Bally’s Casino in Ohio Falls Victim to Scammer

Article by : Erik Gibbs Dec 14, 2023

• 
• 

Bally’s Evansville in Indiana finds itself entangled in a recent incident where casino officials have informed local law enforcement about falling prey to a phishing scam. According to authorities, the scam has led to the loss of approximately $212,000.

Bally’s Evansville took a step forward and, anticipating a potential scam, the casino officials reached out to the Evansville Police Department to report suspicions about the phishing scam.

According to casino representatives, the incident unfolded amidst ongoing construction work at the property.

An individual claiming association with the construction firm contacted Bally’s executives, reporting a problem with their work email. Following this, the caller suggested the use of a new email address for communication.

The same individual later emailed Bally, furnishing a bank account and routing number for the payment of the completed work.

Having unwittingly fallen victim to a sophisticated ruse, Bally’s officials disclosed that the casino inadvertently settled a $212,671 invoice, only later discovering that the initial telephone call, subsequent email and bank account were all components of an elaborate con.

Neither the police nor Bally’s has shared additional details and an ongoing investigation seeks to unravel the intricacies of the scheme that led to the redirection of the funds.

Nestled along the Ohio River, Bally’s Evansville stands as a prominent land-based casino, boasting a sprawling 45,000-square-foot gaming space.

Housing an impressive array of 950 slot machines, 30 electronic and live dealer table games, and a cutting-edge William Hill Sportsbook, the casino offers a diverse and vibrant gaming experience.

Beyond the gaming floor, the establishment complements its offerings with 350 guest rooms, four distinct restaurants and ample space for weddings and events.

In a strategic move in 2011, Gaming & Leisure Properties, Inc. (GLPI) acquired the casino, originally named Tropicana, from Caesars Entertainment for a substantial $480 million.

Subsequently, Bally’s secured the operating rights to the property by paying GLPI a noteworthy $140 million. As part of the ongoing arrangement, Bally’s continues to pay annual rent amounting to $28 million to GLPI, solidifying its presence in this dynamic gaming and hospitality landscape.

In recent times, cybercriminal activities have targeted prominent casinos, impacting industry leaders like MGM Resorts and Caesars Entertainment.

These cyberattacks resulted in operational disruptions and broader consequences for the affected giants, with MGM Resorts refusing to pay ransom demands, leading to prolonged disruptions across its US properties.

The breach involved the sophisticated cybergang, Scattered Spider, gaining unauthorized access to MGM’s IT systems through a deceptive phone call, posing as an employee in need of login credentials reset during a brief 10-minute call to MGM’s help desk.

In response to the escalating cyber threats in the casino industry, the FBI issued a Joint Cybersecurity Advisory, emphasizing the risk of data extortion schemes utilizing social engineering manipulation.

Casinos are urged to heighten their vigilance and promptly enhance their IT security measures to counteract these evolving threats.

While the incident at Bally’s Evansville may not directly align with a cyberattack, it adds to the growing concern of criminal assaults on major gaming operators’ casinos, indicating a shift from previous cybercriminal targeting patterns that focused more on tribal group-owned casinos.