Money stolen

Hi i just want to ask if anyone in here is a member of the Solo Junkies Skybox group cause last night there apparently was someone (don`t know who) who stole large amounts of L$ from the players there that were playing Zyngo at that place.I lost 5000 L$ to this person with my alt avatar.
And a lot of people to i think cause the sim is barely active now.
The operator there is ******* but she says that she cannot do something about this thief accept place some copybot protection of some kind.
I heard that they could steal textures and stuff but money that is new to me.
And he did a good job at it to cause when you look at your account info at the SL website in transactions it just says that you paid the operator wich is not true ofcourse.
The only thing you could see was a brief flickering on your money balance in the upper right hand of the screen,but who watches that constantly cause you only pay attention to it when the blue dialog comes down right.

But what can be done about this and can i contact Linden Labs about this or do i just bite the dust.

nothing can be done, and you might want to remove names as naming names is a no no

HOW can someone 'steal' your money? you would have had to agree to give it with the orange pop up.

Can you explain how they took money direct from your account?

No there was nothing to see just the brief blinking in the L$ balance.

That`s the weird part i did not notice it until later.But by that time it was to late.
And we didn`t see anybody out of the ordinary either.
So beware.

Are you saying that the money was taken directly from your balance without you paying or clicking anything...? that it just dwindled out of your account?

If money was deducted automatically (no action taken on your part) then at some point or another you would have had to have given debit permissions to a script you own (big "scary" dialog in the upper-right corner).

Debit permissions last indefinitely so unless you get rid of it, it'll always be able to syphon off money from you whenever it wants.

How do you know it's not the operator who was doing it all along?

Even *if* there is an exploit that lets you grab L$ without debit permissions, it's not going to display someone else's name on your L$ transaction history. The L$ went to who the transaction history says it went.

(And you'll want to remove her name from your post btw)

I've never heard of this, and personally doubt it to be possible from in-world.

Unless you grant privileges, you should not be losing money. By granting privileges I mean clicking 'accept' in the orange box, or paying the person or something they own, or buying an item.

If this is a true threat, then please, give as much info as you can, shove it on JIRA, put in a support ticket, the whole shabang. It needs to be solved. Now.

Yes it did

What does it say exactly in your transaction history?

Have you paid to play a "fake" game?

If your transaction history says that you paid the operator, then that's the person who got your money.

If you mean it shows the SL resident's name as the Destination for your payment then that is in fact to whom the money was paid. Check the name carefully though for spelling and substitution of characters that may look like letters from the resident's name but are not, e.g. a 1, I ! for a lower case L. Additionally transaction numbers cannot be faked either so file an AR with Linden Lab for fraud and theft and provide them with the transaction history.

Tascha, I am very sorry this happened to you.

I'd like to echo Keira's comments - if this really is a new exploit, it's really important that LL coders learn of it (perhaps via JIRA, which is LL's bug-reporting site) right away. And to determine whether it's a new exploit more details are needed.

As far as is known, it's not possible for someone to take money from your account unless (a) you pay that person; (b) you pay an object owned by that person; (c) you give debit permission to a script that pays that person. You would be aware of (a) or of (b). With (c), when you run a script requesting debit permission it gives you a bright orange dialog box that you have to say yes to in order to grant permission. If that's what happened here you need to identify the scripted object and get rid of it right away, because it still has the ability to take money from your account.

For the purpose of getting help here on the forum, please describe in more detail what happened when you lost the funds.

Are you describing payments you made to a machine, but the machine didn't play the game as it was supposed to? If so, then you need to contact the owner of the machine - the person who received payment - and try to work it out with that person.

If not, then how do the deductions look in your transaction history? They should name the recipient of the funds. You can file an abuse report on that person, and that's a good thing to do, with as much detail as possible.

You should know, though, that it's highly unlikely that you'll recover your funds. If the transactions look like you paid into a machine, but got no game to play in exchange for that, LL will likely view it as a dispute between residents and not get involved. If it looks like someone exploited a bug to steal from your account, there is perhaps a larger (but still a small) chance that LL will give you the money. From reading these boards I have occasionally heard about LL refunding people in cases of fraud - but more often, the money is gone forever.

This stinks, I'm really sorry it happened. Good luck!

My initial suspicion would be that the operator is running some sort of con. The transaction history is reliable (or, at the least, one of the more reliable things about SL). I wonder if this game was rigged in some way.

This would have nothing to do with "copybot," and "copybot protection of some kind" (!quit, now with low spam!) is irrelevant.

Nevertheless, file a support ticket ASAP, and you may wish to call LL as well. Provide as many details as you can on what happened and how many people lost money. If you have logs, use 'em.

...and follow some of the really good advice above, too.

Mari

If it a exploit and part of a scam you should report it to abuse team at LL...but you need to clearly communicate what happen so they know what they are looking for,etc.

I'm not familiar with how Zyngo machines work.

If they work like a clothing vendor prim, you click and Pay the prim. You then get a message something like "You paid XXX L$300". It is possible to put an invisible prim in front of the vendor, to trick the buyer into paying the "intruder" prim. In this case, you would get the same message, but "XXX" would be the name of the person who owns the invisible prim, NOT the owner of the vendor you were trying to use.

If the machine automatically takes money out of your account (when you lose) and pays you (when you win), then like the others have said, at some point you would have received a big yellow drop down box saying "so-and-so is requesting debit permissions. Do you want to proceed?" Again, if a scammer had put an invisible prim in front of the machine, the drop down box would have looked very similar, with a small difference in the name...it would have been easy to overlook.

The key is your transaction history...who does it say you paid? If it was the club owner, then he is running crooked machines. If it was somebody else, then there really was a thief in the club. Either way, you should report it to LL.

As others have said, I know of no way in which someone could simply drain your account without you giving them permission at some point. As a safety measure, immediately remove your remaining balance (if any) and transfer it to an alt. Until this is resolved, you cannot trust the security of that account.

i smell a scam. since no facts surrounding the events have been forthcoming by the OP even when asked directly, i hardly believe any of this happened at all.

just someone's vendetta, trying to make someone else look bad.

It all sounds pretty farfetched to me.

So did Velcro at one time. Now look at it.

which?

her accusation, or mine?

True - and for that matter, it still does to me. I'd like to hear more details about the OP's velcro before forming an opinon.

The OP's. I was agreeing with you. Try not to fall down.

conclusion ?

Actually, when I was brand new to SL, there was a problem with a payout of 5 machines, totalling $808L.

The machines owner's transactions showed I was paid. My transaction history didn't show that, but it had said in the chat that I had.

Linden labs did nothing, even though it was obvious to the owner and I there was some kind of hack. They wouldn't even investigate it.

Bless the owner's heart for paying me again, tho that meant she was out the money, she knew I needed it.