Betfair Hacked

[thepressure]

So ive not been logging in much.

I log in this morning to betfair asking me for ID verification etc, and see my balance is 15p, it seems someone must have hacked my account, placed a weird bet yesterday at 710pm, when i didnt have any devices on me and was out running, and now betfair are saying ill get an email explanation?

Does that sound like ive just lost it all?

[jamesedwards]

What was the bet? Value, odds, market etc.

Also, check (and screenshot) your last 10 log-in attempt IPs which can be found here.

https://myaccount.betfair.com/accountde ... ?showAPI=1

[thepressure]

What was the bet? Value, odds, market etc.

Also, check (and screenshot) your last 10 log-in attempt IPs which can be found here.

https://myaccount.betfair.com/accountde ... ?showAPI=1

Just my whole balance on a halftime/fulltime result, not something ive bet a lot, 99% of my bets are on goal markets. I normally use a VPN for security which is annoying as I could say its clearly not me, but historically im guessing my IPs are more varied, it took me a while to realise so ive logged in like 5x today, why my bets werent working then realised balance, then went to the web which was asking for ID etc....

It was a weird Draw/Win, halftime fulltime bet at 1.02.

Im guessing betfair are just gonna say I should have had 2 factor on (silly I know) or something?

[jamesedwards]

What was the bet? Value, odds, market etc.

Also, check (and screenshot) your last 10 log-in attempt IPs which can be found here.

https://myaccount.betfair.com/accountde ... ?showAPI=1

Just my whole balance on a halftime/fulltime result, not something ive bet a lot, 99% of my bets are on goal markets. I normally use a VPN for security which is annoying as I could say its clearly not me, but historically im guessing my IPs are more varied, it took me a while to realise so ive logged in like 5x today, why my bets werent working then realised balance, then went to the web which was asking for ID etc....

It was a weird Draw/Win, halftime fulltime bet at 1.02.

Im guessing betfair are just gonna say I should have had 2 factor on (silly I know) or something?

If the 1.02 bet was at very poor value then it sounds like a hack to me. Somebody putting up an offer then matching it with your balance to steal your money. You'd think Betfair would be able to track and investigate the account that set up the match.

And yes, 2FA is essential for all.

[weemac]

I don't know why 2FA isn't mandatory.

[Minton]

I had some problems a few years ago, with various betting accounts being hacked. I was involved in arbitrage betting at the time, so I had a number of betting accounts set up, and funded. My Betfair account wasn't affected though, as I made sure I set up 2FA on it, either around that time, or just before then.

It wasn't all bad though, as the hacker or hackers on some accounts had placed bets on some accounts, and they had actually won fairly reasonable amounts as well, on some of them!

So, overall I actually made a profit from being hacked!

I actually logged in to one account, to find a very good balance on it, but the hacker was on a chat session at the time, trying to withdraw the money at the time, by adding another card to my account. I alerted the chat assistant, who then blocked the withdrawal, but by this time, the hacker had disappeared from the chat session anyway.

The two accounts, which had most, if not all, of their funds used up on them, didn't have much on them before then anyway, but I thought I would let the bookmakers know that there had been a problem. Only to receive very little, if any, sympathy whatsoever from them.

One bookmaker just about accused me of using the funds myself, even though I've very rarely, if ever, played games on any of the accounts, and that was where the funds had been mainly used by the hacker or hackers. The other bookmaker, just suspended my account, and I had to reopen another account with them again later on.

So, hopefully Betfair will be able to sort out your account, by restoring your balance, but they might just advise you to set up extra security on your account, or they could even suspend your account while they investigate the issue.

[thepressure]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

[jamesedwards]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

Good news. A reminder for everyone who had not, to set up 2FA.

Would be interesting to know the rough amount refunded. Was it less than £1000?

[Minton]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

That's very good news, Betfair seem to be fairly good as regards issuing refunds. I've also found Matchbook to be reasonable as well.

Some traditional bookmakers might have dragged out the issue at best, and forced you to go through third party mediation, etc.

[jamesedwards]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

That's very good news, Betfair, and indeed some other exchanges, seem to be better as regards issuing refunds, than some traditional bookmakers.

Some bookmakers might have dragged out the issue at best, and forced you to go through third party tribunals, etc.

Perhaps Betfair are more often able to recover the money. They must be able to track the flow of money and perhaps block the perpetrator from withdrawing their ill-gotten gains?

[thepressure]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

Good news. A reminder for everyone who had not, to set up 2FA.

Would be interesting to know the rough amount refunded. Was it less than £1000?

Yeah so 2FA is mandatory

It was £960. They must have easily been able to see who took the bet on some small UAE game on a more niche market Draw/Win halftime result, and probs blocked that person withdrawing.

[Naffman]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

Good news. A reminder for everyone who had not, to set up 2FA.

Would be interesting to know the rough amount refunded. Was it less than £1000?

Yeah so 2FA is mandatory

It was £960. They must have easily been able to see who took the bet on some small UAE game on a more niche market Draw/Win halftime result, and probs blocked that person withdrawing.

You can usually withdraw £1k or less and have it in your bank account instantly so the hacker has probably got the lot.

[Minton]

So....theyve said it was unauthorzied access, and the money has been lost, and theyre not liable....heart sank

Then in the next entance give me a full refund as a good will gesture, and we're not talking about £100 here. so im back in, setup 2fa, changed password, and actually with drawing more money as dont need full roll on here

wow rollercoaster

That's very good news, Betfair, and indeed some other exchanges, seem to be better as regards issuing refunds, than some traditional bookmakers.

Some bookmakers might have dragged out the issue at best, and forced you to go through third party tribunals, etc.

Perhaps Betfair are more often able to recover the money. They must be able to track the flow of money and perhaps block the perpetrator from withdrawing their ill-gotten gains?

Supposedly, it's actually easier for a traditional bookmaker to keep hold of any hacked funds, as due to the nature of exchanges, such as being able to back and also lay, a hacker can then obtain funds after gaining access to someone else's account, by placing unlikely back or lay bets on this account, and then backing or laying the same bet, on their own account.

They could then withdraw these funds very quickly, and easily afterwards, even before anyone is even aware that they've hacked an account.

They could still use this technique on a hacked bookmaker's account, but this would depend on the bets they place, as if they placed gaming bets, for instance, they wouldn't be able to lay them using their own exchange account.

So, bookmakers should actually be more sympathetic towards people with hacked accounts, but a lot of the time that isn't the case.