What to Do If Your Poker Account Is Hacked

If your poker account looks hacked, treat it like a security incident, not like a bad beat. The right first move is to slow down, secure the device you are using, and recover through the official site instead of clicking another urgent message.

This guide is for play-money and social poker players who need a clear order of action. It does not cover cheating, revenge, or tracking attackers. It covers recovery, evidence, account hygiene, and the limits of what a fair poker platform can protect for you.

First: secure the device and the route back

Start with the device. The U.S. Federal Trade Commission advises people recovering hacked accounts to update security software, run a scan, remove suspicious software, and restart before following account recovery steps. That matters for poker too: changing a password on an infected device may simply hand the new password to the attacker.

Then reach the poker site from a bookmark or by typing the address yourself. Do not use a link from the same message that scared you. If the problem began with a fake login page, the article on poker account phishing explains why the address bar is more important than the copied logo.

If you cannot sign in, use the platform's official recovery flow. If you can sign in, do not keep playing yet. Lock down the account first.

Change what can still be changed

Rotate the password from the real site. If you reused that password anywhere else, change it there too, starting with email, cloud storage, and any account that can reset your poker login. A password manager helps because it creates a different long password for every site and normally refuses to fill it on the wrong domain.

Turn on multi-factor authentication where the platform supports it. NIST describes MFA as requiring more than a username and password, such as a separate code, authenticator, hardware key, or biometric-backed factor. It is not perfect against every phishing attack, but it raises the cost of account theft.

For local-key or recovery-phrase systems, be extra careful. If you pasted a recovery phrase, private key, backup code, or exported vault into a suspicious page, changing only the password may not be enough. Read the platform's own recovery rules and assume that exposed key material needs rotation or replacement if the system allows it. The general prevention checklist in how to protect your poker account is worth revisiting after recovery.

Review sessions, settings, and table activity

Check recent sessions, linked devices, email addresses, recovery contacts, and notification settings. Attackers often try to keep a way back in after the first login. Remove devices you do not recognize and undo changes you did not make.

Look at recent account activity without assuming every strange hand proves cheating. In poker, normal variance can look suspicious after a scare. Focus on objective signs: logins from places you do not use, messages sent by your account, changed profile data, unusual chip transfers, or reports from friends that you contacted them with links.

If the platform offers hand history or audit logs, save the relevant entries before they disappear. The article on what a hand history is explains why timestamps and action records are more useful than a vague complaint.

Report clearly and avoid new scams

Report the incident through the official support channel. Include your account name, approximate time, screenshots, suspicious URLs, device type, and what you already changed. Do not post private recovery material in public chats, and do not send secrets to anyone claiming to be staff unless the official support flow explicitly requires a safe method.

Be careful after the incident. Attackers sometimes follow up with fake "recovery agents" or paid services. A legitimate platform will not need your recovery phrase in a social message. If identity theft or financial information is involved outside a play-money poker account, use official government recovery resources such as the FTC's IdentityTheft.gov in the United States.

What fairness can and cannot solve

Provably fair dealing can help prove that the deck was not secretly manipulated. It cannot stop someone who has taken over your account, controls your device, or persuaded you to paste secrets into a fake page. Fairness protects the game process; account security protects the person entering the game.

After recovery, keep the boring habits: unique password, MFA or passkey where available, clean device, bookmarks, and no secret sharing. A hacked poker account is stressful, but the recovery order is simple: secure the device, recover from the real site, rotate secrets, review evidence, report cleanly, and then return to play only when the account is stable.