Shuffle.us Closed My Account and Withheld $48,000 After a $10,000 Deposit

I deposited approximately $10,000 in SOL on Shuffle.us and won about $48,000 playing regular base spins. I did not use bonus funds or purchase bonus features.

Shuffle.us closed my account and confiscated the entire balance, alleging "third-party manipulation/exploitation" involving Zeus’s Thunderbolt. I did not manipulate or exploit the game. Shuffle has provided no evidence, game logs, transaction details, or explanation of what I supposedly did.

The game was later removed from the platform, and Shuffle stopped communicating with me and cut off my access to live support. I have repeatedly requested evidence, a fair review, and payment of the disputed funds.

They should at least give me back my $10,000 deposit!

This is insane that they are able to do this. There is absolutely no excuse to ignore your customers when you're handling other people's money.

Hello. If the casino closed your account under these circumstances, I’d be frustrated too and I’d definitely want to know exactly why it happened.

Based on what you described, the casino claims that you used some kind of third-party tools, which you deny. That’s certainly something worth investigating, so opening a complaint with us was a good step in this case.

I can also see that you weren’t playing with any bonus. The fact that the casino has since removed the game is interesting as well, although I don’t want to jump to any conclusions based on that alone.

Our complaint team is already looking into the whole situation, so I think it’s best to focus on what they’re able to establish and what explanation or evidence the casino provides.

If you receive any new information in the meantime, feel free to let us know. Hopefully, everything will be properly explained and the case will have a positive outcome.

Thank you, Jaroslav. This has been going on since July 15, 2026, and Shuffle still has not provided any proof or specific explanation for its vague accusation.

Even if Shuffle believed there was a legitimate issue with the winnings, there was absolutely no justification for keeping my approximately $10,000 deposit. That money should have been returned immediately.

Above all, Shuffle apparently believes it can make an unsupported accusation, close a player’s account, cut off communication, and keep nearly $50,000. That is an outrageous level of disrespect toward players and their money. It shows a disturbing belief that they can act without accountability and simply take a player’s funds without proving they are entitled to keep them.

Yes, I saw it. Unfortunately, it’s not exactly the best situation.

I can see that the casino has already been contacted, so the important thing now is for them to respond and hopefully get things moving toward some kind of resolution.

I really hope they do reply and that we’ll be able to find out what exactly is going on.

I do too and I hope they give a genuine reply and help me understand what is going on and why.

I guess I’m also really frustrated by how long it’s taking them to address this. I’m hoping the delay may be a good sign. If they were confident in their original decision, I’m not sure why it would take so long to respond.

Well, let’s hope this turns out well.

I saw that the casino has already responded, so now we’ll have to see what Michal makes of their explanation and what evidence the casino provides to support its position.

For now, I think it’s best to wait for the next update in the complaint and see how the case develops.

[size=14pt][b]There are a few things I'd like to address[/b][/size]

[b]1.[/b]

[list]

[li]I did [b]NOT[/b] manipulate or exploit any game on shuffle's slots![/li]

[li]I understand that shuffle claims a session associated with my account did something that attempted to do something to manipulate an outcome of a game. Or similar that cites violation of shuffle terms.[/li]

[li]I believe [b]BOTH[/b] to can be true at the same time[/li]

[li]My account was almost a year old, verified, and has had several deposits and withdrawals.[/li]

[/list]

[b]2.[/b]

My account was compromised shortly before this incident occurred. I thought this because of google alerts regarding account security. I followed the prompts to secure account and changed password.

[b]3.[/b]

[b]I immediately told shuffle live support that I believed my account had been compromised.[/b] They responded with a generic bot message telling me to change password and 2fa and that it would be 24 hours before I would get an email response from support. My 2fa was email. I changed password. A few times I think.

[b]4.[/b]

I deposited [b]$10K[/b], ended up with a [b]$4k balance[/b] and a [b]$44k withdrawal pending[/b]. I noticed my 2fa had been changed and tried to disable it. I alerted shuffle live support to get 2fa changed. I couldn't log into my email and told shuffle I couldn't disable 2fa and account must had been compromised.

