The Grind
Stephen's Poker Blog
-
2008-04-16 12:31:15
Stealing Is Wrong: Part 1
I've heard about many different incidents involving theft of online poker bankrolls. The most common form is someone getting their account "hacked." Usually it's because the victim's computer has been compromised with some sort of virus or spyware. Often times it's a keylogger that files the victims keystrokes and then sends data to some bastard with no morals. The bastard then logs in to the victim's poker account with X poker site and proceeds to "chip dump" to another account. While logged in he'll usually change the password.
It's not always necessary to obtain unique passwords for every site the victim has money on. Most people will use just one email address for their poker accounts. Obtain the email password and all you have to do is click "forgot password" at the many smaller poker sites that don't have security questions. It then emails the new password to the compromised email. The smart bastard also changes the email password. This can make it much harder for the victim to get things in order before it's too late.
One way I've heard this happens is when a bastard befriends a victim. He might spend several months earning a "high roller" victim's trust via IM and email exchanges. Then he'll send a file labeled as a hand history converter, an odds calculator, or something else poker related. The file is dirty of course, and often times programmed specifically to grab passwords from certain poker sites.
Other times the bad files can be acquired by clicking on a link posted in a poker forum that leads to something nasty. Moderators are usually on the look out for this. The best defense is to just not click on a link unless the poster has a fairly high post count and/or is trusted by a vast majority of the community.
This sort of theft is not nearly as easy to get away with as it used to be. And while I've heard stories about players 5 and 6 figure bankrolls getting stolen, frozen, or lost for weeks, the story usually ends with them getting their money back once the investigation is over. The major poker sites have sophisticated software as well as trained employees on the lookout for the signs of shady dealings.
Even with the beefy security, it still happens, but it's pretty rare. And the crime can usually be traced to the victim either doing something stupid like sharing an account with someone he doesn't know that well, or not guarding his computer thoroughly against threats like viruses. That's why I make sure to keep my computer squeaky-clean; a habit I started because of online banking.
Most of you know about the Absolute Poker scandal I'm sure. If not, the gist is that someone working at Absolute had access to the hole cards of every player and was feeding that info to accomplices on the outside who were in turn making perfect poker decisions at high-stakes games. The decisions turned out to be too perfect, and smart players used data-miners such as poker tracker to discover this and call out the cheaters. An independent company audited Absolute, players were compensated for losses, and suspects were fired. The hole cards were able to be viewed because of a back door written into the code back when the software was still in testing. This should not be, and is not possible under normal circumstances with any poker software. It would be incredibly stupid to write in that ability.
But this incident just fueled the fire of all the conspiracy theorists who think such "super-user accounts" ,as they are called, exist all over the online poker world. They think that the sites are in on it to get even more money. Some also think that players write programs that allow them to see opponents' cards or to know what cards will hit the board. I have actually been accused of this on more than one occasion. A semi-epic thread developed not long ago on the forums for my rakeback affiliate (the forums are private, otherwise I would link it). It was started by a player who just "knew" I had to be cheating. It was quite amusing, flattering, and offensive all at the same time. Anyways, that could be another blog entry entirely. In my opinion those scenarios are both very VERY unlikely. It's in the best interest of the sites to make things as fair as possible. Cheating players out of their money would bust them too many times. The sites make PLENTY from the rake. Also, it's virtually impossible to independently write a program that would allow you to view opponents cards or know the coming community cards. My longer term success in the online poker world coupled with logical reasoning is enough to convince me that "super-users" are a phantom non-issue.
Over the course of online poker history, the thieving methods I've mentioned so far have reaped very little total rewards for the morally deficient bastards out there who've used them. Despite this fact, these methods seem to be the most talked about. I don't have the numbers in front of me, but I would bet that far more money has been stolen under very different circumstances. In a nutshell, those circumstances are simply the site just running away with your money. I'm not trying to freak anybody out. In general I think online poker is safe. But there have been many cases of smaller sites either going bankrupt and not having the funds to cash players out, or simply cutting their losses before things got that bad and running away with 7 figure sums. That's why I'm careful about the smaller sites that I play on. I read about their history. I listen to players opinions. And I check to see if they show up on any naughty lists at http://www.casinomeister.com/.
I wish I could say that all my preventative measures are purely the result of a thoroughly tenacious mindset for success and safety. But, like most people, my cautious behavior took a more defined and purposeful shape after I got burned. I learned the hard way. That is not to say it wouldn't have still happened even if I had been just as careful back then. But no one was quite prepared for all of the fall out created by the passing of the UIGEA. Having thousands of dollars stolen from you, and having virtually no legal route to justice was a very frustrating life experience. And I was one of the fortunate ones. Some players lost sums that would make me vomit. But that story warrants it's own blog entry. Tune in next time to hear the horror in it's entirety. ;)