Bank..Fraud

[LeTiss]

I've been a little slack lately looking at my Betfair Security tab

Yesterday, there is a rogue IP address logon
It's one I've never seen before

I've sent an email to Betfair asking for info, let's see if they give a response

[nhughz]

LeTiss i have malwarebytes, firewall, anti-virus and now Rapport too. Nothing is detected and none of my other accounts have been effected, making key logging etc unlikely? I don't move money between wallets and only use Betfair sports.

[giulio2010]

How can you separate them please?
I have never used the poker or casino sites before and have no interest in them. I wasn't aware they could be separated. The money in my account was transfered to the poker site by the fraudster not myself.

Do you have a poker account? You can ask BETFAIR to block every interaction with poker and keep only the betting username. You must change password often as well and run protection softwares every days. You must change your card as well. Call the Bank ask them to issue a new card with a new card number for you. When you done all this call betfair and ask them to cancel the previuos card. You won`t be able to do it your self because the card will show that you are IN RED so you must call betfair. However wait 1st the results of the investigation but, dont forget to stop the card. This people are capable to take your details and use it for playing poker on other online sites. I will never stop warning people that BF poker is runned by pirates, be very carefull. good luck again..

[nhughz]

Thanks. I did cancel my bank card immediately.

[LeTiss]

I've just had a response from Betfair

The rogue IP logon was by somebody in Ryde (Isle of Wight) - I haven't been to IOW in 8 years!

I've had no money taken & I've had no bank fraud & my security scan shows no problems

This is actually very concerning because like many full-time traders, I have a fair amount of money sat in my account. It makes you nervous when Betfair's security is questionable

[spreadbetting]

Was it a large amount nhughz? No need to put the full figure just a rough idea, just wondering as it always seems to be higher balances targeted which is worrying

It's about time Betfair started taking security on the site more seriously and maybe introduce memorable word type security into the site like banks do. They've even removed the ability to limit logins from other countries ffs so shows how seriously they currently take it.

[mctash]

Le Tiss

Have you tried http://whois.domaintools.com/

Put the rogue ip in there. It will tell you the ISP (it may come as BT as they own most of the hardware) and sometimes has an email address to which you can report abuse. It may be a good idea to report this ip to its provider so they are aware one of their users is trying to hack your BF account.

Tash

[nhughz]

It was a figure in the thousands sadly.

[giulio2010]

I've just had a response from Betfair

The rogue IP logon was by somebody in Ryde (Isle of Wight) - I haven't been to IOW in 8 years!

I've had no money taken & I've had no bank fraud & my security scan shows no problems

This is actually very concerning because like many full-time traders, I have a fair amount of money sat in my account. It makes you nervous when Betfair's security is questionable

The best time for this fraudest to take your money is to play poker when your account is sleeping. If you would like to sleep well call betfair or send them an-mail to block every POKER-INTERACTIONs for 6 months or for LIFE.

[spreadbetting]

The best time for this fraudest to take your money is to play poker when your account is sleeping. If you would like to sleep well call betfair or send them an-mail to block every POKER-INTERACTIONs for 6 months or for LIFE.

You can self exclude via My Account->My Profile settings, I've just done it for all my accounts

[nhughz]

But can you change the settings back yourself too?

[giulio2010]

good work....

[LeTiss]

Just out of interest, is there any chance that people using API's are at risk?

When we are accessing our accounts from an external source, this could be captured somehow?

[Euler]

Just out of interest, is there any chance that people using API's are at risk?

When we are accessing our accounts from an external source, this could be captured somehow?

Betfair have to security test apps to ensure that your username and password are not at risk. We are not allowed to store your password in any way that could expose it to anybody. It is passed to Betfair to log in but is never stored. So that should rule out legitimate well known security tested API software.

[spreadbetting]

But can you change the settings back yourself too?

It's a minimum exclude of 6 months and can only be lifted by writing to betfair after those 6 months have expired