[list]

[li][b]I told shuffle to PAUSE any redemptions[/b] and made them aware of security issue and made it clear that no money should be sent to the address I had previously requested because I was unsure of it had been compromised as well. I emailed shuffle from another email and was compliant with all kyc requests.[/li]

[li]I was able to recover my original email address and secured account. I changed password, added new sign in methods such as passkey, and added 2fa. I was made aware of unknown devices that had logged into my google account and was able to remove them. I was assured that email and google account were secured.[/li]

[li]I emailed shuffle and went on to shuffle live support to make them aware I had access to my email again.[/li]

[li]I was banned from live support and my account was put into [b]"withdrawal only mode"[/b][/li]

[li]I was unable to change my 2fa nor was I able to kyc level 3. It would accept all info and docs but not approve verification,[/li]

[li]After submitting all kyc docs (level 2) Shuffle stopped responding to any emails. I was left with no information, no understanding of situation, and no way of being able to communicate with shuffle. [b]This went on for almost 2 weeks.[/b][/li]

[li]I combed my account trying to find anything that could help me understand what was going on and I found that there were [b]unknown sessions active on my account that were not from me.[/b] I realized that I never received any notifications from shuffle alerting me of deposits, redemptions, or any other important alerts from shuffle.[/li]

[li]My account was suspended. Still no communication with shuffle. So I posted on Casino Guru and Bitcointalk[/li]

[li]Almost 2 weeks later I received an email from shuffle stating [b]my account had been closed, my balance, deposits, and winnings were confiscated[/b] and they cited violations of vague terms regarding exploiting 3rd party games.[/li]

[li]I proceeded with putting social pressure on the via Casino Guru, Bitcointalk, and Ask Gamblers.

Casino Guru proceeded with taking on mediation and investigating complaint. Ask Gamblers said this was out of their scope. And Bitcointalk started gaining momentum with discussions. Shuffle did not respond to direct emails nor any forums. They completely ignored me and left me without any evidence nor explanation of why they were not paying me.[/li]

[li]I felt I was entitled to at least get [b]my deposit of $10k back[/b] and sent them emails demanding that they pay me or provide proof that I violated their terms and I gave them a safe, secured Solana address to send to.[/li]

[li]They never replied to any of me emails. I moved forward with sending complaints to the Attorney General, BBB, FTC, and following up other threads.[/li]

[li]Shuffle finally responded to Casino Guru and sent them evidence of 3rd Party Game manipulation and Casino Guru sided with them, closed case, and marked as rejected.[/li]

[li][b]I didn't get to explain account security issues to Casino Guru to get their input so I attempted to reopen the case and am awaiting their response.[/b][/li]

[/list]

Update on Mediation & Case Status (September 2026):

To update everyone following this thread:

Shuffle finally broke silence and submitted private "evidence" directly to Casino Guru alleging third-party game exploitation, which led Casino Guru to initially close and reject the complaint.

However, Shuffle's narrative omits the core sequence of events. I have formally requested that Casino Guru reopen and review the case based on the following:

Documented Credential Compromise: Prior to the account action, my linked Google account suffered an unauthorized breach (verified via Google security alerts/device removals). Foreign, unrecognized sessions were active on my Shuffle account, and my 2FA settings were altered without my authorization.

Proactive Alert to Shuffle: I did not manipulate games. The moment I discovered the intrusion, I immediately contacted Shuffle Support, reported that my credentials had been compromised, and explicitly requested that they freeze and pause all pending redemptions so funds would not be sent to compromised addresses.

Correlating Timestamps: I have asked the Casino Guru mediator (Michal) to directly cross-reference the provider's flagged gameplay timestamps against the timeline of foreign session logins and my initial warning to Live Support. Penalizing a verified account owner for anomalous activity during an active takeover that was proactively reported is indefensible.

Unlawful Withholding of Principal Deposit: Even if winnings are disputed under provider terms, Shuffle has completely confiscated my original $10,000 deposit (139.99 SOL). Standard regulatory and dispute practice requires the return of non-fraudulent starting capital.

I am awaiting Casino Guru’s response to the reopen request

I would really like to hear other people's thoughts and opinions on this matter

I’ve read all three of your latest posts, including the additional context about the security of your Google account, the unknown sessions and your request to have the complaint reopened.

I understand the argument you're making: you accept that Shuffle claims prohibited activity took place on a session connected to your account, but you maintain that you personally didn't carry it out and believe the compromised account may explain what happened.

However, I think it's also important to be clear about why the complaint was closed.

Shuffle was specifically asked by our complaint team to provide evidence supporting its allegation. The case wasn't rejected simply because the casino made an accusation. The information and evidence provided by the casino were independently reviewed, and based on that review, our complaint team found sufficient grounds to reject the complaint.

