Stake phishing

[hyudien]

snip~

You click on an anonymous link and then ask the casino to refund what they didn't. What I mean is that control remains with the user. The casino is not responsible for activities outside the casino when attacks are carried out against users, perhaps if a phishing attack occurred on the casino then the casino would be responsible but here it is you who gave access to the hacker. As far as I know, that's how it works, because you were careless and didn't do a thorough check of the email messages received. Moreover, this is related to large amounts, so you as the owner must be more careful.

[1714612177]

1714612177

[1714612177]

1714612177

[1714612177]

1714612177

[1714612177]

1714612177

[Mr. Magkaisa]

        -   If you are really a victim of a phishing hacker, why will stakes.com still be responsible for the loss of your fund? After all, isn't that negligent? I'm just asking, mate. Then what also makes me think is that not all of your funds have been obtained; maybe because your 2FA is activated, that could be the case.

But when you say that stakes.com is not safe to use, that seems wrong because you were a victim of a phishing link, so that means stakes.com has nothing to do with it, right? Or the stakes will require an investigation into your issue as well.

[btc_angela]

Just to reiterate though and not defending anyone, it's not the gambling platform's fault if you have been phished or something. For sure majority of them have good security, but if you have been phished and you click some links so that blame is on you.

That's why they will urge you to do 2FA and other security measures so that the hackers can't just simply withdraw your money without any alerts or red flag on your side. But just like what you said, just be very careful on any links that is unknown to us.

[Gozie51]

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. 

On the other side, I guess it will be fine for op since the hacker couldn't get hold of the money. He would have felt really bad if another person took his money in such way to enjoy his sweat. It is a lesson for us all that before clicking on a link sent to you, you need to do some background check because a little mistake can little to regret. And another lesson is the need for 2FA google authenticator security activation to our accounts so that when hackers get succeed then they won't be able to run away with the money in the wallet.

[Fivestar4everMVP]

       -   If you are really a victim of a phishing hacker, why will stakes.com still be responsible for the loss of your fund? After all, isn't that negligent? I'm just asking, mate. Then what also makes me think is that not all of your funds have been obtained; maybe because your 2FA is activated, that could be the case.

But when you say that stakes.com is not safe to use, that seems wrong because you were a victim of a phishing link, so that means stakes.com has nothing to do with it, right? Or the stakes will require an investigation into your issue as well.

In as much as I feel bad for what happened to OP, I still like I've told him before stand on the fact that he was wrong about what he said concerning stake not being safe,  the issue of one fallen victim to phishing scam has nothing at all to do with the platform to which the scam was carried out on, security is not just onto to the platform we are using but it has much more to do with ourselves, a hacker breaking into one's account by the means of phishing is solely as a result of the users negligence not that the platform is not secure.

Do I still Believe stake has a role to play here, and that role is to at least find out the IP address associated with the user that accessed OP's account and report that to OP, maybe there could be a way to trace who ever did this through the IP address, that is if the hacker was stupid enough not to use VPN to hide their true IP address.

[panjul07]

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. 

On the other side, I guess it will be fine for op since the hacker couldn't get hold of the money. He would have felt really bad if another person took his money in such way to enjoy his sweat. It is a lesson for us all that before clicking on a link sent to you, you need to do some background check because a little mistake can little to regret. And another lesson is the need for 2FA google authenticator security activation to our accounts so that when hackers get succeed then they won't be able to run away with the money in the wallet.

Even though the hacker could not get the money, but OP is still losing his money which is something that can be said as fine.
Although Op may also lose the money himself by playing but it would be different case.
Lesson learned, always be careful with any link sent to our email. Double check first before clicking any link.
If we feel that there is something suspicious, better to ask the official support of the service to make sure whether the email is sent officially from the real service or not.

[Hispo]

Damn, this is really bad.... and it can happen with anybody, because this month Stake gave 3 x Monthly bonuses, so you would have thought that it was one of them.

You should think that a hacker would realize that the 2FA stopped them from withdrawing the money, so they would leave the money ...but it is as if the anger let them deliberately sabotage your account, by betting all of it.

