Diamond 5 Stake, account was hacked

[alertoriole]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

[1715277309]

1715277309

[1715277309]

1715277309

[CryptSafe]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.
If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

So sorry about your loss of funds. It's obvious your account got hacked as a possible phishing attack on your system or whatever you have used to access your online account. It is advised not to click on link we have no knowledge about so s not to give room for a cyber attack against your details.  Always cross check details so as to know wether it is real and from the right source before clicking on it. If there is any possible discrepancies, do well to contact customer care of that Service to confirm for your safety.
If you are wanting to pay for who will help you,  I will advise you to seek the service of an escrow before engaging any one for transparency and credibility as this will guide you to achieving a smooth agreement or memorandum of understanding.

[seoincorporation]

bump. happy to pay a few grand to someone who can help.

First of all... sorry about your lost, it was a hug amount, and the VIP level on the account was huge too, that sucks.

Talking about the Phishing site, they are still alive as we can see in the next picture:

The attack is curious because first they ask for the 2FA and then for the user name and password, so, or it's automated to unlock the 2FA instantly or there is a crew watching like the hacked accounts.

If we take a look to the "WhoIs" there is not much information, all was redacted for privacy:

Code:

$ whois com-bonus.io
Domain Name: com-bonus.io
Registry Domain ID: 8b801b2798ba4550851bd6d5f15ba689-DONUTS
Registrar WHOIS Server: http://www.hostinger.com
Registrar URL: http://www.hostinger.com
Updated Date: 2022-12-22T13:20:30Z
Creation Date: 2022-08-03T16:59:35Z
Registry Expiry Date: 2023-08-03T16:59:35Z
Registrar: Hostinger, UAB
Registrar IANA ID: 1636
Registrar Abuse Contact Email: abuse@hostinger.com
Registrar Abuse Contact Phone: +1.11
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: MA
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: US
Registrant Phone: REDACTED FOR PRIVACY
Registrant Phone Ext: REDACTED FOR PRIVACY
Registrant Fax: REDACTED FOR PRIVACY
Registrant Fax Ext: REDACTED FOR PRIVACY

I don't think there are any way to recover your money, but maybe you can contact support in the site and explain the problem, at least they should be able to block the scammer account or share their KYC with you.

[cabron]

You might wanna make the phishing to be not a hyperlink in this page so people will not click it as well. Being that, people who will click that link might also end up being a victim and you won't split responsibility.

They need the code from your email to be able to withdraw so obviously your account and your email were compromised. There is a chance that they might not split that responsibility for you. Such a large sum, sorry for your loss.

[Fivestar4everMVP]

This is really pathetic, and like you said, both you and stake are in the wrongs, someone of your caliber shouldn't be clicking links you are not sure of, not to talk of giving in your details carefreely, I just clicked the same link you clicked, and I noticed that there is a clear difference of the site from the original stake website.
First is that, the link are not the same - always check that
Secondly, it asked me to login, on the same computer I am currently logged in to the original stake website - this is an obvious red flag you should have page attention to, But you ignored and gave scammers the ability to access your original stake account, and i also know that once you login on stake, it stays logged in, and the only time they ask you for 2FA is when you want to withdraw -- i personally think you were just too careless.

Stake on the other hand should have an algorithm in place that would not allow a user to withdraw their funds if they turn off their 2FA until 24 hours elapses, this is how some other platforms i know does it, so this is clearly a big mistake on the part of stake.
And again, I thought users on stake are not allowed to withdraw more than $10,000 without passing KYC verification, how was the new account able to withdraw that huge amount of money without passing KYC verification???

[Alisha-k]

So sorry for your lose, I also hope the right thing is fine because seriously, times are hard and we need the little we can get to survive through

But, if it's not possible, accept it as your lose and try to be more cautious and courageous.

[GxSTxV]

In your case it seems like the hacker was able to trick you into clicking on a phishing link which disabled your 2FA and gave them access to your account The things that’s concerning is gambling sites should have protocols in place to prevent such large internal transfers to a brand new account especially after your 2FA had been disabled. It would be understandable to expect some level of accountability on their part in this situation. I hope that they will take your concerns seriously and work with you to find a solution. It's important for online casinos to prioritize the security of their customers and have measures in place to prevent incidents like this from happening in the future where such a suspicious activity happens and from a different IP address.
For that phishing website i have reported it to Hostinger team and hopefully they will close it ASAP

[QueenVera]

I'm so sorry for your loss but most times we really have to be careful of the links we clivk ok and that's one of the major reasons I don't click on any random link because I don't want regrets later on because I'm very sure that these guys are tirelessly working on stealing hard earned money from people at all cost.
I really don't know if stake would have so much to do about this incidence but I hope they do since it's an internal transaction and since you said they blocked the other one then you should be hopeful they recover the funds but one thing I know with situation like this is that the link you clicked on has already disabled your two factor verification and anything can easily be done on your account since the security was bridged.

[Obari]

I suffered similar issues with an exchange and I got scammed by a peer to peer user who sent me a link and since I needed my money, I innocently clicked on the link and my 2 factor verification was compromised ad tye trade was approved and coin released just by me clicking on the link and I really felt so bad because the money was intended for treatment.
I'm so sorry you had to suffer such a loss and I also hope that this serves as a warning and also a wake up call to gamblers who underrate phishing links and I will never click on a link I don't know it's source.

[Strongkored]

And again, I thought users on stake are not allowed to withdraw more than $10,000 without passing KYC verification, how was the new account able to withdraw that huge amount of money without passing KYC verification???

Maybe the brand new account that receives the first money through the tip feature is just a stopover because after that he easily sends it to another account that has passed KYC so he has successfully made a withdrawal so this is really a loss.
The lesson is not to click on random links, especially if it involves an account with large enough funds.

[armanda90]

I am so sad heard with your account stake got hacked and loss much money, I think you can try to tracking with your fund withdrawing trough tips and ask the costumer service for banned or freeze the account receiving. Effective or not to know hacker but I don't sure with your fund will get back in your account stake wallet.

Have possibility with your account hacked trough fake link or your stake id and password have been know by some one else are close with you, but tracking trough tips withdrawing you can know who is the real hacker. I think highest Stake account level exactly with Diamond 5 better using 2fa and add another protect when login to account need email confirmation.

[Kakmakr]

I agree,

There should be more checks and balances on accounts with your VIP level, to make sure that things like this does not happen in the future. A red flag should be raised, when a certain amount of money are tipped or withdrawn from your account... and then extra measures should be in place to prevent it.

Example : You provide them with a code word... say "Freebies4Ever" .... and this code word is kept with support. If you give a large tip (x percentage of your balance) ..it will trigger the customer support to contact you to ask for the code word. If it cannot be provided, they block the account and they contact you.  

I hope this helps you.... sorry for your loss.     (I am not at your level, but I will be pissed if it happened to me and there were no extra measures to protect me)  

[swogerino]

First I am extremely sorry for your loss,having build up an account to such level and seeing it ruined with a phishing email/link or any other social engineering attack just suck.I cannot stress enough how indispensable is user training and awareness when it comes to such attacks from the cybersecurity perspective.Unfortunately it is your own responsibility for such act that happened,we all would love to help and a good case is the Norwegian police being able to recover about 5 million of 30 million stolen coins in some attack,this proves that governments can if they make a good chain analysis be able to get to that hacker account,the only problem here is that your amount is much lower than 5 million dollars which would spark the interest of state forces to help you.

Sorry that you experienced this and hopefully it will be the last of such accidents for you.

[CryptSafe]

Yeah so, a month or so ago I started getting messages from players on the site demanding money or they would dox me or they would do this and that, sending images of family members and so on. I wrote in and asked for help in making my account incognito or some kind of privacy and was denied.

What has happened is that my telegram where I get the notifications from stake was found out, someone sent me a link on telegram so it popped up on my computer looking just like stakes messages. I clicked it and the rest is history. As far as withdrawls and kyc no stake doesn't have any kyc on withdrawals up to 60k i believe for instant. In any event, clicking was idiotic but the 2fa being stripped and money not being withdrawn but tipped over to a new account is pretty shocking. They stopped 105k and are congratulating themselves for doing so but I lost 100k in the process of them cashing out a bet and stealing the funds.
Was hoping due to my level at the company they would reach some kind of agreement but it's simply 'we can't pay for stolen funds'

OP if i may ask you these question, does anyone know about your identity on stake casino? Does anyone knows you have such amount of money right there in your stake account? Try do a flash back to remember events and occurrences surrounding your account when you made the deposit into your stake account. When you contacted the customer care service of stake complaining about the threat you received in respect to your account and people sending you messages, did you send them the proof of the messages as evidence for them to see? If you did and they ignored you then they too have  questions to answer for not keeping a close monitor on your account and also for not keeping a close monitor in the account that sent you those messages if they are onboard the stake platform. You took a proactive measures early enough to lay a complaint to stake about your experience but they did ignored your complaint and here is the end result of the whole thing.
This is a serious case I will advise you to register your account as a copper member them post the evidence of the threat messages you have been receiving from the players onboard the stake casino also the messages you sent to stake for help and their response to you because if they had helped you earlier enough, this would have not occurred maybe minimal experience.
How can they explain this that a customer registered on their platform with huge amount of money attached to account sent a complaint to stake customer care service in respect to the threat of account doc received still yet they could not be proactive to the complaints.
I strongly advise you to start uploading the evidence here so members could see and follow up the situation.

[bettercrypto]

The lost funds in your balance in the account of the gambling site you are playing on are also quite large, but you yourself said that you clicked on a link that caused your account to be hacked.

