blonde poker forum

I got a phone-call from the HSBC fraud department today, and it turns out someone has used my Credit Card numerous times on my Victor Chandler account this morning. I haven't used it for several months so I insta knew it was dodgy.

How the bloody hell they got into it I don't know, because I couldn't even remember my own log-in details to check it out on the software and had to go through the "forgot password" malarkey.

I shouldn't lose any money because it's covered by Mastercard, but what precautions do you think I should take? Change all my passwords?...

Geez it is scary how common this shit is becoming. I will let the experts chime in, with what to do as I am completely clueless as people found out earlier in the week.

Yeah man the fact something similar happened to you earlier in the week is weird. Do you reckon moon&back is a hacker of some sort lol :P

if you do a chargeback i heard you get put on some blacklist and poker sites hate you/don't want your business. nonsense?

Maybe they got your details through your email?

I doubt it would be that hard for a hacker to get a list of email addresses associated with accounts on a poker site.

lolz, wp moon&back

someone should check his attack vectors and stuff

i remember a few years back, just before blonde was launched, i was chat banned and banned from a forum of a site after telling people how easy it is to break security on most poker sites. its even easier now than it was then.

the site i got banned from and chat banned is no longer in buisness but it had nothing to do with there sercurity only due to the fact there wasnt anyone with any serious money on there worth stealing

With both Longy and MC being hacked in some way, I'm wondering if these hackers are trawling forums looking for targets and getting info based off their usernames on certain sites, for example reading the prop bet thread and then searching OPR/Sharkscope to see if people are worth hacking.

Was thinking the same. Could easily be a forum member imo. MC is your public email on here linked to any of your accs? Or a visible one on FB inc d.o.b etc?

I could see people using this as an argument for banning of all tracking sites PLUS ability to change usernames regularly.

If your username is different to your display name then you shouldn't really need to change your username at all.

2 factor auth (ie the RSA dongles) makes it pretty hard to just harvest log in details anyway.

Yes, in theory it is. Good point.

But I don't see any evidence that my email has been hacked. And my username is different on VC than anything else.

It's all a bit confusing tbh. The money they deposited apparently wasn't spent in poker so they weren't chip dumping, so I don't see the benefit of what they did because they could never withdraw?...

If this is a card u already had regisitered at VC is it not possible that it may be some sort of glitch at their end similar to what happend to a few people with Stars?

Really can't see the benefit of anyone using ur card to deposit in your account.

Yeah that's how they've done it I assume, I guess it was saved

Def can't be a glitch. This was numerous transactions, all of different amounts. Totalling like £1500, and they got a bunch declined when they maxed out, one that they got through was £5. Sounds like degen depositing to me.

They could deposit, leave the account for a few weeks/months and then return later to chip dump. This might lead to a higher success rate as a charge back is likely to be made as soon as the card holder notices so those left dormant for a while are likely to actually let them get their hands on the cash.

Yeah, that makes sense I guess, but would surely rarely go unnoticed and doesn't apply here as they've seemingly gambled this money away

Ahh sorry, thought they'd just deposited.

Maybe they have many accomplishes, maybe they spread the money around so it's less likely they actually get caught.

Did you have the VC software installed with auto login on a PC? When I was at uni one of my friends was inadvertently gambling on an online casino on a friend's PC as he didn't realise it was real money. Luckily he won, but something similar could have happened here.

My CC has been hacked too .... got a call yesterday from issuer asking if I had sent money to oxfam .... apparantly they try the small shippage first and then go for the big hit ... card cancelled and new one being shipped, I have nothing on it, but GG issuing bank for spotting that I am a tight git and do not give to Oxfam !!

I knew you had Scottish blood in you!

yeah i can barely get my hold em manager to work let alone hack you guys, is a bit strange though hope im not next as im a bit clueless with computers and stuff. do you think you have been targeted from here?

much easier to just ban forums.................

Lol


lol...I'm really not sure man, though it does seem possible. Hopefully will find out a bit more 2moro.

blimey - which bank are you with? mine try their best to give my money away when i am not looking

though to be fair they do ring me once i contact them to complain about it :D

Be sweet if they won on your account james

Great, I'm shitting this a bit now. The bank said the transactions shouldn't appear on my account cos they were "dealing with it", but low and behold I find these on my statement today:

11 Nov VCI £300.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £110.00
11 Nov VCI £50.00
11 Nov VCI £20.00
11 Nov VCI £20.00
11 Nov VCI £20.00
11 Nov VCI £20.00
11 Nov VCI £20.00
11 Nov VCI £20.00
11 Nov VCI £5.00

Now the bank tells me I need to raise a dispute against them and that it will take 6-8 weeks to sort out, because the details were saved with the company which is different to straight up fraudulence.

Just tried ringing VC and apparently their Security team doesn't work this late.They haven't been in touch with me yet, and I'm starting to worry I won't be getting my money back  :-/

Just keep pestering them like mad. Tell Nik Spooner as well, kind of his responsibility to help u with something like this.

P.s. Bit of a I have £1465 in my bank brag.

Bloody Hell, can you tell what they spent the monies on? Was it casino?
Also can you get the ip of the person that logged in and made the deposits?
Hope you get this sorted asap, as Greekstein said, just keep pestering them all the time.