Stake even blocked the tipping of the money without the 2FA ...so they cannot even tip an Alt account to withdraw it from another account.   

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. 

That is a very screwed up situation and the first time I have read something similar happening in any casino.
The amount OP had in his account was big enough for the scammer to try to steal his 2FA somehow through a targeted emails or social engineering , but the fact they decided to gamble away money which could not steal makes me assume the scammer was not only evil and selfish but also a victim of problem gambling to some extend. 

This is just another reason to be extra careful when comes to clicking on anything which find its way onto our inbox. This could have happened to anyone unfortunately, OP just had the back luck to be deceived to click on something he should have not. 

[Eureka_07]

<snip>
Be safe out there and try to avoid suck irresponsible site.

Could you please help me understand the situation better? I want to clarify a few points. Firstly, were the hackers able to withdraw your funds recently, or has this not happened yet due to Stake's 2FA verification before withdrawal? I'd like to better understand the sequence of events.

It's important to figure out what happened, and I'm here to listen. However, it appears that because your account was compromised through phishing, Stake may not be at fault. I may be missing some details, so please correct me if I'm wrong.

Furthermore, I'm curious why you didn't change your account's password after discovering that it has been compromised. By doing so, you could have terminated their session and logged them out, potentially safeguarding your balance."

[Aanuoluwatofunmi]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

If they could take hold of your account then expect many things to come out through that, but what i sense was the fact that after they had gained access to your account they couldn't make any progress due to some required protocols needed to verify they are really the owner of the account, one of it is the 2FA you mentioned, many the email verification is also part of the challenges they had in moving your funds.

[michellee]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

If they could take hold of your account then expect many things to come out through that, but what i sense was the fact that after they had gained access to your account they couldn't make any progress due to some required protocols needed to verify they are really the owner of the account, one of it is the 2FA you mentioned, many the email verification is also part of the challenges they had in moving your funds.

And it would be best for him to move his funds before the hacker does it immediately. He can avoid having his money stolen, but if 2FA can protect his account, he may need to change his password to a new one. And he should also contact the support service to ask for help solving the problem.

We must be careful in receiving any email and usually phishing emails will be similar to emails from real casinos. Usually, if the casino wants to give a bonus, we can find it in our gambling account besides sending it via email.

So next time, you have to be more careful. Make sure the name of the site address is correct and check if there is a notification on your gambling account so that you don't experience phishing again. This is a lesson for all of us to stay calm if we receive an email containing an offer bonus or because we received a gift from a certain casino. It could be that it is a trap prepared for those who are not careful.

[seoincorporation]

A good question would be: How does the hacker get your E-Mail?

And why does the hacker only gamble your balance?, he doesn't win anything by doing that. If that was the scenario you could request an audit of your account to stake to see what happened there.

Sorry for your loss mate, but try talking with the site support, maybe they can help you.

[noormcs5]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

The balance in your wallet is inconsequential to think of making such excuse for that happening to you now. Scammers will send attractive message for you to get you to compromise which you did. I think this is where the issue on your account started, you have compromised your account by clicking on a phishing mail sent to you and that directed your account towards the hackers domain. You are knowledgeable that it was a phishing site but because of the bonus you got tempted to open it instead of verifying from the casino and or report it.

Well I think what you need to do is to reach out to stake and ensure your account is safe going forward. Is a good thing you secured your account further with 2FA.

This shows that we are too greedy for the bonuses and promotions that we do not try to pay attention on where we are clicking and check the links and all such stuff. Since we are too much careless with ourselves which gives scammers an opportunity to scam us and get easy money. Had he checked the link twice, this would not have happened.

I do not know how stake will go about it as this is also not their mistake if someone clicks on the phishing link and becomes the victim of the scammers.

[Maxbet1]

Finally after 1 week just accepting the L. I was so angry but forum hunting for answers and knowing I was not the only one helps me to be wiser next time. And it helps me to just accept it is gone unless I file cybercrime complain but again it will he so stressful to go through knowing I was the one clicking so ultimately I can just get same answer as forum members have mentioned.

