Disguised Gambling in Games and Apps

A three-question test for anything that looks like a game

Before you put money into an app, a livestream game, or a website that calls itself a game, run it through three questions. You do not need to read any law to do this, and it works in every country in Asia.

Question one: do you pay in? Real games charge once, or sell you an item, or are free. A disguised betting operation wants a stream of money from you: coins bought with real cash, gift income purchased in rounds, entry fees for each draw. If the money keeps flowing in per round or per play, that is a stake.

Question two: does chance decide the outcome? In a skill game, practicing makes you better and the result is up to you. In a disguised gambling product, a random mechanism sits somewhere in the middle: a spin, a dice roll, a draw, a random monster wave. Vietnamese police described exactly this pattern when they broke up the Rikvip/Tip.club network, an app running 42 games that simulated forms of gambling¹. The games looked like entertainment, but the results came from the same randomizing engine a slot machine uses.

Question three: can you cash out? This is the tell that separates a game from a bet. If your winnings can be converted back into money, or into something that is routinely traded for money, you are gambling, whatever the app calls the activity. Chinese state media reported that Hero Tower Defense players win gift income through "heroes fighting monsters" and then convert it to cash². That conversion step is the whole business model.

If the answer to all three is yes, you are not looking at a game. You are looking at a betting product wearing a game's clothes, and everything on this page applies to it.

How disguised gambling works in games and apps

The basic recipe has three ingredients, and operators vary only the wrapper.

The wrapper. The product is dressed as something with a legitimate reason to exist: a mobile game, a social casino, a collectibles marketplace, a livestream entertainment show. Research on skin gambling documented how C5game, a site nominally for trading game skins, ran jackpot-style gambling events where players paid real money for website coins for a chance to win high-value skins⁵. The site had a cover story, and the cover story was trading.

The random engine. Underneath the wrapper, a random number generator decides who wins. It does not matter whether the animation shows monsters, cards, wheels, or spinning dice. Guidance on gaming and gambling notes that social casino products let players wager real money while offering unusually high payout rates and higher probabilities of winning compared to real gambling⁶. That generosity is itself a red flag: legitimate games do not need to let you win suspiciously often, because they are not trying to hook you into a betting cycle.

The cash-out rail. Winnings become gift income, coins, skins, or mystery prizes, and then become money through a conversion step. This is where the operation becomes gambling in substance. It is also where the money gets hard to trace, which suits the operators. Chinese investigators describing underground football betting noted that the underground bank model for moving gambling funds is cumbersome but highly concealed, which is exactly why many big-spending gamblers choose it⁷.

Here is how the three ingredients line up across the real cases on this page:

One more pattern matters for anyone in Asia: the same disguise logic runs in reverse. Japan's National Police Agency states plainly that baccarat, slots, sports betting and anything else conducted online is a crime regardless of its name or content⁸. The name on the app does not protect you, and it does not protect the operator either. The Rikvip case shows how far the disguise goes: the network offered 42 separate games simulating forms of gambling, all dressed up as ordinary mobile entertainment¹. For players who want to keep such apps off their phone entirely, tools like BetBlocker and GamBan are effective software programs that block online gambling websites and apps⁹.

If you want to check whether a site or app is what it claims to be, the warning signs and checks are covered on the page about how to spot a scam gambling site, and the differences in risk are set out in licensed vs unlicensed online casino.

Hero Tower Defense: heroes fight monsters, players cash out

Hero Tower Defense is the clearest recent example of the full loop in one product, and it was exposed by Chinese state media in September 2023².

On the screen, it looks like a tower defense game: heroes fight monsters. That is the wrapper. The actual mechanic is that players stake money on the outcome of those fights, and the fights are decided by the game's random engine, not by the player's skill. When the heroes win, the player earns gift income. The gift income is then converted into cash. Chinese state media described the process as players obtaining gift income through "heroes fighting monsters" and monetizing it².

Two things make this product worth understanding in detail.

First, the distribution channel. Hero Tower Defense was recommended to players by livestream hosts². This matters because it means the product reached people through entertainment they were already watching, in a social context where a trusted or charismatic figure vouched for it. A viewer who would never open a betting app on purpose can be walked into one by a host they follow. The same dynamic drives the blind bag livestream games described below.

Second, the monetization vocabulary. Nothing in the product is called a bet, a stake, or a payout. It is gift income, heroes, monsters. But if you run the three-question test from the top of this page, all three answers are yes: money goes in per play, chance decides the fights, and winnings convert back to cash. The disguise is purely verbal.

The pattern is not unique to this one app. The Rikvip/Tip.club network broken up by Vietnamese authorities ran 42 games simulating forms of gambling under a single app umbrella¹, and skin gambling sites like the C5game jackpot events documented by researchers show the same loop with game skins as the currency⁵. Operators copy each other quickly, so expect the wrapper to change: fishing games, merge games, pet games. The loop underneath will not change.

If you have already put money into something like this and cannot get it back, the steps to take are on the page about what to do after a gambling scam, including the fee demands covered under withdrawal fee scams.

