My account request was rejected by MtGox - what should I do?

[imperi]

I provided my password and dwolla account. My password was strong in the first place so I don't understand why it didn't go through. I doubt I mistyped either. Any idea what I should do here? I put in a new request with my ip.

(edit: Not trolling this time)

[1714110066]

1714110066

[1714110066]

1714110066

[1714110066]

1714110066

[1714110066]

1714110066

[Dirt Rider]

7

[jimrandomh]

My recovery request was rejected too; it had the same information in it (strong password and my Dwolla ID). The text on the recovery page indicated that no extra information would be needed if the password was strong, so I didn't add any more.

I have added additional information to the request (approximate balance, and the original deposit method), and resubmitted. However, I'm more than a little freaked out by this, and really don't want my account to still be frozen when trading opens.

[Dirt Rider]

Define string strong password.

[imperi]

My recovery request was rejected too; it had the same information in it (strong password and my Dwolla ID). The text on the recovery page indicated that no extra information would be needed if the password was strong, so I didn't add any more.

I have added additional information to the request (approximate balance, and the original deposit method), and resubmitted. However, I'm more than a little freaked out by this, and really don't want my account to still be frozen when trading opens.

I'm pretty freaked out too. I've never had anything like this happen to me in my entire life.

[imperi]

Define string password.

11 characters, mixed case alpha-numeric, no dictionary words. Not the strongest but still strong in my opinion.

[TriumVir]

However, I'm more than a little freaked out by this, and really don't want my account to still be frozen when trading opens.

Frozen? That's the least of your concerns. How do you know they haven't awarded your account to someone else?

[Dirt Rider]

11 characters, mixed case alpha-numeric, no dictionary words. Not the strongest but still strong in my opinion.

Perhaps not "strong" in Mt Gox's opinion?

[jimrandomh]

My password was output from "pwgen 24": 24 chars upper+lower+digits, no dictionary words.

[dserrano5]

Probably not strong—it lacks special characters. But then, why did the claim page allow it?

[Dirt Rider]

I recently changed my Gox password to a 20 char random string with lower, upper, numeric and special chars.  I haven't received any rejection notice.

[Dirt Rider]

My password was output from "pwgen 24": 24 chars upper+lower+digits, no dictionary words.

Ok I would call that strong- by today's standards anyway - 10 years from now we will be calling 128 char password weak I think.

[imperi]

Probably not strong—it lacks special characters. But then, why did the claim page allow it?

I am referring to my original password that I gave as proof that it's my account. My new password is longer than 11 chars.

[Slowpok3]

Well at least you're actually getting feedback from your applications...

I sent the Step 1/2: Identify your account application and it says an email was sent out.. but my inbox has not received any emails..

[trentzb]

Define string password.

11 characters, mixed case alpha-numeric, no dictionary words. Not the strongest but still strong in my opinion.

Not anymore.

I am referring to my original password that I gave as proof that it's my account. My new password is longer than 11 chars.

And again, not anymore.

[irishmick]

My question was how are they defining "Strong" passwords? Are they actually trying to crack the resultant hash in x number of sec/min or are they simply viewing it plaintext to see if it meets their requirements? I'd hate to think it's the latter... and don't call me a troll I'm just curious.

My new pwd at their site is 25+ characters and all manner of bullshit symbols...

[proudhon]

This doesn't make me feel good.  I thought my strong password would be enough for me to claim my account so I didn't offer any other information.  Shit, I spent a decent amount on the bitcoins stuck in MtGox.

[Valalvax]

I didn't provide my Dwolla account, mainly because I knew I didn't want to have to send money to Dwolla to send it to MtGox to verify...

[swusc2]

So lets see if I have this straight:

1) Everyone complains how easily MtGox got hacked.

2) Everyone is trying to claim their account back with least possible information possible.

Conclusion: Facepalm

[imperi]

So lets see if I have this straight:

1) Everyone complains how easily MtGox got hacked.

2) Everyone is trying to claim their account back with least possible information possible.

Conclusion: Facepalm

My original password, email, and dwolla account number should be good enough, don't you think? I was at work when I submitted the request so I didn't have my home IP.

[swusc2]

So lets see if I have this straight:

1) Everyone complains how easily MtGox got hacked.

2) Everyone is trying to claim their account back with least possible information possible.

