Fake gambling licence claims

How a false licensing claim is built

A false claim is not one thing, and the most dangerous construction is the one where every company-level check comes back clean. Where no official source we read documents a form, that is recorded in what we could not verify rather than asserted here.

The clone case: a licensed company, an unlisted domain

In a notice dated 16 July 2026 the Malta Gaming Authority said it had “observed a pattern of websites impersonating MGA-licensed operators and misleading consumers into believing that they are licensed, regulated or otherwise authorised by the Authority.” It disclaims connection with any website or entity impersonating it or its licensees, and directs the public to its official Licensee Register.

A company-level check against such a site returns the genuine licensee: real name, real registration number, real licence record. What is not real is the link between that licence and the site in front of you — and most registers are not built to answer that.

• Great Britain. The register accepts a domain; its field is labelled “Search by business name, trading name, domain name or account number”. But the Commission records that “Domain names and trading names are provided by the gambling business” and that it “cannot guarantee the accuracy of information provided by third parties”.
• Curaçao. No domain column exists. The ordinance prescribes five register fields — licence type and activities, holder’s name, Chamber of Commerce registration number, date granted, validity status — and all four published register files contain no occurrence of the word “domain”.
• Malta. The domain binding lives in the seal record’s “Website Urls” list, and in a separate URL Checker taking a website address.

The wrong credential, and the retired one

A supplier authorisation is not permission to take bets from the public

Curaçao issues two seals and states that they are not interchangeable. A Certificate of Operation Seal goes to a business-to-consumer licensee, issued per approved domain. A License Certificate Seal confirms the licence itself and sits on a corporate website; a licence certificate does not authorise player-facing websites. The regulator’s domain module covers B2C licensees only — game-supplier licence holders do not operate licensed consumer-facing domains — so a licence certificate on a player-facing site is the wrong certificate type. The published register carries a company-type column using exactly “B2B” and “B2C”.

Malta draws the same line under other names: a Gaming Service Licence is the business-to-consumer licence to offer a gaming service, a Critical Gaming Supply Licence the business-to-business licence to supply the material elements of a game. Great Britain separates them inside the display duty itself, with different licence conditions for remote operators, for business-to-business licensees, and for societies, local authorities and external lottery managers — guidance last updated 11 June 2021.

A credential that was genuine and then was not

The Curaçao regulator’s portal states that the orange seal and certificate previously issued to sub-licensed operators not yet issued with a final licence are no longer valid, that any previously displayed seal image must be removed immediately, and that the orange seal must not appear anywhere on the website; opening a certificate for one returns an invalidity message. An announcement dated 25 September 2025 set the termination of that Certificate of Operation at 15 October 2025, and states that displaying one afterwards breaches Curaçao law.

What a dynamic seal actually proves

• A static seal

  An image the website serves. The site controls the file and, where the seal is a plain embedded image, what clicking it does.

• A dynamic seal

  A link to a record generated on the regulator’s own host, which a site cannot forge without controlling that host. The value sits in the destination address, not the graphic.

Curaçao’s certification policy sets out what the destination must show. The seal has to redirect to cert.cga.cw when clicked, and the certificate displays the exact domain being accessed, the licensed operator and that operator’s current licence status. One naming a different domain indicates that the site is displaying another operator’s certificate, and the policy says it should then be treated as unauthorised. The seal must also appear exactly as issued: one differing in design, colour or format means the website is not CGA-authorised.

The regulator has published its own warning about seal misuse. A public notice dated 29 January 2026 described a genuine seal as “a green box displaying the letters ‘CGA’ in white” which, when clicked, links directly to the official licence certificate hosted on https://cert.cga.cw/.

Malta requires a dynamic seal or kite mark among the player-protection items its remote licensees display on-site, and its verification page carries the instruction in the Authority’s own words: “For authenticity, make sure that the address of this website starts with https://authorisation.mga.org.mt If not report misuse.” The record at that address is server-generated and carries a “Website Urls” list, so the domain you are on should appear in it.

Denmark uses a third model: licence holders there are legally required to display the Danish Gambling Authority’s label. The Authority’s page showing it does not state the label’s own text, whether it links anywhere, or anything about misuse.

The check a copied seal cannot survive

1. Write down the domain you are actually on

   Read it from the address bar of the gambling site, character by character, hyphens and extra words included. Every later step compares against this string.

