understood, but it would be really beneficial to see the IP address that compromised your account

what exact dates did this happen on? you can maybe the see $$ transfers on your AIA account

its maybe interesting that there are 7 sites that you can play on from AIA, yet the only 2 mentions are GG Network and IDN from people who are compromised

I do not know what to think now after some more information about hand histories today
AIA support tell me last Tuesday (12th Sept) that the hands are being investigated one by one, and it will take a long time to check them all (it really shouldn’t, but at least they are checking):



They tell me yesterday they still wont send them to me as the investigation is still going on (stupid reason, but ok, at least they are investigating):



I ask IDN directly to send them to me, they respond quickly that I need to contact my agent (AIA):



Now today, Christopher from AIA says that they don’t have the hand histories so he cannot send them to me:

Wtf is this? How can their support teams be telling me completely different things. He also tell me last week that IDN are very slow to respond to him on issues, that it might be his situation, but IDN reply very quickly to me:

I then ask IDN the following, which would appear that AIA has never asked for the hand histories, but not definitely sure:



I do not know what to think at all now. And guy above me was also compromised too, another person

still no login details from Christopher, even though he said he could give me this information many hours ago

Yes the first 3 lines are my account, didn't take a closer look before. I mostly played on GG lately, but I did also play on IDN earlier, so the hacker wasn't the first to use any of the skins. IDN doesn't have any similar feature so I expect AiA will provide that info.

Screen:
https://imgur.com/a/II3wO

Thanks, the times dont seem to match with the first 3 lines, but again, I dont really know what the login details of the image with 11 rows of login data is, if its just IDN or all times that the Singpore was used on all the possible sites you can play on on AIA.

you can see hands on pokercraft too, can you post the big ones and let us know how many hands total it took to lose the $728?

The login details from the previous image are from IDN only so he could just play at different times on different skins.

It took 88 hands to loose it on GG and 802$ were lost to a player alba41 (with a russian flag, not sure that means anything on GG though). The hands are a bit weird, but some people might play that way, I don't think they prove anything.

Did u signup to allinasia via some affiliate ? Pokervip or another ?

I'm a friend of David and I also play on AIA (though my money is safe for now), so I've been following this thread too.

David signed up through my affiliate which works the same way as on western sites - that means I don't handle any of the money and he does all of the deposits and withdrawals with AIA directly.

AIA also offers an agent system though which some sites including PokerVIP use. It means the agent also handles your deposits and withdrawals for you. I don't really like the system, but I signed up through PokerVIP myself and my money has been safe so far.

So David had his account compromised even though his affiliate is different, and my account is safe even though our agent is the same. It doesn't look like it's in any way connected to agents/affiliates.

I agree this all looks quite unprofessional and they should step it up. At the same time, I know a little bit about how some of these sites work, and honestly this is all in line with what I would expect. Not everyone has a huge security team that's prepared to deal with these things like PokerStars. Also things like hand histories usually don't work the way we are used to from the big western sites.

When it comes to AIA saying IDN is slow to respond, but you've seen them respond fast - well, they have their own contacts in the company (probably some tech or business people) and that's probably not the customer support that you've been speaking to.

What I'm trying to say is - You definitely have a right to be angry, but I wouldn't go as far as to think that AIA are making things up or somehow took your money themselves.

There's no definite proof, but it definitely seems more and more like this happened due to a security issue on their side. Let's hope they can investigate this and if it indeed was their fault, compensate everyone.

This is what I got from AIA today. This is absolutty ridiculous. They are now saying that they never had the hand histories, and that IDN only keep them for 2 weeks. wtf is this. They said that they are investigating the hands, meaning that they have them, going through them one by one, now all of a sudden they dont have them?? They lied to me many many times. This site should not be trusted. They have still not given me any log in report. I asked for it so long ago, and lots of times. Maybe they are changing the data on their end?

What a load of horse****. It seems they were delaying you until they could delete the hand histories so you would have no evidence to pursue a refund. I live in Asia and i will not be playing there. Thanks for this thread.

Greetings from All In Asia,

We at All In Asia have gotten a recent complaint regarding a breach of
security in regards to their account being compromised. During this
time, we have investigated the matter and have found it to be that the
account breach was due to the players account having their account
hacked or accessed by another person. We have checked and found that the
unauthorized access of the account was due to not a password change but
via the knowledge of the player's password. This means that a third
party personnel might have had access to the players' account via
knowing their password.

