1. It was a porn convention so using a name like that wouldn't exactly be pulling it out of their asses :winkwink: It's not like they're going to use their own name or the name of their own company
2. If they were "on" your computer and watching you move money around, then voila, they know all about Epassporte. Just like someone hitching on to my computer would know all about the little hometown bank I use

Just making an assumption, that's all. I guess I just really hate to think it was someone in the biz :(

It's possible to defeat it. the attacker could have poisoned jfk's arp cache and positioned himself between jfk and the hotel router.

That really sucks that that happened to you, especially when you do so much which is great for everyone. Some people really suck.

True - very true! JFK is one of the hardest working peeps in our business and ya' never ever hear anyone say anything negative about him. Sucks for something like this to happen to someone with such a good heart but our industry has it's share of real scum and this is just another example of how they operate.

If ePassporte does not help JFK get his money back or at least tell him who stole it - they are no better than the guy who stole the money in the first place. I would like to think that ePassporte would step-up do the right thing here but history has shown that they usually do not. Epassporte has not impressed me with how they've handled stolen money in the past and I won't hold my breath that JFK's situation will be any different.

Interesting to note that my bank has a fraud department that looks into stuff like this. Does ePassporte have a fraud department? If so...what are they responsible for? What's the use in having a fraud department if they can't (or won't) pursue the scammers?

I currently have $2.18 in my ePassporte account. If someone wants to rip me off...more power to them. I try not to use ePassporte for anything unless I have no other choice and then I get the money out of there as quickly as possible. That appears to be the only way to keep your money safe. Better to store your money in a place where it's guaranteed - and that is not an ePassporte account!

Dam that sucks, What Epassorte account was it drawn from..? let's make sure no one pays on it and if someone like epass would like to disclose the loser' that would be help full...get the ip of the transaction and other related info

then give it to my boyz Sal, Anthony, Bruno and Dominick...hehe

to bad epass does not offer chargeback insurance...

Sucks to hear JFK, hope you find out who it was.

I would be surprised if epass can give out that information based on privacy laws. I would assume that would be the only reason for them not to give it out.

I to get my money out as fast as possible.


I use EDGE from time to time and it works great, for times when I can't I use a VPN to a server where I use a remote desktop. That is when I am doing something more then checking google maps or something.

On a side note I got this link in an email, was it sent to everyone with a ccbill account? or just people who have attended the forum at some point?

Yea - the scammers are having a field-day with this. They are breaking into peoples accounts...stealing thousands and thousands of dollars all the while knowing that ePassporte won't reveal their identities because it's a privacy issue. Something is really fucked up about that situation ... wouldn't you say?

I never said it was right.

I know...I know.

It's not right. If a scammer can break into someone's account and steal a few thousand dollars and ePassporte does not and will not do anything about it - even though they could - that really says a lot about ePassporte.

If that $3000 was stolen out of Chris Mallick's account - you bet your ass something would be done about it - and quickly! :thumbsup

If their hands are tied then there is nothing they can really do though now is there?
I dont know where epass is located nor do I know the privacy laws there.
But I know if they were here in Canada giving out that information could very likely mean jail time and fines.

Would YOU give out information to get someone back 3 grand if you knew very well it could mean you would end up behind bars and have fines levied against you and your company? What if doing that froze epass's account and everyone with any money with them ended up losing it all?

I doubt very much that the people at epass are just sitting behind their monitor thinking to themselves that its only 3 grand and not worth their time to do anything.

Dean, I dont know you personally, but from your other posts you always seemed like someone intellegent, but it seems your just being ignorant in thinking that they wouldnt do whatever they LEGALLY could.
If they started breaking laws they would be no better then the theifs.

It doesnt matter actually.. all that information is being sent through the air and anyone with the right skills can intercept it.

Even with SSL that only makes it a little bit harder but not very, if someone was sniffing his packets from the very first packets sent then they already have the crypto keys and crypto suite information that they need to decrypt everything as its being transmitted.

The lesson here is to avoid transmitting your private information through the air where anyone can intercept it. Encrypted or not.