2. Click the seal, then look at the address bar again

   Not at the page that opened, and not at the graphic you clicked. Under one of Curaçao’s two display options the operator controls what clicking the seal does, so the destination address is the one part of the sequence a site cannot supply for itself.

3. Confirm the host belongs to the regulator

   For Malta, the address should start with https://authorisation.mga.org.mt, and the Authority’s instruction is to report misuse if it does not. For Curaçao, the seal should resolve to cert.cga.cw.

4. Confirm the record names your domain, and read its status

   Curaçao’s certificate displays the exact domain being accessed, and the regulator treats one naming a different domain as someone else’s certificate. Malta’s seal record carries a “Website Urls” list; the address from step one should be in it, alongside the licence status its register result cards do not show.

5. Where there is no seal, check the register by hand

   Great Britain prescribes a statement instead: “(Insert licensee’s name) is licensed and regulated in Great Britain by the Gambling Commission under account number (insert account number).” The Commission requires the hyperlink on that number to reach the licensee’s own register record rather than its own home page — which makes a badge linking to a regulator’s front page, or to nothing, the cheapest discrepancy there is to spot.

What each check can actually bind

Curaçao’s register page carries the regulator’s own caveat that the overviews “do not guarantee the current validity of the licenses” and that “no rights can be derived from these overviews”.

Why the check does not get run

Gambling Commission consumer research published and last updated on 18 September 2025 found that consumers frequently cannot tell whether a site is licensed, and that credibility suppresses the question entirely: “if a site appears credible and trustworthy, individuals are often less likely to question its licensing status”. Some participants believed they had never used an illegal gambling website and later discovered that they had.

The route in is usually a person, not a search

The same research recorded the main routes onto illegal gambling sites as word of mouth (33 percent), social media personalities (29 percent) and gambling forums (29 percent).

The reliable markers are not recognised as markers

It also noted that signals a regulator treats as meaningful — a site not requiring identity verification, a site accepting credit cards — might not be recognised as warning signs.

What we could not verify, and where sources conflict

Three conflicts are recorded rather than resolved, because the sources disagree with themselves:

• Great Britain, 18 September 2026. The register summary page reported 2,638 records while the full-list view reported 2,639 the same day, on independent fetches. The same page enumerated nine licence-status labels while describing eight statuses.
• Curaçao. The regulator’s former domain redirects path-for-path to its current one on the www host, but the legacy portal subdomain returns HTTP 200 and serves the live licence-management portal without redirecting. The site also uses the regulator’s former name in navigation and its current name in body text.
• Malta. The Licensee Register’s introduction says it can be searched by licensee name, authorisation status, URL or gaming service, but the form exposes three fields and URL search is a separate tool on a separate tab.

How each was established is set out in the methodology and the corrections policy.

Primary sources

Each link below goes to the issuing authority’s own website. Where a page could not be retrieved by our automated checks, that is stated rather than hidden.

