[Jerm3085]

Woke up this morning to 7k missing from my Sportsbook account! I called and spoke with someone, and she told me the money had been moved to a poker account, now I’ve never played poker or any casino games on their site. She asked my basic info and told me to change my password, which I did, and in that time I was speaking with her, whoever it was continued to “lose” over a grand just in the few minutes I was on the phone with her. Minutes later, 10k was now missing from my account. Anyone else ever get “hacked” like this before? In my 15+ years of online sports betting, this is definitely a new one!

She said they will be able to see the person’s IP address and what device they’re logging in on etc. But who’s to say that they will actually put that money back into my account???? If anyone has any helpful advice it would be greatly appreciated as I have never had to deal with something like this before.

[Jerm3085]

[Ian]

Did the poker account lose it all to one player? If so, that's pretty obvious chip dumping and BO should be able to get your money back (if they care).

[Jerm3085]

Did the poker account lose it all to one player? If so, that's pretty obvious chip dumping and BO should be able to get your money back (if they care).

I have no idea but I imagine that’s what happened, although after I reported it they allowed it to continue for another hour or so. As of now, they have put some of the money back, but still 8200~ missing. Hopefully they return it all!

[Ian]

I have no idea but I imagine that’s what happened, although after I reported it they allowed it to continue for another hour or so. As of now, they have put some of the money back, but still 8200~ missing. Hopefully they return it all!

If they had enough evidence to give some of it back I would think they would have enough evidence to give it all back. GL!

[Jerm3085]

If they had enough evidence to give some of it back I would think they would have enough evidence to give it all back. GL!

Yeah I was hoping that would be the case, but now I’m unable to login to my account. When I called they told me the investigation is still underway and once it has concluded they will contact me. I’m just at the mercy of these people if they feel like giving my 10k back unfortunately

[Pacific Square]

If you're lucky enough to live in a legal state, play with a legal book.

Don't keep more than a few grand in the offshore books as you're in trouble when sh!t like this happens..

I'm in f*cken Cali so I'm stuck with offshore and don't keep more than a couple grand at most at those books.

[Optional]

Yeah I was hoping that would be the case, but now I’m unable to login to my account. When I called they told me the investigation is still underway and once it has concluded they will contact me. I’m just at the mercy of these people if they feel like giving my 10k back unfortunately

This exact thing has happened quite a few times at BOL from previous forum reports.

In most cases they do end up refunding it for you but they do seem to try to accuse people of not keeping their account secured first in most cases as well. Seems like they try to bluff people or something. Maybe because this is a known problem now and some people could be trying to fake it to get free money themselves.

[hehfest]

I was in their "pay" NFL Survivor Contest last year. I think it was week 2 or 3, but I had my pick in 100%. The team won. I saw the green check-mark showing my pick was saved. I go in the following weekend and it told me I was eliminated from the contest for not making a pick. I was very angry and have not played there since. To me they either had a software issue, or someone went into my account and made sure I was done.

I then asked them to look into this....wrote them about it explaining....I never heard back a peep about it.

[Jerm3085]

Unfortunately I live in FL, they teased us with that damn Hard Rock sports betting app for half a year then FD and DK got upset that the Seminole tribe didn’t cut them in, so now it’s going to be stuck in litigation for years. So, this is what I’m stuck with…I’ve never kept more than 5k or so in my book, but went on a little run during March Madness and was going to cash out most of it, but was trying to wait to catch the dip in btc once the tourney ended. That’s what I get for being greedy

[Jerm3085]

Thanks for the reply Optional, appreciate it. I’m hoping once they figure out it wasn’t me they return my funds and everything goes back to normal. I asked them last night if this has happened before and they told me it has, and that these things typically take no longer than 24hrs. Currently past that point now, so if I haven’t heard anything by tomorrow I’m going to call back and try to speak with a manager.

[infotimbo]

This exact thing has happened quite a few times at BOL from previous forum reports.

haven't seen it for a couple of years actually. In most cases the reasons were leaked (elsewhere, not at bol) passwords indeed, as far as I can remember?!

They have also introduced 2FA since, but unfortunately it's completely useless.

[Jerm3085]

Received a call this morning from BOL, they fixed my account and the money is back in there. Just requested a withdrawal for about 80% of my balance and it is processing, thanks everyone for the help and input. Will update again once the withdrawal has posted.

[Jerm3085]

Well that was very quick, the $ is already in my btc account, super quick payout. Consider this matter closed.

[bruloc]

They have also introduced 2FA since, but unfortunately it's completely useless.

Why is it completely useless?

btw, can't find 2FA option at my account. How do I activate it?

[Jerm3085]

Why is it completely useless?

btw, can't find 2FA option at my account. How do I activate it?

If you use BOL it’s under profile settings at the bottom

[bruloc]

If you use BOL it’s under profile settings at the bottom

I use BOL desktop classic layout and there isn't profile settings.

[Optional]

Received a call this morning from BOL, they fixed my account and the money is back in there. Just requested a withdrawal for about 80% of my balance and it is processing, thanks everyone for the help and input. Will update again once the withdrawal has posted.

Great news.

[infotimbo]

I use BOL desktop classic layout and there isn't profile settings.

yeah, only works on the new site. That's exactly the problem I was referring to.

[bruloc]

yeah, only works on the new site. That's exactly the problem I was referring to.

btw, the new site doesn't work for me. I tried with different devices/browsers and only the layout loads, no lines/matches.

[newton0038]

Received a call this morning from BOL, they fixed my account and the money is back in there. Just requested a withdrawal for about 80% of my balance and it is processing, thanks everyone for the help and input. Will update again once the withdrawal has posted.

