How can you tell online casino scams from a genuine site, and what can be done once money has already been sent? Online casino scams tend to follow a few patterns: a copied regulator’s seal or a cloned site, early “wins” followed by a demand for a fee or tax before withdrawal, and later an offer to recover the lost money for another fee. The seal proves nothing. The regulator’s own register does. If money is demanded to release winnings, stop paying.

This guide names no casino brands. It explains each pattern, quotes what regulators and public agencies say about it, and points to the article with the full steps. Every source carries its date, and every complaints rule is tied to the jurisdiction that applies it.

Sources checked: 5 October 2026

How a typical online casino scam unfolds

Australia’s Scamwatch, a service of the Australian Government, describes the starting point in one sentence: “Scammers use websites, apps, social media posts, messaging apps and online ads to promote fake gambling or betting.” The steps below follow one typical case, told without names, from the first advert to the first demand for money.

  1. A player sees an advert or receives a message that promises easy money, sign-up credits or guaranteed wins, and opens the site.
  2. The site looks complete, with a welcome offer, a chat window and a seal in the footer that names a regulator.
  3. The player deposits a small amount and wins quickly. Scamwatch calls these “early wins”.
  4. A larger deposit follows, and the balance on screen grows.
  5. The first withdrawal is refused. According to Scamwatch, the scammers “suspend your account and demand payments for fake fees or taxes”.
  6. Each payment is followed by a new reason to pay again, until the player stops or has nothing left to send.

The balance on screen is only a number on a page that the site controls. A scam of this kind relies on how convincing the page looks, and it can catch careful people too. Stop paying once a fee appears.

Casino scam signs to check before you deposit

Scamwatch lists signs that gambling scams have in common. Several of them usually appear together, and each can be checked before a first deposit.

  • The first contact comes through social media, a messaging app or an advert.
  • The site promises easy money, sign-up credits or guaranteed wins.
  • You are pressured to keep paying small amounts before you can access winnings.
  • Extra fees, charges or taxes must be paid before winnings can be accessed.
  • Bonuses are offered for bringing in other people.
  • A “job” is offered that involves money transfers or sharing bank details.
  • The owner of the site is unclear.
  • Customer support is unresponsive, vague or disappears when you ask to withdraw funds.

None of these signs proves a scam on its own. Several together are a reason to check the register before paying anything.

The main types of online casino scams

Online casino scams differ in detail, but three types recur in the warnings that regulators and public agencies publish. Each is summarised here with what the official source says and a link to the full article.

Fake seals and cloned sites

A fake seal is an image copied from a real licence holder or regulator. The Curaçao Gaming Authority (CGA) sets the test in its certification policy: “Clicking on the seal must redirect the user to https://cert.cga.cw.” The policy adds: “If the certificate displays a different domain name from the website being accessed, this indicates that the website is displaying a certificate belonging to another operator and should be considered unauthorized or fraudulent.” A seal that differs in design, colour or format also means, according to the same policy, that the CGA has not authorised the site. Check the domain, not the seal.

Regulators publish warnings too. The CGA lists its public warnings about named websites on one page, and the latest entry there is dated 17 July 2026. The Malta Gaming Authority (MGA) keeps a page of unauthorised URLs and states: “Any reference to the MGA and/or gaming licence/s said to be issued by the Maltese Authority, as stated on these domains, is false and misleading.” The latest notice on that page is dated 23 September 2026.

A cloned site goes further and copies a real licence holder’s name and look. On 16 July 2026 the MGA published a notice about three web addresses that present themselves as licensed operators, and it encourages the public to check the licensing status of any operator in its official Licensee Register. A seal is a reason to look at the register, not to trust the page. The full method is in the article on how to spot fake licence seals and cloned casino sites.

A fee or tax before withdrawal

Scamwatch names this as a warning sign: “You are told to pay extra fees, charges or taxes before you can access your winnings.” The same page advises against paying again to unlock winnings, recover losses or prove your identity.

The reason given changes, such as a tax, a processing charge or a release fee, but the pattern stays the same: money goes out before any winnings come back. Keep every message and receipt, and pause before sending more. The steps in order are in the article on what to do when an online casino is not paying out.