• Action Fraud Action Fraud – the UK's national fraud and cybercrime reporting centre
  HTTP 403 Forbidden to automated access, independently reproduced — the whole site refuses automated fetches and no body was ever returned. Nothing about its reporting URL, telephone number, opening hours or geographic scope is verified, including whether Scotland is covered. A human must open it in a browser.
  Checked 18 September 2026 · bot-blocked
• Alcohol and Gaming Commission of Ontario List of Registered Internet Gaming Operators
  Despite its title this page holds no operator data, no search box and no last-updated date. Its only outbound link goes to iGaming Ontario's Regulated iGaming Market page, not to the filterable Operators directory, which sits a further click away.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority About Us — Curaçao Gaming Authority
  The page contradicts itself on when the National Ordinance on Games of Chance took effect: three statements, one giving 24 December 2025 and two giving 2024. The ordinance itself settles it without relying on the site at all — it was issued on 23 December 2024 and enters into force the day after publication. No last-updated date is shown.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority About Us on the legacy gamingcontrolcuracao.org domain
  Returns HTTP 301 to the matching path on www.cga.cw; the same was confirmed for the root, /responsible-gaming and /contact. But the claim must be scoped to the www host: portal.gamingcontrolcuracao.org returns HTTP 200 and still serves the live licence-management portal on the legacy domain, so 'the old domain now redirects to cga.cw' is only true of www.
  Checked 18 September 2026 · redirected
• Curaçao Gaming Authority Announcement regarding supplier licensing and registration requirements under the LOK (24 June 2026)
  States that 'A Curaçao supplier license is not required for suppliers established outside Curaçao', while foreign suppliers to CGA licensees must register with the CGA by 24 December 2026. The CGA expects the supplier registration process to open in October 2026, which is why no supplier register file appears on the licence-register page even though the duty to keep one is already in force. Text extracted locally.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Announcement regarding the extension of provisional licences issued on 24th December 2024 (23 June 2025)
  Over a year old at the check date, and it does not describe what happened after 24 December 2025 — no follow-up announcement was located. Text extracted locally.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority CGA Certification Policy — seals and certificates
  Defines two distinct, non-interchangeable seals — a per-domain Certificate of Operation seal for B2C operators and a Licence Certificate seal for the corporate website — and sets the consumer test, which is domain-matching, not name-matching: the certificate must name the exact domain being visited, and a certificate naming a different domain means the site is displaying someone else's. The footer shows 'Copyright © 2026' but the policy carries no version number and no last-updated date.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority CGA License Management Portal
  For operators and suppliers, with no public search. It states that the process for new online gaming applications is currently closed, with no date attached, and that the old orange seal is no longer valid where it was issued to sub-licensed operators that were not yet issued with a final licence. The portal wording was captured through an automated page summary, so treat individual phrasings as close paraphrase.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority CGA online certificate service (cert.cga.cw)
  An informational page with Home and Certification Policy links only. It has no lookup field of any kind: a consumer cannot type a domain here and be told who holds it. Two probes were run against this service during research and both returned the generic homepage: a ?domain= query string is ignored, and the certificate endpoint called with a placeholder token does not resolve to a lookup. Curaçao therefore publishes no consumer-facing page where a domain can be checked — the only available check is clicking the seal on the gambling site itself and reading the address bar of the page it opens.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Contact — Curaçao Gaming Authority
  The contact form is marked 'Not intended for complaints', and the page states the CGA 'does not handle individual disputes between players and gaming operators'. Postal address and telephone are confirmed. The three email addresses are not: the served HTML contains only Cloudflare email-protection links, so the local parts are inferred from the adjacent labels rather than observed, and a human should open the page in a browser before any address is published.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Curaçao Gaming Authority — official website
  Dual naming is live on the same site: the header and navigation still say 'Gaming Control Board' while the body text says 'Curaçao Gaming Authority'.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Curaçao Gaming Authority — Online Gaming License Registry (PDF)
  28 pages, 663 numbered rows. Its columns are licence number, licensee, company type, company registration number, issued, expires and status licence — there is no domain or website column, confirmed by full-text search in two independent passes. The status column is free text rather than a controlled vocabulary, and the extracted column alignment is unreliable, so no individual operator's status should be read from it. The filename encodes the publication date, so this URL changes at each update: link the register landing page for a durable link.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Domain Management for Licensed Operators, version 1.3 (24 March 2026)