      But what happened to you is worrying, even though 2FA is enabled, it is still possible to disable it like what happened to you. Then I don't think that can do anything and you won't be able to catch up with what you lost because for sure it has been moved to different addresses.

[AHOYBRAUSE]

It is a little strange that they didn't make your account incignito.

A lot of members which you can see in the top 10 in the daily races are incognito, so that's a normal thing.

Your fault happened, we all make mistakes, but that security should really flag suspicious tip transactions to newbie accounts, I don't understand how this could happen. From time to time here we read of accounts that get blocked "for security reasons" in suspicion of multi accounting or whatever but real fraud in 6 digits doesn't get found out, that's alarming.

Well looking at stake history of things like that ( I am very active in stake's forum and read about strange cases a lot ) I think there is nothing that they will do to refund you. A little bit of a shame since you are almost diamond 5 and therefor have wagered almost 500 million $, what a crazy amount.

I am platinum 4 and also ran into problems in the past where I didn't get help, for some reason though I always stick with stake.

Edit: maybe you can make this case public at https://stakecommunity.com/ .

Spreading more awareness and put some small pressure on stake to maybe rethink about helping you.

[Wexnident]

I am more wondering since usdt is extremely traceable and the funds were sent to an exchange if anyone can help in that matter or if anyone is capable of finding the ownership of the website that did the phishing. The money went to bitfinex which I know people will say they probably used fake kyc there to move the coins...I just doubt that, real hackers aren't sending money directly to exchanges, they are cashing them out, tumbling or swapping for different coins. The link was sent to me on telegram which directs it towards the same group of players who have been trying to extort for the previous month. If anyones able to help, genuinely, then please let me know. I'm not wanting to post thousands of pictures and arguements w the site and ownership as I don't think that will lead to any positive results. I don't expect to retrieve the stolen money but I do suspect there's a trail that could be uncovered.

I think exchanges accept reports if you were to show them the links and proof about the hacked account, the wallet involved, and where it's going right now? (I am not sure of this, but they do this kind of stuff in big hacking events so you might as well try ig) I don't think they're able to directly return it to you though. I suggest just compiling everything you have in one place so that whenever someone asks you can just link them to that pile and have them read it all instead of repeating yourself.

As for the doxxing though, I don't think stake is at fault here, they might've just pieced the details themselves when they got access to your data. There are a LOT of places out there that can link back to you if they're knowledgeable enough. I highly doubt stake would help with that tbf.

[Daltonik]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

I'm sorry what happened to you, well, I see that your funds were transferred within an hour to this address https://etherscan.io/address/0x8c96bd52c7bcdb9e9cff233482ee802c72c3cd95 from where, in turn, they were moved to the next address where they are still located https://etherscan.io/address/0xdeb197c73270288adbd93ac537311b46cab96f71 maybe you should contact the police before it's too late, Theter can block the attacker's stolen USDT, unless of course there are grounds for this.

[Stakefast]

Stake just enabled email code for tipping, I guess your thread has made some change already, which is good.
I am sorry for your loss. Make sure to change all passwords and change wallets, they maybe targeted something else too.

[Get-Paid.com]

Saw you writing on chat as well, it's $150k and this should be emphasized and should have been emphasized from the beginning.
Definitely the best ones to help you here is Stake, not Tether - someone from Stake should have looked into this ASAP ... or would look into this ASAP, so maybe, with a fraction of a hope, you might get into something.

The only best ones to help you resolve this are Stake, no one else.

[Lucasgabd]

Stake doesn’t have authenticator based 2FA?
Still with the phishing situation sometimes the hackers can bypass it

I wouldn’t hope for tether to freeze this amount in this cases

Best to check directly with Stake website as some pointed

[OgNasty]

It sounds like you made a bad mistake and paid the price, but it also sounds like Stake did their part to freeze the funds to keep the loss at a minimum as soon as it was possible for them to do so (once you alerted them).  This is a huge loss and a terrible situation, but I'm not sure Stake owes you anything.  If they did, I could only imagine how many inside jobs would suddenly happen with users wanting payouts.  Did you ever have the frozen funds returned?  While I think it's unlikely you'll be able to recover anything, if Stake saved a large amount of money from being stolen from you, you really owe them some gratitude in my opinion. 

As I've said a million times...  Stay off telegram.  It should be branded the chat network preferred by scammers.

[seoincorporation]

As I've said a million times...  Stay off telegram.  It should be branded the chat network preferred by scammers.

Telegram has become a shit hole, the amount of scammers and the daily scam attempts is just crazy. I get tons
of daily messages trying to scam, and for each user you block 5 new users will come to you.

I didn't alert them to the last poster. It was caught only because the hacker tried to withdraw over his limit. I guess they should be applauded for that, depends how you look at it really. Draining your highest profile sports account in tips to a brand new none kyc account and losing 60 plus grand doesn't seem like the highest level of security to me really.

This sound really tricky to me too... How can an account get a $60k tip and easily make a withdrawal without KYC? I don't feel like they are doing something to avoid money laundering. They should at least investigate a bit when things like this happen.

[BenCodie]

I do wonder how it's possible that Stake are letting brand new accounts withdraw in excess of hundreds of thousands of dollars. You would think that there are some sort of flags or something in place to prevent brand new accounts from instantly withdrawing this much?

whats done is done. shoulda been a quick solution but its done. anyway has anyway to flag or do anything to the coins let me know. me calling the cops saying stake was robbed isnt going to do much.

In my opinion you should be fighting a lot harder than what you are. This is life changing money to some people...and one day, it could be to you too. Don't let your present cause regret for the future. Do everything you can so that you can't blame yourself for not doing enough later.

[Get-Paid.com]

crypto isn't really my world hence being on here. Any advice or ways to lock the funds or wallet and I'm all ears. The funds were stolen from stake on stake, calling police and saying what? Its a jurisdiction thing and it's not my company or my wallets that were hacked. The address info above I can't tell if that is accurate and those are the coins that were sent out or not. I am super interested and motivated to at least go down swinging here, so if theres some advice pls let me know. Definitely not taking it lightly at all.

The only thing you can do is try to trace the transfers from that wallet, see if transfers were made into some exchanges, and in this case contact the exchanges urgently - however if this is a hacker he might be a very smart person who mixed the transfers and won't use any exchanges and it would be difficult to trace where the money went to -

This is a very large amount, I would have used a service to try and help:

https://www.quora.com/How-do-I-find-a-very-good-ethical-hacker-for-Bitcoin-blockchain-and-cryptocurrency-recovery-jobs
https://transitnet.io/blog/can-you-recover-your-crypto-is-lost-stolen/

Don't pay anyone upfront, only if someone is willing to work on a no-win-no-fee basis then it's someone you "can" trust and the word "can" is emphasized (make sure he's genuine and won't scam you any further).

Search on Google "Recover Stolen Crypto" - try to see if you can find anything that might be useful.

[Get-Paid.com]

https://ethplorer.io/address/0xdeb197c73270288adbd93ac537311b46cab96f71#


that is where the coins ended up. Anyway to tell if this is a private wallet or an exchange wallet or what exactly this is? Not expecting ppl to work for free.

The balance is still there and hasn't left that wallet?

 

Surely someone from the forum member knows... ask about this urgently here as well please:

https://bitcointalk.org/index.php?board=4.0

[acroman08]

https://ethplorer.io/address/0xdeb197c73270288adbd93ac537311b46cab96f71#


that is where the coins ended up. Anyway to tell if this is a private wallet or an exchange wallet or what exactly this is? Not expecting ppl to work for free.

the wallet only has three transactions, it seems like a private wallet.

Surely someone from the forum member knows... ask about this urgently here as well please:

https://bitcointalk.org/index.php?board=4.0

that board is dedicated to bitcoin-related issues. the OP's problem has nothing to do with bitcoin, it would be best if he posted on beginners and help, this board is very broad, you can pretty much ask anything there as long as it has something to do with cryptocurrency.

[bitbollo]

Yeah so, a month or so ago I started getting messages from players on the site demanding money or they would dox me or they would do this and that, sending images of family members and so on. I wrote in and asked for help in making my account incognito or some kind of privacy and was denied.

What has happened is that my telegram where I get the notifications from stake was found out, someone sent me a link on telegram so it popped up on my computer looking just like stakes messages. I clicked it and the rest is history. As far as withdrawls and kyc no stake doesn't have any kyc on withdrawals up to 60k i believe for instant. In any event, clicking was idiotic but the 2fa being stripped and money not being withdrawn but tipped over to a new account is pretty shocking. They stopped 105k and are congratulating themselves for doing so but I lost 100k in the process of them cashing out a bet and stealing the funds.

Was hoping due to my level at the company they would reach some kind of agreement but it's simply 'we can't pay for stolen funds'

First of all I am really sorry to read such bad story and sure even if you get scammed by a phishing...isn't their fault (and really hard even to be proved!)

According your post, please note that I have a private account on stake what did you mean with incognito mode? Isn't private the same thing? Of course I don't spend any time on their chat simply because I don't care/have time for doing it.

Last but not least, telegram messages from stake are received ONLY in their channel for vip and not from random account ...

At this point there is nothing more to be done. You can try to reach TETHER to see what it can be done.
Secondly you can ask legal support specialized in such crypto activities... and track this ETH address (just in case scammer will use an exchange you can try to recover this sum)

[Wiwo]

So sorry for your lose, I also hope the right thing is fine because seriously, times are hard and we need the little we can get to survive through

But, if it's not possible, accept it as your loss and try to be more cautious and courageous.

