How to Spot a Scam Gambling Site

Scam gambling sites are not subtle once you know the pattern. They borrow regulator logos they have no right to, clone the look of famous brands, arrive as links in ads and messaging apps, and quietly route your deposit to a personal bank account. The checks below take ten minutes and cost nothing.

License checks: what a real license shows

A license is the single most important thing a gambling site shows you, because everything else on the page can be faked. A real license does three things: it names the company that actually operates the site, it carries a registration number you can check yourself, and it appears on the regulator's own public register².

Start with the footer of the website. Licensed operators display the registration number or logo of their licensing body there, in forms such as "Licensed by PAGCOR", "Regulated by Curacao eGaming" or "Under Malta Gaming Authority (MGA)"¹. Note the exact company name and number, not just the logo, because logos are easy to copy.

Then go to the regulator's website and check three things against its public register: the registration number, the brand name, and even the IP address of the site. If the details match, the license is real. If no data is found, the license is likely fake or borrowed from another operator¹. The UK Gambling Commission puts the same advice plainly: before you transfer money into a gambling account, check that the business holds a license, and check that the license details, including the website domain names it covers, match the public register². A license held by "Casino X Ltd" does not cover a site running on a different domain.

Two common tricks fail this test immediately. The first is the borrowed license: the scam site quotes a real number belonging to a different, legitimate operator, hoping you will see a match somewhere and stop looking. The second is the invented regulator: an impressive-sounding authority with no public register at all. If you cannot check the number anywhere official, treat the site as unlicensed.

A quick word on what a license does not do. It does not guarantee you will win, and it does not mean the site is legal for you to use from wherever you are sitting. In Japan, for example, official guidance is that gambling at an online casino by connecting from within Japan is a crime even if the casino is legally operated overseas, whatever the game's name or content⁸. A verified license tells you the operator answers to a regulator; whether you may play is a separate question covered on our country pages, such as gambling in Japan.

PAGCOR license: how to verify it

The Philippines is the region's main licensing hub for online casinos, so the PAGCOR check is the one you are most likely to run. PAGCOR treats verification as something the public should do itself, and it has built tools for exactly that purpose.

The PAGCOR Guarantee website is an online verification facility that lets anyone check whether an online gaming provider is licensed or not, and it features a regularly updated list of licensed internet gaming platforms under PAGCOR's oversight³. PAGCOR created it to shield the gaming public from criminal activities arising from illegal online gaming sites³. The regulator has also been developing a protection app for online gaming players along the same lines⁹.

Here is the check, step by step:

1. Find the operator's disclosed company name and registration number on the site, usually in the footer. PAGCOR requires licensed platforms to publicly display their registration number and allows players to verify validity directly¹.
2. Check that name against PAGCOR's list of accredited operators, and confirm the approved gaming scope matches what the site actually offers⁶.
3. If the site claims a Philippine offshore gaming license, check the list of licensees on the PAGCOR website before accessing it; PAGCOR has urged the public to do exactly this when warning about fake online gaming sites¹⁰.
4. If the site is not listed, stop. PAGCOR's position is blunt: any link not posted on the PAGCOR website is considered illegal⁴.

Two further signs separate real PAGCOR platforms from imposters. Legitimate gaming websites show a PAGCOR infographic or video clip discussing responsible gaming reminders during log-in⁴. And legal or registered online gaming websites require membership registration that strictly observes Know-Your-Customer (KYC) verification⁴. A "PAGCOR-licensed" site that lets you play with nothing but a phone number is lying about something.

Real examples of what a licensed Philippine platform looks like: Casino Plus states it is licensed and regulated by PAGCOR and that players can freely check its legitimacy online⁶, and Okada Online Casino describes itself as backed with an approved online gaming license (PIGO) from PAGCOR¹¹. Licensed platforms in the Philippines must comply with strict regulations covering operational standards, player protection, anti-money laundering measures and responsible gambling practices¹², and only platforms with a PAGCOR license may operate legally there¹³.

A note on the PAGCOR name itself: displaying it proves nothing. The regulator has repeatedly warned the public against playing in illegal online gambling sites that use its name⁴. The badge is the start of the check, not the end of it.

Player protection tools licensed sites must offer

Player protection tools are the feature scammers never bother to build. Faking a license logo takes one minute; building deposit limits, self-exclusion and KYC takes real investment. That makes this section of a site one of the fastest honesty tests available.

What licensed sites offer, in practice:

• Pre-commitment tools. Good gambling sites let you set in advance the time and money you plan to spend, and you receive a reminder once the limit is reached¹⁴. Independent safer gambling guidance recommends using exactly these tools, and notes that tools to set budget and time limits are available on many slot machines, mobile and internet gambling sites¹⁵.
• RG Check accreditation. Sites carrying the RG Check mark have pre-commitment features that help protect you from excessive risk¹⁶. It is a voluntary accreditation, so its absence is not proof of a scam, but its presence is a strong positive signal.
• Help and assistance. Regulators require operators to assist patrons who seek help on responsible gambling matters or display signs of problem gambling¹⁷. In Hong Kong, betting licensees must display prominent notices at their premises and websites warning of the seriousness of problem gambling and giving information on local services, and must provide contact details of counseling services on request¹⁸. The HKJC publishes a Problem Gambling Helpline, 1834 633¹⁹.
• Self-exclusion. Licensed operators are generally required to participate in self-exclusion programs where they operate; unlicensed offshore sites are not bound by those rules²⁰. If a site offers no way to exclude yourself, ask why.