  The document that explains how Curaçao ties a licence to a domain: DNS TXT verification, the opaque per-domain token behind the certificate URL, the four licence statuses with their colours, and the two seal integration options. Two sentences matter most to a consumer: 'A verified domain does not imply that the site has been approved', and, of the direct-image integration, 'The website owner/operator controls the click behaviour' — so a seal that looks right can link anywhere, and the address bar is what settles it. The fetch tool reported the content as images; the text was extracted locally and the embedded screenshots of the certificate layout could not be read.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Enforcement Register — Curaçao Gaming Authority (PDF)
  32 rows over 2 pages. The CGA states it 'currently focuses solely on actions that affect the status of a license', does not include all enforcement measures, and 'may not always be fully accurate or up to date'. Two status values are in use in the rows — 'Revoked' and 'Not extended by the CGA'; no row observed carries 'Suspended', although the header names suspension. Dated filename, so the URL changes at each update.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority FAQs — CGA License Management Portal
  A provisional licence is 'valid for up to six months, with a possible extension for up to an additional six months'; a definitive licence is 'issued for an indefinite period, subject to revocation or suspension'. Applicants must be Curaçao entities with a statutory seat in Curaçao and at least one resident managing director.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Getting a Gaming License — CGA License Management Portal Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Land-based casino registry — Curaçao Gaming Authority (PDF)
  Fetched in the independent verification pass, closing a gap the first pass left open. Columns are licensee number, licensee, casino operator, hotel name, casino name, issued, expires and status, and status values include 'Assessment in progress'. Licence numbers use a different scheme from the online register. It contains no domain column either — the no-domain finding holds across all four published register files. Dated filename.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Landsverordening op de kansspelen (National Ordinance on Games of Chance) — Dutch original
  Non-English original, published by the CGA and linked from its legislation page, where the regulator states its downloadable legislation is not in the official format. The ordinance is dated 20 December 2024, published in Publicatieblad A° 2024 N° 157, and its closing page reads 'Uitgegeven de 23ste december 2024'. The fetch tool could not read the text layer; it was extracted locally, and headings were separated from body text, so some article numbers could not be tied to the sentence quoted.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Licence conditions index — CGA License Management Portal
  Uses the regulator's own vocabulary of 'indefinite-term online gaming license' and 'indefinite-term supplier license', matching the portal FAQ.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority License register — Curaçao Gaming Authority
  The whole register is four downloadable PDFs: there is no search box, no filter, no dropdown and no query string. The page carries the regulator's own disclaimer that the overviews 'do not guarantee the current validity of the licenses' and that 'no rights can be derived from these overviews'. The URL slug is an opaque CMS identifier and is the only route the site's own navigation offers.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority List of Certificate Holders according to article 5.17 of the National Ordinance on Games of Chance (LOK) (PDF)
  12 rows, with the purposes in use being 'Test Labs' and 'Alternative Dispute Resolution' — this is the list a player uses to check that an ADR body an operator points them to is actually CGA-certified. Column alignment is badly skewed in extraction, so purposes and dates cannot be reliably matched to individual holders, and the file contains at least one typographical error. Dated filename, so the URL changes at each update.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority National Ordinance on Games of Chance (LOK) — official English translation
  A sworn translation, 47 pages, certified by a sworn translator of the Court of First Instance of Aruba. Fetched in the independent verification pass, which used it to correct two article numbers and to confirm that the ordinance does not state a minimum age as a number: it forbids licensees to let a minor take part, and separately defines a person under eighteen as a vulnerable person.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Online Gaming — Regulation
  States that the ordinance came into effect on 24 December 2024, that the earlier offshore ordinance 'remains relevant based on the transitional provisions', and that 'Resolving disputes between players and gaming operators is not within our mandate.' The standardised complaint form it describes as planned carries no date, so that status may be stale.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Online Gaming Legislation — Curaçao Gaming Authority
  Citation hygiene matters here: the regulator itself states that the legislation available for download 'is not in the official format' and is an unofficial consolidated text.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Player Complaints Policy Guidelines, version 1.1 (18 June 2025)
  The clearest official statement that the CGA is not a player redress body: 'The CGA will not resolve or make decisions on any player complaints' and 'the CGA does not mediate in individual disputes'. It sets the operator-first, then CGA-certified-ADR route, with the operator bearing all ADR costs, and states that once an ADR process is completed it cannot be restarted with a different ADR entity. Text was extracted locally because the fetch tool could not read the PDF text layer.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Public announcement and warning regarding unauthorised domains (29 January 2026)