From all indications and points of view, ops are to be blamed for everything because he click a phishing link and it's possible this is not the first time he has clicked the link and his account may have been compromised long before the hackers cashed out.
-I am sure his activities have been monitored for a long before the hacker finally struck when he has seen enough cash-out.
-The only place I see stake fault is where the withdrawal was approved even though the 2FA security was removed, because, in the change of any security details, the account should have been placed under 24-hour restrictions.

[South Park]

So sorry for your lose, I also hope the right thing is fine because seriously, times are hard and we need the little we can get to survive through

But, if it's not possible, accept it as your loss and try to be more cautious and courageous.

From all indications and points of view, ops are to be blamed for everything because he click a phishing link and it's possible this is not the first time he has clicked the link and his account may have been compromised long before the hackers cashed out.
-I am sure his activities have been monitored for a long before the hacker finally struck when he has seen enough cash-out.
-The only place I see stake fault is where the withdrawal was approved even though the 2FA security was removed, because, in the change of any security details, the account should have been placed under 24-hour restrictions.

Both the OP and stake have some blame to share, however in the case of the OP I agree with you that somehow he was already being watched by those scammers and they have been probably sending him links for some time waiting for him to fall into their scam, and while stake is also to blame, on their defense I do not remember ever seeing this particular kind of scam, instead of withdrawing money directly from the hacked account they sent tips to a new account and then withdrew that money from that account, so it makes sense they were not ready to stop such an unusual attack.

[livingfree]

Sad to see anyone who has been phished and the robbers took a lot of money from someone's fund. The incident happened with your negligence that you've click a suspicious linked and that had taken not just your stake account's credentials but also the email.

Usually with these withdrawals require a 2FA through email or an app and if they've taken over your email as well, there's nothing much you and the casino can do because they'll just take it as you're withdrawing from another location and different IP.

The other concern about tipping a new account, they should also suspect something like that and able to trace that some unwanted transaction has happened.

[Wiwo]

So sorry for your lose, I also hope the right thing is fine because seriously, times are hard and we need the little we can get to survive through

But, if it's not possible, accept it as your loss and try to be more cautious and courageous.

()

Both the OP and stake have some blame to share, however in the case of the OP I agree with you that somehow he was already being watched by those scammers and they have been probably sending him links for some time waiting for him to fall into their scam, and while stake is also to blame, on their defense I do not remember ever seeing this particular kind of scam, instead of withdrawing money directly from the hacked account they sent tips to a new account and then withdrew that money from that account, so it makes sense they were not ready to stop such an unusual attack.

Yes the thing is, we can blame both for everything but the fact still remains that ops are still in the right position to take all the blames since he initiated the vulnerability in the first place, we are warned never to click any link without proper check and if we visit our favourite site and we a prompt to input password we should always be careful and try to check everything right to know if the site is legit or not.
-Hackers are smart and there have clown popular sites all with an attempt to steal users' information even bitcointalk accounts have been hacked before using this same method.

[SirLancelot]

It is a little strange that they didn't make your account incignito.

A lot of members which you can see in the top 10 in the daily races are incognito, so that's a normal thing.

Your fault happened, we all make mistakes, but that security should really flag suspicious tip transactions to newbie accounts, I don't understand how this could happen. From time to time here we read of accounts that get blocked "for security reasons" in suspicion of multi accounting or whatever but real fraud in 6 digits doesn't get found out, that's alarming.

Well looking at stake history of things like that ( I am very active in stake's forum and read about strange cases a lot ) I think there is nothing that they will do to refund you. A little bit of a shame since you are almost diamond 5 and therefor have wagered almost 500 million $, what a crazy amount.

I am platinum 4 and also ran into problems in the past where I didn't get help, for some reason though I always stick with stake.

Even if stake incognito his account, I think that won't still help because he was the one who click on the phishing link on the chat and also, we are the ones who can choose to incognito our accounts and not stake. We can do this by going on the settings and enabling the ghost mode feature. Stake allows multiple accounts if I am not mistaken and anyone can create a brand new account. They will then tip their alt accounts.

This must be the reason why stake allow it but after this incident maybe they will now be a little stricter. If the money is already withdrawn outside the platform then I doubt stake can help but maybe they can give some donations to the OP if he is telling the truth only to ease some pain.

[sciack]

Just wanted to pitch in here:

Over the years, I've had 3 different Stake accounts hacked. Each time, Stake support was incredibly horrible at understanding the situation and taking appropriate action. Actually, in two of the cases, they straight up denied the claim that they were originally my accounts, even with extensive proof.

Good luck with this. Stake is known to have very very poor support beyond simple requests, I would take this as a lesson, cut your losses, and move on to another casino.

[pixie85]

The phish occurred that morning of the 17th at 553am so they waited two days until there was a balance. Full responsibility for sure and I’m living w the consequences but the security was truly pathetic and I had been raising alarm bells to the owner for a month on deaf ears

If they had 2fa requirement + your password and email confirmation for withdrawals I feel like the security was good. The only 2 holes that I can see is that there's no email confirmation needed to disable 2fa. Once 2fa is enabled it shouldn't be disabled simply by logging in with a password. The only way to disable 2fa should be to either enter 2fa token or password + email link.
The second hole is tipping amount. It shouldn't be possible to tip 50 thousand just like that. The amounts should be lower. Nobody in their right mind is going to tip someone 50 000.

You also made a huge mistake clicking suspicious links and not checking your account at that point. If you were clicking around and entering your password in every single popup window, withdraw the money to keep the account at minimum or change your password. You had 2 days to fix your mistake.

[bitbollo]

the point is not that i am not taking responsibility for clicking a link and i know how stake works and their bonuses work. The point is i asked to change my username after dozens of extortion attempts both on and offline and doxxing and we denied, now they are eager to do it. Also tipping 165k to a brand new account, which by the way is not something i have ever done, 14 minutes exactly since my 2fa was stripped is not proper security. They changed their protocol today and it should have been tighter from the begining. Keep in mind they had no information to make an actual withdrawl from my account or i would not be complaining this was all done because the internal security didn't exist. This is after the email leak a few months ago and countless phishing attacks on all of its users over and over. So opinions are welcome and it's my burden to lose that money but a company accepting millions of dollars from me every month or so should have some kind of security to not allow someone to drain my entire account in a tip to a new account that was made five minutes earlier with no history and also this to occur 14 minutes after my 2fa stripped. That was my gripe but now I am focused on trying to track the coins if anyones able to help any further. I don't need a lesson on how the site works, I am fully aware of what I did wrong, just shocking that it didn't reject a tip of that magnitute or have some internal alert that it was instantly suspicious.

I understand that you are angry and you are ...right...
the fact that they have introduced changes to their policy is a step forward.


regarding this post I didn't understand:
-even if "they" know your username and they are going to doxx you what is the real issue? I mean, if you're able to play with such figures for sure you're not living in a suburb driving a fiat panda...
what about keep the account private so no one will known anymore what are you doing on stake?
-how did you know that this account was created 5 minutes before the tip?
-I fully understand that such a tip is nonsense (of course).
I don't want to give you any lessons but I would always try the legal route (company negligence?) in short, you can always look for such support in addition to writing here on the forum...

[Wakate]

The lost funds in your balance in the account of the gambling site you are playing on are also quite large, but you yourself said that you clicked on a link that caused your account to be hacked.

      But what happened to you is worrying, even though 2FA is enabled, it is still possible to disable it like what happened to you. Then I don't think that can do anything and you won't be able to catch up with what you lost because for sure it has been moved to different addresses.

It is just very unfortunate for op to have lost that kind of huge amount of money in a few hours. I don't know how easy it will be to track down the scammer but the casino do not have to be blamed because this case is unlikely so op need to sophisticated team that can look into the wallet that received the fund and track it down if he meet the right team that can do that for him.
The fund is huge and I am still very surprised how easy it is for scammers to hack into someone's account with just a phishing link.

[bitbollo]

It says when the acct was created. I’m at peace w the mistake but there is definitely responsibility both ways especially when they were warned for a month about several scams being targeted etc. tbh if someone can help me at least disrupt anything to do with the coins I would sleep a lot better. I failed stake for sure by clicking but they absolutely failed me as well by not listening or caring about all the warnings. Tipping some new acct 165k within 2 minutes is absurd. They handle very very big clients which means very very big money. Gotta be more secure than to let an eternal theft occur.

for what I can see ( and I know) you can just access to DATE of when an account has been created and not the time.

btw...
if you think they have some deficiency on some part of the process or they are "guilty", you need to talk with a lawyer imho. for sure, if they have implemented some new solutions.... they have taken serious your complaint.

as I have suggested before  

track this ETH address (just in case scammer will use an exchange you can try to recover this sum)

scammer has used tether... it's a crypto with a TOS....

[aioc]

The phish occurred that morning of the 17th at 553am so they waited two days until there was a balance. Full responsibility for sure and I’m living w the consequences but the security was truly pathetic and I had been raising alarm bells to the owner for a month on deaf ears

Since it's posted here, they are going to pick it up, security really starts from ourselves be always mindful of what we are doing and what we are clicking, there are two things that you need to be fully aware of, the existence of phishing links and clipboard malware.
So always take your time Always think of security, it's a big amount of money for me it's hard for me to get over if I lose that amount, all we can say now is we learn from this and we'll be better, I'm sure you will be better when it comes to security.

