Diamond 5 Stake, account was hacked

[Maasdamer]

I feel for you OP.

In the past stake blocked me and accused me of multi accounting which made 0 sense.
After 1 whole month I got my account back and was able to withdraw.

So bs like this they take serious but in your case it's just "your fault". That is some shitty security right there.
Flagging a small timer account like me for nothing but a newly created account can receive 100k+ in $ and no alarm bells, ridiculous!

I hope you beat them in every game you play now and make them pay that way!

[mak013]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

[Daltonik]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

But the main thing here is that the procedure for enabling and disabling 2FA is not protected, for example, on many exchanges to disable the authenticator, you need to enter, in addition to the 2FA code itself, additional codes received by email and phone, and as the OP says, he just received a notification by mail about disabling 2FA after the fact.

[klidex]

-Ops account has been involved in so much funds movement and locking that will make the process of the investigation, so it will take time before a response may be gotten from a stake official and I am sure stake support will reach out to you when there is an update.

I'm also sure that the support team from Stake will definitely look into it and will solve the problem soon because Stake is a big and trusted gambling platform so there's no way they can let it be so arrogant when a user is involved in a problem.
And all the OP needs to do is just be a little patient waiting for them to finish their investigation and give him clarity and good service regarding his case.
Stake has a lot of users so I think it's not only him who needs a solution but there must be other users who need it too so it's only natural that their support team hasn't given a response regarding this case.

This is what I find ironic- Stake if not, is one of the most popular gambling platforms out there but there are a lot of concerns and problems being posted on this board. Given with what they can achieve (e.g. hiring Drake as their brand ambassador), they should have at least put security as their main priority and focus in this aspect.

In addition to this, OP has been one of their bigger spenders in the platform. I truly wish that Stake should address these concerns carefully and with haste. While I do understand that there may be some issues, they should prioritize their customers feedback and concerns more if they want to retain their loyalty of players.

In fact, you or we don't need to worry about every problem that occurs on the stakes gambling platform because their support team will always do their best and provide all services to customers who are having problems.
So far there haven't been any really serious problems that haven't been resolved by their support team. It's just that everything definitely takes time and the process to resolve because it's not easy and you can't just solve a problem that's happening.
I believe that with this problem the stake support team can definitely provide the best solution because they also maintain the good reputation that has been achieved.

[Ben Barubal]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

[mak013]

and for everyone saying that its ok to have zero security procedures in place if an acct is phished. Both stupid and naive, anyone responsible with other peoples money especially at these levels have to have the highest level of security. They had 0. Not a thing.

There is a problem in security system. When you increase security you decrease the comfort of the user the same time. If you have to send video(for example) for every action with money you will become angry very fast. If it will help you to save money, you`ll forgive everything of course, but until this moment you`ll be angry. I can`t say was the stake security level balanced or not, but i can understand why they didn`t increase it. And, as i said for increasing security level we need some big incident.

But the main thing here is that the procedure for enabling and disabling 2FA is not protected, for example, on many exchanges to disable the authenticator, you need to enter, in addition to the 2FA code itself, additional codes received by email and phone, and as the OP says, he just received a notification by mail about disabling 2FA after the fact.

I don`t try to justify the stake. I just telling about how it works and the responsibility of the casino and the gambler. Now the security system will increase level, but the casino willn`t pay anything to the OP because he made a mistake by himself. It doesn`t look fair, but it works so.
Honestly, i don`t like 2FA but i use it everywhere where i have some money, but someone can don`t use service with 2FA - it`s about why the casino can doesn`t use it.

[AicecreaME]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

Indeed. As sad as this may sound, but don't expect so much from this day onwards. The harsh reality will not sink in instantly. If you are still in the grieving process, it's okay, but don't make another same mistake. Most people who gets hacked often fail to recover their lost funds, that's the truth. Only a few managed to somehow get back a portion of their money mostly because the company itself made a compromise. And not because the ahcker suddenly had the heart and conscience to return what they have stolen.

I agree that just think of this as a learning experience. Just think of the money lost as your tuition so that next time, you know better and thus, this won't happen again. Do not fall victim into more scam and schemes saying they could recover your money because clearly, they couldn't and they will just use you for personal gain. Accept your mistake, move forward, then think and do better the next time around.

[Daltonik]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

Indeed. As sad as this may sound, but don't expect so much from this day onwards. The harsh reality will not sink in instantly. If you are still in the grieving process, it's okay, but don't make another same mistake. Most people who gets hacked often fail to recover their lost funds, that's the truth. Only a few managed to somehow get back a portion of their money mostly because the company itself made a compromise. And not because the ahcker suddenly had the heart and conscience to return what they have stolen.

I agree that just think of this as a learning experience. Just think of the money lost as your tuition so that next time, you know better and thus, this won't happen again. Do not fall victim into more scam and schemes saying they could recover your money because clearly, they couldn't and they will just use you for personal gain. Accept your mistake, move forward, then think and do better the next time around.

No grieving process, the fact that you can't seperate feelings from how a company should be run is a bit concerning. But promoting a company in your bio that bought all of stakes stolen email and player lists I guess sheds some light on how you feel about player security. If you take money from people, you should do your best to protect their money, not the least. Does it concern you at all that the company your promoting is trafficking in the profiles of all the players who's data was hacked and stolen from stake before New Years?

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

[nakisama]

some suggestions I gave to stake after suffered a phising loss of 1k myself


-IP connection: if a new session starts from a different IP in a matter of minutes (or even if that IP was never used by that user) force the user to confirm it is really him (some sites do this) via email. For the record, stake does not allow user to change the email by themselves.

