Player on twitter claims ACR/WPN ignoring him after 11.5K was stolen from his account

[Shizzmoney]

A poker player named Alex Foxen (@WAFoxen) came out on twitter today saying ACR is ignoring him after 11.5K was stolen after account was hacked.

Pretty bad timing for ACR's security, considering ACR must of been fist pumping the Bovada/Ignition news yesterday.

ACR is crap, IMO.

Embedded Tweet

https://twitter.com/twt/status/763419734800994304

Embedded Tweet

https://twitter.com/twt/status/763420307269021696

[SrslySirius]

ACR is claiming that the thief had a copy of his passport, but it does look like he just used basic social engineering to gain access to the account.

Someone with an ACR account try this: Make a new e-mail account, contact ACR support, and give them very basic information like your name, address, phone number, etc. No social, no IDs. Tell them you want to switch e-mail accounts and reset your password. See if they let you.

[Dan Druff]

ACR is claiming that the thief had a copy of his passport, but it does look like he just used basic social engineering to gain access to the account.

Someone with an ACR account try this: Make a new e-mail account, contact ACR support, and give them very basic information like your name, address, phone number, etc. No social, no IDs. Tell them you want to switch e-mail accounts and reset your password. See if they let you.

I doubt it will happen again.

I'm sure ACR has changed the protocol since this controversy started (even before it was made public).

Small chance this guy is lying, especially since this happened TWICE to the same guy and nobody else to my knowledge. It's possible this was a freeroll on his part, and the money was dumped to friends or just outright lost by him.

I think I believe him, though.

If this is true, I suggest that the guy threaten to DDoS ACR until he gets his money back, and if they don't make good, actually do it.

That's what I would do.

It's not like the police are going to get involved in this.

[LarryLaffer]

are you good enough to DDOS though.

[Dan Druff]

Off topic, but yes I could manage a DDoS against them.

Normally I would never do this to a site (even if I hated it) because it's highly illegal.

However, given that ACR itself is illegal (and not operating from the US), and given that this guy would have a seemingly valid claim that they stole $11k from him, he could probably justify the DDoS as an act of prevention from others getting cheated the same way, or something like that.

Now, this is not my fight, so I'm not getting involved, nor am I saying that any of us should. For all we know, this dude could be lying or only telling half the story (though again, I think I believe him).

I'm just saying that, if it were me, I would start threatening them with DDoS unless they make it right, since ACR has shown a vulnerability to DDoS attacks in the past.

[SrslySirius]

Embedded Tweet

https://twitter.com/twt/status/763473047559045120