Quote from: holydarkness on Today at 05:48:31 PM

Quote from: Drahmaar on Today at 12:50:50 PM

Quote from: holydarkness on Today at 10:09:57 AM

Quote from: Drahmaar on March 03, 2025, 12:01:07 PM

You are truly kind and responsible person. I appreciate it a lot!

Edit:
Holydarkness I allow it my friend. You can go on. I will check time to time for the update.

Do you mind to tell me when did you activate the 2FA? A guesstimate is acceptable and well understood if you can't precisely remember that. Was it about the same time you set your account? After some win? After you make your first deposit or withdrawal?

I think there was some misinterpretation from my side.
I had email/phone OTP activated. When I was logging to my account BC was sending OTP to my email/phone.

As I remember I set OTP auth, when BC requested me KYC for my first withdrawal.

I wasnt using Authenticator app.

Last thing I was doing before BC locked my account, I tried to set Passkey auth, but I didnt remember If I did or not. I think I didnt.

I see. Thank you for clarifying.

And this actually goes along with the explanation made by my contact upon the findings made by their security team, as well as give some sense to point on the explanation above about why they require a week to process your 2FA activation, that they're still trying to determine whether you're the real owner or not.

If I may convey what my contact tell me, summarized:

In BC, you have three security methods to do actions like withdrawal or tipping:
1. SMS OTP
2. Email OTP
3. 2FA by Google Authenticator

Their seclog revealed that 2FA [Google Authenticator] was activated after your withdrawal and after that, the tipping happened.

Given you're not the one who activates 2FA, I shall strongly assume that it was the hacker who activated it. I think this also explained why live support assured you that someone else initiated the tipping was not possible in your case as you have OTP, since I believe they don't have access to your account seclog and did not see that you have 2FA activated and followed by tippings; thus they assume you only have OTP and/or all of the authorization methods were controlled by you.

With the ongoing assumption that someone else had 2FA access to your BC account, it could help them "bypass" your OTP as 2FA [Google Authenticator] can be used as one of the two from three security verification methods mentioned above to authorize an action.

I also assumed, upon reviewing your seclog and realized that there is a possible scenario where a hacker was the one being in possession of your 2FA, they require such obscenely long time to activate your 2FA, as they want to be sure it is [this time] you who activated it.

Is this explanation make some sense and possibly fits and explained your situation?

Well, if someone was using 2FA app to login my account, than it was hacker. Ive checked my Google Authenticator and I have zero codes added.
What I dont get is, how hacker accessed my account and how he activated 2FA.
Because as I said Ive activated OTP on my first withdrawal.

If you needed my approval that me (real owner) wasnt using Google Authenticator as authorization method, I approve.
Ive never used Google Authenticator to login my BC account.