Account Takeover

An account takeover is unauthorised access to a player's account by someone using their credentials. Most takeovers are not clever intrusions: attackers try username and password pairs leaked from unrelated services, a technique known as credential stuffing, which works because the same password is reused elsewhere. The consequences are financial as well as private. A gambling account holds a balance and stored payment methods, and terms generally make the account holder responsible for activity carried out under their login, so establishing what happened matters. If an account is compromised, change the password, enable two-factor authentication, and contact the operator through the site or app rather than any link you were sent. Ask for the account to be frozen while it is reviewed, note times, amounts and any game round IDs involved, and change the email password too, since email is the recovery route. Report it in writing; if the operator's answer does not resolve it, the ordinary complaints route to its regulator or an ADR body applies.