congrats!

So.... what was in the logs?

UPDATE UPDATE - THE IP LOG

The IP log covers the two months when I last accessed my account, and then discovered the theft. It shows the following information: my IP address is dynamically allocated but every IP entry shows an address provided by my ISP and located within a few miles of my home address. Except on two dates.

The date on which a min deposit was made into my account shows my account was accessed several times from a static IP address approximately 300 miles from my home address. On the date when my bankroll was stolen, a static IP address from another location approximately 400 miles from my home address, accessed my account once.

I am having to learn as I go here, and I have interpreted the IP log as best I can. That said, even as a complete beginner I think I have interpreted this information rather better than 888 have.

On the 31/12/14 888 sent an email to me in which stated “We would suggest that you speak to anyone in you household that may have accessed your computer regarding the situation”. On the 04/01/15 their subsequent email stated, “Your account has been accessed by someone who knows your password and username, the logins are made from the same machine and IP address”.

I have emailed 888 asking for an explanation of their statements, and particularly how they came to these conclusions, being that these conclusions do not seem to be supported by the IP log.

So incompetent from the 888 support if they didn't find this out them self.... It is supposed to be their effin job !!! How hard can your job be ??? What a lousy support they have.

OMG.. I mean what poker player deposits $10 on top of their $350 bankroll?? Must have
needed that extra buyin to feel comfortable taking a shot at 10nl.....

Even Stars are dropping the ball these days and letting "hackers" take over accounts who have deposited and cashed out.

It's not that these guys have gotten better at what they are doing it's the staff at poker sites just aren't trained anymore or don't give a ****. It would be interesting to see the times that the cashouts were requested (not processed). If it was the early hours then probably the guy reviewing the cashout just clicked the "okay" button and cleared it for processing. It's not his/her money and they don't give a ****. Even the once mighty Stars seems to have shifted somewhat since changing ownership and cares a lot less about their customers. I don't think I've ever heard a glowing review of 888 since it changed it's name from Pacific Poker.

Some sites even allow automatic withdrawals based on some ****ty logic such as age of account and size of withdrawal if no credit card was used. Yeah, maybe they also check the IP and are happy that it was still within the UK.

Bottom line here is the poker sites' bottom line. They just don't make enough money anymore to justify the staff they once had so it could be auto withdrawals or just one guy having to plod through 250 cashouts per shift and he just couldn't be bothered giving them the full security review.

888 are definitely at fault for allowing a cashout from a new machine and IP especially after a new deposit method because this is just part of basic security reviewing procedures and missing the recently changed email is just terrible.

All sounds very similar to the Stars hack by a Polish IP on another guy from the UK (can't remember the thread but should be easy to find). In that thread two other guys also mentioned the same thing happening to their Stars accounts and they were also from the UK.

888 replied to my email (see post 103). They had originally claimed "The log ins are from the same machine and IP address". Now that the IP log contradicts this, they have said "We have reviewed the correspondence previously mentioned, and we infer that what was meant in previous emails is that we see no variance within the IP address outside of the norm."

So despite the IP log showing that the log ins differed from my usual geographical area, 888 deem this fine. Which is fair enough I suppose. But taken with the change in email address, the min deposit from a new payment method, the subsequent withdrawal ... oh well ... I'm sure they are too busy at 888 towers to keep an eye on everything.

Ultimately, 888 fall back on their mantra, which is: the thief used my user name and password, therefore I failed to keep these safe, therefore it's not their fault.

888's latest drip feed of information included the claim that the Skrill account used to empty my bankroll was in my name and address. This may seem obvious, but as I do not have a Skrill account I was unaware what information was needed to operate one. I perviously thought Skrill was a no-questions-asked method of moving money for dodgy people (I don't mean to cast aspertions Skrill ... sorry!).

Anyway, I first phoned Skrill on 11th Feb when all I had was the thief's email address. Skrill looked at the account and confirmed it existed but could not disclose any info due to confidentiality.

When I found out the account was in my name and address, I phoned Skrill again (on 7th march). Skrill confirmed that the account was in my name, but the date of birth was not mine, They would not confrim the address or any other info. They did say that they had taken some action after my first phone call. I asked if they had closed the account. They would not tell me what action they had taken, but they made it clear that, after my first call "no further withdrawals could be made from the 888 account".