Take it all out Jerm. BOL has this cancer that goes into remission then comes back to infect more players.

[Jerm3085]

btw, the new site doesn't work for me. I tried with different devices/browsers and only the layout loads, no lines/matches.

I’m using the mobile version I guess, on my iPad. Click on My Account then Profile Settings - Enable 2FA

[infotimbo]

I’m using the mobile version I guess, on my iPad. Click on My Account then Profile Settings - Enable 2FA

yes, but unfortunately this only activates it for the new site/mobile.

[SportsBettor74]

yes, but unfortunately this only activates it for the new site/mobile.

On the new site, there is a link at the top with "Switch back to our Classic Website".

Therefore, to enable 2FA with Betonline and to keep using the Classic site, maybe the following protocol will work:

1. Log on to new site
2. Enable 2 FA
3. Log off

In the future, when you want to log on to Betonline to place a bet:

1. Log on to new site using 2FA
2. Click "Switch back to our Classic Website" at the top
3. Fill your boots placing bets on the Classic website

Has anyone tried this? If so, does it all work ok?



EDIT: Since 2FA is only enabled on the new website - does anyone know what happens if you (or a bad actor) tries to log on with your credentials on the old website? Presumably Betonline has already thought of this otherwise it makes the whole 2FA setup ineffective (as you could set up 2FA on the new website and still get shafted if someone simply logs on to the old website with your credentials). Maybe if you try to log on to the old website you might get some kind of message saying "2FA is set up - please log on to the new website" or something similar. Does anyone have any experience or comment about this?

[Optional]

^^^ Yes, I think your last edit added problem is a serious problem.


For some companies 2FA is simply an excuse to push responsibility for account security away from themselves and on to your shoulders.

I bet many many victims get turned away with the line "you enabled 2FA so you must have given someone access. We suggest you keep your passwords safer."

Whether the attacker got in via a known company back door or not!



And then if you do not enable it. "Well it's your fault the hack happened as you did not enable the 2FA system so we had that excuse instead."


Meanwhile it's a staff member or backdoor workaround being used that 2FA has no effect on...

[SportsBettor74]

^^^ Yes, I think your last edit added problem is a serious problem.


For some companies 2FA is simply an excuse to push responsibility for account security away from themselves and on to your shoulders.

I bet many many victims get turned away with the line "you enabled 2FA so you must have given someone access. We suggest you keep your passwords safer."

Whether the attacker got in via a known company back door or not!



And then if you do not enable it. "Well it's your fault the hack happened as you did not enable the 2FA system so we had that excuse instead."


Meanwhile it's a staff member or backdoor workaround being used that 2FA has no effect on...

Wow. So effectively we are saying that setting up 2FA on the new website does not work because a bad actor can simply log on to the old (Classic) website - thus circumventing the 2FA you have set up and thus making 2FA completely redundant.

I find it very hard to believe that Betonline has not thought of this.

Even just a message when you try to log to the old website saying "Logon not possible - please use the new website".

I am not inclined to set up 2FA on the new website to test this. However - there must be someone reading this who has set up 2FA on the new website and who could attempt to log on to the old (Classic) website and tell us what happens.

Hoping for a response.

[infotimbo]

I am not inclined to set up 2FA on the new website to test this. However - there must be someone reading this who has set up 2FA on the new website and who could attempt to log on to the old (Classic) website and tell us what happens.

Hoping for a response.

yes, I have it activated, and it's exactly as you say. That's why I called it "completely useless".

[SportsBettor74]

yes, I have it activated, and it's exactly as you say. That's why I called it "completely useless".

Yes. Based on your post I agree that Betonline 2FA is completely useless.

I just want complete clarity on this and I apologise for repeating what is stated in prior posts. I just really want to nail this as I find it very difficult to believe this to be true.

Therefore - with crystal clarity:

1. You have set up 2FA on the new Betonline site
2. Nevertheless - you are able to log on to the old (Classic) Betonline site using your username and password (No 2FA required and no mention of the fact that you have set up 2FA)
3. You are then able to place bets on the old (Classic) website

Please humour me and confirm that 1, 2 and 3 above are all true statements

Regards.


EDIT:

4. Please confirm that it is not possible to set up 2FA on the old (Classic) website - not because of some technical issue or browser issue you may have - but because the functionality to set up 2FA is simply unavailable when using the old (Classic) website.

[infotimbo]

Yes. Based on your post I agree that Betonline 2FA is completely useless.

I just want complete clarity on this and I apologise for repeating what is stated in prior posts. I just really want to nail this as I find it very difficult to believe this to be true.

Therefore - with crystal clarity:

1. You have set up 2FA on the new Betonline site
2. Nevertheless - you are able to log on to the old (Classic) Betonline site using your username and password (No 2FA required and no mention of the fact that you have set up 2FA)
3. You are then able to place bets on the old (Classic) website

yes, this is all correct. I have 2FA activated, and it requires a code to login to the new site. When I use the classic design (as I usually do), no code is required, and everything (login, betting, payouts) works as normal.

So every scammer who somehow gets hold of login data, could do the same. It takes one click to get around their 2FA.

[SportsBettor74]

yes, this is all correct. I have 2FA activated, and it requires a code to login to the new site. When I use the classic design (as I usually do), no code is required, and everything (login, betting, payouts) works as normal.

So every scammer who somehow gets hold of login data, could do the same. It takes one click to get around their 2FA.

Thank you for confirming. Best regards.

[infotimbo]

yes, this is all correct. I have 2FA activated, and it requires a code to login to the new site. When I use the classic design (as I usually do), no code is required, and everything (login, betting, payouts) works as normal.

took them a while, but this has finally changed. When activated, 2FA is now also required on Betonline's classic page.