taxes?

Had my Pokerstars account hacked last night....e-mail was changed to some .ru and language changed to Russian. Same crap from Stars recovering part of my balance after the hacker chip dumped. Password was not the same as any other site and they also hacked my e-mail (very different passwords obviously) so yeah.....keylogger I guess. Can anyone explain why Stars can only partially return the balance? I mean if they can get half back why not the other half.....thanks and **** hackers.

Stars 2 hours after I report my account hacked: "We've detected a suspicious login to your account" .......genius. Also (assuming the login attempt came from Russia) and I logged in about 3 hours before my e-mail was changed to some .ru crap I find it kind of ridiculous that the account was not frozen earlier unless pokerstars are crediting me with teleport/time travel as I live over 2000km from Russia .

Stars "solution": we will send you a pin to your email from now on.....

Not blaming stars, obviously if someone is skilled enough to hack two passwords or slip a keylogger past todays terrible antivirus software they deserve my $100

I feel the same way about Pokerstars. When I got hacked the location was a dead giveaway that it wasn't me. The real issue I have is their total lack of accountability. The reason I say this is that it IS their responsibility to protect
both their players and players money. Can't their state-of-the-art, industry leading software tell that the login was physically impossible due to the distance and time?

It is against their rules for players to use others accounts in the terms and conditions. Shouldn't that freeze the account immediately since it couldn't possibly be me? (for other players protection as much as my own)

Chip dumping is also against their rules in the terms and conditions. Don't they monitor that?

I am also really wondering why they were able to get back a small amount of what was stolen but I have yet to get an answer...

I'm just venting because I'm pissed with stars over the whole way these situations are handled. Unfortunately there are no other options to play at with the soft games and volume of players otherwise i would pack up and leave stars...

I feel your frustration, if they aren't accountable for the security and monitoring of their site who is! And they should certainly implement some sort of freeze out time like even 24 hours when you login from another country or even a distance of greater than a few hundred miles I think, nobody can't survive going one day without playing poker and it would save a LOT of accounts being emptied.

If you have any significant amount of money on Stars you should have the RSA key

Agreed, quite demotivating for a micro stakes player like me trying to slowly build up a bankroll though.

I have no specific info about your situation, but it is likely that some of your money was lost to legitimate players. Confiscating and returning that money would not be fair to those other legitimate players.

For example, if you lost $200, hypothetically:
a) -$100 may have been lost to the fraudster.
b) -$40 may have been won from an honest player.
c) -$10 may have been lost to rake.
d) -$130 may have been lost to other honest players.


You seem to be advocating for reversal of (b) and (d), right? Is that fair to those players?

There is no guaranteed way to prove the true location of where an IP address is physically located.


Given that you revealed that your email address was hacked, it seems obvious to me that that is the source of your problems, not the PokerStars system.

Activate the free SMS validation system!

My Pokerstars account was hacked a 3 weeks ago. I had $700 in there and I actually haven't played for months. My password is not the same as other accounts or email and none of my other accounts were hacked. I got an email from Pokerstars that someone logged into my account from a new location so I instantly contacted Pokerstars security (it was minutes after my account was hacked) but they said my money was dumped to one player and already cashed out. I've surprised Pokerstars allowed instant cashout of dumped money and also no way to revert the cashout.

I submitted a complaint with IOM Gambling Supervision Commission (GSC) and I urge whoever else was hacked to do the same.

I haven't been on pokerstars since black Friday happened. But, I just moved to Switzerland for a 2 year stint, and got my account info all updated to be able to play again. After that 2 week ordeal to get verified, found I still had $19 in the account. Played 4 games, lost it, and then a couple days after my account was $0.00 got the same notification of a Hack of my account and a PIN was now put in place. I'm going to add SMS before putting any money back on the site though, just seems the best thing to do to prevent further complications.

Sorry to see this happen to you guy or anyone for that matter. Hopefully in the future both yourself and stars take measures to better protect your accounts and login details

So in your opinion if happens a crime, the victim is fault?
You can defend pokerstars, I think it's a serious site, but you can't talk like this to someone who s got robbed online, especially after he told you he has a new updated computer with an antivirus.

Hawaiistevie, in case you still play on pokerstars after this story, when you collected enough points jusst order yourself a TOKEN and you should be safe.

You can activate SMS Validation for free. Now.

Strictly speaking it's neither the victim's NOR the site's fault. It's the hacker's fault.

But it's the victim that suffers. The site isn't responsible and cannot be made responsible for what the hacker did.

My money were withdrawn illegally.

Poker stars says I have lost my password or my computer has been compromised. This is very unlikely as I have been using only my iphone to log in and play. Poker stars has been hacked. Your money are not save there.

This is somewhat scary. I'm generally very careful with computer security but there's nothing I can do against a data breach.

https://forumserver.twoplustwo.com/s...6&postcount=38

My question is, why on earth do some sites in this day and age still store passwords as plain text?

Lol. More likely you have used the same pw in other places or logged in with your iphone using a public wifi. Why don't you use the sms validation and / or pin?
Stars is doing this? And like I said I'm more surprised people don't use sms to log in. Why make hackers life easy?

Odd that there aren't a stream of people posting about this, then. What's your evidence?

I don't think there's anything especially scary about a brand new account bumping a 2.5 year old thread to say that Stars has been hacked, while providing no evidence.

No idea. What does that have to do with this thread?

[QUOTE=hawaiisteve;53149357] You click the pin numbers and they are always in different positions the numbers so keylogger woudlnt be able to get that. It would have be recording the screen also which is unlikely and you would notice internet/pc usage through the roof.

I was reacting to post #38, where Josem outlined how most cases of login information being compromised were from data breaches. Hence my concern over some sites storing passwords in plaintext. I wasn't specifically referring to Pokerstars or any other poker-related sites.

They shouldn't. In various places, I think that it is literally illegal to do so.
Public Wi-fi shouldn't be a risk vector - every credible website and online service should be using encryption to avoid this risk.
I think many people just don't know about it, or how it works. Really, all poker sites - not just PokerStars - should be making more of this stuff a "default" in 2020, rather than requiring players to discover it in the software.

SMS 2FA is not safe. Check out SIM SWAPS and what's happening. In easy words, SMS 2FA is adding a new vector of attack. Avoid at all cost.

The fock are you talking about? From wiki : This feature is normally used when a customer has lost or had their phone stolen, or is switching service to a new phone. So don't lose your phone and you are fine. Lol to avoiding at all cost. Yeah I'll just stop using it because I might get focked if I lose my phone.

You don't need to lose your phone. Read wiki again.


Not to mention that it has been happening quite often from inside jobs (the ppl working for your provider)

This is terrible advice, and an awful misunderstanding of the risk factors here.

Is SMS 2FA perfect? No, of course not. But given that the vast majority of account hacks reported on here are caused by people having their passwords stolen or shared across multiple sites, SMS 2FA would be a very strong upgrade for most people.

If you've literally got tens of thousands of dollars on your PokerStars account, and you're the likely target of a highly motivated and targeted attack, then your risk profile is different. But for normal people with a few hundred or few thousand dollars in their account? SMS 2FA is outstanding.

There is no password that will help you when the attacker reset your password account using the 2FA SMS auth.

The best advise you can give to ppl in this forum is to use some password manager like keepass and make an unique password for every site of at least 16 characters.

Also if possible, 2FA using google auth, avoid SMS, it is how ppl is getting hacked nowadays.