[BitcoinGirl.Club]

Code:

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

Do you mind to remove the link or at least make is in between quote with a warning not to click it. Someone may click it and become a victim. I have no idea how the hacker knew you had such big amount in the account?

Here is one thing you can try [one of the user already suggested I guess], find out from where they bought the domain stake.com-bonus.io, contact the domain and hosting provider. They will have IP log and if you are lucky then they may have the hackers personal information too. Anything you find may help you.

Sorry to hear such big loss.

[romero121]

As in the previous post add a warning sign along with the phising site link. Someone might click the link and they might also end up losing. Big loss and reaching Diamond 5 level is not an easy thing and all his efforts busted within seconds. The tricks these scammers play is really out of our thoughts, because the link looks same as what is being provided to claim bonus. With this incident everyone will be careful while clicking any of the links received.

[Fivestar4everMVP]

As in the previous post add a warning sign along with the phising site link. Someone might click the link and they might also end up losing. Big loss and reaching Diamond 5 level is not an easy thing and all his efforts busted within seconds. The tricks these scammers play is really out of our thoughts, because the link looks same as what is being provided to claim bonus. With this incident everyone will be careful while clicking any of the links received.

There is a saying that, when birds learn to fly without petching, the hunter will learn how to shoot without missing.
I personally would say that our security is in our hands, literally, like I said in my comment before, OP messed up big time, a person of his caliber should have known better than clicking random links and even without verifying what the link looks like, I think greed is what played OP into falling for this scam, sometimes, we allow ourselves to be carried away by cheap bonuses, that we forget to verify information first, and in this process, we sometimes, end up losing the bird we had at hand, while chasing one that is in the bush.

[mk4]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

[AHOYBRAUSE]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

Binance isn’t a gambling company, if you gamble at a high level you would know that crediting 60k is not an issue, happens every week. The reason they won’t is they are afraid to set a precedent of covering losses due to theft. I’m any event that’s not my request I was hoping someone here would have some specialization in blockchain that might be able to help.

Maybe check in the technical discussion part of this forum if someone can help. https://bitcointalk.org/index.php?board=6.0

Not everybody is checking the gambling section.

Maybe u can get some of the free rollbit $ as a reparation to your loss.

[btc_angela]

Not the first time that I see a attack on gambling sites as well, but it was a huge amount to the OP and I think this is the biggest I heard so far. So it's really very unfortunate that this happen to him, and hopefully no one here will fall for this trick.

And as others have said, there's no way that he can get his money back. Lessons here is to check everything else before we enter our password as it might be a phishing site. Or just bookmark the site itself.

[mak013]

I think that stake will do nothing. If they will pay for every hack - they`ll close. Sorry, but i think that the OP just lost his money. The only thing that the stake can do is to return account but not money.
One more reminder that the most part of the hacks is due to our inattention.

[klidex]

One more reminder that the most part of the hacks is due to our inattention.

I completely agree with what you said.
However, we as users who have quite a lot of money must be more vigilant and always be careful when we step against something.
This kind of mistake is not entirely the fault of the gambling platform but rather a mistake for themselves not prioritizing vigilance and only prioritizing or prioritizing the point of view of profit alone.
There have been lots of cases like this and hopefully in the future there will be more and more gamblers who are always careful so that there are no more cases like this.

[Daltonik]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

Binance isn’t a gambling company, if you gamble at a high level you would know that crediting 60k is not an issue, happens every week. The reason they won’t is they are afraid to set a precedent of covering losses due to theft. I’m any event that’s not my request I was hoping someone here would have some specialization in blockchain that might be able to help.

Well, in fact, we can use only those tools for tracking transactions such as explorer, the most advanced ones such as Bitfury Crystal, Chainalysis, CipherTrace, XFlow nSpect and other effective means for finding an attacker by transactions are available only to a narrow circle of OSINT specialists or at the request of law enforcement agencies to search for criminals.

[AverageGlabella]

That may be eloquent and my be true at the above post but as I mentioned several times if a company is responsible for taking clients who are depositing millions of dollars a day in some circumstances, not have any legitimate internal procedures to stop an internal theft is ridiculous. As many many other posters mentioned a stripping of 2fa and an immediate account clearance is the simplest form of crypto theft. Assuming I was greedy by clicking a link I get every day, is a big sssumption, careless sure but if you think businesses that take on billionaires of dollars of a profit a year shouldn’t have proper security and protocols in place when they were hacked and user data leaked two months ago… then I guess we can disagree. If I clicked a link on my black card and someone tried to take my money it would be stopped, likewise w binance likewise w kraken likewise w anywhere. It is the ultimate flag. The moneys lost, so be it but making a blanket assumption that I was greedy is childish. I get these messages many times a day every single day. My telegram was leaked by the ppl who doxxed me in which I pleaded for more account security because of this doxxing. Sometimes two things can be correct, I fucked up but let’s be honest a company taking in billions a year that can’t see the most obvious of phishing or crypto scams also fucked up. Still the point remains if anyone has contacts at tether or experience in this pls let me know. Opinions of who’s to blame are kind of irrelevant, I clicked the link, I lost money, end of story.

They do have measures against internal theft they have 2 factor authentication. This is not internal theft your password was stolen or guessed there is no other way. Stake can only verify withdrawals with email or a 2fa of your choice but email code is enabled by default. If both your Stake and email got compromised that means you are probably using a infected computer and could lose access to other things because the link you clicked could have installed a virus. I would recommend cleaning your computer. Stake is not responsible for people securing their own accounts it is your responsibility to make sure you use a strong password and have 2fa on all accounts.

Phishing is the most common way to lose access to your accounts and there is nothing that can be done by companies to stop this from happening except telling you it is a risk.

[tranthidung]

They do have measures against internal theft they have 2 factor authentication. This is not internal theft your password was stolen or guessed there is no other way. Stake can only verify withdrawals with email or a 2fa of your choice but email code is enabled by default. If both your Stake and email got compromised that means you are probably using a infected computer and could lose access to other things because the link you clicked could have installed a virus. I would recommend cleaning your computer. Stake is not responsible for people securing their own accounts it is your responsibility to make sure you use a strong password and have 2fa on all accounts.

Some platforms as I know have tools to detect and suspend accounts with geographical changes in their accounts log in, activities. I am not sure about Stake.com but initially, the user made mistake and has to bear the loss.

If Stake.com has something to do to increase their security and prevent such things happen on their users better, they should do it. It makes sense.

2FA is not a perfect protection against all threats and hacks. Additionally, exchanges or platforms can not do it completely on their sides. Users must collaborate with platforms and learn how to as well as practice to protect their accounts.

[Cling18]

I'm sorry to hear about what happened to you, Op. I'm sure that you're having a hard time dealing with your situation. I've heard the same story in different casinos before and it's also because of a phishing site. That's the reason why experts always advise us to think before we click because scammers and hackers are getting wiser these days. We should be wiser than them as much as possible or else we will surely fall for their trap. Avoiding suspicious sites and pages will be a lot helpful.

[Bushdark]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

This can be very annoying just like you have narrated how everything occurred. I think this is a time when we are including myself need to be very careful a out the way we click on unsolicited links and need to be very scrupulous when we want to click on links.
I have learnt few things from your mistake that will caution me on something related to this your complain. I know it is very sad for you to lose that kind of fund and the casino end up not be able to help you invesgation the case and how to bring the scammer to book. They should have notified you via email of the changes in your account so this will help you to make a fast decision if you were not the one that made that authorization.

[Fivestar4everMVP]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

[cryptomaniac_xxx]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

Definitely but phishing and its links wont be stopped. That's why I am saying the security was so far below standard. If my account had history of sending huge tips to new accounts and things like this it would be easier to understand. It could not be more blatantly fraudulent and they keep repeating how grateful I should be about the portion that was recovered. The only reason that didnt go out is the hacker tried to send over their limit in instant withdrawals. The simplest form of security in any financial world is when 2fa is stripped or a password updated there is a secondary confirmation whether by text or email. If this simple thing was implemented as is the minimum in security protocol I wouldn't have lost a dollar. They are not a new company and they implemented this 12 hours after my account was robbed. Should have been done years ago. Its moronic and displays just such a huge lack of respect for clients money and their protection. Companies should assume people are trying to hack their players accounts, this isnt a new thing. Links are going to be clicked, if my email and my secondary forms of verification were affected I wouldn't be complaining. This was just way too easy and way too blatant of a theft for it to be considered ok. The phishing links and attacks are so prevelant there because of data leaks that were never admitted and other sources of problems. I bet 500m in turn over in 5 months and they don't have any extra security on my account than they do on an unverified un kyc'd account thats bet 0. I was initially told by support that my complaint is similiar to someone falling off a bike six years ago and blaming a broken leg that happened recently on that. Thats how 500 million dollars of business was treated.

I'm really sorry to hear that mate, but I do hope that the casino that you have played will somewhat overhaul their security system with this kind of hacks in one of their biggest player. Because it shouldn't happen in the first place for a big whale like you.

So in any case and in the future, this could be prevented, it's just that it has to happen to you before they do something about it.

I do agree though, when you are stripped of your 2FA, there should be notification as this is the layer of protection that you have in the first place. And so if it is removed by you or by someone, they should let you known and maybe wait for at least 24 hours cool down.

[Ojima-ojo]

This a bad event for ops having such high ranking account hacked and funds stolen is quite an unprecedented event for ops and I am sure we can learn a thing or two from his experience,  because even though stake have some blames and should look for ways to update the security by disallowing withdrawal from accounts that have strange security activities.

At least if that features is present it could have taken the hackers an extra 24 hours before being able to withdraw from the account.

