My BETPHOENIX ACCOUNT HAS BEEN BROKEN INTO

[blix177]

Just deposited another $1k with BP 5min ago. Minnesota cleared my bank.

[BET THE HOOK]

Too many problems at BP. I left them after alot of loyal play there because they got me too. No problems at BetJamaica

[tltaylor89]

taking my bankroll out of their after the Magic fiasco they didnt move to +2

[Keith Richard]

I just might take my 10 dollar balance right out of there after hearing this.

[BillyCostigan]

They must have paid SBR a LOT of money to get a B+ rating. Should be a D book.

[KGambler]

They must have paid SBR a LOT of money to get a B+ rating. Should be a D book.

I have played there just long enough to see that they are good at processing deposits (including credit cards), and also provide fast payouts. Their lines are very competitive (until they claim you are sharp and move you back to dimelines). This has all the makings of a B book, EXCEPT they have horrible, horrible security.

After having this happen to me, I obviously won't be playing there anymore. That being said, I can see how they reached B+ on SBR. I suspect that rating won't last long. I am not the first, and won't be the last person this has happened to.

But other than the whole "someone else logs in and plays in the casino or places $500 to win $21K parlays" thing, they are a very solid book

[tltaylor89]

That casino is rigged who hits 15 gets an Ace and then hits 16

[jboy4]

All casinos are rigged. I learned my lesson from Carib. There casino is garbage much like there entire operation.

[blix177]

That casino is rigged who hits 15 gets an Ace and then hits 16

So your saying you would stand?

Say the dealer has a 10 up, you got 15 and you hit, get an ace, you wont hit again? I mean BJ is a -EV game to start with, but your not getting anywhere near optimal play value, if your not hitting like this.

[tltaylor89]

seemed so calculated to me

[Johnpoints]

seemed so calculated to me

BP doesn't care about your 3 figure balance kid. Take it out and shut up already.

[tltaylor89]

BP doesn't care about your 3 figure balance kid. Take it out and shut up already.

Its 4 Figures son talk to me when you can actually lay the max on a game.

[blix177]

Its 4 Figures son talk to me when you can actually lay the max on a game.

tltaylor, I would take some of the money out not all. And if you have any money processor to keep the money in for easy access that would be great too. This way it limit your exposure. Why i wouldn't take out all the money from BP? Basically they got a very competitive odds and bonus. Like today I deposited $500 over at betmania, got 50% cash, -108 line and free half a point in basketball. Still lost it all by the end of the day, but that is beside the point heh.

[vitalyo]

At many companies, the password is hidden from the CS. In other words, even someone who looks in the database will not be able to see the password associated with that account because it is encrypted.

For example, if you call your bank, the people answering the phone can not see the PIN number of your ATM card.

BP has very lax security which requires them to rely entirely on the honesty and integrity of their employees. This is a VERY BAD idea.

I agree !!! I expressed my concern before in 7000 euros missing from betphoenix account
I am gonna quote my self . Post #32 ( click on it).

Originally Posted by Dark Horse
Players are responsible for their own passwords.

When you call "BP" they will ask you for your password . If i am clerk, crooked clerk at "BP" You know what i can do . Imagine . You think all of them are honest their .

Originally Posted by Dark Horse
This could have happened at any book

Europian Books will issue a PIN or "security question"for you,so when you call you give them PIN. They will never ask you for your password . Clerks at 99% of books have no info on costumers passwords .
The reason they don't have access to passwords . What if someone gets fired and wants to take a revenge on the book . Mess all the accounts .Or just a fraud .

Call any europian book and tell them your clerk asked me for my password . See what happens .

This is a time bomb . If it didn't happen yet, it will . At BP any clerk that got hired yesterday have access to passwords . Are you kidding me .

GL.[/color]


I made a post above on 02-09-10, 07:21 PM 45 DAYS ago TO BE EXACT .

BP did nothing to ensure players, that their funds are safe .
In fact they didn't even bother to reply .
Did they improve their security measures ?
NO .
Do they care ?
I think they do ! But to me it's hard to figure them out BP that is .Maybe they are waiting for massive withdrawal requests ? Before they come out with some sort of excuse . To tell us OK OK we will fix it .We are solid book Tons of free plays
Why you guys are complaining .Something like that .I had seen it before.

I like the book But they have so many issues .Last time i played them it was in October or November can't remember . I just don't feel safe to have my funds with them . The other thing i don't wanna wait 3 weeks for moneybookers withdrawal Why would I wait ?It takes pinnacle 7 to 10 min to transfer funds. So to me BP is a dead book.

GL.

[Hareeba!]

Did they agree to cancel al the pending bets?

[Dark Horse]

vitalyo,

You always quote people out of context? Unreal. The security issue with passwords visible in the address bar has since received plenty of attention here. BP solved it, but that doesn't mean that passwords couldn't have been stolen at that time. When in doubt, change your password.

