear it wasn't an authentic email ( even if from the apparently authentic source) because they were clearly acting like scammers do.

Every average customer should have understood that what was advertised in that email (invest in this address and get a % monthly return) if real would have been realized trough a special page on bitcasino site; and to join that program a customer should have logged in main site as usual with their login details.
Infact very few people fell for this: if someone really fallen and those few transactions aren't from scammer himself just to show other poeple someone alreadu had joined investiment program.

How do people still believe in these? Many such scamming emails come in my email every day. That's why I use an email to register on a website with which I just register. I know someone will sell my email, or fall into the hands of a hacker. Scammers can do a lot of damage if you are not careful yourself
Thanks for sharing the information.

I  also receive some emails similar to this, remember to always check where the email is coming from and verify it to their support. Reach out them on social media like twitter, Telegram if there is something suspicious. Don't ever click sensitive links to avoid phishing.

Even you received email from original source, but if asking for money by mail then obviously you have to verify that offer if really there is exist on their websites. That's good thing now you could reach them through social medias. Especially if you are involved with gambling and if that gambling sites is on this forum then you should check first their ANN thread. So that if there is any offer or bonuses then you would noticed from their easily.

I think, even if it does exist on a certain platform, asking for money via email is not acceptable. In fact why would they do that? And not just find some investors instead of doing such scammy behaviour, sounds like a fraud to me. I always receive some messages like this up until now, well I do reply unto them with shitty messages, I do hate this time much, it is seriously irritating.

An email promising such bullshit is clearly a scam and I don't understand why anyone would fall for such crap unless they are completely new to the crypto world and have no idea whatsoever about such scams.

This is why 2FA is important. Clicking on such links can relay your details to the scammer and they will probably try and hack your accounts, but 2FA will screw their attempts. Multiple scammers have tried doing the same to me in the past and they never got past my 2FA security. Be careful people.

I think there is no one in this forum who will be involved in such SCAM initiatives. But it is always good to be cautious. People who follow this forum carefully can learn many of these problems in advance. It always makes people feel comfortable being able to ask questions here.

Yes I just almost clicked on the fraudulent email and the email is almost the same, fortunately I see some information here and always check the telegram to ask if this is true, and the team said it was a fraudulent email.

So we must be extra careful and careful to see suspicious emails.

You're simply making some shit post in here.Did you tend to read up on whats being posted on OP or not?

This doesnt pertain or do talks about hacking of accounts but rather this do talks about email frauds that do ask out some funds to be sent out by sites users.
Usually we do saw sine fake emails but this one do make use their main email which its really deceiving for those people who do actually uses up the site.
Verification or community feedbacks is highly needed.

Yikes! How can even someone trust and send their funds without confirming the legitimacy of such a scheme xD I think they could have only scammed the 0.0003 btc, the 2 eth might be their own transfer because how can someone really fall for it and send 2 ethereum! Dayum!

If that is problem from their third party service. They atleast giving refund about it, because that is still part of their site. But the problem is how to identify who get scammed. Maybe for fair, the dev must giving big notice in their site about scam email.
For who get scam, hope can learn more about fake email, so don't get scam again in the future.

I hope you are right, I also think the same about those 2ETH transaction that both transactions were sent from the scammer to fool others but I believe most people are smart enough already to avoid this kind of scam attempt especially if the offer sounds too good to be true. Or perhaps the scammer sent those 2 transactions in order to claim refund from bitcasino (scammer acts like the one who is being scammed) :), so it is like a double-edged sword.

Its always better to ask from support or telegram / chat, before acting on any email received. Phishing attempts are increasing day by day.
 


Why the site give the refund ? The site has nothing to do with it. They did not email the people. Rather site has warned people to stay away from such scams. It is the responsibility of the gamblers / players to pay attention.

Well, there can be different views on this issue

Really, BitCasino's clients didn't choose the email service provider as this choice was entirely on the part of the casino, right? If so, why should they get away with it and cannot be held accountable? Think of it this way. For example, if they hired somebody and that person then stole the money from the accounts of casino players or was negligent in doing his job and through this negligence the same story occurred (money got stolen), whom would you start to blame, that person or the casino itself?

Or maybe the supports system was too busy, so they cannot answer the email for quickly. I visit on the site, Unfortunately, there is no live chat in that site so you cannot get the answer.

Waiting is the only thing you can do now.