In light with this, we at All In Asia takes this case very seriously and
has stepped up our efforts in ensuring privacy and security of players
are at the utmost importance. With this being said; in our next update
(Early October), we will be improving our security protocol by adding
in:

Security Steps to be Implemented
1. Captcha code
Including a basic anti-bot system that denies any form of Trojan access
to your account.

2. Failed password lock and mailer
Password attempts that fail consecutively will have their accounts
locked and players will be notified via email.

3. Password change notification mailer
Any attempt to change your password from within your account will need
to be acknowledged by email.

4. Withdrawal/Deposit Email
Whenever a request for a withdrawal is made; a mail will be sent to your
registered email.

Requesting for Password Change
Also, it came to our attention and is highlighted that whom might have
access to your password. Your password is encrypted and cannot be viewed
by All In Asia customer service staffs nor at any point in time
accessible by All In Asia management. We do however are able to send you
a password change request to your registered email. All In Asia support
team and system can only give an account a default password only if the
owner request via livechat and on the sole condition that the account
has not performed a deposit. This request is usually performed when
players have signed up with an unauthenticated email.

Agency Password Change
As we have an agency system; where agents are allowed to credit and
debit their respective players with credit, DIRECT UPLINES are also able
to change your password. This is off course for the convenience of the
agent and player. Only agency created accounts have this feature and
accounts created via promotional links and direct signups do not have
this feature. It is imperative that agents and players have a bond of
trust so that this feature might not be abused.

We understand the importance of security and in ensuring players get to
play in a safe and comfortable environment, we also ensure that within
24 hours if a report is filed of an account being compromised, we will
look into the case right away and reply within 24 hours while doing all
the necessary steps to ensure that your account is safe with us.

Thank you for your kind understanding and patience regarding this
matter. If you have any inquiries or output to contribute to us in
making All In Asia a safer and enjoyable place to play, please do not
hesitate to contact us at All In Asia or talk to our account managers.

All In Asia

It clear from the complete lack of any action from All in Asia on the matter that the safest thing for players is for you to shut down and immediately cash out any user that has an intact balance with you. Failing that, all users should immediately withdraw from All in Asia and never use your site again. All master affialites, such as the one that OP used to sign up to All in Asia should immediately drop All in Asia and contact each player that signed up through them to immediately withdraw all their funds from All in Asia, noting that your services are in no way secure

The OP was compromised on All in Asia and had his account drained around the 2nd/3rd September. The OP reported it within 24 hours or so.

All in Asia never requested hand histories from the IDN Network, which would have allowed an investigation by OP and others here to see if the person(s) who received the funds might have been complicate in the account hack. That is a one of many huge failures on All in Asia's part. Another complete joke regarding hand histories is that OP was told to contact his agent (All in Asia) when he requested them directly from IDN. Final egregious issue regarding hand histories is that apparently the IDN Network deletes all hand histories that are older than 2 weeks. Having been in the industry for over 12 years at this point, I have never heard of anything like this. Sites have conveniently lost important hands (UB not having enough iPods back in the day, etc), but actively deleting hands is insane. Storage space for hand histories should be minimal, and that is on top of ultra low prices for all types of HDD/SSD. Buy a 1TB hard disk for about $50, it will last you longer than the IDN Network will operate.

All in Asia clearly never did anything about the IP address that the OP was compromised from, which was from Singapore. It's is clear that All in Asia completely failed on this as numerous other accounts were also hacked from the same IP address days after the OP reported it. Many users also lost funds due to another inability by All in Asia to act at all on a very serious matter.

Full login reports were requested numerous times by OP in emails, skype chats and support chat with a number of representatives from All in Asia. As of the 24th of September, exactly 3 weeks after the OP was compromised, these have yet to be provided. A very simple request was made, provide the full login details, including the date/timestamps and IP addresses that were used to access OP's All in Asia account, IDN Network account and GG Network/Poker account. This should take roughly 10 minutes to make and run a SQL query, if a report like this does not already exist on the backend of All in Asia's site. OP was given some small login report for one site, which might be IDN. This only showed the logins from the 2nd-4th September for OPs account on the presumed IDN activities. All in Asia's head of security Justin insists that OPs account was created on the Singapore IP address, but has not provided any proof of this, despite numerous requests. To me, it's clear that they failed on their initial investigation and only went back so far as when the OPs account was used to play on IDN for the first time, and didn't go back to the 30th August when the OP first created his All in Asia account.

In my opinion, with all the evidence of a lack of caring or proper investigative work, there is someone complicit from one of the sites with all of this. I would call bs on All in Asia staff not being able to access user's passwords. It's clear that multiple lies were told by several parties regarding the "investigation" into the hand histories that were played on IDN. Not shutting down access by an IP address after it being reported is irresponsible. Not providing logs that were requested and promised multiple times shows that All in Asia knows they messed up or that they are involved. I wonder if they are attempting to change the DB to show different sign up IPs for OP (will they need to do it for the other users that were hacked on All in Asia too?).

