Diamond 5 Stake, account was hacked

[romero121]

As in the previous post add a warning sign along with the phising site link. Someone might click the link and they might also end up losing. Big loss and reaching Diamond 5 level is not an easy thing and all his efforts busted within seconds. The tricks these scammers play is really out of our thoughts, because the link looks same as what is being provided to claim bonus. With this incident everyone will be careful while clicking any of the links received.

[1715267257]

1715267257

[Fivestar4everMVP]

As in the previous post add a warning sign along with the phising site link. Someone might click the link and they might also end up losing. Big loss and reaching Diamond 5 level is not an easy thing and all his efforts busted within seconds. The tricks these scammers play is really out of our thoughts, because the link looks same as what is being provided to claim bonus. With this incident everyone will be careful while clicking any of the links received.

There is a saying that, when birds learn to fly without petching, the hunter will learn how to shoot without missing.
I personally would say that our security is in our hands, literally, like I said in my comment before, OP messed up big time, a person of his caliber should have known better than clicking random links and even without verifying what the link looks like, I think greed is what played OP into falling for this scam, sometimes, we allow ourselves to be carried away by cheap bonuses, that we forget to verify information first, and in this process, we sometimes, end up losing the bird we had at hand, while chasing one that is in the bush.

[mk4]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

[AHOYBRAUSE]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

Binance isn’t a gambling company, if you gamble at a high level you would know that crediting 60k is not an issue, happens every week. The reason they won’t is they are afraid to set a precedent of covering losses due to theft. I’m any event that’s not my request I was hoping someone here would have some specialization in blockchain that might be able to help.

Maybe check in the technical discussion part of this forum if someone can help. https://bitcointalk.org/index.php?board=6.0

Not everybody is checking the gambling section.

Maybe u can get some of the free rollbit $ as a reparation to your loss.

[btc_angela]

Not the first time that I see a attack on gambling sites as well, but it was a huge amount to the OP and I think this is the biggest I heard so far. So it's really very unfortunate that this happen to him, and hopefully no one here will fall for this trick.

And as others have said, there's no way that he can get his money back. Lessons here is to check everything else before we enter our password as it might be a phishing site. Or just bookmark the site itself.

[mak013]

I think that stake will do nothing. If they will pay for every hack - they`ll close. Sorry, but i think that the OP just lost his money. The only thing that the stake can do is to return account but not money.
One more reminder that the most part of the hacks is due to our inattention.

[klidex]

One more reminder that the most part of the hacks is due to our inattention.

I completely agree with what you said.
However, we as users who have quite a lot of money must be more vigilant and always be careful when we step against something.
This kind of mistake is not entirely the fault of the gambling platform but rather a mistake for themselves not prioritizing vigilance and only prioritizing or prioritizing the point of view of profit alone.
There have been lots of cases like this and hopefully in the future there will be more and more gamblers who are always careful so that there are no more cases like this.

[Daltonik]

Nothing we can do here mate. The chances of Stake.com covering your loss is next to zero, knowing that it's a whopping $165k. Even top exchanges like Binance wouldn't shoulder the loss for you since it's your fault anyway.

Best of luck moving forward. 🫡

Binance isn’t a gambling company, if you gamble at a high level you would know that crediting 60k is not an issue, happens every week. The reason they won’t is they are afraid to set a precedent of covering losses due to theft. I’m any event that’s not my request I was hoping someone here would have some specialization in blockchain that might be able to help.

Well, in fact, we can use only those tools for tracking transactions such as explorer, the most advanced ones such as Bitfury Crystal, Chainalysis, CipherTrace, XFlow nSpect and other effective means for finding an attacker by transactions are available only to a narrow circle of OSINT specialists or at the request of law enforcement agencies to search for criminals.

[AverageGlabella]

That may be eloquent and my be true at the above post but as I mentioned several times if a company is responsible for taking clients who are depositing millions of dollars a day in some circumstances, not have any legitimate internal procedures to stop an internal theft is ridiculous. As many many other posters mentioned a stripping of 2fa and an immediate account clearance is the simplest form of crypto theft. Assuming I was greedy by clicking a link I get every day, is a big sssumption, careless sure but if you think businesses that take on billionaires of dollars of a profit a year shouldn’t have proper security and protocols in place when they were hacked and user data leaked two months ago… then I guess we can disagree. If I clicked a link on my black card and someone tried to take my money it would be stopped, likewise w binance likewise w kraken likewise w anywhere. It is the ultimate flag. The moneys lost, so be it but making a blanket assumption that I was greedy is childish. I get these messages many times a day every single day. My telegram was leaked by the ppl who doxxed me in which I pleaded for more account security because of this doxxing. Sometimes two things can be correct, I fucked up but let’s be honest a company taking in billions a year that can’t see the most obvious of phishing or crypto scams also fucked up. Still the point remains if anyone has contacts at tether or experience in this pls let me know. Opinions of who’s to blame are kind of irrelevant, I clicked the link, I lost money, end of story.