[LalaLina69]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

Definitely but phishing and its links wont be stopped. That's why I am saying the security was so far below standard. If my account had history of sending huge tips to new accounts and things like this it would be easier to understand. It could not be more blatantly fraudulent and they keep repeating how grateful I should be about the portion that was recovered. The only reason that didnt go out is the hacker tried to send over their limit in instant withdrawals. The simplest form of security in any financial world is when 2fa is stripped or a password updated there is a secondary confirmation whether by text or email. If this simple thing was implemented as is the minimum in security protocol I wouldn't have lost a dollar. They are not a new company and they implemented this 12 hours after my account was robbed. Should have been done years ago. Its moronic and displays just such a huge lack of respect for clients money and their protection. Companies should assume people are trying to hack their players accounts, this isnt a new thing. Links are going to be clicked, if my email and my secondary forms of verification were affected I wouldn't be complaining. This was just way too easy and way too blatant of a theft for it to be considered ok. The phishing links and attacks are so prevelant there because of data leaks that were never admitted and other sources of problems. I bet 500m in turn over in 5 months and they don't have any extra security on my account than they do on an unverified un kyc'd account thats bet 0. I was initially told by support that my complaint is similiar to someone falling off a bike six years ago and blaming a broken leg that happened recently on that. Thats how 500 million dollars of business was treated.

Send me a private message mate. I know exactly who you are as I see you talking in sports chat rn. It’s possible to trace the exchange it was sent to and from there, you contact them and every exchange needs KYC so they could freeze the account before it’s too late.

I tried sending you a DM but it doesn’t let me.

[LalaLina69]

it's not on an exchange anymore. exchanges wont do anything without police reports and stake wont file one.

You don’t need stake to file a police report mate. Like I said, my DMs are open if you want to chat. I’m also a top 10 level ranked player on stake.

[Wiwo]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's likely a phishing link.

Reading further in stakes terms of service in the account security it stated that members may not. Be able to withdraw within the first minutes to a few hours of change of major security information,  but from what the ops started, it looks as IfThe 160k+ was taken out of his account through tips to another stake user and this leads me to to My next question.

-Since the situation has been reported by the ops I think it is now better to investigate and Deactivate the brand-new Account.

-So I think if the accounting questionnaire does not empty the wallet balance.

[Wiwo]

the new account is banned and the funds go. that was done as soon as it was reported.

Do you by any chance trace the destination of the funds in the balance of the new account,  since you said banned does it mean the account has been banned by stake and funds seized,  or the hacker was able to withdraw the balance to his wallet before the account was reported and banned.

-Of a truth, I seem lost on the web right now,  I am not clear if the hackers have the whole money, or if we have some balance left in the banned new account for possible recovery back to the original owner.

[Fivestar4everMVP]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's likely a phishing link.

Reading further in stakes terms of service in the account security it stated that members may not. Be able to withdraw within the first minutes to a few hours of change of major security information,  but from what the ops started, it looks as IfThe 160k+ was taken out of his account through tips to another stake user and this leads me to to My next question.

-Since the situation has been reported by the ops I think it is now better to investigate and Deactivate the brand-new Account.

-So I think if the accounting questionnaire does not empty the wallet balance.

the new account is banned and the funds gone. that was done as soon as it was reported.

Was there really any need banning the account when the funds are no longer there?
I personally feel that Stake should have left the account open and accessible to the hacker who created it, we never can tell, a thing or two might happen which might lead him into trying to use that account again, and from there, he can be traced, as long as he is not using a VPN, But unfortunately, it's already too late.

But still on still, I don't know what importance the ip address the hacker used to access Stake, would do, I would have suggested you try to get the IP address used to access that new stake account from, if this can help to track and catch who ever is responsible.

[Wiwo]

Was there really any need banning the account when the funds are no longer there?
I personally feel that Stake should have left the account open and accessible to the hacker who created it, we never can tell, a thing or two might happen which might lead him into trying to use that account again, and from there, he can be traced, as long as he is not using a VPN, But unfortunately, it's already too late.

But still on still, I don't know what importance the ip address the hacker used to access Stake, would do, I would have suggested you try to get the IP address used to access that new stake account from, if this can help to track and catch whoever is responsible.

There is a need for the account to be banned so that their can prevent hackers. From withdrawing from the account,  since part of the stolen funds were tipped into that account,  and to a good extent, the stake can help the ops is recovering some of the money because the account in question can be verified and the source of the tipped for traced to ops account should be refunded back.

-At least that will give OP a fair judgement and make the hacker a loser even though he made away with a good some from that stolen account.

[Kakmakr]

Stake just enabled email code for tipping, I guess your thread has made some change already, which is good.
I am sorry for your loss. Make sure to change all passwords and change wallets, they maybe targeted something else too.

Well, I hope my suggestion on this thread helped Stake to implement this email code idea for tipping and that it will help to prevent incidents like this in the future. 

I know this will not help you now, because you already lost $60 000 .... but it is a step in the right direction to help others not to lose money through the tipping service. 

[Daltonik]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Yes, of course it is, but apparently this is due to the fact that disabling 2fa requires the introduction of a code and it is believed that a legitimate user does it, but the lack of confirmation by email on disabling 2fa, it seems to me, creates a user security vulnerability.

By the way, in the settings of the Stake account there is an option "Exclude from rain" that helps prevent you from receiving messages in the chat and in this situation I think it's better to activate it.

[wiss19]

This a bad event for ops having such high ranking account hacked and funds stolen is quite an unprecedented event for ops and I am sure we can learn a thing or two from his experience,  because even though stake have some blames and should look for ways to update the security by disallowing withdrawal from accounts that have strange security activities.

At least if that features is present it could have taken the hackers an extra 24 hours before being able to withdraw from the account.

yeah the response was from the owner was that stake gets a lot of clients because it offers instant withdrawals. Again, all that is fine, someone point me to one site with storing ppls funds or crypto at this level that has ZERO security for removing 2fa and would allow someone to tip a brand new acct 165k in 1 minute interevals and I'll be on my way.

It should have been dealt with internally with me and I offered to split the loss. Instead they just told me how grateful I must be.

Being the leading gambling and sportsbook platform, they should have dealt with the situation internally and should have managed to save one of their most loyal and high betters from losing such a big amount, but what could be said.

$165k is a very big amount, and I feel you should take further action if you can to fight against it. One thing that doesn't fall in your support is the fact that you are a victim of a phishing scam and they can easily raise this issue against your words.

[mak013]

One more reminder that the most part of the hacks is due to our inattention.

I completely agree with what you said.
However, we as users who have quite a lot of money must be more vigilant and always be careful when we step against something.
This kind of mistake is not entirely the fault of the gambling platform but rather a mistake for themselves not prioritizing vigilance and only prioritizing or prioritizing the point of view of profit alone.
There have been lots of cases like this and hopefully in the future there will be more and more gamblers who are always careful so that there are no more cases like this.

I think that it is not the Stake problem. They have ToS, rules. And i`m sure that they developed it not in one day - i think that they got feedback from the gamblers, analyzes it and made an optimal standing order for gamblers and security. The problem is with search system - it is awful that the fishing site is in the top of search result.

[Eureka_07]

Share with us a bit of conversation between you and Stake. Did you have any contacted them? If yes, what did they say? If not, go contact them.

you're dms are not open

Hey, be careful of dealing with users you do not know here, specially with newbies. I'm not saying to stay away, maybe they can really help, so just be careful. You would not want to be scammed after your funds are stolen.

[Daltonik]

so far nothing. i've asked for a minor show of understanding in order to keep playing but its on deaf ears so far. Very bizarre for sure.

I think there is nothing strange in this, because you have lost a significant amount of funds and the security service is probably investigating under the carpet, so you need to wait for some kind of decision, it's just amazing that you still have the desire to continue playing after everything.

[len01]

bump. happy to pay a few grand to someone who can help.

I'm sorry about what happened to you at this time.
but it seems that nothing can help you when your funds have left your Stake account. because your funds may already be in the hacker's wallet which is fully controlled by the hacker and it is difficult to get those funds back.

this is one of those very expensive lessons when no matter what happens never click on a link posted by someone else through any medium unless it's from the source. always do research on the website you want to access.

I really didn't expect that you have a large amount of funds in your Stake account but you carelessly did not re-examine the site link sent to you and you took it for granted.
I think you should classify your funds. because there is very little chance of taking over your funds again.

[Wiwo]

so far nothing. I've asked for a minor show of understanding to keep playing but it's on deaf ears so far. Very bizarre for sure.

I think there is nothing strange in this because you have lost a significant amount of funds and the security service is probably investigating under the carpet, so you need to wait for some kind of decision, it's just amazing that you still have the desire to continue playing after everything.

That is right we are aware of the workload of many support and the queue is worked on based on first come first serve and cases that already have an existing results are felt separately,  and based on that ops can do well by sending a reminder to the support so that the case can be escalated.

-Ops account has been involved in so much funds movement and locking that will make the process of the investigation, so it will take time before a response may be gotten from a stake official and I am sure stake support will reach out to you when there is an update.

[mak013]

One more reminder that the most part of the hacks is due to our inattention.

I completely agree with what you said.
However, we as users who have quite a lot of money must be more vigilant and always be careful when we step against something.
This kind of mistake is not entirely the fault of the gambling platform but rather a mistake for themselves not prioritizing vigilance and only prioritizing or prioritizing the point of view of profit alone.
There have been lots of cases like this and hopefully in the future there will be more and more gamblers who are always careful so that there are no more cases like this.

