HistoryReviewsSecurityTips & Tricks
What to Do If You Suspect Your Casino Account Has Been Hacked
The email said you'd won. You hadn't played in weeks. Someone else was playing your account. Here's what to do and why speed matters.
Words by Buddy Grant2 min read
The email said you'd won. You hadn't played in weeks. Someone else was playing your account.
Speed is everything now.
Immediate Steps
First, stop. Don't log into the casino website. Don't click any links in the email. A compromised account might have malware watching for your next login.
Instead, from a different device (a phone, a different computer), do this:
-
Change your password everywhere you used the same password. If you used "CasinoPwd2024" on the casino, you used it elsewhere. Assume all accounts are compromised.
-
Enable two-factor authentication on the casino account. If the attacker doesn't have your phone, they can't access it now.
-
Contact the casino's support line (not via email, call them) and explain that your account was accessed without authorization.
What The Casino Will Do
A good casino will:
- Immediately freeze your account
- Review the transaction history
- Identify when the unauthorized access began
- Reverse fraudulent transactions
- Reset your password
- Ask you to verify your identity
A bad casino will:
- Ask you to prove the access was unauthorized (burden on you, not them)
- Refuse to reverse recent transactions
- Close your account entirely
Most casinos fall somewhere in between.
The Documentation
Keep records of:
- The email notification
- Screenshots of your account activity
- A written description of when you last logged in
- Any transactions you didn't authorize
- The casino's response to your fraud claim
If the casino refuses to reverse fraudulent charges, you'll need this documentation to dispute the charge with your payment processor or credit card company.
If the casino won't help, contact your credit card issuer or payment processor.
Payment Processor Disputes
If the casino won't help, contact your credit card issuer or payment processor.
Explain that your account was compromised and the casino won't reverse the fraudulent charges. The payment processor will open a dispute. The casino will have thirty to sixty days to respond.
If the casino can't prove the charges were authorized by you, the payment processor will reverse them.
Note: some payment methods (cryptocurrency, gift cards, wire transfers) don't have this protection. This is one reason to use payment methods that offer dispute protection.
Why Casinos Are Targeted
Casino accounts are attractive targets because:
- They hold funds
- Money moves quickly (deposits and withdrawals)
- Verification is sometimes lax
- The account owner might not check their account regularly
A compromised account might be drained in days. By the time you notice, the money might be gone.
Prevention
- Use a unique password for every casino account
- Enable two-factor authentication
- Don't reuse passwords across accounts
- Check your account regularly
- Update your email address and phone number when they change
- Review your account's login history periodically
The Uncomfortable Truth
If your account is compromised and you don't notice for weeks, recovery is harder. The casino might have already paid out the stolen funds. The person who stole it might have withdrew to an untraceable address.
Your best defense is early detection. Check your account regularly. If something seems off, it probably is.
The moment you suspect unauthorized access, act. Don't wait. Don't email. Call the casino directly. The first few hours matter.