Conclusion: Facepalm

My original password, email, and dwolla account number should be good enough, don't you think? I was at work when I submitted the request so I didn't have my home IP.

Considering the leaked information had: email/mtgox username/mtgox encrypted password. I don't think everyone used a different email/password for Dwolla and MtGox so no I don't believe its enough.

[grod]

Seriously, my original email account I registered with, visited the claims site with the same IP I've been signing on for a while, plus password? 

If all of that was hacked I'd have a lot more problems than accessing my MtGox account.  I think they're just stalling to avoid a run on the bank.

[AngelusWebDesign]

What were the options for proof?

I just got rejected, and I had provided my correct password (not awesome, but not awful either), Dwolla account number, and *STATIC IP ADDRESS* which is the same now as it was every time I accessed Mt. Gox. What are they saying, the hacker has my computer and my family hostage?  If you have a static IP, and that IP *alone* was used on Mt. Gox, I'd say trust that it's "the right person" to claim the account.

I was so jittery I hit "re-apply" after sending in only ONE more kind of proof.

I wanted to see how many I could do...

Thanks,

Matthew

[AngelusWebDesign]

So lets see if I have this straight:

1) Everyone complains how easily MtGox got hacked.

2) Everyone is trying to claim their account back with least possible information possible.

Conclusion: Facepalm

My original password, email, and dwolla account number should be good enough, don't you think? I was at work when I submitted the request so I didn't have my home IP.

I'll go you one better -- I submitted a static IP as well, and they STILL rejected my claim.

This is ridiculous!

[imperi]

04 < Clipse> accept my apology
23:05 < imperi> MagicalTux: Do you know why my application was rejected? I gave lots of
                different information
23:05 < MagicalTux> graingert: tired, a bit, and busy, too
23:05 < imperi> MagicalTux: like how could it happen?
23:05 < MagicalTux> imperi: did you provide your last balance estimation?
23:05 < Artifex_> MagicalTux, so the market is going to open and i'm still not going to
                  have my account when it does?
23:05 < graingert> MagicalTux: me too
23:05 < imperi> MagicalTux: I did not
23:05 < go1dfish> MagicalTux: can you offer any more info as to why the external auditor
                  needed email/pw hash access at all?
23:05 < graingert> MagicalTux: wanna grab lunch sometime?
23:05 < Sykotic_> go1dfish, what time do you go to bed? Ill come back then so i don't
                  have to read your repeated crap
23:05 < Enochian> http://blockexplorer.com/rawtx/9173744691ac25f3cd94f35d4fc0e0a2b9d1ab17b4fe562acc07660552f95518
23:05 < MagicalTux> imperi: you should try, even if you are not 100% sure
23:05 < csshih> tux, set the room to +m >_>
23:05 < Enochian> That's one of the transactions containing the logo.


It seems that giving approximations of your balance is important. I'm glad he got back to me so soon... now I don't feel like I'll have an anxiety attack.

[dserrano5]

I provided exact balance both in usd and bitcoins. Let's see what happens with my claim once I receive the notification.

[Meatpile]

He said they were trying to automate it as much as possible... which means if someone went in with the database dump and tried to claim every single cracked account. Then your account was probably flagged as "suspicious" and will have to be looked at manually. 61000 accounts or something is going to take 2 people a couple of weeks.

[TheGer]

Lol at people who put in the minimum requested info to verify account ownership.  Idiots.

[proudhon]

Well, I ended up getting the dreaded rejection letter.  I just resubmitted with ip, account balance, dwolla account number, and dwolla to mtgox deposit history (date and time).  Hopefully all that, in addition to using the same email I use with my mtgox account, and confirming my 21 character mixed password will be enough to claim my bitcoins.

[TheGer]

See?  An ounce of prevention is worth a pound of cure yeah?

[beeph]

See?  An ounce of prevention is worth a pound of cure yeah?

let's not forget this is all OUR fault and we deserve to get scammed! So make sure you dont report this to any authorities!
We should have known better!  Caveat emptor.. whatever you do.. dont call the authorities.. everythings gonna be ALLLLLriiiight!

[imperi]

Well, I ended up getting the dreaded rejection letter.  I just resubmitted with ip, account balance, dwolla account number, and dwolla to mtgox deposit history (date and time).  Hopefully all that, in addition to using the same email I use with my mtgox account, and confirming my 21 character mixed password will be enough to claim my bitcoins.