  Describes a genuine seal as 'a green box displaying the letters CGA in white' which, when clicked, 'links directly to the official licence certificate hosted on https://cert.cga.cw/'. The warning names specific unlicensed domains; those are deliberately not reproduced here. The CGA publishes a stream of such warnings through its portal.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Publications index — CGA License Management Portal
  Where the CGA's announcement PDFs are indexed. One labelling inconsistency is confirmed: the index calls a document 'Extension of Provisional Licenses Issued Prior to 24th December 2024' while the document itself is titled 'Issued on 24th December 2024'.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Responsible Gaming — Curaçao Gaming Authority
  Visibly stale relative to the current regime: it is oriented to land-based casinos, the self-exclusion programme with Fundashon pa Maneho di Adikshon runs under a protocol in place since 30 July 2012, and the linked guidelines are the 2012 final version. It describes no online self-exclusion arrangement under the new ordinance, states no age limit and gives no complaints route.
  Checked 18 September 2026 · reachable
• Curaçao Gaming Authority Termination of the Certificate of Operation (the Orange Seal) on 15th October 2025
  Fetched in the independent verification pass, which found it after the first pass missed it. It dates the end of the orange-seal transition to 15 October 2025, states that displaying an orange seal after that date puts an operator in breach of Curaçao law, and says in the CGA's own voice that 'All former sublicensees have now had their license applications Granted, Approved, or Rejected.' It is one of only two official touchpoints for the sub-licence vocabulary and it does not narrate the historic master-licence model.
  Checked 18 September 2026 · reachable
• Federal Trade Commission Fake Prize, Sweepstakes, and Lottery Scams
  United States consumer guidance about prize and sweepstakes advance-fee fraud, including invented-authority names. Applying it to online casino withdrawals is interpretation and must be labelled as such.
  Checked 18 September 2026 · reachable
• Federal Trade Commission ReportFraud.ftc.gov (fraud reporting service)
  Loaded but returned a JavaScript-only shell with no readable content, so the intake form and its geographic scope are unverified. The destination is named on the FTC consumer page that was read successfully.
  Checked 18 September 2026 · js-only
• Gambling Commission Display of licensed status: technical requirements
  Gives the exact footer wording a consumer should look for, and explains why footers show a short account number: it is 'the first block of 6 digits, removing any leading zeros' where they exist. The Commission also states the footer link must go to the licensee's own register record, not to the register's home or landing page.
  Checked 18 September 2026 · reachable
• Gambling Commission Illegal online gambling – Phase 1: exploring consumer pathways into using illegal gambling websites – Executive summary
  Regulator research, not consumer guidance. Its central finding is that apparent credibility stops people questioning licensing at all, and that some users did not know they had used illegal sites.
  Checked 18 September 2026 · reachable
• Gambling Commission Illegal online gambling: consumer engagement and trends – Identifying illegal gambling websites
  Published 25 September 2025. This describes the regulator's own methodology for identifying illegal sites; it is not a consumer checklist and contains no logo or seal guidance.
  Checked 18 September 2026 · reachable
• Gambling Commission Register of gambling businesses – full list
  Browsable list with activity and remote/non-remote filters applied by an 'Apply filter' button. Query-string search parameters are ignored: five patterns were tested and each returned the unfiltered list, which a reader who does not notice would mistake for a result.
  Checked 18 September 2026 · reachable
• Gambling Commission Register of gambling businesses (search)
  The search field is labelled 'Search by business name, trading name, domain name or account number', so domain search is officially supported. Two caveats the register states or demonstrates itself: 'Domain names and trading names are provided by the gambling business' — the domain list is self-reported, not compiled by the regulator — and no Commission page defines what the status values (Active, Expired, Forfeited, Lapsed, Pending, Revoked, Surrendered, Suspended) actually mean. The search is form-driven: there is no link that runs it for you.
  Checked 18 September 2026 · reachable
• Gambling Commission Unlicensed gambling: our approach to tackling unlicensed gambling
  The regulator's own blog, by Chief Executive Andrew Rhodes, dated 21 October 2024. Listed for completeness: no claim in the research rests on it, and it is not a third-party news source.
  Checked 18 September 2026 · reachable
• Government of Malta Gaming Authorisations Regulations (S.L. 583.5)
  Only landing metadata came back — title, ELI identifier and a point-in-time date of 16/08/2018 — with no regulation text extracted. Nothing here is quoted from it. This is the instrument a human must read to settle the licence duration and the suspension and cancellation provisions.
  Checked 18 September 2026 · uncertain
• Government of Malta Gaming Player Protection Regulations (S.L. 583.8)
  Re-tested independently and still returns metadata only, with a point-in-time date of 16/08/2018. This is why no statutory minimum gambling age for Malta is stated on this site: the number 18 could not be read from the instrument, and the MGA's own pages do not state it.
  Checked 18 September 2026 · uncertain
• Government of Malta Gaming Player Protection Regulations (S.L. 583.8) — PDF
  Same failure mode as the other legislation.mt attempts: metadata only, no substantive text.
  Checked 18 September 2026 · uncertain
• iGaming Ontario Regulated igaming market directory
