I am brand new to two plus two. I am a member on "the other site" but wanted to share my story. I am going to copy and paste and then add to it...........

People are always skeptical so I will post a detailed timeline and history of events so you can see for yourself about the shenanigans that took place. I am posting this as a public service announcement for those with accounts on ACR. I hope by bringing this matter to light that it may put pressure on ACR to do a thorough and complete investigation or at least make the community aware of a horrible situation from a sketchy site....until they do the right thing.

A little background....I played for years on Stars for side income but have scaled back considerably (obv) since Black Friday. I started to dabble on Bovada and ACR recently.

I load approximately $2k onto ACR a couple months ago (primarily for the Winning Millions disaster that was to come- coincidentally I had a top 40 stack blah blah blah)

I run my account up to $9900 by 12/14 via tourneys and cash games by end of the millions tourney

I request check cashout on evening of 12/14 for $2975. ACR requested documents ( I had to submit 6 times but they finally "received all info")

As a concession due to numerous support issues and from the Millions tourney fiasco, ACR agreed to process a wire transaction. I decided to withdraw $7k via wire in lieu of the check.

12/16 Account is fully verified by 10am by ACR. Everything is good to go.

Here is where it gets interesting:

12/16
1pm I speak to Adriana who tells me the wire is approved and she will call me back to get the bank details. She said she needed to see what info was needed on their side.
No word from Adriana and no email during business hours
I send email that afternoon/evening inquiring.

12/17

10am I receive an email from True Poker requesting certain banking info (as expected). It went to my junk email. I was in meetings all day. I did respond to the email that I would prefer to call in via phone. I was curious why it came from True and was expecting a phone call but it did say the wire had been approved as Adriana had conveyed. I call into ACR to provide info via phone since it was sensitive information.

7pm Rico confirms the True email is their security layer and informs me to send instructions via email. He confirms my account balance is approximately $10,500. It seems like a hundred too high but no biggie. I did get credit for $340 in tournies from the warmup as well so it was very close if not correct.

7:30pm I send wire instructions as requested for $7k

7:35pm I log into my account and I see $281

My first thought is that they processed both the $2975 check and $7k wire. That would be almost exactly right. I call ACR back immed and Rico said the account is now showing $281 and that no payouts were processed. So where did my $10k go in 10 minutes???

Keep in mind I have not logged into ACR or played a hand since Sunday until just then.

Rico says his mgmt team will do an investigation but that the 10k was lost playing 25-50 PLO between 3am and 4am on 12/17. What???

12/18. I email Adriana asking to check IP addresses, accounts, players involved, etc.

I get an email back in 10 minutes saying IP addresses matched to my normal address. This is 100% BS. They didn't check anything. No one has access to my accounts. I have kids under 6 and a wife at my house. No one is up at 4am much less playing online poker. So, if it were my IP address they would be either in my house or driveway.

I have begged for a through investigation a screenshot showing the IP addresses b/c I know they made it up. I always play from home and know my IP address. I asked for a screenshot which I know they can get. Surely, their calls are recorded. How can a rep confirm my 10k balance and then 30 secs later tell me he was wrong. ACR said they showed no evidence of chip dumping, etc. Really, they discovered that in 10 minutes? This looks like a complete inside job or chip dumping and I am trying to get to the bottom of it. If their is an ACR rep or something I haven't thought of please let me know. I have not posted on a forum in quite sometime but am shocked at the treatment.

I was told that was impossible to hack my account and they are sorry for the inconvenience. No one has even called me back. "Supervisors were in meetings"

Really?

After getting told the IP Address was an exact match, I finally received a screenshot of the IP adresses from ACR logins. It was "a match" to a login earlier that day. It was never used before nor since. Looks they got into my account and went for the kill at 4 am when no one was looking. So, it is not a match at all. I live and work in Austin, TX

Here is the kicker:

Geolocation data from IP2Location (Product: DB4 updated on 11/30/2014)
IP Address Country Region City ISP
12.1.182.22 United States Iowa Urbandale Structural Components Services
Google Map for URBANDALE, IOWA, UNITED STATES (New window)


I am in Austin,TX. Every login prior and since has been from Austin,TX. I dont even know where Urbandale, Iowa is. I have a badge that I swipe in my office daily. I can prove my whereabouts.

Surely, this is enough. They have also confirmed via email that my balance was quoted as $10,500 15 hours after said funds were lost. something is not right.

Is there an ACR rep on the site? Any chance I could file a police report without getting in trouble?

*

Edit/MH: WPN CEO's response:

Who is Rico? You referenced him but is he a rep with security? Accounting?

This makes no sense on ACR's part. The guy said he would do an investigation (future tense) but already knew the money was lost via 25-50 PLO. Do they even have hand histories for your account during the time frame in question?

Anyway, good luck... this sucks, OP. I hope it gets resolved soon.

sorry Rudy

Did they give you that city or did you look it up yourself? I'm running that address to various locators and getting a range of results, most of them in Texas. Urbandale, Iowa is one of the results, but I'm also getting Middletown, N.J., plus a few locations in Dallas (namely AT&T Services).

And yes, I know Dallas isn't all that close to Austin, but when I run an IP location search for the very computer on which I'm typing this post, I get Truckee, Calif. — about two hours to the east of me. (The others are correctly putting me at the University of California, Davis.)

Edit: can someone confirm that 12.x.x.x addresses are standard for AT&T subscribers?

Rudy is his name and he is a general customer service rep.

I essentially copied and pasted from Pocketfives to provide full updates.

http://www.pocketfives.com/f10016/sc...stolen-698949/

I looked it up myself, fwiw.

