Live CasinoReviewsSecuritySlots
What to Do If You Suspect Your Casino Account Has Been Hacked
A man discovered his casino account had been accessed from a location where he had never been. The story of what he did next, and what he should have done.
Words by Dean Whitaker3 min read
Friday evening, a man checked his email and saw a notification that his casino account had been accessed from an IP address in the Philippines. He was in California. He immediately knew something was wrong.
His account was still accessible to him. The password had not been changed. His balance was still 1,400 dollars. But someone else had accessed the account. This meant one of three things: someone had stolen his password, someone had compromised his email account, or the casino's security had been breached.
Immediate Actions
The first action is to change your casino account password. Use a completely new password that you have never used anywhere else. Make it long, at least 16 characters, with mixed case and numbers and symbols. The compromised password should never be used again.
The second action is to change your email password. If someone has accessed your email, they can reset any account passwords they want by using the password recovery function. Your email is the key to all your accounts. If your email is compromised, everything is compromised.
The third action is to enable two-factor authentication on both your casino account and your email account. Two-factor means that even if someone has your password, they cannot access the account without a code that only you can generate.
The third action is to enable two-factor authentication on both your casino account and your email account.
Reporting to the Casino
Contact the casino's customer service immediately. Describe what happened. Provide the IP address from the suspicious access notification. Ask the casino to: review the account for unauthorized activity, freeze the account if necessary to prevent further access, and audit your transaction history for any unauthorized bets or withdrawals.
A good casino will take this seriously. They will flag the account. They will review the access logs. If money was transferred without your authorization, they will often reverse the transfer. A bad casino will ignore you or claim that you authorized the access yourself.
If Money Was Stolen
If someone accessed your account and withdrew money, this is theft. You have a few options. First, contact the casino again and request that they reverse the withdrawal. If they refuse, contact your payment method provider. If the withdrawal was by credit card, you can dispute the charge. If it was by electronic transfer, you can request a reversal from your bank.
Second, if the casino is licensed, you can file a complaint with their regulator. The Malta Gaming Authority, UK Gambling Commission, or whoever licenses the casino. The complaint may not recover your money, but it will be noted on the casino's record, and repeated complaints can result in regulatory action.
Third, if the theft was substantial, you can consider legal action. This is expensive and uncertain, especially if the casino is in another country. But it is an option.
The man from California changed his passwords, enabled two-factor authentication, and contacted the casino.
Prevention
Use unique passwords for every casino account. Use a password manager like KeePassXC to store them securely. Enable two-factor authentication everywhere. Do not share your account information with anyone. Do not click links in emails claiming to be from the casino. Instead, go directly to the casino's website and log in from there.
Keep your computer secure. Use antivirus software. Keep your operating system updated. Do not download files from untrusted sources. These measures will prevent most account compromises.
The man from California changed his passwords, enabled two-factor authentication, and contacted the casino. The casino reviewed his account and found no unauthorized activity. The IP address from the Philippines was a false alarm. But the process of securing his account was necessary regardless. It taught him that casino account security is his responsibility first.