WARNING - Betfair account hacked / fraud

[jimrobo]

this is very disconcerting. Especially as it happened to Sam. All of a sudden it got real.

I am definately dropping my balance down after cheltenham

[spreadbetting]

I think if you have decent security measures in place (McAfee, Norton....) then this wouldnt happen?

Most of the people I know who've been hacked are generally pro betfair players they're well aware of security issue and have security in place, strong passwords etc. maybe it'd be understandable if they were all logging in and out in internet cafes but they're not.

I'd be inclined to agree with Boing it does seem to be a reguar occurence at betfair, be interesting to see how many attempts they took to get into accounts or if the logins go straight in.

[superfrank]

I think if you have decent security measures in place (McAfee, Norton....) then this wouldnt happen?

not necessarily true... the security issue could easily be at Betfair's end, or there could be an employee (or ex-employee) at BF or the data centre selling client details. that has happened at plenty of other companies... that's why it's best to have a different password for every online account you have.

[to75ne]

I think if you have decent security measures in place (McAfee, Norton....) then this wouldnt happen?

i wish that was so. i did have (still do), and it happened. i have little doubt that sam wilson and hgodden had to (i would be surprised if they did not).

over the years that i have used betfair, im not that surprised they appear to have problems with security, just another symptom of a badly maintained website and a sod you attitude to their customers.

[Euler]

I think if you have decent security measures in place (McAfee, Norton....) then this wouldnt happen?

I've taken a deeper interest and investigated many of these and there is no pattern. Several of the people affected had very good security and other less so, so the only commonality is Betfair. I think it's a serious enough issue that we should demand action from Betfair. I've seen a few cases that haven't been posted here that are very worrying.

In the meantime I suggest you take the strongest measure possible to protect your account.

I suggest you keep your account balance to a minimum or at least use some of the other tactics out there. Tactics I have seen is to shuffle your money into the Aussie wallet which at least stops betting on most sports. It has also been suggested to park your money on an outside event, say odds of 1000 for Man City to win the premiership, but there is a little more risk with that.

[superfrank]

but if someone has your password then surely they can shift the money back into the main a/c or cancel any bets?

[hgodden]

I think it would be helpful to have a 'closed' forum for things like this where we can discuss security strategies... after all the fraudsters could be what we're saying and work around some suggestions

[jimrobo]

something I stumbled on by accident and I've been doing for a while is this. withdraw all your balance by bank transfer and then deposit it back into your account from your debit card. Now they won't let you withdraw anything apart from back onto your card until that balance has been cleared back onto your card. When that reaches zero repeat the whole process again.

Of course that doesn't stop them putting a huge bet for your entire balance should they get your password

[Iron]

Does anything think that the forum itself might pose a security risk?

Let's say that you're a regular poster here, and it's clear from your posts that you're successful. And let's say that your forum username is the same as your Betfair username.

If a hacker could get access to the server on which the forum is hosted, could they not find out what IP address you're connecting from?

And if they have your username and your IP address, are they not halfway to being able to get into your account?

That's not a rhetorical question, btw - I don't know enough about computer networks to say how useful a tool to hackers someone's IP address is in terms of gaining access to their computer and (say) installing a key logger.

Any thoughts?

Jeff

[LeTiss]

That's a very good question, Jeff

Do any of the victims have forum usernames that are very similar to BF account names?

I'm obviously not asking for a response, but it's just a question that you should be asking yourself

[Euler]

I don't believe this is a major factor.

[spreadbetting]

I doubt the hackers need to go to those lengths or target individual accounts, Jeff. Whatever they're doing now seems to be working fine for them, judging by the amount of accounts getting hacked.

All the stuff I've seen suggests they have the username and password before going in , no unsuccessful logins just straight in.

[Iron]

Whatever they're doing now seems to be working fine for them, judging by the amount of accounts getting hacked.

But we don't know what it is they're doing, or how much trouble they're putting themselves to.

Let's say a hacker has a bunch of IP addresses, relating to particular forum IDs. If they see that a particular person has recently posted about a day where they earned a grand, they might think 'This seems as good a starting place as any'.

And even if that person's forum username is different to their Betfair username, I'd have thought that, once a hacker has access to someone's computer, it wouldn't be too hard to find out what their Betfair username is...

Jeff

[to75ne]

jeff,

is there any evidence that they have accessed anyone,s pc?

in my case, i doubt that did but i could not swear on the bible they did not. i believe they are hacking betfair myself, although i have no evidence. betfair would seem to be the common denominator.

my bank accounts, amazon account, paypal accounts etc have never been robbed. i would have thought if they go to the trouble of ripping your betfair id via your ip address, they would also have at a crack at my bank etc.

[Euler]

my bank accounts, amazon account, paypal accounts etc have never been robbed. i would have thought if they go to the trouble of ripping your betfair id via your ip address, they would also have at a crack at my bank etc.

My thoughts exactly, Betfair need to rule themselves out of the equation first. They are the only common denominator so there is seems to a problem there.