I only provided my home IP for the second time - guess I should have taken more time to go through all the accounting. Hopefully they give me a third try.

[beeph]

Well, I ended up getting the dreaded rejection letter.  I just resubmitted with ip, account balance, dwolla account number, and dwolla to mtgox deposit history (date and time).  Hopefully all that, in addition to using the same email I use with my mtgox account, and confirming my 21 character mixed password will be enough to claim my bitcoins.

I only provided my home IP for the second time - guess I should have taken more time to go through all the accounting. Hopefully they give me a third try.

this is a SCAM.. u got SCAMMED.. when will you idiots realize this? LOL.. it happens every day.. part of all cons is to blame the victim. that company has no value whatsoever anymore and will be shutdown/bankrupt within a week.. noone's getting any money back except their lawyers..

In a few more days the 'japanese government will have shut them down and the issue will be worked out in the courts, we have to comply with their request'

[TheGer]

take the panties from around your neck and put them back in your closet buddy.

[elggawf]

I provided exact balance both in usd and bitcoins. Let's see what happens with my claim once I receive the notification.

I provided that, plus IP and the address I sent BTC from/to (since they never had any of my financial details to verify) and they accepted me a little bit ago. \o/

[Rhis]

Rejected. Provided approximate balance in usd and bitcoins, as well as the total number of bitcoins added to the account, last IP, etc.
Haven't made any withdrawals so there are no Dwolla or other accounts attached.

Basically just had to resubmit it with the same info.

Total bullshit.

[swusc2]

Just received my acceptance confirmation. The information I sent included:

-Dwolla ID#
-IP Used to Create Account/Most Common IPs Used
-Account Balance

And the obvious stuff like MtGox Username/Password/Email.

[swusc2]

Rejected. Provided approximate balance in usd and bitcoins, as well as the total number of bitcoins added to the account, last IP, etc.
Haven't made any withdrawals so there are no Dwolla or other accounts attached.

Basically just had to resubmit it with the same info.

Total bullshit.

Well did you tell them that? Also in your case did you should submit your Wallet Address used to make deposits.

[Alex Beckenham]

Did anyone find their acceptance/rejection letter in the junk mail folder?

I'm using a very old email account that gets hundreds of spams a day, so I'm a little worried it'll get buried or that I've mistakenly deleted it already.

[imperi]

01:01 < MagicalTux> anyway if you got more than ~$100 worth of bitcoin/usd and didn't
                    provide a last balance, the system will auto-reject

[sergio]

Lets hope that all the accounts are active before they open up.
Otherwise it is going to suck big time for the ones that do not have the accounts ready.

Mtgox should make a guarantee to everyone that the accounts are ready before they open for business again.

I do not have my account ready, and have no clue when it will be ready.

I was told to reclaim my account again, and it is not working because I already had reclaim it, and was told to wait for a manual confirmation, but on the support ticket system I am told to check for updates on www.mtgox.com.

Are there a lot of persons having the same problem?

[AngelusWebDesign]

Thanks, Imperi. I think I know why I was rejected now.

[imperi]

Thanks, Imperi. I think I know why I was rejected now.

It literally took me all night to get a definitive answer. I think I can sleep now.

[Bit_Happy]

I provided my password and dwolla account. My password was strong in the first place so I don't understand why it didn't go through. I doubt I mistyped either. Any idea what I should do here? I put in a new request with my ip.

(edit: Not trolling this time)

Can you afford a plane to Japan? Perhaps you might even get some donations here at the forum.

[billyjoeallen]

just got rejected. I don't take rejection well :-(

[Grinder]

01:01 < MagicalTux> anyway if you got more than ~$100 worth of bitcoin/usd and didn't provide a last balance, the system will auto-reject

Putting that much weight on this piece of information seems stupid. If the account were hacked the hackers would know how much money is in the account.

[Maged]

01:01 < MagicalTux> anyway if you got more than ~$100 worth of bitcoin/usd and didn't provide a last balance, the system will auto-reject

Putting that much weight on this piece of information seems stupid. If the account were hacked the hackers would know how much money is in the account.

I agree that there's too much weight on that, but you do have to remember that there is only one person who has the balance sheet outside of MtGox: the original hacker that caused the crash. Everyone else only has the user database.

That said, it should only be supporting evidence.