It's pretty rare that we get confirmation of an account being hacked through the site itself, regardless of the network. In the end, a lot of the time it's discovered that the account was compromised in some fashion on the player's end, or there are no conclusive results either way.

If I were you, I'd be checking everything thoroughly on my own end - checking for virus, trojan, etc., considering any suspicious activities recently (odd playing experiences, random Skype contacts, anyone you've discussed poker with, etc.). If it happened on your end, you want to be sure you aren't susceptible to this happening again.

Shady site for sure. Good luck.

I really do not want to start a public show here but we have seen the other sites post earlier in the day and i know you have been dealing with the security manager. Please dont start posting these accusations when you and us know the full story behind it. If you wish to continue to try and tarnish the WPN name then we will be happy to release the full story.

ATT owns the whole 12.x.x.x netblock. The address in that range has been reassigned to one of their customers. Structural Components Services. http://whois.arin.net/rest/org/SCS-47.html

There is some contact info for the owner of that range. http://whois.arin.net/rest/poc/DW51-ARIN.html Also their contact page on their website http://www.scstruss.com/contact.htm appears their address has changed.

It is possible that the netblock was reassigned to another customer and no longer owned by SCS but it is stilled owned by ATT. Can probably get updated information from ATT directly.

Yes, please. Unless the accusation is removed, you're going to want to give your side.

Some more clarification.

Just saw the logs you posted on P5s. The 12.12.139.66 belongs to Marriot and has been associated with Austin, TX. Since the addresses are so close it is possible that Marriot needed more addresses and SCS no longer needed them so ATT gave them to Marriot since both are owned by ATT. Double check with ATT for the owner. IP Geolocation is not reliable.

Clearly as im posting in this thread shows that i dont want to publicly show our findings and a player but should be clear enough for players to see that we are not hiding from this.

If needed we will post everything that we have found but for now we can leave it as it is.

Kind of, but you didn't specifically deny anything he said or say anything positively.

Since when can you do wires to us players?

I just closed my account, changed debit card numbers and so on. Not ever dealing with un-regulated poker sites again. This seemed too good to be true but with all the weird "lag" and the 1 mill not going even close to as planned and hearing random stories like this I would rather be much safer than sorry.

I am however very curious to hear what is going on and think the public deserves to know, otherwise more people are just going to leave. It is not worth it at all to risk losing $$ again.

Did a little more digging and I"m not sure that SCS is still an ATT customer. They're using web and mail hosting from a different provider and they don't seem to be at the same address as in the arin record I posted earlier.

My guess is still that the block was reassigned to Marriot but you should be able to confirm who owns that block. I think emailing abuse@att.net telling them you discovered someone logged into one of your financial accounts from the IP addresses (addresses here) which are owned by ATT and you'd like to find out what customer those addresses were reassigned to to continue your investigation and that you know that some appear to be owned by Marriot but want confirmation.

Then you can try to follow up with Marriot and see if they can help you out. The IP addresses can tell them which location the access came from. If they don't have public wifi then the access is probably from a guest or employee and they can hopefully figure out who the person was given ip addresses and times. Don't know if they will freely give out that information to you without having law enforcement involved. Never done this. If it was me, I'd at last try to contact them to see if they can give any information or can tell you what you need to do to get that information.

If you happen to know of someone that was staying at a marriot, most likely in Austin, at that time.. you might want to take them off your christmas card list for starters until you find out more information.

+1, withdrew all my funds. Rather play live and knowing I will receive my money that day with no problems.

Yes, let's discuss the whole story...

You are 100% correct that I talked to the Security Manager. It went nowhere. Some of his comments are laughable and I will post them and let the masses decide. You act as if there is some great truth that I am hiding.

I have stated nothing but facts. I have emails that document being lied to (re matching IP addresses) when there is no match. I have an email confirming my account balance was given incorrectly 15 hours after "funds were lost". Tell me which part is untrue and I will post the email from ACR.

There is a security manager who had someone review the logs and tell me the other player (aka "me")had no idea what they were doing. He made the case for chip dumping without realizing it. Then he tells me it was the first thing they looked at and there is no evidence to support. Well, which one is it?

Please stop me if I have fabricated any element of this? The only thing we didn't do was agree on a resolution. He told me ACR was not responsible. And that was the end of it. I no they are protected from liability in their terms and conditions but they break them on a daily basis. Ask me how and I will tell you.

He also said the security was rock solid and then I challenged him on recent attacks and CEO stmts to which he said "that was different". When pressed why, he told me he wasn't technical enough. This is the head of security. I have no reason to make this up.

If I have misspoken about anything in the post I will publicly apologize or clarify. I have been sent a screenshot of IP's. This is unique from all others.

I am sorry I have not received resolution and am upset. It is 10k. I am the first person who want ACR to succeed. I hate the randomness of Bovada. I started playing here 2 months ago. I had a stellar rep on full tilt and stars. WPN could have handled this differently (and still can). That is all I asked for.

I couldn't even get a phone call returned for 24 hours....it is a shame

I called to try and cancel and the first question was "Why?", followed by oh well i can't do that. Not a sorry to hear about all this ****ty stuff or anything. Had to do it via email, everything had a real sketch feeling to it.

hmmm, i think Winning_TD needs to expand on his earlier posts, OP seems to be sticking to his story.

Don't hold your breath on this one. I highly doubt we see the "truth" lol.

Oooooooooooooo...

ACR is in trouble...

I would also like the whole story, though it is noteworthy that some of these comments are from new posters and maybe 1-2 people.

Is this the kind of thing the mods want to say if it's all the same IP address?

Obviously, that would change how reliable some of this is.