If you entered your the pokies password on a suspicious page, act quickly but do not panic. A phishing site may capture your login details and use them to access your account, email or payment information. Start by securing any reused passwords, contacting the casino through a trusted channel and checking your bank activity. You can also report the incident through thepokies if you need help identifying the correct next step.
1. Stop using the phishing page
Close the page and do not enter more information, upload identification or download an app it recommends. Do not reply to messages from the same sender. Save the web address, screenshots, email headers and the time of the incident, but avoid reopening the page on the device you use for banking.
Check what information you submitted
Write down whether you entered only a password or also supplied your email address, mobile number, date of birth, bank details, card information or identity documents. This determines how widely you need to respond. A password leak is serious, but payment and identity data may require immediate contact with your bank and other providers.
2. Change your the pokies password immediately
Use a clean device, or a trusted password manager, to create a new password. Do not use a link from the suspicious message. Instead, type the known website address yourself or use a previously saved, trusted bookmark. If you reused the password elsewhere, change it on every affected service, starting with your email account.
Protect your email account first
Your email inbox can be the key to resetting other accounts. Change its password, turn on multi-factor authentication and review recovery addresses, phone numbers, forwarding rules and active sessions. Sign out of devices you do not recognise. A unique password for every account limits the damage if one credential is exposed.
- Use a long, unique password for each important account.
- Enable multi-factor authentication wherever it is available.
- Remove unfamiliar devices, sessions and recovery details.
- Never share verification codes with a person who contacts you unexpectedly.
3. Contact the operator through a trusted route
Contact support only through a website address you already trust, not through the phishing page or its phone number. Explain that your login details were entered on a suspected phishing site and ask whether the account can be secured, logged out of other sessions or temporarily closed. Keep the message factual and retain the support reference.
Expect identity checks before a payout
The site’s published information says identity checks may be requested before a withdrawal, even though another page has suggested that verification is uncommon. Do not send documents to an unverified email address. Confirm the exact upload process through the trusted support channel, and watermark copies for this purpose where appropriate.
4. Check banking and payment activity
Review your bank account, card statements and cryptocurrency wallet for unfamiliar activity. The Pokies information describes card and cryptocurrency deposits, bank-transfer withdrawals and PayID deposits appearing in the cashier code on an archived page. Treat every unexpected transaction as urgent, even if the amount is small.
| Information or activity | What the published information indicates |
|---|---|
| Card deposits | Visa and Mastercard are listed, with a maximum of A$1,000 reported on an archived page. |
| Withdrawal method | Australian bank transfer is described as the withdrawal method. |
| Reported withdrawal limits | Figures conflict: A$9,000 per day, A$9,000 per withdrawal and A$10,000 per week appear on different pages. |
| Processing expectations | An archived cashier message says within 24 hours, while other published claims range from 1 to 7 days. |
| Support availability | The site advertises 24/7 live chat and email replies within a few hours. |
Call your bank using the number on your card or its official website. Ask whether the card should be blocked, whether a payment can be recalled and whether your account needs extra monitoring. For cryptocurrency transfers, contact the exchange or wallet provider quickly, although completed blockchain transactions may not be reversible.
5. Check whether the website is legitimate
A polished design does not prove that the pokies legit claims are reliable. The brand has changed domains, and the current domain may also change. ACMA has formally warned the operator identified as Digibrite S.R.L., and 56 “thepokies” domains were listed as blocked on 18 September 2026. The service is not licensed by an Australian regulator.
Be careful with bonus and login messages
Unexpected offers about the pokies free spins, account verification or urgent withdrawals can be designed to make you act without checking. Published bonus details have conflicted, including different deposit minimums, wagering requirements and maximum amounts. Never give a password, one-time code or banking detail to claim a promotion.
6. Report the incident and monitor your accounts
Report the phishing message to the platform where you received it and to relevant Australian authorities or your bank. If personal identity information was exposed, consider contacting IDCARE for guidance. Keep monitoring email alerts, bank statements and account login notices for several weeks. Be wary of follow-up scammers who claim they can recover money for an upfront fee.
Conclusion: secure first, investigate second
The safest response is fast and methodical: leave the phishing page, replace reused passwords, secure your email, contact your bank and approach the operator only through a trusted route. Do not try to bypass blocked domains or send sensitive documents to unverified contacts. If gambling has become difficult to control, call the National Gambling Helpline on 1800 858 858, which offers free, confidential support 24/7.
Frequently Asked Questions
These answers cover common concerns after a suspected password leak. Your bank or an identity-support service can give more specific guidance if payment or personal information was also exposed.
Can I keep using my account after changing the password?
Wait until you have reviewed active sessions, recovery details and recent transactions. Contact trusted support first if you suspect someone accessed the account. Do not deposit more money while the incident is being investigated, especially if a withdrawal or identity check is already in progress.
Should I use a VPN to access the site?
No. Do not use a VPN or another method to bypass an Australian block. That does not repair a compromised password and may create further account or legal complications. Focus on securing your devices, accounts and payment methods through legitimate channels.
What if I entered my bank details too?
Contact your bank immediately using an official number. Ask about blocking or replacing the affected card, cancelling pending payments and adding fraud monitoring. Change any banking password that was exposed, and never approve a transaction or verification request you did not initiate.