This is still unresolved?

Sent from my SM-T210 using 2+2 Forums

Yes, this is unresolved. I am giving up. The best I can do is learn a lesson from this, and never keep more that a few buy-ins in any poker account. I will manage my bankroll 'on paper'.

Thanks to everyone for their concern and helpful suggestions.

I feel bad for ya man, im moving to ipoker from 888 now because of this.

Could the best way to protect accounts being going back in time by only allowing withdrawals by check?

It creates a paper trail, gives time to cancel the check once the true account holder notices any problem of any kind, and avoids other security issues.

Certainly if that there were boxes that said "No player to player transfers" and "Only allow withdrawals by check" I would check them.

It is definitely not the best way to protect accounts, but its an option that sites could add easily enough. It wont stop accounts being accessed and funds being chip dumped (or just being joyrided), even if you were to say that the WHOLE site would only allow check/cheque withdrawals - I also wonder what that would do the player pool, making everyone wait at least a week (probably 2-4 weeks generally) to get their funds

When I said "best" I meant the easier/least expensive way for sites to make an immediate change to prevent many of these issues. As for chip dumping, sure, that could happen but in that case the money could be followed and with a check that could be cancelled (and a B&M address traced) there is more time for the legitimate account owner to say "hold up I was held up!" and have the money returned to their account and prosecutions to occur.

As for making people wait a week to get a check and then maybe a week until it clears, that should not affect the player pool as deposits could still be done somewhat instantly by other methods as they are now. Certainly, it should be an option that sites give you to take protection somewhat into your own hands in exchange for less convenience.

gotcha and agreed

I meant that some players would not play on a site that only offers this type of withdrawal as it will take too long for them to get their funds - meaning it would affect the player pool

Agreed. Both FTP and Stars can do this currently, I am unsure about other sites

From my experience in the industry I would encourage any person who has an unresolved complaint with any operator to contact their regulator. These regulators do investigate queries with operators on a daily basis and the site are accountable to show the regulator details of the investigation.

You need to contact the Gibraltar Gambling Commission for 888 ...

The form is available at the Government of Gibraltar website
http://www.gibraltar.gov.gi/remotegambling
It should be completed electronically and sent to:
gccomplaints@gibraltar.gov.gi

Thanks Ponyless, I will check out those links.

was gonna deposit on 888 cuz i heard its soft. now i'm definitely not going too.

sorry for your troubles op. i hope it works out for you.

i dont see where is the poker room fault in this case? everybody knows that to make a withdrawall on 888 the process time is almost 4 fkig days ! when it was your last log in on 888 before your account was hacked? for this case is for shure that people wich you are interract on skype , mess etc to be the person who tooked the money/ someone who knewed that you will have a longer period without log in into your poker room.

is quite a bit strange becouse when you make a withdrawal the first money deposit saying ion your case paypal will move into that account and after that the rest of it will go to the second account deposit.

everything is strange in your case

answer me to those:

where are you from?
when it was your last time log in ?
do you use often skype or other forms of comm. and did you told about someone else that you will not be able to log in for a period on 888?
did you received the first money deposits on your paypal?

1.do not subestimate your nephew age 0 at 15 yo are smarter than many over 30 y o.
2. also maybe the wi fi connection could be hacked very easy . i know a case , same scenario but that happened on skrill

BE AWARE

I am bizi as known as bizipokerway on 888

Today someone had stolen all my bankroll on 888.

I have played yesterday night and then go to sleep when i reopened account today at 3-4 p.m. there was only 0,66$ there, points in amount of 1403$ was converted and stolen also.

All my other poker room accounts, emails and accounts in payment systems are SAFE. So i highly recommend to all of you to change your passwords on 888 because it seems that someone get acces ONLY to my 888 account.


Good luck guys and dont forget to change your passwords!

And where is your money gone? Cash outs take 3 and more days. And in case someone chip dumped it to another player it should be pretty easy to track him.

So how much was stolen ? How do you know your other accounts are safe ?

It was not cashed outed or transfered.
So the only way is chipdump. I know that its pretty easy but it seams 888 dont give a F about that.

7221$ + 1403$ redeemed points

I mean MINE other poker accounts such as pokerstars.