Fraudster stole up to $10,000 each from poker pros, likely due to a legalized betting payment processor breach. I was one of the victims.

[BCR]

I don’t necessarily think they’re hassling me, or that I lost anything. I looked at bank account. Just they may have got hit and just froze everything until they figure out what exactly happened. There’s a decent chance Druff and poker players are ahead of lower level people at figuring it out. Just some exhaustive document review that errs on side of extreme caution.

For sure BCR, but I can say that discounting Nevada, I was only asked to provide my debit card and license to one book for a small 4 figure cashout. That was for Barstool NJ. Typically the documentation asks were a slow pay mechanism that offshore books would use, not really giving a shit about the actual docs they were asking for. I’ll give the book the benefit of the doubt. But like I said, for years I’ve been putting in a lot of action and was only asked to provide documentation for the legal books for a cashout one time.

My point really is I want the books to fix this the right way. Not make everything more of a pain in the ass and just look safer. Actually overhaul the system to protect the bettors. Get the people their money back and start using resources optimally.

At this point 1. Want to see those scammed made whole. 2. Hopefully find the fraudster. 3. The other stuff into the future. But I do believe this scam is a huge deal. I hope it gets the attention it deserves.

Well they’re either fucking with me or they got hit really hard. This is getting absurd. Our latest request. The timing just seems suspect with this other thing. Why after 5 years and no issues and already verifying everything years ago? Plus being a black card member at land based casino?

Just got this now

ID request (self-verification)
Additional confirmation of your identity is necessary. Please upload a photo of yourself holding your state-issued photo ID. The information on the photo ID (name, DOB, photo, etc.) must be clearly visible and legible.

Document Type Request title Last Updated
In Review Drivers License ID request (self-verification) 11/16/2022 9:52:10 PM ES

[Dan Druff]

BCR, it is possible that this is related. Maybe they have been seeing an increased amount of withdrawal fraud, so they have decided to start scrutinizing them more.

Do you know if this "VIP Preferred" option by Global Pay for eChecks is available where you play?

[JeffDime]

Well they’re either fucking with me or they got hit really hard. This is getting absurd. Our latest request. The timing just seems suspect with this other thing. Why after 5 years and no issues and already verifying everything years ago? Plus being a black card member at land based casino?

Just got this now

ID request (self-verification)
Additional confirmation of your identity is necessary. Please upload a photo of yourself holding your state-issued photo ID. The information on the photo ID (name, DOB, photo, etc.) must be clearly visible and legible.

Document Type Request title Last Updated
In Review Drivers License ID request (self-verification) 11/16/2022 9:52:10 PM ES

Since they are a legal app and not an offshore site, I would just play their game. Keep doing all the BS they ask of you and be super polite in the emails. I once used a profanity in an email to a legal site in a pretty innocuous way, and was told that could cause suspension or termination of my account. So my advice is just keep sending the stuff and giving them zip and pip action wise. You will get your money in the end & you did nothing wrong. I would just play along with their nonsense.

[Dan Druff]

Regarding Melissa Burr, she sent me this info before she posted it on Twitter.

At first, my reaction was exactly Dizzy's -- that it was an ill-timed coincidence.

That's because the M/O here is different than the scammer took with everyone else, which was to create a new account and impersonate them, in order to gain access to bank info, and then simply deposit/cash out. There was no strongarming or hacking of any accounts, which of course is much more difficult to do.

Since there aren't any other reports of this occurring, it's probably separate. However, I suppose it's possible that this was a "Plan B" when the scammer wasn't able to create a BetMGM account in her name (because she already had one). Perhaps this person had bought a list of passwords, and got in that way.

Remember, in the spring, ACR had what appears to have been a combination of bought-password breach and insider scheme to steal people's balances via withdrawals. That's different than what happened here, but if someone did have an e-mail/password combo bought on the darkweb that Melissa often uses, they could have used that as an alternative plan when the account creation thing failed.