It helps to curb my spending on gambling as I don't feel comfortable gambling my own funds on online anymore. May be IRL casino time.


I really appreciate your input members.
Sorry if I was salty but haven't slept peacefully in 1 week nor was good at helping people at work as i work in paramedics feild. as it was 1st time in my life I got scammed.


May be its time to rest for a while.
Be careful out there its an evil world. And thanks again for helping me get over this L and mistale

[Maxbet1]

@se stake support does little to help me or comfort me. They were just too much defensive and kept saying it was my fault and I understand it is. But I would atleast expect tech support explaining what happend and atleast reply from where I was phished and how.

Seems like they are not at all interested about preventing phishing attack.

My email was Gmail so it just showed me stake and it had my username like usual. Email link was just 1 dash off.

I have wise up and checking every link I click on.
Hope this post can help next person looking for answer who gets phished on stake because stake is too busy to explain all this.

[nelson4lov]

I think they need to verify it first before they act or refund you. I doubt if they'll refund you on that unless it's proven because if that bet have won they wouldn't definitely get it on your account. If you've been phished that's definitely not stake''s fault in the first place.

If the link you clicked has gone through and you input your credentials the hacker should have get it. You have been so lucky you probably have good security on your account set or else that would have been wiped out. Again, you're still just speculating and you don't have any proof/s yet if it was really done by Stake itself.

Affirmative, if he was indeed phished, then it's not the fault of the sports betting platform. Phishing attacks are one of the most common attacks which is why it is recommended for users to double check links (very important) given how common it is.

QQ: @Op didn't you have 2FA turned on in your account? Because if there's 2FA enabled, even if you get phished, the attacker shouldn't be able to login to your account without passing 2FA check. If it's otherwise, then it's 100% the fault of the bookmarker.

[OgNasty]

So you’re saying someone hacked your account and won you $2,000 but then decided not to cash out? If you have 2fa on withdrawals I would say that definitely saved you, and it sounds like you made money and admit you got fished so I’m not sure why you say Stake owes you something. The whole story sounds made up to be honest.

[ololajulo]

Using more concise language: "Stake.com cannot accept a phishing email as an excuse for faults. Consider improving your cybersecurity practices, especially in handling phishing attempts. Additionally, it's advisable to keep your gambling site focused solely on gambling funds."

[PX-Z]

Sorry for the loss, but i want you to remember that every phishing incident is user's fault. First what website's are you using with the same email, who knows your emails personally, who you shared stories of your gambling activities. This is a rare incident, as what i understand of what you are trying to tell is, well just i what think, Stake CS/people made the phishing email to you.

Also, at least share a screenshot of the email you received, the domain/url used you clicked to login, etc.

[Crypt0Gore]

Stake is not safe or you are the one that's not very careful with your account information? I think you are looking for something you can't find, Instead I suggest you check yourself very well, something is wrong with whatever you are using, either a compromised email account or your PC is infected with some nasty malware.


Every phishing isn't the platforms fault, it's from your own side, if you think I am wrong you can drop some screenshots and I will prove that you are the one wrongly accusing Stake, if this is a viral threat you won't be the only one complaining such thing to the team.

If an hacker is on loose, aiming for Stake users only, by now there will be more than five people complaining the same to Stake team, they will take action instantly and notify their customers, but it's just you.

[Adbitco]

I am not a regular user of stake.com but I have known stake for a little while now and although there are other cases but sometimes I felt it was a paid accusation to tarnished their reputable or something similarly. Sometimes it weird seeing someone account didn't break any rules but was totally phished and the worst is when your funds weren't withdrawn but was used to bet..

Now what could be their aim?
Betting with your balance and after they win big they withdraw it or what?
Why didn't they withdraw the 8k or 10k that was in your account?
Sometime some complaint got me surprised and mostly likely unbelievable for such to happened, I wouldn't say it didn't happened but too shocking to believe.