I think that it is not the Stake problem. They have ToS, rules. And i`m sure that they developed it not in one day - i think that they got feedback from the gamblers, analyzes it and made an optimal standing order for gamblers and security. The problem is with search system - it is awful that the fishing site is in the top of search result.

If you don’t think designing a site that protects its users funds and interests is important then you’re right it’s not their problem. Reality is they don’t need to operate in the same way companies from legitimate jurisdictions they would have to make sure they care about these things. Unfortunately that’s not the case. Being an affiliate doesn’t mean you need to be blind to obvious lack of security.

First of all i want to know why you decided that i`m affiliate with the Stake? If we will speak about the security i have one more question: how the Stake had to protect you from fishing site?
There is no the only decision for security. We often see here cries that the casino(various casinos) is awful because they asks KYC, lots of cries about long withdrawal. I think that all casinos are looking for a compromise between security and gamblers wishes. You situation is really bad, but what the Stake has to do? If you will answer try to think about other users, not only your situation.

[AicecreaME]

This is really pathetic, and like you said, both you and stake are in the wrongs, someone of your caliber shouldn't be clicking links you are not sure of, not to talk of giving in your details carefreely, I just clicked the same link you clicked, and I noticed that there is a clear difference of the site from the original stake website.
First is that, the link are not the same - always check that
Secondly, it asked me to login, on the same computer I am currently logged in to the original stake website - this is an obvious red flag you should have page attention to, But you ignored and gave scammers the ability to access your original stake account, and i also know that once you login on stake, it stays logged in, and the only time they ask you for 2FA is when you want to withdraw -- i personally think you were just too careless.

Stake on the other hand should have an algorithm in place that would not allow a user to withdraw their funds if they turn off their 2FA until 24 hours elapses, this is how some other platforms i know does it, so this is clearly a big mistake on the part of stake.
And again, I thought users on stake are not allowed to withdraw more than $10,000 without passing KYC verification, how was the new account able to withdraw that huge amount of money without passing KYC verification???

It's really unfortunate for someone to fall victim to phishing scams most especially if they are already spending years of gambling in the same website. However, unexpected things do happen during someone's vulnerable moment like what happened to OP. It could have been prevented by being cautious through double checking, but as he mentioned, it was early in the morning when it happened, and he didn't noticed the unusual parts such as logging once more in the same site. Perhaps because he's still not that fully much aware of his surroundings due to sudden waking up or because he's just about to sleep after a long tiring day.

I guess OP should take this as a lesson learned on his end. I know the amount stolen is a huge amount, but it's almost impossible to recover since most of the responsibility lies on his hands in the first place. Maybe just take this as a tuition for learning through an awful experience so you won't have to undergo repeating the same mistake in the future. To lift some of your burden on your chest, you can search phishing scam experiences here in forum as well to check on their stories to learn a thing or two from them. That way, you won't also feel alone. I did that way back when I experienced a massive loss and it somehow helped me to feel that I can get past through it because there are also other people that has gone the same rough patch.

[Peanutswar]

Did you make a heads up your concern with their support or even their representative here in the community, they are active too in their telegram, that's the reason why even the KYC is good if you lose your account and wanting to recover of course one of the essential thing you can do is to give the verified address, email and even the phone number not as main, but as you send already you made a mistake by having a phishing links so for sure they are not the one responsible with that and also the account made a transaction.

[Newlifebtc]

What I want to tell you is that have you been able to contact them before making an accusation for them and each is to complain this particular place is not a place that you will learn an allegation to them you should remove these two extension board where your prediction or your request will be put into consideration but try to contact their team and check what actually will be there at 1 and you screenshot it and the clothes or touch with your accusation

[Daltonik]

<...>
If we will speak about the security i have one more question: how the Stake had to protect you from fishing site?

Well, it seems to me that Stake should not have allowed users to place links in the game chat, it's not so difficult to implement, but links are still allowed there, it does not give any benefit, but it may not be safe for users who decide to follow them.

[klidex]

-Ops account has been involved in so much funds movement and locking that will make the process of the investigation, so it will take time before a response may be gotten from a stake official and I am sure stake support will reach out to you when there is an update.

I'm also sure that the support team from Stake will definitely look into it and will solve the problem soon because Stake is a big and trusted gambling platform so there's no way they can let it be so arrogant when a user is involved in a problem.
And all the OP needs to do is just be a little patient waiting for them to finish their investigation and give him clarity and good service regarding his case.
Stake has a lot of users so I think it's not only him who needs a solution but there must be other users who need it too so it's only natural that their support team hasn't given a response regarding this case.

[BlackyJacky]

When a money laundering feature is more important than the security of players!

[mak013]

First of all i want to know why you decided that i`m affiliate with the Stake? If we will speak about the security i have one more question: how the Stake had to protect you from fishing site?
There is no the only decision for security. We often see here cries that the casino(various casinos) is awful because they asks KYC, lots of cries about long withdrawal. I think that all casinos are looking for a compromise between security and gamblers wishes. You situation is really bad, but what the Stake has to do? If you will answer try to think about other users, not only your situation.

I am fully kyc'd and always have been. I wasn't refering to you I was refering to the affiliates above. They had several other people have the exact same situation with far less money in january, they didn't implement any security because the players were not important enough(1000 and 17000 stolen confirmed so far). They changed it after it happened to me. All they needed to do was have 1 layer of security on tips and they chose not to, they knew their players were being phished and money stolen through the tipping procedure. Didn't care enough to make any changes and it finally happened to a big player.

So, i don`t want to protect the Stake, but i can say how it works most of the times. The problem can be solved fast when the damage becomes serious. With all steals it it possible that they decided problem or just ignored it. If they made changes, it means that they accepted that they had security problem, so it is possible that they would pay you something. But even now i think that they wiiln`t - fishing link allows them to say that it is only yours problem.

<...>
If we will speak about the security i have one more question: how the Stake had to protect you from fishing site?

Well, it seems to me that Stake should not have allowed users to place links in the game chat, it's not so difficult to implement, but links are still allowed there, it does not give any benefit, but it may not be safe for users who decide to follow them.

If i understand right, the link wasn`t in game - just in google search. Stake can`t do anything it this situation.

[South Park]

As in the previous post add a warning sign along with the phising site link. Someone might click the link and they might also end up losing. Big loss and reaching Diamond 5 level is not an easy thing and all his efforts busted within seconds. The tricks these scammers play is really out of our thoughts, because the link looks same as what is being provided to claim bonus. With this incident everyone will be careful while clicking any of the links received.

There is a saying that, when birds learn to fly without petching, the hunter will learn how to shoot without missing.
I personally would say that our security is in our hands, literally, like I said in my comment before, OP messed up big time, a person of his caliber should have known better than clicking random links and even without verifying what the link looks like, I think greed is what played OP into falling for this scam, sometimes, we allow ourselves to be carried away by cheap bonuses, that we forget to verify information first, and in this process, we sometimes, end up losing the bird we had at hand, while chasing one that is in the bush.

What happens is that as we know some bonuses are limited in number so gamblers which are looking to obtain bonuses have to be very quick to get them, and this gives scammers a great advantage, because if people were to stop and think for a second about what they are doing they will realize the scam really quickly, but since they are in a hurry to get a bonus they fail to double check the information in front of them and that is when they get scammed.

[Odusko]

This is too bad an experience for a gambler, having your money wiped out by hackers is painful especially when there is nothing you can do about it, you are lucky to have hard some of the balance on the new account t even though the account is under restriction from the stake security team.
But you will have to be extremely lucky to be able to get your balance back from the stake team but then you have to try getting in touch with them to know the next step to take concerning this matter and I don't have any blame against stake.com but to yourself why should you click a link you are not sure of because most time most of the link lead to unknown such.

[qwertyup23]

-Ops account has been involved in so much funds movement and locking that will make the process of the investigation, so it will take time before a response may be gotten from a stake official and I am sure stake support will reach out to you when there is an update.

I'm also sure that the support team from Stake will definitely look into it and will solve the problem soon because Stake is a big and trusted gambling platform so there's no way they can let it be so arrogant when a user is involved in a problem.
And all the OP needs to do is just be a little patient waiting for them to finish their investigation and give him clarity and good service regarding his case.
Stake has a lot of users so I think it's not only him who needs a solution but there must be other users who need it too so it's only natural that their support team hasn't given a response regarding this case.

This is what I find ironic- Stake if not, is one of the most popular gambling platforms out there but there are a lot of concerns and problems being posted on this board. Given with what they can achieve (e.g. hiring Drake as their brand ambassador), they should have at least put security as their main priority and focus in this aspect.

In addition to this, OP has been one of their bigger spenders in the platform. I truly wish that Stake should address these concerns carefully and with haste. While I do understand that there may be some issues, they should prioritize their customers feedback and concerns more if they want to retain their loyalty of players.

[Maasdamer]

I feel for you OP.

In the past stake blocked me and accused me of multi accounting which made 0 sense.
After 1 whole month I got my account back and was able to withdraw.

So bs like this they take serious but in your case it's just "your fault". That is some shitty security right there.
Flagging a small timer account like me for nothing but a newly created account can receive 100k+ in $ and no alarm bells, ridiculous!

I hope you beat them in every game you play now and make them pay that way!

[mak013]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

[Daltonik]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

But the main thing here is that the procedure for enabling and disabling 2FA is not protected, for example, on many exchanges to disable the authenticator, you need to enter, in addition to the 2FA code itself, additional codes received by email and phone, and as the OP says, he just received a notification by mail about disabling 2FA after the fact.

