Player complaint exposes YouWager security risk

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bigboydan
    SBR Aristocracy
    • 08-10-05
    • 55420

    #1
    Player complaint exposes YouWager security risk
    SBR Bill Dozer reports: Player complaint exposes YouWager(SBR rating B+) security risk. The player claims $7,500 was transferred to another account holder who pretended to be him. YouWager allows account-to-account transfers and only requires the party transferring funds to call with his/her account ID and password before executing the transaction. Most sportsbooks offering this type of debit have a security feature requiring the account holder to confirm the linking of the receiver’s account with his, or will ask security questions. Although this is the first complaint of its kind from a First Fidelity user, SBR recommends that players request the account-to-account option be turned off when not in use. SBR has suggested that YouWager require this service to be activated through the email listed on the account.
  • SBR_John
    SBR Posting Legend
    • 07-12-05
    • 16471

    #2
    I like this account-to-account feature. OK add some controls to tighten it up but I sure hope they dont do away with it over this.
    Comment
    • pags11
      SBR Posting Legend
      • 08-18-05
      • 12264

      #3
      scary story....again security must be tighter regarding these types of transactions...
      Comment
      • marc
        SBR MVP
        • 07-15-05
        • 1166

        #4
        I agree with John, buddy transfers are really nice and free as opposed to the 1.9% that neteller charges. In this case any amount of minimal security would have prevented this.

        First of all, the transfer was done at 2am. Should have raised a flag. Entire account was wiped out. Shoulld have raised another flag. Most importantly, if the clerk had just looked at the caller id, she would have seen the call was coming not from the player whose account it was, but rather from the player to whom the money was being transffered.

        When you look at a book like youwager, they have a lot of security in place to prevent bonus abuse, but when it comes to protecting thier players, security in minimal at best. This was a very preventable crime. But since it was agianst anohter player and not the book, the book basically looked the other way.
        Comment
        • Brick Tamland
          SBR MVP
          • 08-12-05
          • 1336

          #5
          marc - how the hell did they get your password??i dont think a person shold be able to clean out a account. If you are a good hacker the book says good job here is the money you earned????????????????
          Comment
          • marc
            SBR MVP
            • 07-15-05
            • 1166

            #6
            Just to be clear, this was not my account. Getting password and account information is easy. All you need to do is find a disgruntled clerk, or a clerk at one of these scam shops and say
            hey, "i'll give you $100 if you give me the account info of someone who has abalnce of over $2,000" THe thing to remember is that many players use the same passwords. So now you take that info, and you start calling other sportsbooks and say "hi, my name is sos and so,, I forogt my account number, can you please tell me what it is." Usally the clerks will ask you for your address and password. You know thier address and give them the password that they used at the pother book. And if they are the type of player who uses just one password, then you have all the ino you need. Now this clerk goes ahead and gives you "your" account number.Now you have the account number and password at this pother sportsbook. You wait for the right time, you swipe all the money. And when the victim calls the sportsbook, he'kll get the response everyone else gets whihc is "how could someone have gotten boht your password and account number." When in truth it really is that simple
            Comment
            • natrass
              SBR MVP
              • 09-14-05
              • 1242

              #7
              Bookies must understand that, until you lose it, any money deposited/held in an account is your money and they are holding it for you.

              All this ID parades, withdrawal fees, rolloevr reqs, etc can be legitimate but it seems to cloud the fact that the money is the players full stop.

              If they lose it, they are 100% responsible.

              Its not as if they are afraid to be a pain in the arse about "regulations" and "security" when you want to withdraw.

              Surely this is a downgrading right here.
              Comment
              • SBR_John
                SBR Posting Legend
                • 07-12-05
                • 16471

                #8
                Good points Marc and I agree.

                Pinnacle has this but more controlled. You have to have your buddy added to your list by an email request, then you must sent an email from the registered addy. Plus you have to login to your account which means ID/PW.

                First Fidelity is a B+ rated book. I think we deserve better controls from them.
                Comment
                SBR Contests
                Collapse
                Top-Rated US Sportsbooks
                Collapse
                Working...