  A point-in-time snapshot, not a live register — the page states the listing is accurate as of 1 September 2026. It does carry a search box and operator and category dropdowns, correcting the original research note that it was browse-only.
  Checked 18 September 2026 · reachable
• Kansspelautoriteit Kansspelwijzer — register of providers licensed to offer gambling in the Netherlands
  The register on this page is an iframe served from the regulator's own prevention site. Do not use the search box in the page furniture: that is the Kansspelautoriteit's site-wide website search, which searches the regulator's site and not the register. Search inside the embedded register panel instead.
  Checked 18 September 2026 · reachable
• Kansspelautoriteit Register of licensees — English explainer for the Dutch licence register
  An explainer, not the register itself: it tells a reader to search the company name, website, app or licence number, and links onward to the Dutch register tool.
  Checked 18 September 2026 · reachable
• Kansspelautoriteit (Netherlands Gambling Authority) Aanpak illegale online gokspelen
  Dutch-language original. It references no public list of illegal providers for the Netherlands.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Applications — Malta Gaming Authority
  A navigation hub listing six application categories, with no substantive detail.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Contact Us — Malta Gaming Authority
  Address, telephone +356 2546 9000 and office hours are confirmed. The email addresses are rewritten by Cloudflare email obfuscation and cannot be read as plain text from the served page. The page asks players not to use the general enquiries address for casino complaints and to use the online complaint form instead.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Directive 2 of 2018 — Player Protection Directive (index page)
  An index page: it links the directive PDF and carries no substantive content of its own.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Dynamic Seal Of Authorisation — licensee chooser (company GUID without the details flag)
  Returns a 'Please Select Licensee' chooser, showing that one company GUID can map to several authorisations. This particular URL was not re-tested in the independent verification pass.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Dynamic Seal Of Authorisation — licensee detail view
  Opens only with an internal 32-hex company GUID, which is why it is documented here rather than offered as a lookup. It carries Malta's strongest anti-spoofing instruction: make sure the address of the site you land on starts with https://authorisation.mga.org.mt. The field labels recorded from it are indicative, not exhaustive — an independent re-fetch saw labels the first pass missed and did not see one it listed.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Dynamic Seal Of Authorisation — verification page called without a company parameter
  Recorded because the failure is the finding: fetched without a company GUID the page returns 'Error occured - MGA' and 'Value cannot be null. Parameter name: company'. The seal page is the end of a verification journey, not an entry point — a consumer cannot type a domain, company name or licence number into it.
  Checked 18 September 2026 · broken
• Malta Gaming Authority Enforcement Register — Malta Gaming Authority
  Publishes cancellations and suspensions of authorisation and preliminary Notices of Cancellation, filterable by year; entries observed run 2013 to 2025, with none for 2026. The page names its statutory basis in full — the Gaming Compliance and Enforcement Regulations — and writes the number as 'S.L. 583.06', while the MGA's own legislation index writes 'S.L. 583.6'.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority FAQs — Malta Gaming Authority
  The FAQ index. Recorded for completeness only: the self-exclusion cooling-off figures once attributed to it came from a domain search surface rather than from a page opened directly, and remain unverified.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Home — Malta Gaming Authority
  No page-level last-updated date; the footer reads 'Copyright © 2026 Malta Gaming Authority All Rights Reserved.' The site also answers on the apex mga.org.mt.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Licensee Register — Malta Gaming Authority
  The landing page a consumer arrives at, with two tabs: 'Licensee Register' and 'URL Checker'. Both tabs are iframes onto separate subdomains, so a plain HTTP fetch returns essentially only the two headings — the tools have to be used in a browser. This page is the only place the URL Checker's real address is exposed to the public.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Lodge a Complaint — Malta Gaming Authority
  The page says 'It is strongly recommended that you actively seek to resolve your dispute directly with the operator' before lodging a complaint — a recommendation, not a precondition. Time-sensitive: at the check date it carried a notice of technical difficulties with the online complaint system, and the follow-up email address was rendered through Cloudflare email obfuscation and could not be read. Complaints must be in English or Maltese.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority MGA Licensee Register — search application
  A JavaScript application behind Cloudflare: a plain fetch returns only the shell string 'LicenseeRegisterFrontEnd'. Driven in a browser it offers exactly three fields — Licensee Name, Authorisation Status and Gaming Service — and displayed 'Last Updated: 18/09/2026 13:43', which is a data-refresh time, not a content-review date. The structural trap: Authorisation Status is a filter only and is not shown in the result cards, so a consumer who searches by name sees no licence status until they open the record's dynamic seal.
  Checked 18 September 2026 · js-only
• Malta Gaming Authority MGA Publishes Alternative Dispute Resolution (ADR) Directive