[RockyS]

At many companies, the password is hidden from the CS. In other words, even someone who looks in the database will not be able to see the password associated with that account because it is encrypted.

For example, if you call your bank, the people answering the phone can not see the PIN number of your ATM card.

BP has very lax security which requires them to rely entirely on the honesty and integrity of their employees. This is a VERY BAD idea.

Yes they can't see your password, they can see your password recovery question/answer so they can get your password in an easy way.

PIN number for ATM card isn't stored nowhere except on your card. If you forgotten your PIN they can get you new one, but also new atm card.

The best password is something "stupid" like 30 characters long. NameOfYourDogCatWifeSonDaughterBirthDays OfThemDateOfYourHoliday etc.. combine this "stupid" things and write them down on your mobile phone into notes or something if you can't remember it. Even if they steal your phone, they won't know what the f**** is that Just don't write down "My password for site.com is: xxxx"

[uva3021]

If you ever logged in from a public computer or from a mobile device, with the login information security issue BP had before, someone could have easily logged in

[AL1322]

damn that sucks man i hope you get your money back... but ya maybe u logged in somewhereand it stayed logged in or something other than that i wouldnt know

[vitalyo]

vitalyo,

You always quote people out of context? Unreal. The security issue with passwords visible in the address bar has since received plenty of attention here. BP solved it, but that doesn't mean that passwords couldn't have been stolen at that time. When in doubt, change your password.

DarkHorse They didn't solve f**k all !
I am talking about someone that got hired by BP yesterday . Any employee at BP can easily obtain your password .
It's pretty obvious that it is inside job . Deposit 10 K ,then call BP and give some guy by the name Jose or Pedro your account # and a password . You call it safe ?
For the crooks who wants to score BIG i mean really BIG they should get a job with BP before they go under .
I hope my post will not result in massive job applications with BP .

[Boner_18]

I don't understand what the motivation of an "inside job" is. Assuming the person wins all the bets then they have just lost their employer money. Assuming they lose all the bets they have just made their employer money but they don't see any of that. It's perplexing.

[Trident]

If you ever logged in from a public computer or from a mobile device, with the login information security issue BP had before, someone could have easily logged in

You forget unprotected wireless networks in your home which people get lazy with.

You sign into your bank account on a unsecure wireless network and any hack worth a damn can see everything you type in including account number, password , security question everything. Forget about the site security issue with BP you sign onto any type of site on a unsecure wireless network and you give any hacker the keys to the store.

[sq764]

i found it funny when talking tot he BP customer service, they basically said all the stories of this happening were bitter losing bettors and there was no truth to it. I find that hard to believe

[Kemalettin]

vitalyo,

You always quote people out of context? Unreal. The security issue with passwords visible in the address bar has since received plenty of attention here. BP solved it, but that doesn't mean that passwords couldn't have been stolen at that time. When in doubt, change your password.

its not all about changing passwords security etc. BP is the real problem in here

[AimingHigh]

I don't understand what the motivation of an "inside job" is. Assuming the person wins all the bets then they have just lost their employer money. Assuming they lose all the bets they have just made their employer money but they don't see any of that. It's perplexing.

I think the motivation would only be if the employee (most likely ex-employee) was disgruntled. Win or lose in the individual player's account balance, they're trashing BetPhoenix's reputation as a safe, reliable place to play.

[HeeeHAWWWW]

Could mayve even be someone in Phoenix's upstream network provider. After all, the password is transmitted as part of the URL, so anyone with access (legit or hacked) there can get every single username and password just from basic network logs.

[vitalyo]

I don't understand what the motivation of an "inside job" is. Assuming the person wins all the bets then they have just lost their employer money. Assuming they lose all the bets they have just made their employer money but they don't see any of that. It's perplexing.

You are saying you never heard a story's of employee getting pissed at the employer and trying to take some sort of revenge .
Pissed employee( or EX EMPLOYEE even better ) will try to lose every bet . Company makes money yes , but loses it's reputation and unlikely to admit that the problem is on there side .Too much is at stake .

10bet(management)placed wagers in players account AFTER the events were played to lose his balance in order to score $$$ off winning account .

http://www.punterslounge.com/forum/f22/10bet-blacklisted-67053/

I don't think BP is scamming players . Clearly BP fault for not taking masseurs to prevent such things happen .

Employees are been able to have your password and account # . It's like asking a stranger can you hold my cash for me ? i'll be back in 10 min
Assuming that phone clerks at BF don't make 40 to 60 k a year . Most likely 3-8 . Is not a very good idea to provide them with all of your account details including password.

They tell KGambler that they are looking at IP logins .Yeah sure keep looking . You know it takes less then 1 min to find out .With betfair it's in your account you can check all of your log ins in the matter of seconds + the time and the date.