The account-security information you've now raised doesn't automatically overturn that conclusion. Unknown Google sessions, changes to 2FA or evidence that your email was compromised may show that you had a security problem, but they don't by themselves establish that the specific gameplay flagged in the evidence was performed by somebody else.

For that to materially change the previous assessment, there would need to be new evidence that directly connects the unauthorized access with the exact disputed gameplay and meaningfully contradicts what was already reviewed.

The same applies to the $10,000 deposit. I understand that you believe it should be returned regardless of what happened with the winnings, but we can't state that Shuffle is legally required to return it. The complaint team already assessed the confiscation in the context of the evidence and the alleged breach.

You've asked for the complaint to be reopened, so the team can decide whether what you've submitted is genuinely new evidence sufficient to reconsider the previous decision. I wouldn't want to create an expectation here on the forum that the case will be reopened or that the outcome is likely to change.

Of course, other forum members are free to share their opinions on the situation, but from Casino Guru's side, the complaint already went through an evidence review and was closed based on that assessment.

Jaroslav,

Thank you. I understand the distinction you are making, and I agree that evidence of a compromised Google account or unknown sessions does not, by itself, prove that another person performed the specific disputed gameplay.

That is not what I am asking Casino Guru to assume.

What I am asking is whether the evidence can be reconsidered as a complete timeline, because there is an important fact that existed before the disputed gameplay and before I had any reason to anticipate Shuffle's later allegations:

On July 14 at 11:44 PM UTC, I contacted Shuffle and stated, "my acct was compromised."

Shuffle's own exported support record documents that report and directed me into its account recovery process.

The disputed Zeus's Thunderbolt activity occurred afterward, on approximately July 16.

That chronology matters because my compromised account explanation was not created after Shuffle accused me of exploitation, after my account was closed, or after approximately $48,000 was withheld. I reported the security problem before the activity Shuffle later characterized as deliberate exploitation occurred.

There is also additional evidence consistent with that report, including Google's security warnings concerning unfamiliar access, changes involving my account security and 2FA, and unfamiliar sessions/devices. I normally accessed Shuffle from my MacBook or iPhone, primarily through Safari, while an unfamiliar Windows/Firefox session appeared in the account information.

Again, none of those facts standing alone establishes who performed a particular game request. I understand that.

But Shuffle's allegation is itself highly technical. They claim specially generated requests were sent directly to a game backend through an authenticated session and that the activity could not have resulted from normal gameplay.

If that is the allegation, then the authentication and session evidence becomes extremely important.

The question should not simply be whether prohibited requests originated from an authenticated session associated with my account. The relevant question is whether the evidence establishes that I personally controlled the session responsible for those requests, particularly when I had already reported the account compromised before the disputed activity.

That is why I have asked for the relevant timestamps, session records, IP addresses, device/browser information, game round IDs and other technical information connecting the alleged exploit to me. Those records could potentially confirm or contradict my explanation.

There is another point I believe deserves consideration. Shuffle's Terms place responsibility on users for account activity, but their account security provision also specifically addresses circumstances where Shuffle has previously been notified that an account is no longer secure. My July 14 report therefore appears directly relevant to how responsibility for subsequent authenticated activity should be evaluated.

I am not asking Casino Guru to disregard the evidence it previously reviewed or to automatically rule in my favor.

I am asking the complaint team to compare Shuffle's technical evidence against the security evidence and chronology now presented and answer a much narrower question:

Does Shuffle's evidence actually establish that I performed or authorized the prohibited activity, or does it establish only that the activity occurred through an authenticated session associated with an account I had already reported as compromised?

Those are materially different conclusions.

Regarding the $10,000 deposit, I also understand Casino Guru cannot simply declare that Shuffle is legally required to return it. My point is narrower there as well. If Shuffle invalidated winnings because certain gameplay was allegedly illegitimate, I believe there should be a clear accounting showing which transactions and game rounds were invalidated, how the confiscated amount was calculated, and the contractual basis for retaining my original deposited funds in addition to invalidating the disputed winnings.

I recognize that reopening the complaint is not guaranteed. I am simply asking that the reconsideration be based on the entire chronology and the underlying technical connection between the alleged exploit and the person who actually controlled the relevant session, rather than treating the existence of activity on my authenticated account as automatically establishing that I personally performed it.

That is the issue I am asking Casino Guru to reconsider.

