Email Scam Alert: Bitcasino.io Warns About Fraudulent Emails Targeting Deposits

Hello LCB'ers,

We’ve been made aware of a promotional email circulating from BitCasino.io with the subject line “Receive Free Bitcoin and Ethereum With Bitcasino” with fraudulent purposes, so-called Social Engineering.

It’s important for you to know that the email contained fraudulent Bitcoin and Ethereum wallet addresses where you were asked to deposit funds to receive future interest. These are NOT BitCasino.io wallet addresses, please do not transfer any funds.

The email was not an official BitCasino.io email, they never sent it out, and furthermore, their security team have confirmed this email was sent out after their promotional email software was hacked.

BitCasino.io is currently working on this to ensure the issue is resolved.

Hello LCB'ers,

Here's an update on recent fraudulent emails targeting deposits:

BitCasino.io's investigations have confirmed that their third-party email software Customer.io was compromised, which resulted in fraudulent emails being sent out to a pre-defined group of players.

Currently, BitCasino.io found out that in 24 hours three transactions were made to the fraudulent wallet addresses, totalling 0.00037299 BTC and 2.0665 ETH. This situation and wallet address will be monitored further. 

What type of user data was affected?

• Customer.io only had access to a set of email addresses and language preferences, no other personal player information such as KYC documents, passwords or any other sensitive data was available to this third-party.

How will this affect you?

• Your account on Bitcasino.io is not at risk from this incident. However, you need to be aware of potential scam emails that you may receive from any email address.
• Please note that Bitcasino.io will never ask for your personal or account details in an email and will never ask from you to send funds to wallet addresses described in an email. You should only deposit to the address displayed in your account cashier.
• We recommend that all players add two-factor authentication (2FA) to their accounts in BitCasino.io and anywhere else online.
• If you ever have any concerns or questions regarding the legitimacy of a BitCasino.io promotion or website, you can contact their Customer Support or 24/7 Live Chat.

I don't understand, are they hacked? 

Hello Snowbowl,

Yes, BitCasino.io's promotional email software was hacked. Bitcasino.io's security team says us that they reacted immediately, locking down the third-party service, suspending all outgoing emails and access to the software. They also assure us that players' accounts on Bitcasino.io are not at risk as they don't store any sensitive data in customer.io.

Thank you Sydney for the warning, and thank you BitCasino.io for reacting quickly and in time to do as much damage control as possible.

I'm not surprised at these kinds of frauds at all anymore, and I've learned to recognize a scam email when I see it, but not all players are experienced enough and hopefully this post will save them from the trouble!

Thanks for the info Sydney. This is why I keep one separate e-mail only for online registrations, you never really know when something like this can happen and to be honest nothing on the internet is absolutely secure, its just a matter of how persistent the hackers are

Obviously, best case scenario in this case is bunch of spam on someone's email (I guess mine included).

I'm just wondering, if Customer.io is a service like Vertical Respnse etc, than you cannot really see the sender's mail adress, because service would appear as sender, would it not? And than how would you discern whether you are being scammed or you are recieving a real promotional mail?

obviously the affected players should be reimbursed by either customer.io or BitCasino.

Thanks a lot for the warning Sydney. Players, be careful and keep on mind that it's easy to fake an official-looking email, using the same logo and design as the real company, so always pay attention to the email address, phishing is a common type of the internet fraud.