I would never ask ePassporte to break the law. I would only ask them to stand up and take some responsibility to ensure that their customers money is safe. And if their customers money is stolen - that they do everything possible to either get it back or help with prosecuting the offenders. So far...it doesn't seem that this is the case. I have seen many posts from people complaining about their money getting stolen but I have yet to see one post where someone complimented ePassporte for doing everything possible to help them get their money back or help to find out who the offenders were. Of course I'm not here 24 hours a day so it is possible that I missed such a post.

Call me ignorant if you want - but I just have no respect for a company that might know the identity of people who are breaking into other peoples accounts and would rather sit on that information instead of chasing these folks down and prosecuting them. As I said before - if this $3000 was stolen out of Chris Mallick's account - you bet your ass something would be done about it. You don't think Chris would just sit back and let someone break into his account and steal thousand of dollars from him do ya'?

I dont see posts about people getting paid by sponsors on time either... Maybe I should start every time I get a payment, just so you will know who is paying on time...
I know thats not exactly the same, but its just how it is, people don't post when things go as planned, and often then dont post when a problem has been fixed, or if they do its an old bump that goes un-noticed.

Its already evident that epass has looked into it to some extent, even given JFK some info on who it was.
Your just ASSUMING that epass isnt doing everything they can. Do you know for sure that they havent gathered all the information they can get and given it to the proper authorities? How do you know its not in some officers in box, or that an officer reviewed and just pushed it aside?

Do you want epass to just refund every "theft" that happens? how do you know people wont just scam them by saying something was a theft? Have you read the epass TOS? do you understand them? agree to them?

If Chris Mallick's account was hacked I'm sure something would happen, but I couldn't tell you what. For all I know his legal team would force him to do exactly what is being done for JFK.

Maybe they can't give out that information, but the least they can do is refund his money to his account. That would do a LOT to reinstate confidence in their service, don't you think?

sorry to hear - i really hope epassport helps you to find the theif and post the motherfuckers name on here so we can all spit in the face of this asshole next time we see em.

damn... ..

Sorry hun, but epass accounts arent instant signups. Takes awhile to even get an account. This was definitely someone in the industry.

Heres what probably happened.

#1 - The day people arrived, someone set up a fake access point

#2 - Their access point was set up as a http/https relay. A fake epass site was installed on the local AP server. When people logged into paypal or epass, first their login & user name was captured on the local machine & then relayed onto the real epassporte site, so all you saw was a seamless login.

#3 - Several logins were stolen within the first few hours. Everyones checking their balance before they hit the bar/strip club for cash.

#4 - These new stolen logins from people at the show, were used to move the $ around in a giant loop.

Now depending on the # of logins compromised, the # of transactions those other accounts completed themselves/transferred to other accts.. And the # of days between it happening, & JFK alerting epassporte. That money could be lost in a "literal" circle jerk void forever.

Epassporte might literally have to contact 100 customers & confirm each transaction to another party.

Your not dealing with a hotel employee. Your dealing with someone that has probably been using epassporte for years & hatched a little pre-meditated scheme months ago.

In fact, I wouldn't be surprised if this has been going on for several years. Just in amounts people don't immediately notice, or don't wish to embarrass themselves in public.

I wouldn't be surprised if more people come forward in the following weeks with the same complaints.

Then again...it could have been some idiot using a xp exploit & a keylogger. Or even a lost access key social engineering trick with the hotel front desk, while your laptop sat tucked away seemingly safe.

All we can do is hope little bloodsuckers like this get caught, or karma brings them a hefty dose of the AIDS :pimp

First of all, sorry to hear this happening (again) Jules...

You've not been the first in this account circle-jerk-scam scheme, as we've read numerous time on here and other boards now... just to add an extra cherry on top they've gotten you at a show, which means it 100% is someone from within our own rows!

A quite easy solution to fuck up this scammers world:

ePass sends out a letter with a set of TAN's (Transaction-Numbers) for each customer - it needs some work on their end of course, but it's worth it. This way you have to maintain a real address on file as well, as you need these TAN's every once in a while, as each TAN list has only around 100 to 200 TAN's which are used up every X months.

