If you entered your The pokies password on a fake website, act quickly rather than waiting to see what happens. Change any reused passwords, secure your email, check your bank accounts and contact the casino through a verified channel. You can also report suspicious activity to https://www.acar.net.au/ if the incident involves an Australian online service. The steps below help limit further access and preserve useful evidence.

Secure the Account Used for The pokies First

Start with the account whose password was exposed. If the genuine site still accepts your login, change the password immediately from its account or security area. Do not use the link from the phishing message. Type the known address yourself or use a trusted bookmark, and stop if the page behaves unexpectedly.

Change Reused Passwords and Protect Your Email

Phishing becomes more serious when the same password protects several services. Create a new, unique password for The pokies, then change it anywhere else that used the exposed password. Give your email account priority because access to it can allow someone to reset other passwords. Turn on multi-factor authentication wherever it is available.

1. Change the exposed password on the casino account.
2. Change the same password on email, banking, social media and shopping accounts.
3. Sign out other sessions and remove unfamiliar devices where the service allows it.
4. Store the new passwords in a reputable password manager rather than in a browser note.

Check Your Devices and Browser for Warning Signs

A phishing page may only collect a password, but some scams also deliver malicious downloads or browser extensions. The Pokies is described as browser-only, so there is no genuine reason to install an APK or a special mobile application to access it. Treat claims about a the pokies mobile app as a warning sign.

Remove Suspicious Software Without Destroying Evidence

Review recently installed applications, browser extensions and downloaded files. Remove anything you do not recognise, update your operating system and run a full scan with your device’s reputable security software. Before deleting messages, save screenshots and the full sender details. Those records can help your bank, email provider or a reporting service investigate.

Review Money, Email and Personal Information

Check your bank and card accounts for unfamiliar payments, new payees or changes to contact details. The brand’s published payment information lists Visa, Mastercard and cryptocurrency deposits, while withdrawals are described as Australian bank transfer only. If you entered card or banking details on the fake page, contact your bank immediately using the number on your card.

Information exposed	Immediate response
Password only	Change it and every reused version
Email address	Expect targeted reset messages and check account alerts
Card number	Ask the bank to block or replace the card
Bank account or BSB	Ask the bank to monitor or restrict suspicious transfers
Identity documents	Tell the relevant provider and watch for identity misuse

Watch for Follow-Up Scams

Attackers may contact you again while pretending to be support staff. They might ask for a the pokies code, verification code, remote-access session or a payment to release winnings. Never share a one-time code or approve a login you did not start. The brand’s registration flow uses email verification and a mobile number, so unexpected codes deserve careful attention.

Contact Support Without Trusting the Phishing Message

Use a verified route to report the compromised login. The Pokies publishes 24/7 live chat and an email support channel, but contact details can change as domains change. Do not rely on a support address supplied in the suspicious message. Explain that your password was entered on a phishing page and ask whether the account can be locked or sessions revoked.

Prepare a Clear Incident Report

Include the time of the incident, the fake website address, the message that led you there, your username or registered email and any information submitted. Do not send your password, full card number or security codes. The service may request identity checks before a payout, so provide documents only through a verified support process and check the destination carefully.

Record to save	Why it helps
Phishing URL	Helps identify and report the fake domain
Time and date	Lets providers match login and payment activity
Screenshots	Preserves the page, branding and requests made
Transaction alerts	Shows whether money moved after the incident
Support case number	Creates a reference for follow-up

Report the Scam and Strengthen Your Future The pokies Registration

Report the phishing message to the platform that delivered it, such as your email provider or social network. You can also report cybercrime or fraud through the appropriate Australian channels and notify your bank about any financial exposure. Keep copies of the evidence, but avoid revisiting the fake page or sharing its link widely.

• Use a different password for every important account.
• Enable multi-factor authentication on email and financial services.
• Check the domain carefully before entering login details.
• Ignore urgent messages demanding deposits, codes or identity documents.
• Use the official browser route rather than an unofficial download.

Takeaway: Act Quickly and Treat the Account as Exposed

Changing the password is only the first step. Secure your email, review financial activity, scan devices, report the phishing page and contact verified support. The operator has faced domain changes, legal warnings and complaints about withdrawals, so keep your expectations realistic and avoid sending more money to solve a supposed account problem. If you feel distressed about gambling or financial losses, Gambling Help Online and the National Gambling Helpline on 1800 858 858 offer free, confidential support.