Cliffs
- All in Asia is not s safe place to have an account
- If you have an All in Asia account and use the same password elsewhere, immediately change those passwords on other sites as someone has access to them if they want
- All players should immediately withdraw from All in Asia
- All affiliates who refer players to All in Asia should immediately stop serving them and contact those players who did sign up to withdraw funds, as they are not safe

Not proofed this at all as on phone, and was painful enough to type it out

Yeah and still i didint get any of full login reports which Justin mention in letter. He said they will send me on monday, now its wednesday and there is none.

pmarrsouth ...

*drops mic*

Hi Guys,

In a similar but slightly different scenario, this is my first week on this network. I logged into GGPoker today (linked via AllInAsia) to find my account completely empty! I didn't panic and logged into my AIA account to find my entire bankroll had been withdrawn back to my AIA account. I contacted support and they insisted that this was standard practice for a Monday something to do with currency checks??? As I say, this is my first week with AIA so I am just confirming with you guys that this happens to you too? I just find it crazy that they can log in to my poker account and move my money around without my knowledge/consent. Let me know guys please.

Thanks in advance

There is probably an automatic process where AIA gets the funds back in the AIA "wallet" from all the poker accounts. Or they manually do it from their backend. Even with all the above, I doubt they are logging in into the presumably hundreds of poker accounts each week to send the funds back to AIA.

Saying that, after seeing all the information in this thread, you are nuts if you continue to keep a balance on AIA or any of the sites through AIA.

Further to my post above, the operators should definitely drop AIA from being an affiliate, but they most likely wont due to "its revenue" etc

Hi,

Thanks for the quick reply. My question wasn't so much about whether they are logging into hundreds of accounts manually, I am sure they have an automated system, but whether any other users of AIA have their funds re-allocated to back to their AIA account weekly, as the customer service rep suggested. As you mention, this is all very suspect. The games are good though as is the rewards/first deposit deal so I will keep an eye on this. I would still like to hear from anyone who can confirm about these weekly withdrawals though. Other than this, I have not had any other issues.

Thanks guys

So I feel I've given PokerVip enough time at this point, the way they are handling this as an affiliate is shameful. I've used the site for many years, always found them to be fair with their deals and at least moderately helpful with support, but this has changed my opinion markedly. At the same time that this poor guy is trying to get his money back, the affiliate is fobbing him off, proclaiming how the same security post that has been placed here by All In Asia support, shows how the site is on top of the matter. To make matters even worse they are signing people up to this site, answering questions in separate forum posts, mentioning how good the deals is etc, on a site they know to not be secure, that has attempted to ignore a scandal, and the affiliate simply does not care.

Below is the PokerVip forum post where xemikas is attempting to make headway.

https://www.pokervip.com/forum/promo...-stolen?page=2

Guys i also put a small BR on AiA recently, here is the transcript i was sent when i found someone had hacked my account and dumped all my funds:

[ ] shocked that there are yet more cases of this happening

the image is too small to read correctly, but presumably your $$ was lost on GGnetwork?

If so, then read the following and post details:


Check HH and post them

certainly the big pots

Click the tab at top of image that should open it in anew window that allows you to use the + magnifier (or right click view image should make it larger also)

Yeah ill do that soon for sure

So i received an email from the CCPokerSite security team (who AllinAsia forwarded the case bc apparently it wasn't their security teams responsibility), anyway seems they weren't convinced by the random IP address login and two table 200/400nl session


Guess the IP address in Stockholm looked like i was on holiday:


So i did some checking on my results using their pokercraft tracker, seems like Chico999 had a good day:


And a few hands that seemed a little bit odd:

somewhat thin turn call + river XR with bottom two vs a 75% river sizing vs my uncapped range on a very dynamic texture:



betcall second pair vs a river raise


followed by checkfolding TP vs a same villain short stacked heads up where all draws missed:


Not sure what else i can do really, except recommend everyone to never play the AiA or any of its skins.

^^^ Looks like that 23dd hand is fine turn call fwiw, river XR still seems a bit thin

That word - I do not think it means what he thinks it means.

Agreed at this point I'm not sure if PokerVip are being deliberately dishonest or are blissfully ignorant, either way one is incompetent, the other deceitful and to congratulate a few forced half measures is beyond belief

At least they claim to still be working on it; hopefully that actually amounts to something.