Then for each transaction you make, you have to enter a specified TAN from your very own list, if it matches - the payment goes thru, if it doesnt match, the payment doesnt go thru and you'll get a warning - 3 wrong TAN's = ePass Account locked down, you have to contact ePass.

Would work with the same generator PayPal uses as well, but that means buying these generators and send them out, where paper obviously is cheaper...

Just a thought to add a layer of security that prevents all of this crime.

It's an old standard with the banks over here and it works like a charme.

Personally, I would'nt mind paying a few cents more per transaction to cover the cost of this added layer of security - if they raise it from .25 to .35 on all of the accounts - which doesnt hurt anyone directly that bad, in essence it would very well make up for the cost I hope - epass would have to calculate that though...

:2 cents:

sorry to hear...

You might want to scan your computer with all virus/spyware tools available to get rid of keyloggers. Unfortunately many pros use custom keyloggers who cant be deteced by virus scanners (simply because they are not in common circulation) so cleaning out your PC might be best.

If you still have a keylogger installed, they will get all your new passwords and other accounts.

I am impressed that you were able to go back and do your job in such a professional manner after being cyber mugged by somebody in the same crowd.

Well,they did NOT give me anything, its part of the online statement.
Thats is where I got the info from,I was just told that they did transfer the funds to 2 other accts and that it was gone.
They are investigating. This thread should not be turned into an Epass bashing one.
As I have stated,never had a problem with them prior to this and will not stop using the system, with further precautions put in place.

Man, that's fucked up. What a way to put a damper on such a great show. Sorry to hear this bro.

JFK, check into the possibility of a keylogger on your system. These types of viruses record keystrokes, and as such, when you enter in a password, it records it. The hacker can then have access to the keystrokes you used at certain websites.

Being that it seems to be someone within the industry and/or someone targetting people in the industry, it sounds like there is a site(s) out there distributing this keylogger.

Well it was eighter that, or mope about it ! I had to focus on what I came to do and not let it get me down too much.

probably made up as they looked at a name and choose it cause it was popular in this industry at one time as in al goldstein

in fact they probably changed al to ann but kept the same first initial which is more likly the name they looked up and tried to fake.

This cracked me up in oooh so many ways.

Very well could be. You have to be very careful about the wireless networks you allow your computer to connect to. There was a study recently, that went to various airports around the country to check for rogue wireless ad hoc networks. They found them in almost every airport they checked! :helpme

Most wireless users will connect to one of these adhoc networks automatically, and anything and everything you do on the web can be intercepted. Anywhere there is free wireless, you need to make sure you are connected to the right wireless network. Dont let windows or whatever OS you use, connect to the first open network it finds, automatically, or you'll be a victim eventually.

this just sucks

Julius that really sucks man good liuck and good hunting

I hope you reported this to the police. There's a pretty good likelyhood it was someone at the hotel, a friend of mine manages a rather well known hotel in toronto where they quietly fired an IT manager for hacking into bank accounts that were accessed from the hotels network awhile back. Sadly the hotels are usually more interested in protecting their reputations than reporting these people to the cops.

I did not see the point in reporting it to the police. It is a crime comited in cyberspace, like they are going to do anything about it:disgust


But,here is the rundown of the actual transactions

Virtual 30 Mar 2007 b2p Fee $-2.00 $-2.00 $77.38 Matched
Virtual 30 Mar 2007 b2p ann90ldstein $-499.00 $-499.00 $79.38 Matched
Virtual 30 Mar 2007 b2p Fee $-2.00 $-2.00 $578.38 Matched
Virtual 30 Mar 2007 b2p ann90ldstein $-500.00 $-500.00 $580.38 Matched
Virtual 30 Mar 2007 b2p Fee $-2.00 $-2.00 $1,080.38 Matched
Virtual 30 Mar 2007 b2p ann90ldstein $-500.00 $-500.00 $1,082.38 Matched
Virtual 30 Mar 2007 b2p Fee $-2.00 $-2.00 $1,582.38 Matched
Virtual 30 Mar 2007 b2p ann90ldstein $-500.00 $-500.00 $1,584.38 Matched
Virtual 30 Mar 2007 b2p Fee $-2.00 $-2.00 $2,084.38 Matched
Virtual 30 Mar 2007 b2p ann90ldstein $-500.00 $-500.00 $2,086.38 Matched

As I said they would still need to investigate to make sure it wasnt a fraudulent theift in the first place right.
Bad for the bottom line when you refund any money that anyone says was "stolen".
I am not saying that I doubt JFK actually had money stolen, but I do know people would take advantage of the system if refunds were given easy. Just look at how many people abuse paypal, they pay, get what they paid for and then reverse the transaction, even if there is no money in you account the thief gets the money from paypal.

