My friend got scammed. BTC-e code stolen.

[Pmalek]

So my friend was jackass and got scammed by fake BTC-e support on skype. He actually agreed to let "support" use his computer via Team Viewer. The thief whitdrew all coins and made BTC-e $ code. He wrote the ticket to real support and did not get the answer yet.

So my question is=> Is there a way for him to cancel the Btc-e code, or can real support do that for him? Or is the money lost forever?

Thanks and beware of this kind of things...

[Pmalek]

BUMP!

[cryptopumper]

So my friend was jackass and got scammed by fake BTC-e support on skype. He actually agreed to let "support" use his computer via Team Viewer. The thief whitdrew all coins and made BTC-e $ code. He wrote the ticket to real support and did not get the answer yet.

So my question is=> Is there a way for him to cancel the Btc-e code, or can real support do that for him? Or is the money lost forever?

Thanks and beware of this kind of things...

No way to cancel BTCe code...  but story sounds fishy. Your friend MUST verify a confirmation link in his email before the BTCe code becomes active. Either story is fishy or something weird happened.

[Pmalek]

Something wierd happened, because he didnt get any confirmation mails. Somehow this was bypassed...

[SvenTaylor1980]

He needs to click on a confimation link send by email to confirm the transaction. It's not possible to bypass this.

[wacked]

Who knows the true story, but the most obvious issue is that someone let their computer be controlled by an unknown 3rd party.
This is no different than giving your password via email or over the phone.

I saw no mention of 2fa. 2fa is needed to log-in or to withdrawal or both if you check it along with changing security which is mandatory. I assume that only log-in was checked and not withdrawal? If so, that explains how the BTC-e code was generated.

Also, since there was access to the computer, I'm sure they simply opened up the email client, which was already logged in and  confirmed the withdrawal.

The moral of the story is, if you don't know the general security rules of the internet, then don't get on it, especially when it comes to $.

Just curious, why would your "friend" allow someone to remote into his PC in the first place? What was this support person supposed to do anyone? Even though we know it wasn't a real support person.

BTC is gone, nothing to recover, unless somehow the confirmation email went into spam, but if there are no BTC in the account, then it's bye bye.

[kalus]

btc-e is probably not a good place to store coins.  

have your friend look into holding his coins in a wallet.

[compwindsor]

So my friend was jackass and got scammed by fake BTC-e support on skype. He actually agreed to let "support" use his computer via Team Viewer. The thief whitdrew all coins and made BTC-e $ code. He wrote the ticket to real support and did not get the answer yet.

So my question is=> Is there a way for him to cancel the Btc-e code, or can real support do that for him? Or is the money lost forever?

Thanks and beware of this kind of things...

Your friend is a moron.

Lesson learned.

Pwned.

[Pmalek]

I am also not sure how it was possible to bypass email confirmations. Maybe he had his email client opened, he was pretty confused at that time. When I entered his PC via team viewer I immediately clicked on history button in BTCe where it was obvious that someone have whitdrawn all of his coins...  He didnt have GA 2fa even though I advised him to use it earlier. But he was so convinced it was the real support that he would probably give him GA pass if needed. He claims he talked to the guy for more then 2 hours. It seems to me those thiefs are very crafty and good at what they do.