[Dan Druff]

Speaking of coincidences, there's also a bizarre 2FA issue with Pokerstars NJ right now, where people started receiving 2FA codes via text they didn't request.

Pokerstars NJ is insisting that it was a testing system gone awry, and that nothing bad has happened.

Weird timing, but I think I believe them.

[BCR]

BCR, it is possible that this is related. Maybe they have been seeing an increased amount of withdrawal fraud, so they have decided to start scrutinizing them more.

Do you know if this "VIP Preferred" option by Global Pay for eChecks is available where you play?

I’ve used VIP preferred on BETMGM in PA. This isn’t them. I have deposited from bank account a few months ago on this site, but can’t recall if that’s what I used here. Just seems weird timing. When I set up account I didn’t need to hold DL and take selfie.

Yeah Jeff, I just sent it. Just baffling to get three emails a day offering me bonus to join Ohio early as they launch 1/1 while getting a host of other emails asking for nonsense. I told the customer advice guy, this isn’t exactly the way to retain my business a month before you’re launching in my state.

I just am not going to be surprised if this scam that got Druff was more widescale and sent some ripple of fear through the security at these legal books. Plus it’s all PA, WV, NJ, NY.

[BCR]

Called my casino host late last night. She said I’ll get it fixed, you should have called me a week ago.

Today

Complete Drivers License ID request (self-verification) 11/17/2022 12:49:26 PM EST
Complete Drivers License ID request 11/17/2022 12:49:15 PM ES



Withdrawal Approved
11/17 12:49 PM


Being a pit degen who occasionally dusts off way too much after a 2/5 session of poker finally pays off

Sportsbook doesn’t care, but she does.

[Dan Druff]

I set up a test BetMGM New York account in order to see how easy it was to steal from my bank account, given limited basic personal info (name, address, DOB, last 4 of SSN).

As I showed in my screen shots, it was incredibly easy, and no verification was done. I did not attempt to actually deposit, though.

I got this e-mail today. This is possibly because they're getting nervous about what's been going on, or possibly because two other BetMGM accounts recently set up (the ones done by the scammer) were closed for fraud.

Dear Todd,

BETMGM puts the security of the player at a high priority. Therefore, we have put efforts into ensuring that we perform routine checks on our members' accounts. Unfortunately, we do not have the ability to service our members' face to face, which is why we rely on documents to verify registered details and financial instruments used on our site.   

Your account has been placed on a temporary hold, meaning you will not be able to deposit, wager nor withdrawal until our internal review is complete. Please note that you will still be able to login to upload the requested documentation.
In order to complete the review on your account, please provide the following documents:   

1. A copy of both sides of your government issued ID - this can be a Driver's License, Passport or US Permanent Resident Card.   

This could be:
• US DL or State-Issued ID Card
• Passport or Passport Card
• US Military ID (active duty or retired military dependents and Department of Defense employees
• US- Issued Permanent Resident Card

2. A copy of your self-certified ID. This implies that you send us a photo of yourself holding the identity proof in your hand next to your face. The identity proof can be a government issued ID (driver's license, passport or any national identity proof).

Keep in mind that we need to see the whole document (all four edges) and that all details must be clearly visible unless otherwise instructed. The file(s) should be in JPG or Screenshots format and not bigger than 5MB.   

Please do not send the documents as an attachment in this email. Instead, please upload the documents directly through our encrypted portal located in “My Account” section of your account. 

We assure you that your documents will be held in a secure database and will be viewed only by a specialized team. The documents verification usually takes up to 24 to 48 hours.   

We thank you in advance for your understanding and cooperation.   

In case you have further questions, we will be more than happy to assist you. We are available 24 hours.

Thank you for choosing us as your online gaming site.     

Best regards, 
Operations Team

BetMGM

[SlowRoll]

Todd -
have you tried setting up an account out of state with a book that you have had no prior relationship with?