I understand the narrower point you're making now, particularly the chronology you highlighted: according to your records, you reported the account as compromised on July 14, before the disputed gameplay around July 16.

That is relevant context, and I understand why you believe it should be considered alongside the technical evidence.

However, I also think it's important not to reduce the reason your complaint was rejected to the fact that the activity came from an authenticated session.

Michal reviewed the evidence provided by both sides, including the game provider's report. The final decision also specifically noted that strikingly similar gameplay behaviour in the same games had been identified on multiple accounts linked to you during the same timeframe. Taken together, the complaint team considered the evidence sufficient to support the rule violations described by Shuffle, which is why the complaint was closed as Rejected – Unjustified.

Your July 14 report of a compromised account doesn't automatically invalidate those findings or establish that another person was responsible for the activity identified in the evidence.

You've now explained your position and the chronology in detail, including the security records you believe support it. If you've sent genuinely new evidence to the complaint team, they can determine whether there is sufficient reason to reconsider the closed case. But I don't think it would be useful for us to repeatedly reassess the technical evidence here on the forum when the complaint has already gone through an independent evidence review.

The same applies to the $10,000 deposit. I understand that you're asking for a clearer accounting of why it was retained, but we can't make a legal determination here that it must be returned.

At this point, I think the complaint team's existing decision and any response they choose to give regarding your reconsideration request should remain the reference point from Casino Guru's side.

I just want to understand one part of this better.

You said similar gameplay was found on "multiple accounts linked to me." What exactly does "linked to me" mean?

I have never created, controlled, played on, or used any other Shuffle.us account. So I'm trying to understand whether the evidence actually showed that those accounts belonged to me or were controlled by me, or whether they were technically linked to my account in some other way.

And the same question applies to my own account. Did the evidence actually show that I was the person who generated or authorized those abnormal requests, or did it show that the requests came through an authenticated session on my account?

I'm also wondering whether those other "linked" accounts could actually be connected to the same unknown session involved in my account compromise through an IP address, device ID, session information, or whatever identifiers were used to establish the link. That seems pretty important.

I know I didn't do this. I don't have the tools or technical knowledge to do what Shuffle is accusing me of doing, and I wouldn't even know how to generate these backend requests. I'm hoping there is technical evidence that can ultimately establish who or what actually accessed my account.

I'm not arguing that the provider didn't find abnormal activity. I'm saying I didn't do it, authorize it, or participate in it.

That's why the July 14 compromise report matters so much to me. I reported that something was wrong with my account before any of this gameplay happened.

This isn't fair and I don't deserve to lose $10k over this. I need this to be taken seriously and I need you guys to be an advocate for me. Please take a minute to look at the evidence I'll attach to this post and reconsider.

Another thing I think is important: when I reported my account compromised on July 14, Shuffle's automated response told me it could take up to 24 hours to receive a response. If a customer is specifically reporting that their account is compromised, how can the account remain active and usable during that waiting period without some type of temporary security restriction or freeze?

That's especially concerning here because the activity I'm now being accused of happened after I reported the compromise and while I was waiting for Shuffle to address it. I had already put Shuffle on notice that I believed someone else had access to my account.

Source: Shuffle.us Security page with support chat visible.

• Shows: "my acct was compromised"; bot recovery response; password listed as last changed July 14, 2026 at 7:29 PM; 2FA shown enabled.

Source: Google Recent Security Activity.

• Shows: July 14 new Windows sign-in, displayed time 8:02 PM, displayed location United Kingdom, marked "Action needed"
• I use MacBook and iPhone

Source: Shuffle.us Settings > Sessions.

• Shows: current macOS/Safari session; Windows/Firefox session at 146.70.* **.***, Hialeah, last used "a day ago"; other historical sessions.
• Shuffle account sessions

I just read this response. I'm sorry. I had already had a post sitting on my Mac from earlier and I just submitted it because I did not see this. So please don't think I was ignoring your suggestion.

*it's pending review so it might not even show up

I understand what you're asking about the phrase "multiple accounts linked to you."

I don't want to speculate about the exact technical method used to establish those links. The public complaint decision doesn't specify whether the connection was based on IP addresses, devices, sessions or another identifier, and I don't have a basis to tell you that it was one particular thing. On the other way, the evidence delivered by casino we cannot expose just like that. It wouldn't have a meaning cooperating with us from their point of view if it was like that. They have to also protect themselves in these cases.