Recovery scams

A later wave targets people who have already lost money. Action Fraud, the reporting service for England, Wales and Northern Ireland that Report Fraud has since replaced, says that these fraudsters “pretend to be a government, police or law agency that can help recover the money that was lost, but ask for a fee to get it back”. The same page states: “Genuine agencies never ask for fees to recover money lost to fraudsters.”

In the US, the Federal Trade Commission (FTC) warned on 3 August 2026 that “Refund and recovery scammers buy lists of people who’ve already been scammed”, and its consumer alert advises: “Never pay up front for a refund.” Since 4 December 2025, Report Fraud, run by the City of London Police, has replaced Action Fraud, although the older page is still online. The article on how gambling recovery scams work explains the approach in full.

Scam or dispute? When a licensed casino holds a payment

Not every blocked withdrawal is a scam. A dispute with an operator that holds a genuine licence has a licensing authority behind it, and a scam site has no real one, so telling the two apart changes what comes next.

Great Britain’s Gambling Commission requires a licensed operator to verify “the name, address and date of birth” of a customer before play. Identity checks, known as KYC (know your customer), are therefore a normal part of dealing with a licensed operator in that jurisdiction, and they are not a sign of a scam by themselves. The same Commission page says that a withdrawal request “must not result in a requirement for additional information to be provided if the operator could reasonably have expected to have requested this earlier”. That is a rule for operators licensed in Great Britain; other jurisdictions may differ. The page dates from 15 February 2022.

The other end of the scale is documented as well. On 16 October 2025, Eurojust, the EU Agency for Criminal Justice Cooperation, announced that an investigation into suspected illegal casino websites had started with complaints from people who were “unable to withdraw their winnings”. According to Eurojust, turnover reached nearly €1 billion over five years, and authorities in France, Belgium, Cyprus, Czechia, Lithuania and Malta were involved. The proceedings had not ended at that date, so the allegations are unproven. The press release names no website.

Two questions help in a real case. Does the regulator’s own register list the operator and the site address? Does the operator state a complaints procedure and name the authority that licenses it? A clear yes to both suggests a licensed operator, and the complaints route then depends on that authority, as the section on complaints below shows. A no to both is a reason to stop paying. The article on why a casino may ask for a bank statement covers identity checks in detail.

Check the register, not the seal

Every reliable check ends on the regulator’s own website, never on a page that the casino controls. The steps are the same in any jurisdiction.

What the register shows – and what it does not

  1. Find the name of the licence holder and the licensing authority stated on the site.
  2. Open the authority’s website by typing its address or searching for it, never through a link in the seal.
  3. Look the licence holder up in the authority’s register. Great Britain’s Gambling Commission keeps a public register, and the MGA keeps a Licensee Register.
  4. For a Curaçao licence, check that the certificate on cert.cga.cw lists the exact domain of the site in use.
  5. Compare the licence holder, the licence number and the web address with what the site shows. Any difference is a reason to stop.

A match shows that the named company holds a licence from that authority and, where the register or certificate lists domains, that the site address is covered. It does not show how quickly the operator pays or how a particular dispute will end. Do not rely on what the site says. Check the regulator’s register.

Which jurisdictions license online casinos, and what each licence means, is covered in the hub on how to check an online casino licence. A short overview is on SlothBet’s page about which markets license online casinos. Check whether operators need a local licence where you live.

Crypto and card payments

The Financial Conduct Authority (FCA), the UK’s financial regulator, gives a general warning about crypto assets in its crypto basics guidance, updated on 29 January 2026: “you should be prepared to lose all your money”, and “you should not expect any kind of compensation to cover any form of crypto-related losses”. The warning covers crypto assets in general, not gambling with crypto. No consumer warning from a gambling regulator aimed specifically at crypto casinos was found; the Gambling Commission and the MGA set rules for licensed operators that accept crypto assets. What is known is set out in the article on the risks of crypto casinos.

Card payments follow other rules. A card dispute is raised by the card issuer under the card scheme’s rules, such as Visa’s or Mastercard’s, so the outcome cannot be assumed. The process is described in the article on how an online casino chargeback works.

Where to complain and where to get support

Where a complaint goes depends on who licenses the operator. A scam site may have no real licensing authority behind it, which is why the register comes first. For a licensed operator, the steps run in this order.

