Parimatch Casino BR - Player’s account has been hacked.

Dear Guru!

I have a serious problem with Parimatch Casino and I need your help to resolve it.

To my great regret and surprise, my account was hacked, and $ 600 was withdrawn from my account to the bitcoin wallet.

I was able to see the lack of funds only on August 3, because I could not enter my account due to its blocking by the casino due to the fact that the wrong password was entered. Although I entered the correct one and did not even imagine that I was among the victims of hackers who hacked the casino system.

I did not contact the casino with a password recovery request on August 01 at 11:47 pm.

Also, I have never withdrawn money to a bitcoin wallet and do not have it at all!

In confirmation of the withdrawal of my funds by fraudsters, I am sending you an article posted in the public domain. A transfer was made to the Bitcoin address indicated in the article from the address to which my $ 600 went, which indicates a criminal scheme. Just like in the article, I had letters in the mail about password recovery, which I didn’t repeat.

I believe that the casino has not taken proper measures to safeguard my funds.

And I should not be held liable, let alone incur losses due to the fault of the casino!

At the very least, casinos should have alerted:

request for password recovery;

change the method of deposit / withdrawal of funds;

minimum deposit and large withdrawal.

And, I want to note, these actions were carried out within a couple of hours! Where did the casino security service look, why did they not request personal information and documents for identification? If the casino used at least minimal protection methods, then no loss of funds from the account would have occurred! The scammers would not have been able to provide my personal documents.

I beg you to help me get my $ 600 back. For me, this is a significant amount, which I do not want to lose due to a casino oversight.

(https://escorenews.com/ru/dota-2/news/23851-chel-ty-nastolko-loh-zloumyshlennik-popytalsya-ukrast-akkaunt-sh4dowehhh-na-parimatch)

Dear DabySki ,

Thank you very much for submitting your complaint through our website. I’m very sorry to hear about your negative experience.

Have you tried discussing this issue with the casino directly? Could you forward any relevant communication between you and the casino to my email (kristina.s@casino.guru)? Hopefully, we will be able to help you with this case as soon as possible. Thank you very much in advance for your reply.

Best regards,

Kristina

Good afternoon! I have applied to the casino several times, but they refuse to refund the stolen money. Screenshots of the correspondence have been sent to the email address you provided.

I hope that by joint efforts we will resolve the situation.

Thank you very much DabySki for your reply. I will now transfer your complaint to my colleague Peter who will be at your assistance. I wish you the best of luck and hope to see your problem being resolved to your satisfaction soon.

Hello!

Dear customer, we're very sad to hear that. But please pay your attention to our T&C, clause #8. Customers accept to take responsibility for keeping their password and account data secret. Parimatch guarantees that the data concerning the customers is kept secret from our side. Parimatch takes no responsibility if the information is disclosed to a third party or by the customer himself. Any operations confirmed with the logging in (typing in the account number and holder's password) are valid.

Let's think. You have only the email attached to your Parimatch account (no phone number). And you (or someone else) can restore the password only via this proper email address. We can't watch your email because it's only yours. You should watch it by yourself. And if the password has been changed via your email, then you take responsibility for it and not Parimatch.

So we can't credit you with this amount, it's lost or maybe just withdrawn by you because it's such a typical story when people try to cheat betting companies by telling that they've been hacked when it's just a regular valid withdrawal.

Hi DabySki and Parimatch Casino team,

I'm taking over the complaint. Let me sum up the situation: DabySki received a recovery email, then some money was deposited by Bitcoin to her account and $600 was withdrawn by the same payment method, correct?

Dear DabySki,

If the casino's security system works properly, I can't imagine how anyone else could have accessed your casino account unless they had access to your email.

On the other hand on the ESCORE NEWS website there is an article about a hacker attack regarding Parimatch.

Dear Parimatch Casino team,

Could you please tell us more about the attack? Is there a possible connection between these two cases?

Our security system always works properly. We don't have data leaks.

Regarding the post on Escorenews, we can only say "So what?". Parimatch is a very popular mainstream company with a strong big name. Many people try to slander us nowadays. We maintain a clean reputation and ignore these minor attacks. Everyone can text a post like this one. Maybe this guy had a weak password that contained his name, nickname or birthdate. It's not a big deal for a professional scammer to fit the password if one knows the victim's personal data.

Yes, I received an email with a request for password recovery. My mail was not hacked, I did not send this letter. And, I did not pass my password data to anyone. The casino did this without asking for any personal information. If even minimal measures were taken, the attackers would not have been able to take over my money.

Also, in confirmation of my position, I am sending you 2 screenshots (to the email you specified earlier). On the first one, you can see the money transfers to the bitcoin address that was used to withdraw funds from other "deceived" casino customers. The second is the withdrawal of my funds. The absolute coincidence of the bitcoin address in the screenshot with the address indicated in the news should not be regarded as an accident!

The behavior of the casino is very suspicious to me. By providing the scammers with my login details and letting the scammers withdraw my $ 600, the casino not only shifts responsibility to me, but also blames me!

600 $ disappeared from my account, and the casino says "so what?"

A strange position for a casino, isn't it?

Dear Parimatch Casino team,

I don't consider "So what?" to be an appropriate answer when it comes to the security of players' funds.  

Dear DabySki,

I'm afraid you were a victim of a phishing attack and there is not much we can do about it. Could you please forward the aforementioned recovery email to my email address: peter.m@casino.guru?

Good evening! I sent a screen of a password request letter to the mail you specified.

Thank you for your willingness to help.

Dear DabySki,

Based on the screenshot you sent, the email came from "noreply@parimatch.com". Did you previously receive any other emails from the casino from this email address or did the casino use a different one?

Good day! 4 letters were received from this email address:

About successful registration;

Welcome letter from Parimatch Casino;

Request for password recovery (I sent you a screen of this letter earlier) - a request for scammers;

Restoring access (my attempt to reset the password to gain access to the account).

I did not receive any more letters.

Hi DabySki,

Thanks for your reply. As unbelievable as it may seem, the attackers most probably used the "Email spoofing method" and sent an email to you in the name of the casino. You can read more about this in the following article: https://www.makeuseof.com/tag/scammers-spoof-email-address/. It is hard to believe but it is real (personal experience). I'm afraid there's nothing we can do in this case. It is very difficult for the casino to protect itself and the players from such attacks. I found some tips that may help you avoid such situations in the future:

• Be cautious about all communications you receive. If it appears to be a phishing communication, do not respond.
• Do not click on any links listed in the email message, and do not open any attachments contained in a suspicious email.
• Do not enter personal information in a pop-up screen. Legitimate companies, agencies, and organizations don't ask for personal information via pop-up screens.
• Install a phishing filter on your email application and also on your web browser. These filters will not keep out all phishing messages, but they will reduce the number of phishing attempts.

I wish I could be of more help.

Best regards,

Peter