Stake phishing

[Maxbet1]

How do I add screenshots here?

[darkangel11]

And secondly, you falling victim to the phishing site is clearly your fault, whether or not stake's security is high or low end, you said you only play with your mobile phone, stake has a login system that keeps you logged in forever as soon as you log in the first time and did not log out, when you clicked and opened the phishing site, I believe you were asked to log in, that should have been a pointer to you that you are in the wrong site, but unfortunately, I believe you were too careless to notice and by yourself, you gave out your login details to the scammer, how and why then are you blaming stake for your own mistake?

I feel like this is the most important part that explains the situation. I also doubt they knew how much money OP had, especially that they had no access to his account and in fact wanted to gain it by sending him phishing email. OP did not verify the source of the email, nor did he notice that the link lead to a login site, when the site used to remember him every time he went there. Most casinos remember me, I don't know how many times I had to log back in, but it usually happens once or twice a year when they do some updates. You got caught off guard and there was time to react because after logging in, you could have changed password, but if you left it like that for the night, it's all over. I have no idea why they weren't trying to withdraw, but burned the money instead. Maybe they're from competition who wants to scare people from playing at Stake? Burning funds stirs things up, that's for sure, so if they only wanted attention, not money, that's the best way.

[vv181]

How do I add screenshots here?

Upload the image to https://www.talkimg.com/, then just post the image link here. You can't show the image yet since you are still a newbie.

@se stake support does little to help me or comfort me. They were just too much defensive and kept saying it was my fault and I understand it is. But I would atleast expect tech support explaining what happend and atleast reply from where I was phished and how.

Seems like they are not at all interested about preventing phishing attack.

My email was Gmail so it just showed me stake and it had my username like usual. Email link was just 1 dash off.

I'm pretty sure that Stake has some mitigation in place to prevent users from being easily phished, implementing a security feature on there is a certain responsibility for them. But specifically for your case who were already fallen for a phish, Stake did not have any obligation to explain and to seek out how exactly you got phised.

One thing I can suggest is that you try to remind back how and what kind of email initially made your account get hacked. Remember the step and detail about any sensitive information you were being entered/inputed to an obscure and unknown illegitimate site. Checking your browser history might help.

[Hamphser]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

I wont doubht that because I am not the first one being phished and funds stolen/misused. I see time to time victims and stake does not try to improve its security or they don't care about their players at all.

After loosing funds I was so angry and try every avenue to acknowledge Eddie and their tech support but I havent even gotten 1 reply from them yet.

Just venting and warning other users that stake.com is not safe and more certainly they don't care if their security is poor. They will just say account security is players responsibility.

Be safe out there and try to avoid suck irresponsible site.

Peace .

In overall, it was really at your fault and dont tend to point out your fingers on Stake just because you had been hacked due into your own negligence. Who would really be the one will be clicking out for some suspicious links sent out by someone? It is your total responsibility about the safety and security of your own gambling account. Good thing that they didnt able to withdraw but rather losing the balance you do have because of those lose bets made out by the hacker. Things might hurt more if you do know that they had stolen up your funds, so its not totally that their security is shit and thanks to that 2fa.
Arent accessing accounts on Stake does need up some email verification as far as i remember? Specially if it would be accessed on a new ip or correlates to that?

[Odusko]

In overall, it was really at your fault and dont tend to point out your fingers on Stake just because you had been hacked due into your own negligence. Who would really be the one will be clicking out for some suspicious links sent out by someone? It is your total responsibility about the safety and security of your own gambling account. Good thing that they didnt able to withdraw but rather losing the balance you do have because of those lose bets made out by the hacker. Things might hurt more if you do know that they had stolen up your funds, so its not totally that their security is shit and thanks to that 2fa.
Arent accessing accounts on Stake does need up some email verification as far as i remember? Specially if it would be accessed on a new ip or correlates to that?

This is true because if you click any phishing link, you wont be protected by the casino or anyone since you are the one that gives the hacker the access to you account and not only on stake but even in the forum we have some hackers who will send you a link and once you click it you will be redirected to fake forum login page, and once you input your user name and password,  the hacker has access to your account because your login detail will be revealed to the hacker at the back end.
So this form of hack is not new and most members of the forum are already aware of the possibilities and existence of such malicious attempts and how to protect themselves.

[khaled0111]

Sorry for your loss OP but Stake is not to blame in this case.
The user is responsible for keeping his credentials safe and secure. I don't see how stake can prevent phishing attacks other than enforcing 2fa on login or use OTP.
I don't know what to say to reconfort you but just consider it an expensive lesson. At least now, you will be very carefull before clicking any link.