All this hacked stories . Firstly hackers will drain your account and transfer funds somewhere else. I am getting impression that some of you are looking to find an excuse for BP ? Or you just trying to convince your self that BP is safe and sound .


Enough said .



GL.

[Chuck Sims]

How long can Bet Phoenix blame disgruntled losing gamblers for their security issues?

[tltaylor89]

How long can Bet Phoenix blame disgruntled losing gamblers for their security issues?

Forever these people are shameless beg for a depoit on Wednesday phone line down on Thursday.Hell they won't hang a + 115 ML for a fuking basketball game.

[KGambler]

I don't have any updates yet. I am going to talk to the guy in charge of the investigation later today.

I'm kind of disturbed by the people in this thread who keep bringing up ways my account could have been hacked in a random incident. I realize that it is possible for someone to have hacked into my account using any number of techniques. I am not living in Fort Knox or anything. If a hacker is sophisticated enough, he can get your password in so many ways.

I have never logged into my account from a public computer. I don't write my passwords down anywhere. My password was a mixture of 7 random letters and two numbers (in other words, impossible to guess). Could the CIA have broken into my house and secretly installed an electromagnetic emissions detector in order to read all of my keystrokes? Sure, or maybe it was aliens or the local super hacker.

But while it's possible that someone could have obtained my password through some kind of sophisticated hacking method, why target my BetPhoenix account? Why not my brokerage account, my bank accounts, my credit cards, my online poker accounts, or my other sportsbooks accounts? Why would they target my smallest account, and then just place a bunch of stupid parlays? In other words, why not try to actually get something out of this impressive feat of hacking (i.e. stealing money)?

Why are there many people reporting that their BP account has been broken into, and that someone had maliciously played with their funds in the casino? It beggars belief that people will jump to all sorts of outrageous conclusions rather than just come to the obvious one.

Yes, it is technically possible that my password and account number were cracked in any number of ways. I am careful and security conscious, but there is no foolproof system to safeguard your computer. Ask NASA or NORAD for chrissakes, they have both been the victims of hackers. But why would you believe that I am some random victim of a sophisticated hacking attack, rather than make the obvious assumption that ALL of the people who have had this same experience at BP are victims of the same vandal/attacker/thief/whatever?

I made a $4K withdrawal from BP a couple of weeks back. I received the money quickly and with no hassles. But now I am wondering if this rogue employee/ex-employee/whatever looks in their system for people who have taken the max withdrawal. We have not heard of anyone being hacked who did not have at least a high 4 figure balance.

So I have a question for the other victims - did you request cashouts prior to being targetted?

[MathewXB]

I have to say the first thing that ran through my mind was it BP tring to get some money back just like the PAM devision of an insurance company! A hacker would not waste his or her time on money that they would never see it would not benifit them in the least bit. It would be like running a black ops mission into Canada..................... NO POSITIVE OUTCOME! BP on the other hand would benifit from this by getting some money back from someone who obviously is not to bad at this capping deal! It is a good chance it was bp and they are cooking up some bs reason not to help u!!!!! But I could be wrong to.

[blix177]

Two big possibilities:

A. book does this to steal player money.
B. Player does this to steal book money.

Both not unheard of.

[kmarinouofm]

Could mayve even be someone in Phoenix's upstream network provider. After all, the password is transmitted as part of the URL, so anyone with access (legit or hacked) there can get every single username and password just from basic network logs.

where do you currently see this??

[Chuck Sims]

Two big possibilities:

A. book does this to steal player money.


Both not unheard of.

A rather ignorant post. A player is talking to BP chat while his account is being drained at the casino. Hitting on 18 at Blackjack?

The recent case is a bunch of pending bets wiping out his remaining balance. The bets are pending when he calls BP.

You say its a "big' possibility--"B. Player does this to steal book money."

Would I be out of line to call you an idiot?

[Dark Horse]

DarkHorse They didn't solve f**k all !
I am talking about someone that got hired by BP yesterday . Any employee at BP can easily obtain your password .
It's pretty obvious that it is inside job . Deposit 10 K ,then call BP and give some guy by the name Jose or Pedro your account # and a password . You call it safe ?
For the crooks who wants to score BIG i mean really BIG they should get a job with BP before they go under .
I hope my post will not result in massive job applications with BP .

You realize that everything you say is total assumption, right?

There was a problem, some time ago, with passwords being shown in the URL when players logged in from the home page. BP has since fixed that. But passwords could have been hacked, so at that time players who were aware of the problem would have been wise to change their password, and log in from the log-in page, instead of the home page.

What is not known is if passwords were hacked in that period (it appears so), and how many. So players should definitely contact BP to change their password.

And BP could have easily added a page where, for security reasons, players are told to change their password once a year. This is quite common for online stock trading. I don't know why they didn't, so I don't like how they dealt with the problem.