They do have measures against internal theft they have 2 factor authentication. This is not internal theft your password was stolen or guessed there is no other way. Stake can only verify withdrawals with email or a 2fa of your choice but email code is enabled by default. If both your Stake and email got compromised that means you are probably using a infected computer and could lose access to other things because the link you clicked could have installed a virus. I would recommend cleaning your computer. Stake is not responsible for people securing their own accounts it is your responsibility to make sure you use a strong password and have 2fa on all accounts.

Phishing is the most common way to lose access to your accounts and there is nothing that can be done by companies to stop this from happening except telling you it is a risk.

[tranthidung]

They do have measures against internal theft they have 2 factor authentication. This is not internal theft your password was stolen or guessed there is no other way. Stake can only verify withdrawals with email or a 2fa of your choice but email code is enabled by default. If both your Stake and email got compromised that means you are probably using a infected computer and could lose access to other things because the link you clicked could have installed a virus. I would recommend cleaning your computer. Stake is not responsible for people securing their own accounts it is your responsibility to make sure you use a strong password and have 2fa on all accounts.

Some platforms as I know have tools to detect and suspend accounts with geographical changes in their accounts log in, activities. I am not sure about Stake.com but initially, the user made mistake and has to bear the loss.

If Stake.com has something to do to increase their security and prevent such things happen on their users better, they should do it. It makes sense.

2FA is not a perfect protection against all threats and hacks. Additionally, exchanges or platforms can not do it completely on their sides. Users must collaborate with platforms and learn how to as well as practice to protect their accounts.

[Cling18]

I'm sorry to hear about what happened to you, Op. I'm sure that you're having a hard time dealing with your situation. I've heard the same story in different casinos before and it's also because of a phishing site. That's the reason why experts always advise us to think before we click because scammers and hackers are getting wiser these days. We should be wiser than them as much as possible or else we will surely fall for their trap. Avoiding suspicious sites and pages will be a lot helpful.

[Bushdark]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

This can be very annoying just like you have narrated how everything occurred. I think this is a time when we are including myself need to be very careful a out the way we click on unsolicited links and need to be very scrupulous when we want to click on links.
I have learnt few things from your mistake that will caution me on something related to this your complain. I know it is very sad for you to lose that kind of fund and the casino end up not be able to help you invesgation the case and how to bring the scammer to book. They should have notified you via email of the changes in your account so this will help you to make a fast decision if you were not the one that made that authorization.

[Fivestar4everMVP]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

[cryptomaniac_xxx]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

Definitely but phishing and its links wont be stopped. That's why I am saying the security was so far below standard. If my account had history of sending huge tips to new accounts and things like this it would be easier to understand. It could not be more blatantly fraudulent and they keep repeating how grateful I should be about the portion that was recovered. The only reason that didnt go out is the hacker tried to send over their limit in instant withdrawals. The simplest form of security in any financial world is when 2fa is stripped or a password updated there is a secondary confirmation whether by text or email. If this simple thing was implemented as is the minimum in security protocol I wouldn't have lost a dollar. They are not a new company and they implemented this 12 hours after my account was robbed. Should have been done years ago. Its moronic and displays just such a huge lack of respect for clients money and their protection. Companies should assume people are trying to hack their players accounts, this isnt a new thing. Links are going to be clicked, if my email and my secondary forms of verification were affected I wouldn't be complaining. This was just way too easy and way too blatant of a theft for it to be considered ok. The phishing links and attacks are so prevelant there because of data leaks that were never admitted and other sources of problems. I bet 500m in turn over in 5 months and they don't have any extra security on my account than they do on an unverified un kyc'd account thats bet 0. I was initially told by support that my complaint is similiar to someone falling off a bike six years ago and blaming a broken leg that happened recently on that. Thats how 500 million dollars of business was treated.

I'm really sorry to hear that mate, but I do hope that the casino that you have played will somewhat overhaul their security system with this kind of hacks in one of their biggest player. Because it shouldn't happen in the first place for a big whale like you.

So in any case and in the future, this could be prevented, it's just that it has to happen to you before they do something about it.

I do agree though, when you are stripped of your 2FA, there should be notification as this is the layer of protection that you have in the first place. And so if it is removed by you or by someone, they should let you known and maybe wait for at least 24 hours cool down.