[o48o]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.

But biggest surprise was phishing link received after certain amount reached. Could hacker potentially be scanning wallet and only trying to scam for bigger account?

Could they be getting too much success that they just decide to act only after certain amount level is reached.

I wont doubht that because I am not the first one being phished and funds stolen/misused. I see time to time victims and stake does not try to improve its security or they don't care about their players at all.

After loosing funds I was so angry and try every avenue to acknowledge Eddie and their tech support but I havent even gotten 1 reply from them yet.

Just venting and warning other users that stake.com is not safe and more certainly they don't care if their security is poor. They will just say account security is players responsibility.

Be safe out there and try to avoid suck irresponsible site.

Peace .

So you did get phished by someone with fake url containing clone of stake casino or what? How is this the fault of the casino? I am geniuely interested why do you think that is.
If someone steals your car keys and your car, it isn't car company's fault. Or if you get our bank card stolen with pin number, is that fault of the bank if your money is being withdrawn from the account?

So what i am having trouble to understand, is what part of this phishing am you are blaming casino for?

You said that funds were stolen/misused, so which one is it? Were those gambled? As withdraw needs google 2fa it's hard for me to believe that they were withdrawn.
I am not sure how rules for tipping works, but i would assume it isn't an attack vector either.

[Docnaster]

Just to reiterate though and not defending anyone, it's not the gambling platform's fault if you have been phished or something. For sure majority of them have good security, but if you have been phished and you click some links so that blame is on you.

That's why they will urge you to do 2FA and other security measures so that the hackers can't just simply withdraw your money without any alerts or red flag on your side. But just like what you said, just be very careful on any links that is unknown to us.

No one will rightly fault the gambling company for a phishing scam. I was trying to understand the OP if he clicked a random link from his email purported to be from Stake. If this is the case, Op has himself to be blamed. But if Op was in the stake website when the phising link popped up, then it is Stake that needs to be blame.
One other thing is that when we try to have some cool money in a hot wallet or gambling site, exchanges as the case may be. We should avoid clicking links and remove our minds from bonuses or free money. It is from this that we often get hacked. If you don't in one way or the other introduce a foreigner to your house, it will be difficult for them to locate you.

[rdbase]

I hope I am really wrong about this but I think there is a way that hackers can bypass even the Google authenticator 2fa and still login into your account if you fall a victim to their phishing stuff, Now here it is...

All said, I can reiterate that it is the link op clicked that got him into this. He was gunning for the bonus while the hacker was targeting his account. If you click a phishing website link then you have invested in a troubled waters, unfortunately I think that was what happened from his story.
This is another lesson not to click just any link sent to you without verification of where it came from, I avoid them alot when they are sent through to my email. Sometimes they are not sent directly with the original site name but the link sent to you would bear the name and with such discrepancy, you don't need to click at all whether you activated 2FA or Google authenticator because these hackers are highly knowledgeable in tech.

Received links from twitter (x platform) by a twitter user whose telling you there is a new stake casino coin available right now. Feeding off the rollbit casino coin which increased individuals balances 10x fold from the most recent pump of their altcoin.
I was suspecting it was a phishing attempt so blocked those users and deleted those messages.
Should of reported them to twitter resolution team and also to stake support because it was them who they were trying to impersonate via their casino social media account.

[slapper]

Even though I understand how upset you must be after losing money, I have to say that you have given a false picture of the situation with stake.com. Every online platform stresses how important it is for users to take care of their own money. You clicked on that email? Classic mistake. Users must be careful and double-check the authenticity of emails, especially when working with money

Stake.com is one of the best sites in the business, no doubt. Their security is strong, but if a person clicks on a bad link, no platform can protect them. You. The hacker might not have been able to cash out because of the 2FA protection, which is another sign that their security steps worked. It's painful to lose money, but it's not helpful to blame a reputable site without admitting your own mistakes. Remember that you need both luck and good judgment to win at online gaming, both while you're playing and when you're not

[jostorres]

The balance in your wallet is inconsequential to think of making such excuse for that happening to you now. Scammers will send attractive message for you to get you to compromise which you did. I think this is where the issue on your account started, you have compromised your account by clicking on a phishing mail sent to you and that directed your account towards the hackers domain. You are knowledgeable that it was a phishing site but because of the bonus you got tempted to open it instead of verifying from the casino and or report it.