  1. Keep every email, chat transcript, receipt and screenshot, with the dates.
  2. Complain to the operator through its complaints procedure first.
  3. Identify the licensing authority from the register, not from the seal.
  4. Take the complaint to the route that the authority offers.

Three examples show how different the last step can be. In Great Britain, a player who has been through the operator’s procedure can go to an alternative dispute resolution (ADR) provider: according to the Gambling Commission, “After 8 weeks you can take your complaint to an ADR provider”, which it describes as “a free, independent service” (page updated 15 May 2026). In Malta, the MGA says on its complaints page: “It is strongly recommended that you actively seek to resolve your dispute directly with the operator’s support and management prior to lodging your complaint with the Malta Gaming Authority” (page updated 22 September 2026). In Curaçao, the CGA states that it “does not handle individual complaints against gaming providers”, so whether an outside complaint route exists depends on the licensing authority. The routes for each licence are set out in the guide to online casino complaints by licence.

Reporting a scam is separate from complaining. In England, Wales and Northern Ireland, fraud can be reported to Report Fraud (formerly Action Fraud) at reportfraud.police.uk or on 0300 123 2040. In Scotland, fraud is reported to Police Scotland on 101. In the US, reports go to reportfraud.ftc.gov. In Australia, Scamwatch takes reports.

After a loss, paying once more to unlock the money can feel like the only way back. If gambling or a loss has become hard to cope with, free support is available. Gambling Therapy, run by Gordon Moody, describes itself as “A global service offered by Gordon Moody, providing free practical advice and emotional support to anyone affected by gambling”. It is online, with forums and live support. In England and Scotland, the National Gambling Helpline is 0808 8020 133. In Wales, the Gambling Commission lists 0808 2819 265, the free 24/7 helpline of the NHS All Wales Gambling Treatment Service. Services in other countries are listed in the section on self-exclusion schemes by country, and SlothBet’s responsible gambling page sets out the site’s own approach.

This guide gives general information about online casino scams and is not legal advice. Rules differ by jurisdiction, and a regulator’s own page is the authority on its own rules.

Questions about casino scams

How can you tell if an online casino is fake?

Start with the register, not the seal. Find the licence holder and licensing authority named on the site, look that licence holder up in the authority’s own register, and check that the site address matches. Several warning signs together, such as fees before withdrawal or vague support, are a reason to stop paying.

Is it normal for a casino to ask for a fee or tax before paying out winnings?

Australia’s Scamwatch lists a demand to pay extra fees, charges or taxes before winnings can be accessed as a warning sign of gambling scams, and it advises against paying again to unlock winnings. A request for identity documents is a different matter, which the section on scam or dispute above explains.

Does a regulator’s seal on a casino site prove that it is licensed?

No. A seal is an image, and images can be copied. The CGA says that a certificate showing a different domain from the site in use belongs to another operator. Only the regulator’s own register or certificate page can confirm that a licence covers the site being used.

A company says it can recover money lost to a casino scam. Can it be trusted?

Be cautious. Action Fraud (now Report Fraud) warns that recovery fraudsters ask for a fee to get money back, and that genuine agencies never ask for fees to recover money lost to fraudsters. The FTC advises never paying up front for a refund. Reports go to the fraud reporting service of the country concerned.

Is a delayed withdrawal always a sign of a scam?

No. Identity checks can delay a payment at a licensed operator, and in Great Britain the operator must verify a customer’s name, address and date of birth. A delay becomes a concern when new payments are demanded first, or when no regulator can be found for the operator.

Where can online casino scams be reported?

It depends on the country. In England, Wales and Northern Ireland, fraud can be reported to Report Fraud, in Scotland to Police Scotland on 101, in the US to reportfraud.ftc.gov and in Australia to Scamwatch. A complaint about a licensed operator goes to the operator first and then to the route that its licensing authority offers.

Can a card payment to a casino be reversed?

A card dispute is raised by the card issuer under the card scheme’s rules, such as Visa’s or Mastercard’s, so the outcome cannot be assumed. Rules and time limits differ between banks and card schemes, which makes the card issuer the source for the process in your case.

Sources