-I was KYC verified. Still to this day stake sends their promotional emails addressing me by the stake username and not by my real name

-claim of bonuses through email links. Instead why not credit them directly to the users account (using their vault for example?). If bonus can only be claimed within a time frame then they can simply remove it as unclaimed. Or implement a notification system in stake where bonus links would have to be clicked from within the account only. Making users to check if email is legit or not with a VIP assistant is very unpractical

-deposit and withdrawal. Don't use by default any address used in the past. Force users to input them for each transaction.

-withdrawals: make them a two step process, user requests the withdrawal but then send an email with link to confirm the withdrawal. If not clicked, nothing happens. This at least seems to be minimised with the 2fa.

-hidden stats: making users unhide their bets to be eligible to bonuses seems to be just another way of tracking them especially when their email is similar to their stake username


In my case I did not get anything back (was not expecting it honestly as it was really my mistake).
This happened in 2021 and apart from the 2fa I don't see that anything has changed

[South Park]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

If this is so common then there is only one explanation for this, and that is that scammers are getting a lot of success with such methods and they are unwilling to let go and they will keep phishing as many gamblers as they can until something is done about it, and while it seems there are several things that could be improved at stake, it is essential for gamblers to understand that scammers are always out there and we need to be incredibly cautious or one day we may become their unsuspecting victims.

[RILWAN]

This is a sad situation for ops and i am sure he will learn from this mistakes, please everyone to stay away from clicking links their cant verify, because with just a click, some hackers will have access to your personal details i am not sure stake will give the palyer

[MinMan]

No there was no notification whatsoever that 2fa was removed at all. That is the point, there is no security, they changed this after my money was stolen, they should have changed it when people had their money stolen through the same method in the months leading up. The amounts and players weren't important enough for them to take action. To all the people saying the blame is fully on my side, keep in mind the company had a massive data breach which gave hackers and competitors all their clients email lists, player ranking etc etc. This has never been mentioned for whatever reason, likely because they don't want any responsibility in any of the attacks or violations going on.

Well, though you are not totally responsible, but I would say it's about 70% your mistake and only 30% casinos since you are the one who opened the suspicious link that caused all of it. And casino is responsible for not being able to stop the heist and letting them easily get away with the money which wasn't a very small amount.

A service provider will most definitely try to hide all the negative stuff people try to spread about them or even the real negative events that occur since that compromises their trustworthiness and reputation among community and competitors.

[Odusko]

     It seems unlikely that you will recover what the hacker stole from you, even if we say that someone will help you because I have not heard anything after being hacked that the hacker has recovered what was hacked from him.

    Maybe learn a lesson from what happened to you, at least you know what to do next time because hackers can attack wherever we are if we are careless and we are not the ones to go around in this cryptocurrency situation.

I am sure ops will not recover a penny from what the hackers alread withdrawn from his stake account and also is likely he may face attempting to forfeit the balance confiscated in the other stake account that has been frozen, and we cant blame the stake security team for any harsh decision as long as there have no violated any of the players right and just helping to avoid a further loss to the hackers.
Another thing else I will like to advise ops is to keep in touch with the support and constantly send them a reminder so that your case will receive attention and possible solution.

[len01]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

but also at least you have to be careful even though the problem has existed for some time. because there are so many incidents that fraudsters send phishing links via e-mail and the e-mail of the sender or fraudster is almost the same as the official Stake email.

what I do is usually if I receive an email or through any message and claim to be from the gambling party or the Stake party, I usually always ask the support team whether it is an official message from gambling. if the support team answer is not official message i will ignore and delete the message immediately.

[Daltonik]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

If this is so common then there is only one explanation for this, and that is that scammers are getting a lot of success with such methods and they are unwilling to let go and they will keep phishing as many gamblers as they can until something is done about it, and while it seems there are several things that could be improved at stake, it is essential for gamblers to understand that scammers are always out there and we need to be incredibly cautious or one day we may become their unsuspecting victims.

Of course, you should always check emails before clicking on the links they contain, the user database is constantly leaking into the network, everyone can make a mistake, especially if you see a familiar logo and a similar sender's email, a lot of people get caught on this.

[South Park]

On the stake community forum, topics about phishing emails coming to users periodically appear, starting from November last year, there is also a topic about a data leak from Stake and emails about allegedly receiving bonuses, so this was not something new.

https://stakecommunity.com/topic/64397-phishing-e-mail-scam-november-2022/
https://stakecommunity.com/topic/69379-stake-data-leaked-did-you-get-a-bonus-email-for-another-casino/

but also at least you have to be careful even though the problem has existed for some time. because there are so many incidents that fraudsters send phishing links via e-mail and the e-mail of the sender or fraudster is almost the same as the official Stake email.

what I do is usually if I receive an email or through any message and claim to be from the gambling party or the Stake party, I usually always ask the support team whether it is an official message from gambling. if the support team answer is not official message i will ignore and delete the message immediately.

While this will put a bigger pressure on the customer support of most casinos, I am sure even they prefer for this to be managed on this way as the hit they receive to their reputation when one of their gamblers lose their money in this way is simply too big, after all it is unlikely the OP will want to continue to gamble at stake after what happened and it is possible other people may feel the same way, causing stake to lose money due to an incident that could have been easily avoided.

[QueenVera]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

[seleme]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

What is wrong with holding $165k worth of crypto on a casino balance? There are some crazy high-rollers who keep betting HiLo bets over $200k per bet if you go to check the High Roller tab under the Stake page. This is an expensive lesson and we can't blame anyone but who clicked the link without checking the domain. Scammers are smarter nowadays, they can tell anything to convince potential victims, especially on social media.

[BVeyron]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

It depends on which coins were stolen: if in crypto, then its hard to find, though you can try, at least find and copy all the wallet IDs that were involved as receivers, this info can help you track the money. If it's not crypto, then I suppose you can inform your bank about the incident, there is a bit more chance to get the money back...

[bettercrypto]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.