Well at least they are investigating. And I am sure they are doing what they can.

I am very sorry to hear. But this is not the first time that something like this happens at a convention. I've heard of stolen laptops, cars, money, you name it!
How sad that an industry that is trying to stick together and be friendly to each other has some shitty people among us.

WHAT ARE YOU GOING TO USE TO SPLIT THE FACE OF THE GUY WHO DID THIS WITH>?

Let me guess, you were dumb enought to use an unencripted wi-fi connection?

he never used the word "split."

This is such a pile of bullshit. This "industry" is filled with assholes and scumbags who will use every chance to fuck you over.

People need to snap out of their fantasy. This is not some friendly hobby circle. You will be taken advantage if you present a slightest chance.

This "industry" is made of dumb teenagers, retirees, mental cases, Russians, thieves, bullshitters, and scammers. And you expect common decency? hahaha

the one thing I hate about this biz is the the scumbag theives. so many good people but it only takes a few bottom feeders to fuck it up..

Man you know how to rub it in and be an asshole hugh?

Truth hurts, huh?

What gets to me, is that someone was dumb enough to have their PC hacked, post the story on boards and now have everyone and their neighbour give Epass shit for this.

Oh please! go back and read the posts and if this thread is not of interest to you then go find yourself a stupid thread to post in. The intension is not to point fingers just to find out who could do such a thing. Let this happen to you and see how it feels .... oh sorry you are too smart for this to happen to you.. pfff

I can't decide if I am the Stupid one for even responding to your post..

Anyone can potentially get hacked in one form or another.... And I would of done the same as JFK, he is letting our community know what happended so mabey it won't happen to anyone else, plus mabey he will get lucky and find this loser / thief..

Let's be ohnest about epass, yeh the idea is good, they work most of the time probably ( i have no accounts with them btw) but if there was a better solution out there - ppl would leave by the boatload - we all know this.. but they are the game in town.. Not trying to put down epass - but even they know what the deal is.

The intent was not, or is to Give Epass shit.........kindly read before posting your replies:2 cents: I did NOT blame them at any point:321GFY

I know you didn't but you went to the boards and posted your sob story and now everyone is giving epass the shit for not doing anything about it, when in reality it was your own fault that you got hacked, not Epassporte's.


What was the point of your thread? To let the board know that there are scammers who work in Adult industry? *gasp!*

If you hadn't figured that out after working 5 years in this business, then you are even a bigger moron that i thought.

I'm not sure if I've ever seen a more idiotic, mean spirited and pointless post on this board ever.

I nominate you as ignorant ranting asshole of the year.

first of all, it's a good warning thread to people that may not realize how easy it is to get hacked at the shows.
Secondly, this thread is legitimate news to people in this industry, most of whom know, like and have great respect for JFK
Thirdly, the ONLY moron I see around here is you.... in that last post.

Best quote of the year.

If you have Epassport and you don't dump it you are a douche. It is valueless shot to everyone other than Epassport unless you are such a loser you don't have real accounts or have something to hide (such as you are a dumb teenager, retiree, mental case, Russian, thief, bullshitter, or scammer).

Best quote of the year.

If you have Epassport and you don't dump it you are a douche. It is valueless shit to everyone other than Epassport unless you are such a loser you don't have real accounts or have something to hide (such as you are a dumb teenager, retiree, mental case, Russian, thief, bullshitter, or scammer).

Sorry for the dupe post (GFY is so fucking slow sometimes) and I feel for you JFK. You are a hell of a nice guy and I think you are wrong the police should be involved.

and for the fucktard that ripped him off, I hope you get ass raped in jail