The balance in his wallet is not inconsequential because it was a large amount. But IDK maybe for you it is, because you are a whale player or a high roller? He already said that he got phished and we already know that phishers or hackers will always use sweet words for us to click on their links. Sadly the OP still click on it.

Anyway, it would be better if he can attached a screenshot of what is the email look like and on what folder did he received it? Was it on spam or in the primary/main folder? Now that he reported the issue here, I hope Stake will act quick to fix the mess in their security even though it is not the first time the issue occur as he stated. It can be our fault sometimes because we can provide our emails to some websites.

Well I think what you need to do is to reach out to stake and ensure your account is safe going forward

He did reach out Stake but he haven't received a single reply yet.

.Is a good thing you secured your account further with 2FA.

He did set-up a 2FA but his balance were still gambled to lose by the phisher/hacker.

[pawanjain]

Damn, this is really bad.... and it can happen with anybody, because this month Stake gave 3 x Monthly bonuses, so you would have thought that it was one of them.

You should think that a hacker would realize that the 2FA stopped them from withdrawing the money, so they would leave the money ...but it is as if the anger let them deliberately sabotage your account, by betting all of it.

Stake even blocked the tipping of the money without the 2FA ...so they cannot even tip an Alt account to withdraw it from another account.   

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP. 

That is a very screwed up situation and the first time I have read something similar happening in any casino.
The amount OP had in his account was big enough for the scammer to try to steal his 2FA somehow through a targeted emails or social engineering , but the fact they decided to gamble away money which could not steal makes me assume the scammer was not only evil and selfish but also a victim of problem gambling to some extend. 

The scammer may or may not have a gambling problem but the reason he gambled away all the money was only because of anger and ego.
Since he was not able to withdraw the amount he lost it all in gambling deliberately.
I haven't seen such a cruel scammer.

[Hispo]

Damn, this is really bad.... and it can happen with anybody, because this month Stake gave 3 x Monthly bonuses, so you would have thought that it was one of them.

You should think that a hacker would realize that the 2FA stopped them from withdrawing the money, so they would leave the money ...but it is as if the anger let them deliberately sabotage your account, by betting all of it.

Stake even blocked the tipping of the money without the 2FA ...so they cannot even tip an Alt account to withdraw it from another account.  

That is really bad. The situation clearly shows that the scammer had no option to benefit from his hack.
At this point he should have left the account but as you said it was pure revenge. It is pure evil.
It's like if the money can't be mine it should not be anyone's. Bad day for OP.  

That is a very screwed up situation and the first time I have read something similar happening in any casino.
The amount OP had in his account was big enough for the scammer to try to steal his 2FA somehow through a targeted emails or social engineering , but the fact they decided to gamble away money which could not steal makes me assume the scammer was not only evil and selfish but also a victim of problem gambling to some extend.  

The scammer may or may not have a gambling problem but the reason he gambled away all the money was only because of anger and ego.
Since he was not able to withdraw the amount he lost it all in gambling deliberately.
I haven't seen such a cruel scammer.

All scammers are cruel in my eyes anyways. Anyone who would be willing to steal that way is scum.
Ironically, all this could have ended up with the scammer earning money for OP in a very sustancial way while trying to make him lose money, if OP was aware of all what was going on with this account, then he could have even logged in on time to take advantage of such hypothetical situation. It would be such a interesting thing to tell others, many would not believe it.

One being a victim of phishing and ending up winning money because of it . Sadly, this was not the story of OP.  

[Mahanton]

How do I add screenshots here?

You can make use of this https://www.talkimg.com . Copy pasting that BB code

but of course you would really be needing to be a copper member to do that
https://bitcointalk.org/index.php?action=credit;promote

If you dont want to pay up a penny then you could always make use of
https://imgur.com and have that share link and let other people do see on what you are liking to show
if we do speak about proofs.

Phishing is common and this is why you should really be careful on hiding those important credentials or log-in information
so that you would really be able to avoid such possible exploits.

[tjtonmoy]

Aren't you the one at fault here? It all started when you clicked on that phishing link. Hackers may keep an eye on you before doing anything and collect information on whom they try to hack. But it's all random. They do not target any specific person or can see your personal balance of the platform's security measurements.

Phishing is a 50/50 chance thing same as gambling. It depends on whether the victim will click on it or not. You made the mistake of clicking that link and giving access to the hacker. Now the fact about not withdrawing your funds from your account. Maybe that hacker is unable to do it because of security issues or he just wants to tell the platform that he can do such things. Who knows?