  The announcement states 'This Directive is applicable as of 3 December 2018.' The directive number does not appear in the page text at all — it appears only in the linked filename, which also carries a 'v2' suffix, so this 2018 announcement may not describe the current version. The page does not say whether ADR outcomes bind, whether court remains open, or whether ADR is free to players.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority MGA URL Checker — verify whether a gaming site is MGA-licensed
  Malta's genuine official domain-verification tool, on its own subdomain; a plain fetch returns only the string 'UrlChecker'. Displayed 'Last Updated: 18/09/2026 13:36'. Two limitations to pass on: it prints 'URL not found in Licensee database.' even when it has matching records to list underneath, so reading only the first line produces false negatives; and it has no query string, so there is no deep link — it must be described as an interactive form.
  Checked 18 September 2026 · js-only
• Malta Gaming Authority Player Hub — Malta Gaming Authority
  Describes the MGA's Player Support Unit as 'open to receiving complaints from all individuals' and defines what the Authority treats as a complaint. No last-updated date.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Player Protection — Malta Gaming Authority (Licensee Hub)
  States that once a player has exhausted the internal process, operators 'must offer the opportunity to refer any dispute to a registered ADR entity', and names the Player Protection Directive (Directive 2 of 2018) as the governing instrument. The licensee's own 'Player Support team' here is a different thing from the MGA's 'Player Support Unit'. This page is also the only place on any fetched MGA page where the figure 18 appears, and it appears inside a marketing-conduct rule rather than as a stated statutory minimum age. No last-updated date.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Player Protection Directive (Directive 2 of 2018) — full text PDF
  Downloaded successfully (about 650 kB) but the text is not machine-extractable: the PDF uses subset-embedded fonts with hex glyph IDs and no usable ToUnicode mapping. No clause of it is cited anywhere here, and its current version could not be confirmed from the document itself. Self-exclusion durations, cooling-off periods, complaint timeframes and any age provision sit inside this document and need a human reader.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Recognition Notice Register — Malta Gaming Authority
  Searchable by Company Name or Recognition Number; a blank search returns all notices. This is a second, separate list: an entity here operates under a recognised foreign authorisation, not an MGA licence, so checking only the Licensee Register can produce a misleading 'not licensed' conclusion. The register was not driven interactively, so its result fields are undocumented.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Regulatory Framework — legislation and regulations index
  The MGA's own index of the Gaming Act (Cap. 583) and ten subsidiary instruments with their S.L. numbers. The index itself states no licence duration and no minimum age, and the instrument texts could not be read from legislation.mt.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming Services — B2C licences
  Lists the commercial verticals under each game type. Note the scope it states: a B2C licence is required to offer a gaming service from Malta, to a Maltese person or through a Maltese legal entity — an MGA licence does not by itself make an operator lawful where a player lives.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming: Are there any mandatory responsible gambling tools which must be offered to players?
  A precision frequently lost by third parties: only one of deposit or wagering limits is mandatory, with both merely 'strongly encouraged'; loss limits, session limits and time-outs are encouraged, not required. A Time Out runs 'more than 24 hours and not more than 30 days'.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming: Is a self-exclusion applied across all brands operated by a Licensee? (MGA FAQ)
  The most important player-protection source for Malta, and the reason Malta must not be compared to jurisdictions with a national scheme: a self-exclusion covers all brands of one licensee, and the Authority only 'encourages Licensees to emphasise with players that they should also exclude any accounts they hold with all other Licensees', pointing additionally to third-party blocking software. There is no national cross-licensee self-exclusion register.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming: What happens if a minor accesses and uses the site?
  Deposits are refunded and excess winnings confiscated once the operator becomes aware. The page cites no regulation and gives no age figure — no fetched MGA page states a statutory minimum gambling age for Malta.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming: What is the difference between a general account closure and a self-exclusion?
  The URL resolves and was fetched in the independent verification pass, correcting an earlier record that treated it as second-hand. It says an account can only be reopened once the exclusion has expired, or on the player's request at the operator's discretion. It contains no obligation on operators to confirm that a closure request was not made because of gambling problems — an obligation that was wrongly attributed to it.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Remote Gaming: What Responsible Gambling/Player Protection content must be displayed on-site?
  The seven items an MGA-licensed remote operator must display, including 'A dynamic seal or kite mark' — which is why the absence of a seal is itself a signal.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Safer Gambling — Malta Gaming Authority (Player Hub)
  Defines deposit, wagering, loss and time limits, hosts a nine-step self-assessment questionnaire as an anchor on the page, and carries the land-based self-barring description. Two cautions about the support organisations it names: the Responsible Gaming Foundation's own site carries notices of its absorption into the MGA, so it is not plainly arms-length from the regulator, and the MGA's outbound SEDQA link returned HTTP 403 and could not be checked. No last-updated date.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Self-Barring — Malta Gaming Authority (Player Hub)
