wild.io password reset without email verification

[fenican]

Noticed my wild.io password was reset last night without an email authorization. Someone must have found a loophole. Checked gmail access history and there was none at the time they sent the verification email.

UPDATE - they reset my account and I set up 2FA and a new password. No indication anyone actually logged in despite the email notices that password was changed.

[Orpichukwu]

Noticed my wild.io password was reset last night without an email authorization. Someone must have found a loophole. Checked gmail access history and there was none at the time they sent the verification email.

Some platforms allow you to reset your password without the need for email authorisation. The only thing they will need you to do is first provide the current password and then put in the new password and reconfirm it, and you can click on 'save', and that’s it.
The only email you will receive is a notification that your password was recently changed; it’s only when you want to reset the password through forgetting the password that the need for that email verification might arise.

[r_victory]

Did you speak directly with them? Has there been any other activity on your account besides this? Because this is really a very serious matter. Most platforms have almost daily reminders about enabling two-factor authentication, especially when it comes to sensitive information such as withdrawals, password changes, and updating bank details and/or wallets.

[fenican]

Did you speak directly with them? Has there been any other activity on your account besides this? Because this is really a very serious matter. Most platforms have almost daily reminders about enabling two-factor authentication, especially when it comes to sensitive information such as withdrawals, password changes, and updating bank details and/or wallets.

I have alerted them to the issue via email. Their platform does require an email link verification to reset, and I was using a strong randomly generated password that was unique to the site, and my gmail access history shows no accesses at the time so best i can tell my email account is not compromised. Also reviewed all my gmail logins and all were legitimate. Fortunately no funds in the account I keep it at zero balance except when actively wagering.

[boyptc]

Fortunately no funds in the account I keep it at zero balance except when actively wagering.

That's a good practice.

Now that you've seen that probably somebody have reset your password without a notice, it's a big issue for them.

You'll have to wait the explanation on how it happened. But I think that they can say that it's a glitch or whatsoever, share the update here once they've replied.

[Doan9269]

All you can do for now is to contact their customer representative either on a live chat or through their email concerning this challenges you are facing, probably someone have gained access to your account, you could help with the situation before it go way too far, since you are the right owner of the account and have access to your email, you verification may be needed to that account and through that the other necessary procedures in follow for you to be claim back your account, I'm sure you must have created a vulnerability leading to this either online or in person.

[maydna]

I have alerted them to the issue via email. Their platform does require an email link verification to reset, and I was using a strong randomly generated password that was unique to the site, and my gmail access history shows no accesses at the time so best i can tell my email account is not compromised. Also reviewed all my gmail logins and all were legitimate. Fortunately no funds in the account I keep it at zero balance except when actively wagering.

At least you don't lose any money there so you can deposit money if you want to play on that casino. But I never meet this case at least on myself because if we forgot our password, we will request that to them so they can reset the password by sending the email verification.

If you have alerted them this issue, you could hope they will investigate and makes sure no leak on their site. It is a critical matter for them because this can affect to other account if not all member accounts.

[fenican]

All you can do for now is to contact their customer representative either on a live chat or through their email concerning this challenges you are facing, probably someone have gained access to your account, you could help with the situation before it go way too far, since you are the right owner of the account and have access to your email, you verification may be needed to that account and through that the other necessary procedures in follow for you to be claim back your account, I'm sure you must have created a vulnerability leading to this either online or in person.

Thinking it's a temporary glitch on their end which resulted in some email spam and accounts not working. I've seen that before with other sites. I'll just kick back and wait for a resolution since I have no funds in the account at the moment. Glad I withdraw frequently because I had as much as $5k USD in there fairly recently which I wisely pulled out.