[beeph]

the hackers had access to a transaction log for a friend of mine who deposited 5000$ (number changed for security purposes but it was in this ballpark).. they knew his dwolla account and specifically targetted him with a phishing mail that had his DWOLLA account number on it.  He called dwolla and showed them the phishing mail.  The hackers had access to FULL TRANSACTION HISTORIES.  Noone else knew his dwolla account and he used a secure gmail to register it.

So using balances to verify is dumb.. the #1 thing should be using the associated email.

Use your freaking brain guys.. if the hackers had the entire account table + hashes.. what kind of stretch is it for them to have access to the transaction tables too?  Just because they didnt publish the transaction table on a hax0r forum doesnt mean they didnt have it.  The only reason they relased the password hashes was SO PEOPLE COULD CRACK THE HASHES FOR THEM.  NOT TO BRAG.  NOT FOR THE 'LULZ'

How did I verify transactions when i ran online sales International?

Step 1.. call the guy
step 2 'does the guy have a romanian accent'
step 3 'if yes, decline business'
step 4 'does the guy have a chinese accent and his name is Joe Smith'
step 5 'if yes decline business'

fraud rate:   < 1%

[dserrano5]

I provided exact balance both in usd and bitcoins. Let's see what happens with my claim once I receive the notification.

I provided that, plus IP and the address I sent BTC from/to (since they never had any of my financial details to verify) and they accepted me a little bit ago. \o/

Thanks for your input. I provided my IP too.

My balance is >$100 and I'm still in limbo, I guess I was not automatically rejected, probably because I provided exact balance. I see that as a good indication.

[Justsomeforumuser]

For some reason it must hinge on the amounts in the account.

I provided my exact old password, my withdrawals real name, bank account information and address.
It got rejected.

I have now added: Possible IPs/ranges, estimated BTC and USD amount, a half dozen MtGox generated deposit BTC addresses together with their amounts of BTC to send.
Not sure if they even store those as they are only valid 24h, but it's at least something.

I am also ready to email someone official at MtGox scanned paper ID, drivers license, bank account statement with my name on it if they don't believe me.
Before the hack, there were only withdrawals, only to me, my bank, my name, and that I provided.

Why anyone would need more than that? I have no idea. It makes no sense.
But I provided a rough amount in account estimate now, maybe that helps.

[dserrano5]

Finally, after 50 hours since my original claim, I just received the "Accepted" result. To summarize: I provided old password (a good quality one), exact balance greater than $100 and IP address. No dwolla (not an US citizen—don't have account there), no details about funding/withdrawals, no anything else.

[tim85254]

I rejected THEIR request.  No way will I use that system ever again.

[0x00]

My old password 50 characters long, completely random. I also provided my LR account. Still got rejected.

[fujiwara]

My old password 50 characters long, completely random. I also provided my LR account. Still got rejected.

lol! this is starting to smell fishy, ...

[M4v3R]

I only provided password (which was 10 chars long) and got accepted. I didn't have any funds there though, because I've withdrawn everything just before the incident. Lucky me .

[Calavera]

The only reason they relased the password hashes was SO PEOPLE COULD CRACK THE HASHES FOR THEM.  NOT TO BRAG.  NOT FOR THE 'LULZ'

I agree that using balances is debatable, but it's only part of the information that he's using.  Obviously he's going to use as much information as he thinks he can verify.  However, your above quoted statement is wrong.  If they just wanted people to crack the hashes they would have been posted them without the accompanying account information.  Posting the entire user table very much devalues its contents.

[Mageant]

I would resubmit with as much information as possible.

[klaus]

first denied, please bring more information.

Now accepted, fine. they are much faster now!

 

[bracek]

first denied, please bring more information.

Now accepted, fine. they are much faster now!

 

I was rejected first time, but shortly after my second attempt,
they sent me email
saying that
my account recovery request has been accepted.
and that I will be able to access my Mt.Gox account once the site opens again.

I have more than 100 btc, and a few usd cents ...

I submitted exact balances and described wire transfer and transaction history
 

[DonnyCMU]

01:01 < MagicalTux> anyway if you got more than ~$100 worth of bitcoin/usd and didn't
                    provide a last balance, the system will auto-reject

This is so stupid. If that is really a requirement why don't they just say so???
I can't remember my exact balance, only something very vague, and don't even know if the buy order I had was filled or not.

