BC.GAME – Account hacked, funds withdrawn, support ignoring the case

[forthewincs]

Hello everyone,

I want to report a serious issue with BC.GAME.

My account was compromised after I clicked on what appeared to be a promotional bonus link. Shortly after entering my login details and 2FA code, my account was accessed from a foreign IP address (India).

The attacker performed swaps and withdrew approximately 500 EUR in USDT from my account without my authorization.

What concerns me even more is that I reported the incident immediately. Despite this, the account was not properly secured and the withdrawal was completed.

Since then I have sent multiple emails to support and compliance but I am still not receiving a proper response or resolution.

Evidence I have:

Login history showing access from another country

Transaction records of the swap and withdrawal

Wallet address used for the withdrawal

Email communication with BC.GAME support

At this point I am asking BC.GAME to:

Investigate the unauthorized access

Return the stolen funds

Provide the full legal details of the operating company

If a representative from BC.GAME is monitoring this forum, I would appreciate an immediate response.

I will update this thread with additional evidence if necessary.

https://bscscan.com/tx/0x0153b5a82d267a0e297432812198bc9b38382c76e8de8fd91a73c57d71dac379
https://bscscan.com/tx/0x603566f73fd5b5d33ef9dada77f3c8084584a9e23cff3a687d88eb75c7adc9c4
https://bscscan.com/tx/0x992f79eb1c4fabb512ee985ed3a8ad9a09bad75de29a3e037623d5bfda0be702
https://bscscan.com/tx/0x79dad53cca1c1342657c18ef682c8567f597891bef61a0a86a93c576adf11b50

this is the transaction that scam my account

Thank you.

Blockchain tracing

The funds were eventually transferred to the following wallet:

0xBAC954595fe08427c44FF831751bA04c45fd24FB

This appears to be the address that received the stolen funds.

Transactions involved:

https://bscscan.com/tx/0x0153b5a82d267a0e297432812198bc9b38382c76e8de8fd91a73c57d71dac379
https://bscscan.com/tx/0x603566f73fd5b5d33ef9dada77f3c8084584a9e23cff3a687d88eb75c7adc9c4
https://bscscan.com/tx/0x992f79eb1c4fabb512ee985ed3a8ad9a09bad75de29a3e037623d5bfda0be702
https://bscscan.com/tx/0x79dad53cca1c1342657c18ef682c8567f597891bef61a0a86a93c576adf11b50


Update / clarification

I want to clarify one important detail regarding the incident.

When the withdrawals happened I was still logged into my BC.Game account and actively playing. While I was inside the account I started seeing withdrawal notifications appearing.

I was NOT logged out and I remained inside the account while the withdrawals were happening.

This suggests that another session was active at the same time.

Additional details:

• A new withdrawal address was added to the whitelist during the attack
• Withdrawals were executed shortly after
• I did NOT receive any SMS verification code
• I did NOT receive any withdrawal verification email
• The only emails I received were confirmation emails AFTER the withdrawals were completed

This is why I am asking BC.Game to explain how withdrawals were executed without the usual verification messages.

Transactions involved:
https://bscscan.com/tx/0x0153b5a82d267a0e297432812198bc9b38382c76e8de8fd91a73c57d71dac379
https://bscscan.com/tx/0x603566f73fd5b5d33ef9dada77f3c8084584a9e23cff3a687d88eb75c7adc9c4
https://bscscan.com/tx/0x992f79eb1c4fabb512ee985ed3a8ad9a09bad75de29a3e037623d5bfda0be702
https://bscscan.com/tx/0x79dad53cca1c1342657c18ef682c8567f597891bef61a0a86a93c576adf11b50

[logfiles]

When you noticed that the account was compromised. Why didn't you act fast by changing your login credentials and 2FA before sending a support message? You do realize support sometimes takes days to respond.

I have a feeling you fell for a social engineering or phishing attack but still you are blaming BC.Game for letting you click on a phishing link, seriously?

[PX-Z]

It's really rare to see social engineering victims in casinos sites aside from today. Any casino cannot solve your issue by just refunding you or what. Unless there's a bug on their side like limiting withdrawal wallet address to be used and needs email validation first, only if there's such feature. Or 2FA was like compromised. Then they will just tell you that it's your sole responsibility to protect and secured your account.

[forthewincs]

Thank you for the responses.

To clarify a few important points:

The incident was reported immediately after I noticed suspicious activity on my account. I contacted BC.Game support right away and informed them that my account might be compromised.

However, despite the report, the account was not properly secured and active sessions apparently remained open. Because of this, the attacker was able to continue accessing the account and complete the withdrawals.

I understand that phishing attacks are often the user's responsibility, and I am not denying that I may have clicked on a malicious link. What concerns me is that after reporting the issue, the account was not fully secured in time.

I have already provided transaction IDs and blockchain evidence showing the withdrawals.

At this point I am simply asking BC.Game to properly investigate the case and provide a clear explanation of what happened.

[SamReomo]

The incident was reported immediately after I noticed suspicious activity on my account. I contacted BC.Game support right away and informed them that my account might be compromised.

If you noticed such type of activity then you should instead change your password instead of contacting their support team. But, if you found the suspicious activity late then contacting the BC.GAME team would make sense. Next time you should be careful when selecting links because it was your own fault and in such case BC.GAME most probably will not do anything for you.

[Cointxz]

The incident was reported immediately after I noticed suspicious activity on my account. I contacted BC.Game support right away and informed them that my account might be compromised.

If you noticed such type of activity then you should instead change your password instead of contacting their support team. But, if you found the suspicious activity late then contacting the BC.GAME team would make sense. Next time you should be careful when selecting links because it was your own fault and in such case BC.GAME most probably will not do anything for you.

This should be the logical reaction if someone hacked an account since support sometimes handle other case that requires waiting time.