  Online-oriented: it describes self-exclusion as blocking access to 'the gaming website which the player has excluded with', and publishes the Self-Barring Request Application Form (MGA-F-006) and the Self-Barring Auto-Renew Removal Form (MGA-F-015). The land-based self-barring sentence is on the Safer Gambling page, not this one. No last-updated date, and the land-based renewal mechanics are not stated anywhere.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority The MGA publishes notice on websites impersonating licensed operators
  Confirms impersonation of licensees and false references to MGA licences. It does not confirm copying of a regulator's seal graphic; do not conflate the two.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority Unauthorised URLs — Malta Gaming Authority
  A static published list of domains the MGA has actively noticed, not a search tool and not a comprehensive blacklist — absence from it proves nothing. The page carries no last-updated date; the most recent notice date observed on it was 15/09/2026.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority What are the different types of games that are licensable by the Authority?
  The definitional wording for game types 1 to 4, complementary to the vertical listing on the Remote Gaming Services page.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority What is the licence fee and when is it due?
  Fees are annual and payable in advance under the Gaming Licence Fee Regulations (S.L. 583.03). This is distinct from the licence's overall term, which the page does not state; no amounts are given.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority What is the process to submit a player complaint to the Authority or an ADR entity?
  Presents the Authority's Player Support Unit and an ADR entity as alternative routes, and says the player 'may' refer the matter onward. It states no timeframes, does not say whether an ADR outcome binds, and does not say whether court remains open.
  Checked 18 September 2026 · reachable
• Malta Gaming Authority What types of licences are available?
  Describes the Gaming Service Licence (B2C) and the Critical Gaming Supply Licence (B2B). It states no licence duration — the widely repeated ten-year figure was not found on any MGA page that was fetched, and is not published here.
  Checked 18 September 2026 · reachable
• Spelinspektionen Illegal Gambling — how the Swedish regulator acts against unlicensed operators
  The regulator publishes no blacklist or warning list of unlicensed operators. Bans appear only in the supervisory decisions archive, and the authority reports crimes to police rather than investigating them itself.
  Checked 18 September 2026 · reachable
• Spelinspektionen Licence and permit directory — English path of the Swedish licence register
  Same register as the Swedish path and equally client-rendered. Filter labels, licence-type names and the Excel export buttons stay in Swedish even on this English page.
  Checked 18 September 2026 · js-only
• Spelinspektionen Supervisory decisions — archive of Swedish gambling enforcement decisions
  Read in a browser; a plain fetch returns a shell. Entries run from 2019 to 2026, so it is a historical archive and not a current-status view. Filter values stay in Swedish on the English page. Only this English path works — the equivalent Swedish path returns 404 after the June 2025 site relaunch.
  Checked 18 September 2026 · js-only
• Spelinspektionen Swedish Gambling Authority — English section
  The English section is a partial mirror. Key consumer pages — where to complain, illegal gambling, gambling problems — exist only in Swedish.
  Checked 18 September 2026 · reachable
• Spelinspektionen (Swedish Gambling Authority) The SGA's situation report — online gambling outside the licensed market (PDF)
  Downloaded as a 733 KB binary PDF but never parsed — no text was read and no claim on this site rests on its contents. Listed because it is the likeliest official Swedish source on people gambling outside the licensed market despite an exclusion; a human must open it before anything is quoted from it.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Danish Gambling Authority (English section)
  The English section lives under /en-us. Search-engine results pointing at /en/... paths are stale and return 404.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Have you discovered illegal gambling or illegal advertising?
  Submission is via a link to the Authority's contact page, which neither analyst fetched, so that contact URL is not published here. The page also states a reporter will generally not be informed of the outcome.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Illegal gambling and advertising
  No last-updated date. Danish DNS-blocking mechanics, the blocked-page notice text and all blocking statistics are unverified — the pages carrying them return 404.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Public and players (Danish Gambling Authority) Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Spillemyndigheden (Danish Gambling Authority) – home
  Danish-language home page.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) Spiludbydere med tilladelse (gambling operators holding a licence)
  Danish-language list. A search function is present at the top of the page; no filter controls were observed and the result fields did not render for an automated fetch. The list excludes gaming-machine licence holders and game suppliers, which have separate lists.
  Checked 18 September 2026 · reachable
• Spillemyndigheden (Danish Gambling Authority) The Danish Gambling Authority's label
  Confirms the label is a legal requirement but is genuinely silent on the label's own text, on whether it links anywhere, and on misuse. No date shown. A mandatory label is not the same as a verifiable seal.
  Checked 18 September 2026 · reachable