If your poker account has been hacked, how much you get back depends almost entirely on how fast you cut the intruder off. Change the password, kill every active session, and open a support ticket within the same hour — rooms on the GGPoker network can freeze a compromised account in minutes once a ticket exists, but they rarely reverse money that left after you noticed and did nothing. What follows is written for Asia, where SIM swaps, agent-held logins and Telegram “support” impersonators cause far more break-ins than password guessing.
The first fifteen minutes
Work in this order. Going straight to the support ticket is the common mistake — a ticket does nothing while the attacker still holds a live session.
- Change the password from a different device. If the phone is what was compromised, a new password typed on that phone buys you nothing.
- Do the email password first. Whoever controls your inbox controls every reset link the room sends.
- Force-log-out all devices. On GGPoker and Natural8 this sits in the GGPass account security area, next to the list of recent login IPs. Screenshot that list before clearing it — it is evidence.
- Screenshot the cashier history and hand history for the period in question, timestamps visible.
- Then open live chat and use the words “unauthorised access, please freeze my account.” That phrase routes the ticket to the security team rather than general support.
Set a fund password while you are in there if the room offers one — a second credential required specifically for withdrawals and transfers, so a stolen login alone cannot move your balance out.
How accounts in Asia actually get taken
Almost none of these involve anyone cracking a password.
SIM swap. An attacker convinces a carrier to port your number, then collects your SMS codes. This is why SMS is the weakest 2FA option on offer, and it is disproportionately common where prepaid SIM registration is loose.
Agent-held credentials. Plenty of players in Vietnam, Thailand and the Philippines were onboarded through an agent who still has the login, or who “helped” with verification and kept the documents. If an agent has ever logged in, treat the account as semi-public and move your bankroll.
Telegram and Messenger impersonators. An account wearing the room’s logo messages you about a bonus or a verification problem and asks for a code. GGPoker states plainly that it will never ask for your password, full card number or security codes by email or social channel — no legitimate room will. The same social layer breeds informal chip transfers, which is what GGPoker’s escrow trade system was built to remove.
Password reuse. A leak on an unrelated site gets replayed against poker rooms in bulk. If your poker password exists anywhere else, it is already burned.
What the room will do, and what it won’t
Expect the security team to verify your identity, pull the login history, freeze the account and walk you through re-securing access. That part is standard and reasonably quick.
What you should not expect is an automatic refund. Rooms distinguish sharply between funds that left the platform and funds lost at the tables. Withdrawals sometimes sit in a pending queue long enough to be clawed back — one of the few upsides of the review windows covered in our guide to GGPoker withdrawal timelines in Asia. Money deliberately dumped in a cash game to a colluding account is a chip-dumping investigation, not a refund request; those take weeks and turn on what the hand histories show.
Be ready for re-verification too. A frozen account usually cannot be released until documents are re-checked — our GGPoker KYC guide for Asia covers what gets accepted.
If the ticket stalls or you cannot get past a scripted first-line reply, message @PAGDaddyBot — we can point you at the right escalation route for your room and market.
Closing the door properly
Rebuild the account so the same attack cannot work twice. Use an authenticator app rather than SMS: GGPoker supports Google Authenticator and any compatible TOTP app, with email, SMS and Telegram as slower fallbacks — the official 2FA article walks through setup, and the account security page covers passkeys, which drop the password entirely in favour of your device’s fingerprint or face unlock. Natural8 runs the same GGPass infrastructure, so its FAQ centre points at identical settings.
Two habits matter more than any setting. Store the 2FA backup codes offline — losing your phone without them turns recovery into a document-heavy ordeal. And keep most of your bankroll off the platform between sessions; a compromised account holding $200 is an annoyance, not a disaster. One Asia-specific caution: a sudden country change in the login log can read as the breach rather than the fix, so check the risks of VPNs for online poker in Asia before connecting through one during an active investigation.
FAQ
How do I know my poker account was actually hacked and not just glitching?
Check the login history for IPs or devices you do not recognise, and look for security-change emails you did not trigger — new device logins, password changes and withdrawal attempts all generate alerts. A balance that is wrong with no matching cashier entry is the clearest sign.
Will the room refund money a hacker withdrew?
Sometimes, if the withdrawal is still pending review when you report it. Once funds have settled to an external wallet or bank, recovery is unlikely and is handled case by case rather than by policy.
The attacker changed my registered email. Can I still recover the account?
Yes, but only through identity verification. Contact support from any channel, quote your player ID and be ready to provide the ID documents originally used at signup.
Is SMS two-factor authentication good enough in Asia?
It is better than nothing and worse than everything else. SIM-swap attacks defeat it, so use an authenticator app or a passkey and keep SMS only as a backup.
Does playing through an agent make me easier to hack?
It concentrates the risk. If an agent has ever held your credentials or your documents, you are trusting their security as well as your own — and you have no recourse with the room if they are the leak.
How long does account recovery usually take?
A freeze is near-immediate. Full restoration typically runs from a day to about a week, depending on how quickly re-verification clears and whether a chip-dumping investigation is attached.
Should I keep my whole bankroll on one poker site?
No. Withdraw down to your working roll after each session. It caps the damage from a breach and, in most Asian markets, also reduces the amount sitting in a payment channel you cannot control.
{
“@context”: “https://schema.org”,
“@type”: “FAQPage”,
“mainEntity”: [
{
“@type”: “Question”,
“name”: “How do I know my poker account was actually hacked and not just glitching?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “Check the login history for IPs or devices you do not recognise, and look for security-change emails you did not trigger — new device logins, password changes and withdrawal attempts all generate alerts. A balance that is wrong with no matching cashier entry is the clearest sign.”
}
},
{
“@type”: “Question”,
“name”: “Will the room refund money a hacker withdrew?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “Sometimes, if the withdrawal is still pending review when you report it. Once funds have settled to an external wallet or bank, recovery is unlikely and is handled case by case rather than by policy.”
}
},
{
“@type”: “Question”,
“name”: “The attacker changed my registered email. Can I still recover the account?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “Yes, but only through identity verification. Contact support from any channel, quote your player ID and be ready to provide the ID documents originally used at signup.”
}
},
{
“@type”: “Question”,
“name”: “Is SMS two-factor authentication good enough in Asia?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “It is better than nothing and worse than everything else. SIM-swap attacks defeat it, so use an authenticator app or a passkey and keep SMS only as a backup.”
}
},
{
“@type”: “Question”,
“name”: “Does playing through an agent make me easier to hack?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “It concentrates the risk. If an agent has ever held your credentials or your documents, you are trusting their security as well as your own — and you have no recourse with the room if they are the leak.”
}
},
{
“@type”: “Question”,
“name”: “How long does account recovery usually take?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “A freeze is near-immediate. Full restoration typically runs from a day to about a week, depending on how quickly re-verification clears and whether a chip-dumping investigation is attached.”
}
},
{
“@type”: “Question”,
“name”: “Should I keep my whole bankroll on one poker site?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “No. Withdraw down to your working roll after each session. It caps the damage from a breach and, in most Asian markets, also reduces the amount sitting in a payment channel you cannot control.”
}
}
]
}