I dont understand how they were ever going to get the money out though, unless they dump it at poker, or am i missing something?

Soz mate, I ran shit in the $110 comps ... could have been a fairytale instead of a nightmare.

LOL


Gonna try and find out these details 2moro, apparently they didn't spend it on poker though which is kinda confusing.


Good idea dude, I'll get onto him. Although this is more of a I have a £1500 credit limit on my credit card brag, my bank account perhaps isn't as healthy ;)

did you not cancel the card when you first realized it had been hacked?

If so how can they make further withdrawals on the card?

<modifiied> apologies, realized these are the transactions appearing a few days later

When i was victim of identity fraud and had significant sums of money stolen from my account once i reported it to both police then provided bank with crime number they extended an overdraft to cover the amount while they looked into it and told me there would be no charges on my account for anything til the matter was resolved. It took about 5 weeks, they paid all the money back and withdrew the overdraft facility so at the end of the day it didnt cost me anything and i didnt lose out - that was HSBC also

Why ever did you not cancel the card, surely the fraud team should of advised you to do this immediately.

O I C it shows up delayed on ya bank. Sorry.

Do you know how they got your login details?

Have you spoken to the Police?

I imagine the bank and VC are well within their rights to say GG you as the deposits were made with stored details and it's your responsibility to keep you login details secured.

I haven't spoken to the police yet but maybe this would be the right thing to do?

I have no idea how they got into my account. I couldn't even remember the password myself, like I said I had to reset it. I definitely have not given any password out to anybody nor has anyone been able to access a computer where it would auto-login for whatever reason.

A fraud has still been committed. It isn't my fault they've gotten into my account. Surely they cannot just say "GG"?

As you say, a fraud has been committed so probably best to involve the police. I'm not sure if your bank will want to refund you as they used legit details to get the cash and VC could say the same. (this assumes it wasn't VC's fault, but if it was I'd doubt they'd admit it or you'd be able to prove it.)

It seems odd in that if you weren't using VC actively you're not likely to have been a victim of keylogging etc.

Did you have VC installed on any PCs?

MC, when you say 'statement', do you mean you looked at your banking online?

About 4 years ago some1 I knew got a few grand taken out of his poker account from a reputable site, the first thing he was told he must do by the  site was to contact the police. Not sure of the outcome as lost contact with him but I would strongly recommend you do contact them.

Yeah man, I have reported it to the police today.

VC refuse to talk to me directly about this matter now and say they will only talk to the police. Am a bit worried they are being evasive about it :-/

Yeah man


That's interesting, I have reported it to the police today.

VC refuse to talk to me directly about this matter now and say they will only talk to the police. Am a bit worried they are being evasive about it :-/

They think you did your conkers on a mad spin up and are now trying it on ?

I'm a bit worried about this.

But the deposits are so uncharacteristic and I would assume so is the IP address etc. The lady I spoke to when I first reported it to them definitely said something was wrong. I hope there's some way to prove it wasn't me. I think I was playing on PokerStars at the time this all happened, or at least when the bank first phoned me, I dunno if that could help but probs not.

Finally got a response from VC thanks to Nik Spooner. Signed up for VC through his site Tetleyboy Affiliates a while back and have really appreciated his help on this and a couple of other things. I hope this is good news, and that it will inevitably mean the bank will sort it out.


Dear Mr Atkin,

We have been contacted by our affiliate in relation to your account being hacked. I understand that you have not received as much information as you would have liked so hopefully through this email I will be able to answer all your questions.

Unfortunately, in order to claim your money, you will have to go through the process with the bank. Unfortunately when it was brought to our attention that your account was hacked, it was too late for us to cancel the deposits. Unfortunately we do not have the facility to pay funds back to a Mastercard so you will have to go to your card issuer to claim the funds.

With regards to your account being hacked, I can only assume that you have some sort of virus in your computer. It is possible that this malware can keep a record of your keystrokes when entering usernames and passwords. The fact that you have not used your account with us for some time could mean that the hacker has had your logon details for some time or maybe has hacked your computer recently and has found your password details if you use programs that save your username and password. Unfortunately normal anti-virus software does not always pick up these viruses as they can be quite sophisticated so it may be in your interest to get your computer checked out by a professional. Everything stated above is only an assumption as we have no way of identifying how a hacker gets holds of an individuals logon details.

Hackers usually chip dump the funds or attempt to withdraw the funds to cards belonging to themselves.

I hope this has answered your questions but please do not hesitate to contact us if you have any questions.


Kind Regards,

Security Department

Victor Chandler Worldwide

Not that I have ever dealt with an affiliate before but when i used Nik Spooner he was the nuts

They've told me the IP address was UK based.

Sigh, would be more obvious it was fraud had it not been.

That wouldnt give you more info than that?

UK based is great imo. Police can find out who it is from the ISP (also shows it wasn't you) and then do something about it.

cool, I hope this is the case!

I got a refund on my card about 8 weeks ago upon reporting the fraud, the letter saying that HSBC would re-debit the money if upon their investigation my claim was unsuccessful.

They said I'd get a letter confirming that all was fine and dandy, which is yet to arrive, but I'm assuming that this amount of time on, all is okay. Which is a relief!

glad you got it sorted mate :)