[klidex]

-Ops account has been involved in so much funds movement and locking that will make the process of the investigation, so it will take time before a response may be gotten from a stake official and I am sure stake support will reach out to you when there is an update.

I'm also sure that the support team from Stake will definitely look into it and will solve the problem soon because Stake is a big and trusted gambling platform so there's no way they can let it be so arrogant when a user is involved in a problem.
And all the OP needs to do is just be a little patient waiting for them to finish their investigation and give him clarity and good service regarding his case.
Stake has a lot of users so I think it's not only him who needs a solution but there must be other users who need it too so it's only natural that their support team hasn't given a response regarding this case.

This is what I find ironic- Stake if not, is one of the most popular gambling platforms out there but there are a lot of concerns and problems being posted on this board. Given with what they can achieve (e.g. hiring Drake as their brand ambassador), they should have at least put security as their main priority and focus in this aspect.

In addition to this, OP has been one of their bigger spenders in the platform. I truly wish that Stake should address these concerns carefully and with haste. While I do understand that there may be some issues, they should prioritize their customers feedback and concerns more if they want to retain their loyalty of players.

In fact, you or we don't need to worry about every problem that occurs on the stakes gambling platform because their support team will always do their best and provide all services to customers who are having problems.
So far there haven't been any really serious problems that haven't been resolved by their support team. It's just that everything definitely takes time and the process to resolve because it's not easy and you can't just solve a problem that's happening.
I believe that with this problem the stake support team can definitely provide the best solution because they also maintain the good reputation that has been achieved.

[Ben Barubal]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

[mak013]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

But the main thing here is that the procedure for enabling and disabling 2FA is not protected, for example, on many exchanges to disable the authenticator, you need to enter, in addition to the 2FA code itself, additional codes received by email and phone, and as the OP says, he just received a notification by mail about disabling 2FA after the fact.

I don`t try to justify the stake. I just telling about how it works and the responsibility of the casino and the gambler. Now the security system will increase level, but the casino willn`t pay anything to the OP because he made a mistake by himself. It doesn`t look fair, but it works so.
Honestly, i don`t like 2FA but i use it everywhere where i have some money, but someone can don`t use service with 2FA - it`s about why the casino can doesn`t use it.

[AicecreaME]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

Indeed. As sad as this may sound, but don't expect so much from this day onwards. The harsh reality will not sink in instantly. If you are still in the grieving process, it's okay, but don't make another same mistake. Most people who gets hacked often fail to recover their lost funds, that's the truth. Only a few managed to somehow get back a portion of their money mostly because the company itself made a compromise. And not because the ahcker suddenly had the heart and conscience to return what they have stolen.

I agree that just think of this as a learning experience. Just think of the money lost as your tuition so that next time, you know better and thus, this won't happen again. Do not fall victim into more scam and schemes saying they could recover your money because clearly, they couldn't and they will just use you for personal gain. Accept your mistake, move forward, then think and do better the next time around.

[Daltonik]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

Indeed. As sad as this may sound, but don't expect so much from this day onwards. The harsh reality will not sink in instantly. If you are still in the grieving process, it's okay, but don't make another same mistake. Most people who gets hacked often fail to recover their lost funds, that's the truth. Only a few managed to somehow get back a portion of their money mostly because the company itself made a compromise. And not because the ahcker suddenly had the heart and conscience to return what they have stolen.

I agree that just think of this as a learning experience. Just think of the money lost as your tuition so that next time, you know better and thus, this won't happen again. Do not fall victim into more scam and schemes saying they could recover your money because clearly, they couldn't and they will just use you for personal gain. Accept your mistake, move forward, then think and do better the next time around.

No grieving process, the fact that you can't seperate feelings from how a company should be run is a bit concerning. But promoting a company in your bio that bought all of stakes stolen email and player lists I guess sheds some light on how you feel about player security. If you take money from people, you should do your best to protect their money, not the least. Does it concern you at all that the company your promoting is trafficking in the profiles of all the players who's data was hacked and stolen from stake before New Years?

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

[nakisama]

some suggestions I gave to stake after suffered a phising loss of 1k myself


-IP connection: if a new session starts from a different IP in a matter of minutes (or even if that IP was never used by that user) force the user to confirm it is really him (some sites do this) via email. For the record, stake does not allow user to change the email by themselves.

-I was KYC verified. Still to this day stake sends their promotional emails addressing me by the stake username and not by my real name

-claim of bonuses through email links. Instead why not credit them directly to the users account (using their vault for example?). If bonus can only be claimed within a time frame then they can simply remove it as unclaimed. Or implement a notification system in stake where bonus links would have to be clicked from within the account only. Making users to check if email is legit or not with a VIP assistant is very unpractical

-deposit and withdrawal. Don't use by default any address used in the past. Force users to input them for each transaction.

-withdrawals: make them a two step process, user requests the withdrawal but then send an email with link to confirm the withdrawal. If not clicked, nothing happens. This at least seems to be minimised with the 2fa.

-hidden stats: making users unhide their bets to be eligible to bonuses seems to be just another way of tracking them especially when their email is similar to their stake username


In my case I did not get anything back (was not expecting it honestly as it was really my mistake).
This happened in 2021 and apart from the 2fa I don't see that anything has changed

[South Park]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

If this is so common then there is only one explanation for this, and that is that scammers are getting a lot of success with such methods and they are unwilling to let go and they will keep phishing as many gamblers as they can until something is done about it, and while it seems there are several things that could be improved at stake, it is essential for gamblers to understand that scammers are always out there and we need to be incredibly cautious or one day we may become their unsuspecting victims.

[RILWAN]

This is a sad situation for ops and i am sure he will learn from this mistakes, please everyone to stay away from clicking links their cant verify, because with just a click, some hackers will have access to your personal details i am not sure stake will give the palyer

[MinMan]

No there was no notification whatsoever that 2fa was removed at all. That is the point, there is no security, they changed this after my money was stolen, they should have changed it when people had their money stolen through the same method in the months leading up. The amounts and players weren't important enough for them to take action. To all the people saying the blame is fully on my side, keep in mind the company had a massive data breach which gave hackers and competitors all their clients email lists, player ranking etc etc. This has never been mentioned for whatever reason, likely because they don't want any responsibility in any of the attacks or violations going on.

Well, though you are not totally responsible, but I would say it's about 70% your mistake and only 30% casinos since you are the one who opened the suspicious link that caused all of it. And casino is responsible for not being able to stop the heist and letting them easily get away with the money which wasn't a very small amount.

A service provider will most definitely try to hide all the negative stuff people try to spread about them or even the real negative events that occur since that compromises their trustworthiness and reputation among community and competitors.

[Odusko]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

I am sure ops will not recover a penny from what the hackers alread withdrawn from his stake account and also is likely he may face attempting to forfeit the balance confiscated in the other stake account that has been frozen, and we cant blame the stake security team for any harsh decision as long as there have no violated any of the players right and just helping to avoid a further loss to the hackers.
Another thing else I will like to advise ops is to keep in touch with the support and constantly send them a reminder so that your case will receive attention and possible solution.

[len01]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

but also at least you have to be careful even though the problem has existed for some time. because there are so many incidents that fraudsters send phishing links via e-mail and the e-mail of the sender or fraudster is almost the same as the official Stake email.

what I do is usually if I receive an email or through any message and claim to be from the gambling party or the Stake party, I usually always ask the support team whether it is an official message from gambling. if the support team answer is not official message i will ignore and delete the message immediately.

[Daltonik]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

If this is so common then there is only one explanation for this, and that is that scammers are getting a lot of success with such methods and they are unwilling to let go and they will keep phishing as many gamblers as they can until something is done about it, and while it seems there are several things that could be improved at stake, it is essential for gamblers to understand that scammers are always out there and we need to be incredibly cautious or one day we may become their unsuspecting victims.

Of course, you should always check emails before clicking on the links they contain, the user database is constantly leaking into the network, everyone can make a mistake, especially if you see a familiar logo and a similar sender's email, a lot of people get caught on this.

[South Park]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

but also at least you have to be careful even though the problem has existed for some time. because there are so many incidents that fraudsters send phishing links via e-mail and the e-mail of the sender or fraudster is almost the same as the official Stake email.

what I do is usually if I receive an email or through any message and claim to be from the gambling party or the Stake party, I usually always ask the support team whether it is an official message from gambling. if the support team answer is not official message i will ignore and delete the message immediately.

While this will put a bigger pressure on the customer support of most casinos, I am sure even they prefer for this to be managed on this way as the hit they receive to their reputation when one of their gamblers lose their money in this way is simply too big, after all it is unlikely the OP will want to continue to gamble at stake after what happened and it is possible other people may feel the same way, causing stake to lose money due to an incident that could have been easily avoided.

[QueenVera]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

[seleme]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

What is wrong with holding $165k worth of crypto on a casino balance? There are some crazy high-rollers who keep betting HiLo bets over $200k per bet if you go to check the High Roller tab under the Stake page. This is an expensive lesson and we can't blame anyone but who clicked the link without checking the domain. Scammers are smarter nowadays, they can tell anything to convince potential victims, especially on social media.

[BVeyron]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

It depends on which coins were stolen: if in crypto, then its hard to find, though you can try, at least find and copy all the wallet IDs that were involved as receivers, this info can help you track the money. If it's not crypto, then I suppose you can inform your bank about the incident, there is a bit more chance to get the money back...