I forgot if BC have security verification on withdrawal but at least setting up that security verification when account was hacked will help to stop the hacker withdraw the funds.

[AHOYBRAUSE]

First of all, it's basically self inflicted so the main blame goes to OP, as hard as it sounds. Contacting chat support brings nothing since they are so slow and never understand any issues, so it's just a waste of valuable time in this case.

As other have pointed out, should have changed credentials immediately.

I kinda don't understand how they could withdraw though since BC (at least 1 year ago) gives you 3 options to verify a withdrawal, of which you need to choose 2. They send you a code via email, via sms, or 2fa. So there must have been more compromised than just your account because without 2 of these 3 code options it's is (or at least was last time I check) impossible to withdraw.

[forthewincs]

Important update regarding the incident.

The withdrawal address used by the attacker was **added to the whitelist at the same moment the attack happened**.

Immediately after the whitelist entry was created, the attacker performed the withdrawal transactions.

This means the attacker:

1. Accessed the account
2. Added a new withdrawal address to the whitelist
3. Executed the withdrawal shortly after

I reported the suspicious activity immediately, but the account was not secured in time and the transactions were completed.

This is why I am asking BC.Game to properly investigate the incident and explain how a new whitelist address could be added and used immediately for withdrawals.

Relevant transactions:
https://bscscan.com/tx/0x0153b5a82d267a0e297432812198bc9b38382c76e8de8fd91a73c57d71dac379
https://bscscan.com/tx/0x603566f73fd5b5d33ef9dada77f3c8084584a9e23cff3a687d88eb75c7adc9c4
https://bscscan.com/tx/0x992f79eb1c4fabb512ee985ed3a8ad9a09bad75de29a3e037623d5bfda0be702
https://bscscan.com/tx/0x79dad53cca1c1342657c18ef682c8567f597891bef61a0a86a93c576adf11b50

[forthewincs]

There is one detail that I still cannot understand and I would appreciate clarification from anyone familiar with BC.Game security.

When the withdrawals happened I did NOT receive:

• any SMS verification code
• any withdrawal verification email

The only emails I received were **confirmation emails after the withdrawals were already completed** (4 confirmation emails).

This is why I am confused about how the withdrawals were executed.

At the same moment the attack happened, a new withdrawal address was added to the whitelist and the withdrawals were processed shortly after.

So my question is:

Does adding a whitelist address allow withdrawals without the usual verification steps?

If anyone has experience with how BC.Game handles whitelist withdrawals, I would appreciate clarification.

[forthewincs]

Update on this case.

It has now been more than 24 hours since I reported the unauthorized access to my account and the withdrawals.

I have sent multiple emails to BC.Game support and compliance but I still have not received any official response or update regarding the investigation.

Important details of the incident:

• The attacker added a new withdrawal address to the whitelist at the moment of the attack
• Withdrawals were executed immediately afterwards
• I did not receive any SMS verification or withdrawal verification email
• The only emails I received were confirmation emails after the transactions were completed

Approximately 500 EUR in USDT were withdrawn.

I have already provided the transaction IDs and blockchain evidence.

I am still waiting for BC.Game to respond and explain how the withdrawals were executed without verification messages.

If anyone from BC.Game is monitoring this thread, please provide an update regarding this case.

[rat03gopoh]

I've withdrawn funds from this casino several times, and as far as I remember, there's no confirmation email request; you're only notified once the funds have been successfully sent. I also don't think they (or online casinos in general) have a very good first-line response to incidents like this, so I'm not surprised they're a bit late in locking the account.

Does adding a whitelist address allow withdrawals without the usual verification steps?

For some platforms, the verification system has like a tolerance period. You won't be asked for another verification if there's only a 3-5 minute gap between atcivities. cmiiw

[forthewincs]

I've withdrawn funds from this casino several times, and as far as I remember, there's no confirmation email request; you're only notified once the funds have been successfully sent. I also don't think they (or online casinos in general) have a very good first-line response to incidents like this, so I'm not surprised they're a bit late in locking the account.

Does adding a whitelist address allow withdrawals without the usual verification steps?

For some platforms, the verification system has like a tolerance period. You won't be asked for another verification if there's only a 3-5 minute gap between atcivities. cmiiw

When you withdraw with crypto you have 2 verification to do . sms email or authedicator app .you need to complete 2 of this 3 .

[rat03gopoh]

When you withdraw with crypto you have 2 verification to do . sms email or authedicator app .you need to complete 2 of this 3 .

Unfortunately, I didn't enable both authentication methods: SMS and 2FA app. Maybe our experiences differ. Haha...

[holydarkness]

OP, please don't make consecutive posts, it's against forum rules... that I occasionally break [yes, I know, I know] because I need to update the thread and need an immediate attention of the player and overseers that pop the thread to the top of the list. Your situation though... you can add your update through editing your post.

And uhh, do we have screenshots of your quick reaction to escalate to Support and gained no response here?

[forthewincs]

Clarification and timeline of the incident:

At the moment the withdrawals happened I was logged into my account and actively playing with an active bonus. While I was playing and winning, I started seeing withdrawal notifications appearing at the same time.

So the withdrawals were happening while I was still inside the account.

As soon as I noticed this activity I immediately opened a live chat with BC.Game support and at the same minute I also sent them an email with all the details and transaction information.

Another important detail: two days before this incident about **28 EUR** had already been withdrawn from my account without my authorization. I reported it to support and they temporarily locked my account.

After that I went through the full recovery process again:
• password changed
• new 2FA setup
• account reopened by support

However, despite these steps, the attacker was still able to access the account again and execute the withdrawals.

This is why I am confused about how this could happen after the account was already secured and reopened by support.

https://prnt.sc/vX8TmDNGLN0m