[fujiwara]

My first try:
* Name of the Bank I sent money from
* My (fix) IP Adress

2nd try:
* estimated balance
* details about a EUR deposit
* old password (not too safe)
* mentioned that I withdraw 1 BTC during the flashcrash

I'm gonna see what happens now, ... I dont know what to do if this isn't enough, ...

[zby]

On my one account I've got acceptance at the second try.  On the second one I've got two rejections.  Now I have two problems.  First I don't really know which one is which - what complicates the retrieving of relevant info.  Second all of the options even the catchall 'Other' can be used just one time - after using all the options relevant for my accounts (I've not used dwolla or LR - so they are useless for me) I am left with no way to add more information.

[Justsomeforumuser]

I provided my exact old password, my withdrawals real name, bank account information and address.
It got rejected.

I have now added: Possible IPs/ranges, estimated BTC and USD amount, a half dozen MtGox generated deposit BTC addresses together with their amounts of BTC to send.

Accepted.

[stic.man]

I got an acceptance after adding more info including my account balance and info about a wire transfer I had made directly to mtgox.

previously i had only included my dwolla info and password

[billyjoeallen]

2nd try accepted.

I included records of my deposits from dwolla and wire transfers, along with estimated balance and account history. I also included details of the romantic weekend I shared with Magical Tux in Aspen, and the description of my hidden tattoo. 

[TheGer]

Never trust anything said by someone with 3 first names.  I don't buy it for a second!

[edd]

Also accepted on second try after only a few minutes waiting. Second submission included Dwolla account #, IP address, approximate balance of BTC and USD, amount of last Dwolla deposit and last Dwolla withdrawal.

[dserrano5]

Well seems that the majority of us are getting through, no? Half of my brain begins to think that these will be the last 12 hours without trade at last!

[WakiMiko]

My first try:

• Password only (16 characters, alphanumeric + special chars. e.g.: ^nv"9:}]!7v3g>|?)
• Claim request email matches email used to create the Mt. Gox account

rejected

My second try:

• Bank details (name, BIC, country-specific info)
• Details about my last deposit (amount,  date, reference number, conversion rate)
• Details about a direct USD transfer to another Mt. Gox account (amount, other account name)

rejected

My third try:

• IP info (subnet as my ip is dynamic)

accepted

[Bitonetta]

Your account recovery request has been accepted.

That's it.  Gave my password and only what my $ balance was.  Not even BTC balance required.  Just USD.  No dwolla, no ip, no previous transactions, previous dates or anything.

There's definitely a mininum balance.  I had less then $100 in there.  I moved a few thousand dollars outta there the few days before luckily so whatever.

I feel sorry for the ones with $/BTC tied up.  My experience with this whole fiasco has been satisfactory so far.  Very little fuss for me personally.  And if the claim is correct, I should have access back for my account when it's opened.

[qualia8]

2nd try -- accepted.  don't know why i'm excited about this.  the whole debacle should never have happened in the first place.  i'm excited to get my frozen assets *back*?

[jimrandomh]

Accepted on the second try. (Apparently not having included an approximate last balance was what made it not work the first time.)

[BGL]

Denied first time around, probably because i'm > 100 & didn't provide a balance. (it'd been nice to have known about the > 100 beforehand)

It's either my age (old) or stupidity but i took "Make sure you provided your last balance, even if its approximate." a bit literally (the 1st time) & != estimate.

So instead of being possibly wrong i figured i'd be a bit more safe in leaving it blank.

I did provide dwolla, 2 ip's, used strong passwords both times (new/old) but i guess that wasn't good enough.

sent it back with "approximate" balance info & i'm fairly confident it will go through the 2nd time.

Side note: "Note that if you already had an accepted recovery request with this email, all other requests will be rejected. In this case, try placing another request from a different email." - This didn't quite make sense to anyone i spoke to so we all just ignored it.

[AtlasONo]

IP
Dwolla ID
Exact Bitcoin & usd balance (screencapped my account history page a day before they went down)

Accepted first time.

[imperi]

HEY EVERYONE - I'VE BEEN DEGOXED !!!!

 



(now the next trial comes... whether I can log in when the site is up)

[ymgve]

Got accepted on my first attempt yesterday. Original password was 9 char lower/numeric, IP and email the same as before the hack, but I didn't give a balance though I had more than $100 in the account. Still got accepted.