So are sites without these tools always scams? No, but treat the gap as a serious warning. A site with no limits, no exclusion and no help information is either unlicensed or ignoring its obligations, and either way your money is at greater risk. For how risk actually differs between the two kinds of operator, see licensed vs unlicensed casino.

Site transparency: what to look for before you deposit

Transparency is about what the site tells you before it has your money. Scam sites are vague by design: vague about who runs them, vague about where your money goes, vague about the rules.

The basics of the site itself. The site should use https, have identity verification, and publish a privacy policy²¹. A gambling site without https in 2026 is disqualifying on its own.

Fairness seals. Look for seals from recognized testing institutions such as Gaming Labs, iTech Labs, BMM Testlabs or eCOGRA, which confirm the games are tested²². Click the seal: on legitimate sites it links to a real certificate. On scam sites it is usually just an image.

Terms and conditions. Real operators publish detailed terms covering verification, withdrawals and account closure. A site whose terms are one paragraph long, or clearly copied from another brand with the wrong name left in, is telling you something. For how cloned brands work in detail, see casino impersonation scams.

Identity verification. Licensed operators ask for a picture ID, such as a copy of your passport, driver's license or national ID card, plus a recent utility bill listing your name and address as proof of residence²³. PAGCOR requires real identity documents during registration to stop fake accounts²⁴. A site that asks for none of this is not being friendly; it is being unaccountable.

Where the money goes. A Japanese government survey of online casino sites found that no surveyed site using bank transfer disclosed the deposit destination or withdrawal source account before member registration, so the accounts could not be identified in advance²⁰. The lesson applies everywhere: if you cannot see before signing up where a bank transfer would go, that is normal for the industry, and it is exactly why bank transfers to unverified sites carry the most risk. If the destination turns out to be a personal account rather than a company account, stop.

How you found the site. This matters more than most people think. Links that arrive through ads, pop-ups, messaging apps or SMS are the standard delivery route for scam gambling sites. When the HKJC found fake SMS messages impersonating it, its advice was to change your password through its official online customer center, call 1818, and report to police immediately if you had given personal data to suspicious third parties¹⁹. The general rule is the same: a gambling site that came to you, rather than you going to it, deserves extra suspicion. For how fake betting platforms are pushed through romance and messaging channels, see pig butchering scams.

Chinese-language and regional sites. If you play on Chinese-language sites, the same checks apply with one addition: verify that the license and the company name on the Chinese page match the English version and the regulator's register. Consumer testing in Hong Kong found that most tested gambling-style mobile games had no Random Number Generator certification at all²², which is a reminder that in this market, certification marks are often simply absent, and a game's polished look is no proof that it is fair.

Payments and withdrawal red flags

Payments are where a scam site stops pretending. Everything before your deposit is theater; the withdrawal request is when the mask comes off. These are the patterns to know.

The fee-before-withdrawal trap. Platforms running this scam demand deposits or "unfreezing fees" before they will let you withdraw, show page errors, and produce repeated failed withdrawals. Some show no record of your deposits or winnings at all⁷. This is the single most common scam in the region, and it has its own page: withdrawal fee scams.

Payments to personal accounts. If the deposit instructions send money to a named individual's bank account, a personal e-wallet or a crypto address with no operator custody, you are not depositing with a casino; you are wiring money to a stranger. Licensed operators take payments into company accounts and disclose them through documented channels.

Hidden fees on the way in. Independent guidance warns to watch out for hidden fees when using a credit card to play¹⁵. A site that quietly adds charges to deposits, or changes the effective exchange rate, is showing you how it will behave when larger sums are at stake.

Payment features that cut both ways. Some wallets let you block gambling entirely: Skrill, for example, offers a gambling block feature so the account cannot be used to deposit at online casinos²³. That is a useful control for your own spending, but it is also a reminder that legitimate gambling payments flow through documented, blockable channels. A site that insists on channels nobody can block or trace is choosing those channels for a reason.

What to do when a withdrawal goes wrong. Stop depositing immediately. Demands for more money to "unlock" money you are already owed are never legitimate; no licensed operator charges a fee to release your own winnings. Save screenshots of your balance, your deposit history and every message from the site, then follow the steps in what to do after a gambling scam. And ignore anyone who later contacts you offering to recover your funds for an upfront payment; that is a second scam aimed at the first one's victims, covered in fund recovery scams.

Where to report a suspected scam site

Reporting does two things: it gives your bank or the police a chance to act on your case, and it puts the site on the radar of the people who take these operations down. Even if your own money is gone, a report helps the next player.

Where to go:

• Your bank or payment provider, first and fastest. A recall request has the best chance in the first hours after a transfer. See scam reimbursement rules for how banks in the region treat these losses.
• Your national police or anti-scam portal. In Hong Kong, the HKJC's advice in a fake-SMS case was to report to police immediately if personal data or account details had been given to suspicious third parties¹⁹. Our page on reporting a gambling scam lists hotlines and portals across 12 jurisdictions.
• The regulator being impersonated. If a fake site is using the PAGCOR name, PAGCOR wants to know; it maintains its warnings and its list of licensees precisely so the public can flag imposters⁴. Regulators act on these reports.
• Government check tools. Several governments run apps and databases for checking numbers, accounts and websites before you pay anything; see scam check tools.

The regional picture is also moving in players' favor, as the table below shows.

Cooperation is real, but it works downstream of your report.

A final note: if your gambling feels like it is slipping past the limits you set, free and confidential support services exist across the region, and operators from the HKJC to Natural8, which points players to www.begambleaware.org, publish help resources¹⁹. A site that hides its help resources is failing the same transparency test as one that hides its license.