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

[piebeyb]

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

Yes just because of his mistake he blames it entirely on Stake , it's weird even sounds like dropping Stake , anyway no screenshot even though before he came back to this thread and asked how to give screenshot , but it doesn't show up and looks again , but even so it's still his mistake because won't waste time asking live support about the authenticity of that email.

Just because of his greedy behavior that allowed him to quickly click on the link without asking questions and ended up being phished by fraudsters and then he blamed the casino, it's funny to hear that, maybe this is a thread that can teach beginners not to carelessly click on any link obtained from Email or Social media, make sure it's genuine and ask questions on live support, I'm sure it won't be a waste of time.

[arwin100]

It is you who keeps your privacy safe. You are unfortunate enough to get into the hacker's trap. Next time be sure to verify before clicking any links.

Yes just because of his mistake he blames it entirely on Stake , it's weird even sounds like dropping Stake , anyway no screenshot even though before he came back to this thread and asked how to give screenshot , but it doesn't show up and looks again , but even so it's still his mistake because won't waste time asking live support about the authenticity of that email.

Just because of his greedy behavior that allowed him to quickly click on the link without asking questions and ended up being phished by fraudsters and then he blamed the casino, it's funny to hear that, maybe this is a thread that can teach beginners not to carelessly click on any link obtained from Email or Social media, make sure it's genuine and ask questions on live support, I'm sure it won't be a waste of time.

Live support is always available and he will not caught by those phising site if he just directly go there then verify the information he receive. So he can't blame anyone for experiencing that so maybe that serve a lesson to him and to anyone that always check the message they receive since there are scammers take advantage on every situation. To many incident like this happen so better we should learn from this unfortunate incident so that we will not feed those scammers ego and try the same act.

[goldkingcoiner]

BTC so been playing on stake for 3 years.
Last Sunday my balance went from 8 k to 10k I got phishing mail and I clicked thinking it was legit bonus as I was nearing level up.

I was phished and my funds were gambled on 3 bets.
I was surprised why hacker didn't cashout. May be 2FA.
Peace .

If you have proof of this, then I think the casino will refund you. But proving that you got phished might be difficult as in the eyes of the casino, you might just be looking for a refund after a bad streak. In the future you should use more secure practices to avoid falling for such dumb traps. I am not saying that phishing is an easy thing to look out for, but as long as you remain vigilant, maybe set up 2FA and don't hand out your main email for every little thing. And make sure your website address is always correct.

I hope you have better luck in the future!

[Agbe]

This will also teach us to check the casino account before clicking phishing email. Scammers are using bonus to attract gamblers and if anyone fall they scam him. And you have fall because of bonus. Please be careful next time. 2FA helps people to secure their accounts but if the hacker penetrate to the account information they take all. They do not think of big or small amount, anything they see in the account or wallet they would transfer all. Left you with empty wallet.
If stake really said the security of the account is on the owner's custody then that is bad because the account owner is not the developer of the website. And stake has all the login details of the site plus the security information and the clients can only sign up and login to do their activities and left and not to secure their accounts.

[Mr. Magkaisa]

I was viper out. Hacker made 1st limbo bet it was winner. And he made 2nd bet on mines which was looser, 3rd limbo again looser. All bets were made in LTC 160, 155 and 168 ltc . After 3rd bet 29$ left in my account out of 10500 USD..


Funny thing is this exact scenario was reported aprox 6 to 8 months before and I was suspecting player made it and lost it and now producing stories. As the bets were huge . I exactly remember player claimed it was not him.

Stake definetly has more genius devs than me so I asked them to look up IP and devices associated with those bets but they refuse to reply. I only play through my phone and all other sessions it says android and location except that 1 login.

Funny thing is I was actively trying to go in slots at this point and when I see balance I freaked out went straight to support asking if anybody withdrew or tip and support showed me I made 3 beta and lost.

2 questions I had at this time
1) I was betting in USD so how suddenly it chabged to LTC value suddenly.
2)It was merely 20 seconds to load slots so sxammer waited till I was done playing with game I was playing patiently?

I still can't digest this whole situation and not getting any response from their tech devs

         -   10500 dollars is a big amount to me, I already have a house here in our country if I have that amount. Do you have evidence against what happened to you using their platform? It seems hard to believe what you are saying, even though stakes.com has had issues many times with people like you who have not been able to release their funds from the stakes platform.

Then just now I read a similar issue where from USD it was suddenly converted to LTC. How did that happen? Does that mean someone else is handling your stake account? Then why are you still playing there even though that's what happened to you? This is one of the more surprising ones, to be honest.