PeckBirdy: the framework linked to China-aligned APT groups

Not every hidden gambling product exists to take your bet. Some exist to take everything on your device, and gambling is just the camouflage.

In September 2026, Infoblox reported that China-aligned APT groups have been running a framework called PeckBirdy, and that since 2023 it has hidden its malware command and control domains inside low-quality Chinese-language casino websites⁴. The sites themselves are junk: poorly built gambling pages that nobody would miss. That is the point. A domain that looks like a casino site does not attract the attention that a known espionage domain would, and the traffic between an infected device and a "casino" looks like ordinary gambling traffic to anyone watching the network. The disguise works partly because online gambling itself draws enforcement attention in China, where players who gamble online face hefty fines and imprisonment⁴, and online football betting is treated as a criminal offense¹⁰, so a gambling site blends into a category already crowded with illicit operations, including sites such as Ledu that recruit mainland Chinese citizens as members¹¹.

For a reader in Asia, this changes the risk calculation around sketchy gambling sites. The danger is not only losing your stake to a rigged game, which is covered on the page about rigged online casino games. A low-quality casino site can be the visible tip of a cyber espionage operation, and visiting it or installing its app can expose you to malware that has nothing to do with gambling.

Who these games target, including minors

Disguised gambling products do not target experienced gamblers, who can recognize them. They target people who think they are playing a game, and that includes children.

Why minors are exposed. The disguise is precisely what defeats the protections that exist for gambling. Age verification on a betting site is a gate; age verification on a "tower defense game" is weak or absent, because the product claims not to be gambling at all. A teenager who cannot buy a lottery ticket can download an app where heroes fight monsters for gift income. Regulators have responded where they can: China's finance ministry requires "minors are prohibited from buying lottery tickets" notices at lottery points of sale¹², and Macau's gaming law bars anyone under 21 from entering casinos¹³. But those rules apply to products labeled as gambling. A disguised product slips past the label.

What the law says about underage involvement. Singapore's Gambling Control Act 2022 creates offenses around:

• gambling with underage individuals
• gambling by underage individuals
• entering a gambling venue
• using false evidence of age
• inducement of underage individuals to gamble
• unlawful employment of young persons in gambling¹⁴

The inducement offense is the one that bites hardest against disguised products, because recommending a betting app to a minor is the whole distribution strategy of livestream promotion. Chinese guidance adds that where gambling by young people falls below the punishment threshold, they are exempted from punishment but given criticism and education, and parents or guardians are ordered to discipline them strictly¹⁵.

If someone in your household may be caught in a product like this, blocking software can help at the device level: BetBlocker and GamBan are effective programs that block online gambling websites and apps⁹. And if a child has been enticed online, the reporting routes are on the page about where to report a gambling scam.

What the law does not cover

The law draws lines, and disguised gambling lives in the gaps. Knowing where the lines are tells you where the danger is concentrated.

Small-stakes recreation is left alone. China's embassy guidance, citing the Interpretation on Gambling Criminal Cases, states that recreational activities with small money stakes not for profit, and businesses such as chess and card rooms charging only normal venue and service fees, are not treated as gambling¹⁶. A separate notice adds that relatives playing mahjong or poker with money stakes without a profit motive are not punished, and neither are non-relatives playing for small stakes¹⁷. These carve-outs exist so that ordinary social play is not criminalized. The problem is that a disguised gambling operator can point at exactly this language and claim to be a game with prizes.

Licensed casinos are carved out of the general rules. Singapore's Gambling Control Act 2022 states that Parts 4, 5, 6, 7 and 8 do not apply to gambling carried on within any casino¹⁴, and that section 31, which covers gambling with underage individuals and inducement, does not apply to gambling within any casino or to social gambling¹⁴. Japan's integrated resort legislation similarly provides that Penal Code Articles 185 and 186, the gambling offenses, do not apply to licensed casino acts in the licensed casino area¹⁸. These carve-outs are deliberate: licensed venues are regulated separately, with their own age checks and controls. But they also mean the general protections are built around places and products that announce themselves. A licensed casino checks your ID at the door. A disguised app has no door.

The gap, stated plainly. Across the region, the rules that protect players, especially young ones, attach to things called gambling: casinos, lotteries, betting sites. Disguised products deny the label. Chinese enforcement notices list the prohibited forms in one breath: gambling for profit using electronic game machines, chess and cards, mahjong, dominoes, dice, Mark Six, the internet, WeChat red packets and Texas Hold'em¹⁹, and Chinese state media reported the arrest of a network that recruited mainland citizens as members of the Ledu gambling website¹¹, alongside the official position that online football betting is a criminal offense¹⁰. The list keeps growing because the wrappers keep changing. The law catches up after the product appears, which is why the three-question test at the top of this page is worth more to you than any list of banned names: the wrapper will be new, but pay-in, chance, and cash-out never are.

For the related question of loot boxes and whether they count as gambling in law, see the page on loot box rules; for the broader landscape of fake sites, rigged games and how to report them, start at gambling scams and safety in Asia.