I suggest you setup an account with BetRivers NY. You will likely see global payments as a payment option with your account information ready to deposit in 1 click.

[incognito81]

https://highstakesdb.com/news/high-s...-account-sting

Multiple well-known poker pros have been targeted in a sting involving bank accounts, eChecks and online poker and casino sites, with Joseph Cheong, Todd Witteles and Sam Panzica among those hit for up to $10k apiece.

Witteles, the founder of PokerFraudAlert and perhaps not the best person to target, tweeted out further information after being hit for $10k.

[Dan Druff]

Todd -
have you tried setting up an account out of state with a book that you have had no prior relationship with?

I suggest you setup an account with BetRivers NY. You will likely see global payments as a payment option with your account information ready to deposit in 1 click.

Yes, I did. Go to previous pages for screen shots.

[SlowRoll]

Todd -
have you tried setting up an account out of state with a book that you have had no prior relationship with?

I suggest you setup an account with BetRivers NY. You will likely see global payments as a payment option with your account information ready to deposit in 1 click.

Yes, I did. Go to previous pages for screen shots.

I may have misunderstood, but did you have an account with BetMGM Nevada which required ID verification for global payments?
If so, BetMGM NY also having that is absurd, but not as absurd as an operator who you've never done business with in any state having that information readily available.

Every operator that uses global payments has my banking info ready to go as soon as i register with my name/dob/last 4.

[SlowRoll]

I spoke with PointsBet, who has great customer service, and they were aware of the ongoing fraud and have put alerting in place to alert if an account is created on their platform in another state with my name.

I do not think that operators are going to end their partnerships with global payments until it becomes very public.
Payment processing for the legalized sports betting is not as easy as you would expect.
Chad Elie would have been a better choice than Global Payments.

[Dizzy]

I spoke with PointsBet, who has great customer service, and they were aware of the ongoing fraud and have put alerting in place to alert if an account is created on their platform in another state with my name.

I do not think that operators are going to end their partnerships with global payments until it becomes very public.
Payment processing for the legalized sports betting is not as easy as you would expect.
Chad Elie would have been a better choice than Global Payments.

I would bet my roll sites wont end their relationship with global payments. I said this in another post but, it's one of the biggest deposit methods on every site..and unlikely most other deposit methods - offers no risk to the gambling site.

I think the more likely outcome is global tightens their security a bit. Meaning new gaming accounts don't automatically populate the users bank account, or some form of 2 factor authentication.

Or maybe nothing happens at all. It's been like this since all the sites switched over from Certegy in early 2018.

[Tankazoo]

anything I can do druff?
Im dyingggggggggg to ruin someones life these days

[Dan Druff]

anything I can do druff?
Im dyingggggggggg to ruin someones life these days

lol no, unless the scammer himself is found.

Right now it's poker players versus big companies allowing us to get fucked over like this.

[Tankazoo]

anything I can do druff?
Im dyingggggggggg to ruin someones life these days

lol no, unless the scammer himself is found.

Right now it's poker players versus big companies allowing us to get fucked over like this.

fair enough, Im here for ya if the scammer is found

[JeffDime]

Todd was just mentioning on Joey’s podcast how the regulators don’t know what the fuck they are doing & their priorities are all fucked up. Then I got this email. Think he may be on to something.

[Dan Druff]

The seizure of funds thing is outrageous, and I'm shocked any jurisdiction allowed this. I love how they frame it as "complying with regulations".

Bullshit.

Anyway, it appears Global Payments has designated a media relations person (of which they have several available) to be the point of contact for this matter.

This woman seems to simply fire out a statement blaming it all on an outsider, and stating that they're working with law enforcement. Typical corporate nonsense meant to deflect from the blame they should face.

She apparently does not address the real issue with anyone. I sent her an e-mail, as well. We shall see.

[Dan Druff]

Front page of ESPN, guys:

https://www.espn.com/chalk/story/_/i...tting-accounts