[bettercrypto]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

[South Park]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

[klidex]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Although it's not a huge amount for Op or for anyone but still it's a fatal mistake to keep large amount of money in online platforms which have vulnerability to be hacked by bad people out there.
If convenience is the reason for someone to deposit money on an online platform like an exchange or online casino, that is not the right choice and would be better off keeping in a hot wallet or depositing in their local bank.
This is a valuable experience that Op has had and this should also be a reminder for us to be more careful in storing crypto assets.

[tusandii]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

[AHOYBRAUSE]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

True. It's a high risk to keep money at a site where it's possible you can't have 100% access to it. They can always deny a withdrawal for whatever reason and then what. Since I had a problem in the past I only kept as much money on the site as I needed, not 1 satoshi more. That's the way to go I think.

Also seems like it didn't go too well for OP there since he is looking to buy crypto now https://bitcointalk.org/index.php?topic=5446023.0 .

[Hirose UK]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

Op seems to be one of the rich people who is a big gambler so it's only natural to keep a large amount of money in the casino for him to bet on big bets.
Maybe the loss of the money was due to his own fault, who was not vigilant and was too careless, so that someone hacked and took all of his money.
This error does not originate from the casino if I think it is due to an act of hacking caused by the OP himself not a casino failure.
In crypto or gambling, even a small mistake can be dangerous, so don't take everything for granted.

[AHOYBRAUSE]

theres an issue with buying crypto? lol I buy crypto everyday with or without the hack. Keeping money on a casino shouldn't be an issue as stated earlier, they should have acted earlier when this happened to smaller players and not waited until a bigger player got hit. That's all, still playing there and will continue to do so, just very weak security prior to it happening. Hope all is well in tokyo

Well glad to hear you are doing well. Tokyo has hanami (cherry blossom festival) season now so it's all good. 

We know you are right, they should have acted faster, way before that happened. But they didn't and knowing that this problem/weak security exists could have been indicator to not hold that much money on a site, that you must admit.

Good luck with your games there. I am not routing against you, I am always routing against the house, especially when it's a greedy one! If I had the funds I would try to take them down myself, but I don't so I trust you with that.

[robelneo]

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

It's a sign of being a compulsive gambler, you don't make the casino wallet a place to store your funds, two of the unsafe place to store are exchanges and casinos, noncustodial wallets are always the safest.
I'm not comfortable keeping even a small amount on casinos I make sure to deposit what I will use to play and if I won I withdraw it all, I know my limitation and I know how the amount I will fund that I think will satisfy my gambling urge.

[benalexis12]

Actually, this scenario of losing funds in our wallets is worrying. I just can't imagine that even if we have 2FA, a hacker can still disable this thing. I used to think that when someone has 2fa, their account is definitely safe, but that's not the case when we accidentally click on a phishing site without knowing it.

[Odusko]

Actually, this scenario of losing funds in our wallets is worrying. I just can't imagine that even if we have 2FA, a hacker can still disable this thing. I used to think that when someone has 2fa, their account is definitely safe, but that's not the case when we accidentally click on a phishing site without knowing it.

2FA authenticators have proven to be the most secure security protocol for any account, but if I site does not demand for 2FA  code when a user tries to disable the 2FA on their account because, in a normal security protocols where 2FA security is fully authenticated, the code is demanded at every point and if one disables the features withdrawal from that account is suspended for 24 hours, this way hacker has an almost impossible task to take control of your account because the hacker will have to have access to the 2FA device or apps which most time is offline.
But if stake own security systems allow the disabling of 2FA features without the demand for code, that will open up players' accounts for hacking since there are a lot of phishing attempts

[Lida93]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

I sympathize with your financial loss at the moment, it's not always folly to finding oneself as a victim to such situation as mistakes are inevitable with humans. Also it shows a lot how matured you're as a gambling willingly taking in responsibility to what has happened rather than pushing it all to the gambling company stake. Am sure there would be few persons who would be experienced and ready to giving solution to your case but even as that, try to be careful let no one use your vulnerability at the moment as you're seeking for help to rather milk you or scam you furthermore of your remaining balance, cause it's possible some unscrupulous person's might rather see this as an opportunity to dupe you easily rather than presenting the help you seek.

[Desmong]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

[Newlifebtc]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

it is not even advisable for someone to leave it money online leaving your money online anything can happen to it and you will lose the money totally I think it is happened to binance exchange before when some people left their money in the platform and the hacker attack the platform all the forms of people who left their money in the platform was hacked and binance have to refund the money after the return for business no platform that is good for someone to leave it forms there because of hacker

[noormcs5]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

Phishing attacks do exists as hackers are always looking for an loophole to scam people by making a replica of the site and fool the people who do not take the attention of the site URL.  
I really feel sad for the OP for losing his funds at stake due to the hack. Also, it is almost next to impossible to recover those funds now as it is not easy to track who hacked the account.

it is not even advisable for someone to leave it money online leaving your money online anything can happen to it and you will lose the money totally I think it is happened to binance exchange before when some people left their money in the platform and the hacker attack the platform all the forms of people who left their money in the platform was hacked and binance have to refund the money after the return for business no platform that is good for someone to leave it forms there because of hacker

This has been emphasized enough on this forum to not leave you extra funds on the gambling sites or any other central site including the centralized exchanges. But people always are lazy about it and they only realize this after the incident happened like the one experienced by the OP.

[WillyAp]

makes me wonder how those hackers singled you out in the first place, plus waiting till money is there.
Pretty good insider info if you asked me.

[Ebede]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

actually we don't need to leave any phones in any online platform except that you want your phones to disappear or for people to hack it from the classifieds I've come across of many articles where am I the writer or the author instructed people who do online banking so to leave their money for a platform that is not verified or that does not have a kyc so leaving your phone's there it is at your own risk

[Fivestar4everMVP]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of OP..
One thing that is certain is that, we are literally our own security.
First, it is not advisable to leave funds in your gambling account, try as much possible to withdraw after gambling.
Secondly, activate 2fa on your account, plus other security majors made available to users by the casino, with 2fa, even if a hacker manages to hack. Into your account, they probably won't be able to withdraw, except they have access to your email address to enable them turn off the 2fa.

[BlackyJacky]

The point, whether you guys are all shilling for online casinos or not is that they had a flaw in their system that they had been made aware of and didn't care to update the security.

That makes them liable!

Also, it should not be possible to donate such huge amounts as it is in breach of the applicable AML laws!

However, based on my experience they ignore if they are at fault!

Did you contact complaints@stake.com?

[Mahanton]

When it comes to this then there's no way that you would be able to get those amounts back.It is really just right that Stake has nothing to do or would be giving out at least half of the lost amount since it was really your fault on the first place.If you havent just go into that phishing site then you wont really be experiencing this problem plus Stake wouldnt really be that too much strict on blocking access considering that the hacker do able to bypass and able to get that 2FA which means that there are no means that they would really be that suspicious and let those transactions passed and confirmed without any issues
considering that you are a Diamond 5 player.

[TwitchySeal]

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

After being withdrawn, your funds were sent to 0xdeb197c73270288adbd93ac537311b46cab96f71 and then 3 days later to 0x4648451b5F87FF8F0F7D622bD40574bb97E25980,
which has been linked directly to the hacker of the infamous Indexed Finance Hack in October 2021 for $16 million in ETH.

You can read the details of the hack here: https://ndxfi.medium.com/indexed-attack-post-mortem-b006094f0bdc

You can see the connection with the 0x46 address here: https://hackmd.io/@laurenceday/H1OylawSF#Finding-Links-To-Fiat

It turns out that obfuscating your transactions doesn’t really help you when your adversaries are motivated by the theft of sixteen million dollars.

Here comes a flurry.

The attacker received funds twice from 0x4648451b5f87ff8f0f7d622bd40574bb97e25980, which was funded through Binance as the initial source of Ether for gas three years ago.

The hacker goes by BogHolder/tensors/UmbralUpsilon/ZetaZeroes, BogHolder#1688 on discord.  

And here's a pretty great article that has loads of personal information on the guy: https://www.bloomberg.com/news/features/2022-05-19/crypto-platform-hack-rocks-blockchain-community?leadSource=uverify%20wall  
(I recommend this article to anyone interested in this kind of thing).

Can't say 100% it's the same guy, but it seems likely and if not, they definitely know each other.

Either way, he seems like a chatty guy, but 0 chance you're getting that money back - you'll understand why I say that if you dig into the big hack I mentioned for $16m.

[WillyAp]

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of

To have singled you out requieres intelligence, internal intel.

[Odusko]

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of

To have singled you out requieres intelligence, internal intel.

A lot of things may be responsible for this and one of such could be a phishing attack on the players and the hackers may have studied his activities for a long, and from then created an account where he sent the user funds to but stake did a good thing by closing the hackers account after the discovery and report.
Meanwhile, let's see if stake support helps the guy recover his account and also helps recover some of his funds.

[AHOYBRAUSE]

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of

To have singled you out requieres intelligence, internal intel.

A lot of things may be responsible for this and one of such could be a phishing attack on the players and the hackers may have studied his activities for a long, and from then created an account where he sent the user funds to but stake did a good thing by closing the hackers account after the discovery and report.
Meanwhile, let's see if stake support helps the guy recover his account and also helps recover some of his funds.

This thread is 1.5 months old, he didn't get help from the support, they didn't care too much actually.
Maybe this thread should be closed to avoid further repeated suggestions or analysis, it's basically only spam.

It's a lesson for everybody that keeps money at a gambling site, don't fall for strange emails or messages, always double check.

It least after this incident stake made some security improvements.