[Ojima-ojo]

This a bad event for ops having such high ranking account hacked and funds stolen is quite an unprecedented event for ops and I am sure we can learn a thing or two from his experience,  because even though stake have some blames and should look for ways to update the security by disallowing withdrawal from accounts that have strange security activities.

At least if that features is present it could have taken the hackers an extra 24 hours before being able to withdraw from the account.

[LalaLina69]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's  likely a phising link.

Definitely but phishing and its links wont be stopped. That's why I am saying the security was so far below standard. If my account had history of sending huge tips to new accounts and things like this it would be easier to understand. It could not be more blatantly fraudulent and they keep repeating how grateful I should be about the portion that was recovered. The only reason that didnt go out is the hacker tried to send over their limit in instant withdrawals. The simplest form of security in any financial world is when 2fa is stripped or a password updated there is a secondary confirmation whether by text or email. If this simple thing was implemented as is the minimum in security protocol I wouldn't have lost a dollar. They are not a new company and they implemented this 12 hours after my account was robbed. Should have been done years ago. Its moronic and displays just such a huge lack of respect for clients money and their protection. Companies should assume people are trying to hack their players accounts, this isnt a new thing. Links are going to be clicked, if my email and my secondary forms of verification were affected I wouldn't be complaining. This was just way too easy and way too blatant of a theft for it to be considered ok. The phishing links and attacks are so prevelant there because of data leaks that were never admitted and other sources of problems. I bet 500m in turn over in 5 months and they don't have any extra security on my account than they do on an unverified un kyc'd account thats bet 0. I was initially told by support that my complaint is similiar to someone falling off a bike six years ago and blaming a broken leg that happened recently on that. Thats how 500 million dollars of business was treated.

Send me a private message mate. I know exactly who you are as I see you talking in sports chat rn. It’s possible to trace the exchange it was sent to and from there, you contact them and every exchange needs KYC so they could freeze the account before it’s too late.

I tried sending you a DM but it doesn’t let me.

[LalaLina69]

it's not on an exchange anymore. exchanges wont do anything without police reports and stake wont file one.

You don’t need stake to file a police report mate. Like I said, my DMs are open if you want to chat. I’m also a top 10 level ranked player on stake.

[Wiwo]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's likely a phishing link.

Reading further in stakes terms of service in the account security it stated that members may not. Be able to withdraw within the first minutes to a few hours of change of major security information,  but from what the ops started, it looks as IfThe 160k+ was taken out of his account through tips to another stake user and this leads me to to My next question.

-Since the situation has been reported by the ops I think it is now better to investigate and Deactivate the brand-new Account.

-So I think if the accounting questionnaire does not empty the wallet balance.

[Wiwo]

the new account is banned and the funds go. that was done as soon as it was reported.

Do you by any chance trace the destination of the funds in the balance of the new account,  since you said banned does it mean the account has been banned by stake and funds seized,  or the hacker was able to withdraw the balance to his wallet before the account was reported and banned.

-Of a truth, I seem lost on the web right now,  I am not clear if the hackers have the whole money, or if we have some balance left in the banned new account for possible recovery back to the original owner.

[Fivestar4everMVP]

Another very pathetic layer of security is you get an email when you add 2fa to your account, making sure you did it but you get nothing and no notifications whatsoever when it is removed lol.

Well, if this hadn't have happened to you, many of us wouldn't have known all this, but then, now we know, and I think it is time we all as a community urge stake to make an improvement on users account security.
But then again, even if they do, that our account is not hacked, is still in our hands, the long and short of it all is, for us to avoid clicking links, if there be any bonus stake is offering, try and locate the bonus page through the main stake.com website where your account is logged in.
But if we must click links, suspect it immediately if it asks for your login details again   it's likely a phishing link.

Reading further in stakes terms of service in the account security it stated that members may not. Be able to withdraw within the first minutes to a few hours of change of major security information,  but from what the ops started, it looks as IfThe 160k+ was taken out of his account through tips to another stake user and this leads me to to My next question.

-Since the situation has been reported by the ops I think it is now better to investigate and Deactivate the brand-new Account.

-So I think if the accounting questionnaire does not empty the wallet balance.

the new account is banned and the funds gone. that was done as soon as it was reported.

Was there really any need banning the account when the funds are no longer there?
I personally feel that Stake should have left the account open and accessible to the hacker who created it, we never can tell, a thing or two might happen which might lead him into trying to use that account again, and from there, he can be traced, as long as he is not using a VPN, But unfortunately, it's already too late.

But still on still, I don't know what importance the ip address the hacker used to access Stake, would do, I would have suggested you try to get the IP address used to access that new stake account from, if this can help to track and catch who ever is responsible.