What I can say is that this wasn't mentioned casually. Michal reviewed the casino's evidence together with the game provider's report and specifically included the similar activity on multiple linked accounts as part of the reason the complaint was rejected.

I've also looked at the additional material you've posted now. It does support one point you've been emphasizing: you reported that you believed your account was compromised before the disputed gameplay occurred, and there appears to have been unfamiliar account activity around that period.

What it still doesn't establish by itself is the next connection that the unfamiliar session was responsible for the specific abnormal game requests, or that the same security incident explains the other accounts referred to in the complaint decision. That is the technical link your argument would need to demonstrate in order to directly challenge the evidence already reviewed.

Regarding your question about why the account wasn't immediately frozen after you reported it as compromised, I understand why you're raising that as a security concern. But that is still separate from establishing who was responsible for the prohibited gameplay.

I also want to clarify one other point. Casino Guru's role in a complaint isn't to act as an advocate for either the player or the casino. Our role is to review the available evidence as independently and fairly as possible. In your case, that review resulted in the complaint being closed as Rejected- Unjustified.

You've now provided the additional security information and asked for reconsideration. Whether it is sufficient to justify revisiting the closed complaint is something the complaint team will have to decide, but I don't want to create the impression here on the forum that the existing conclusion has been overturned simply because this additional context has been provided.

Jaroslav,

I completely understand that Casino Guru cannot publicly disclose the casino’s fraud detection methods or private evidence. I’m not asking for that.

What I’m asking is for the complaint team to internally compare that technical evidence with the security timeline and unfamiliar account activity I provided.

The issue really comes down to two distinctions:

Authentication vs. attribution: An authenticated session proves the account was accessed. It does not necessarily prove who accessed it, especially when I reported the account compromised before the disputed gameplay occurred.

Technical linkage vs. personal control: An IP, device, session, or other technical connection between accounts is not necessarily proof that I created, controlled, or used those accounts. I did not.

If the abnormal requests and linked accounts trace back to my recognized devices and normal activity, that would obviously weigh against what I’m saying. But if they correlate with the unfamiliar access or unrecognized session associated with the compromise I reported beforehand, that could materially change the conclusion.

I don’t have access to Shuffle’s server logs, request data, or the provider’s technical report, so I cannot perform that comparison myself. Casino Guru has access to Shuffle’s evidence and now has the security evidence I provided. That puts your team in the position to actually cross check the two.

I’m simply asking the review team to determine whether the technical identifiers associated with the abnormal requests and linked accounts align with my normal activity or the unfamiliar activity surrounding the documented compromise.

That is the specific distinction I’m asking Casino Guru to reconsider.

I understand the distinction you're making, but I think we've now reached the point where it's important to clarify the limits of what Casino Guru can actually investigate.

Your complaint was already assessed using the evidence provided by Shuffle and the game provider. Based on that evidence, the complaint team concluded that the reported activity sufficiently supported the rule violations described by the casino, including the similar gameplay identified on multiple linked account.

What you're asking us to determine now goes considerably further.

Establishing whether an unknown person gained control of your account, identifying who actually controlled a particular authenticated session, determining whether the same person was behind activity on other accounts, and attributing specific backend requests to that person would essentially require a technical forensic investigation into a possible account takeover or cybercrime.

That is unfortunately outside the scope and capabilities of Casino Guru.

We can assess casino disputes based on the evidence available to us, but we are not in a position to investigate a suspected hacking incident or establish the identity of someone who may have accessed an account without authorization.

The screenshots and security information you've provided may support your claim that you experienced an account-security issue, but they don't allow us to make that further attribution ourselves. And without an independent finding establishing that the disputed activity was performed by an unauthorized third party, they don't overturn the evidence on which the complaint was originally closed.

If you believe your account was genuinely taken over and used by somebody else to carry out this activity, that part of the matter would need to be investigated by the appropriate cybercrime or law-enforcement authorities rather than through our complaint process.

So from Casino Guru's side, I think we have reached the limit of what we can reasonably determine in this case, and the existing complaint decision remains our reference point.

I don't buy this at all. If Shuffle gave you guys the evidence you all claim then that information would be sufficient enough to cross reference my account activity and data to determine attribution. Those findings are essential to this whole case. I am getting falsely accused and severely punished for something I DID NOT DO! If Shuffle is confident enough to keep my $10,000 deposit then this needs your attention and needs to be looked into. They need to be able to explain why after account was reported compromised, they did NOTHING and it cost me 10k. They made $10k at my expense for their security failure