Gambling scam checklist — what each sign proves

Last reviewed: 18 September 2026MawarSlotResmi Editorial Desk

In short

Work through the signals below and note which ones you cannot resolve. This is not a scoring system and it does not produce a verdict: most individual signals are consistent with an ordinary legitimate operator, and a single one is a question to answer rather than a conclusion. The item that carries the most weight is whether the official register lists this exact domain against the company the site names. Everything else is context around that.

How to use this

Verify first, then come back. Most of these depend on having checked the official register. The procedure takes about five minutes.
Tick only what you could not resolve. If the ordinary explanation turns out to be the right one, that item is not a signal.
One signal is a question, not a finding. Several unresolved signals together are a reason to stop depositing and verify properly.
This page does not conclude that anything is a scam. That is a finding of fact for an authority, not a website — and not for a checklist. Where a regulator has formally identified an operator, that is published on the regulator’s own site; see where regulators publish warnings.

Licensing and identity

The strongest signals in the list, because they are checkable against a source that has no stake in the answer.

The authority the site names cannot be found as a real gambling regulator
Invented authorities with official-sounding names are a documented pattern, and consumer-protection authorities record scammers both inventing non-existent agencies and impersonating real ones by name. Proves: that the licensing claim has no verifiable basis. Does not prove: that you searched correctly — check the regulator directory and look for the authority on a government domain before concluding.
The official register does not list the legal company named in the site’s terms
Proves: nothing on its own until you have ruled out the ordinary explanations. Does not prove: much — the commonest cause by far is searching the brand rather than the licensee. Re-read the terms for the company name, and try the licence number. If the register genuinely does not know the company the site claims, that is serious.
The register lists the company, but not this exact domain
The single most informative item here. Proves: the licence you were shown does not cover the website you are on — which is exactly the result a cloned site produces, because everything you check about the company comes back clean. Does not prove: anything if that register publishes no domain field at all, in which case tick the "cannot be answered" position instead.
The licence seal is an image that does not open a page on the regulator’s own domain
A badge in a footer is a picture and can be copied. Malta’s regulator instructs consumers to check the address bar of the page a seal opens rather than trust the seal itself. Proves: the seal is not evidence. Does not prove: that the operator is unlicensed — plenty of licensed sites display a static image, which is why you use the register instead.
The seal opens a certificate that names a different domain from the one you are on
Proves: the site is displaying somebody else’s certificate. This is about as close to conclusive as a single signal gets. Does not prove: which party is responsible — but it does mean this site is not covered by the authorisation it is showing you.
The register shows a status such as suspended, revoked, lapsed, expired or surrendered
Registers retain former licensees, so a search result is not a current licence. Proves: the operator is not currently authorised in the way it claims. Does not prove: fraud — a surrendered licence may simply mean the business exited that market. Either way the consumer protections you were counting on are not there.
No legal company name or registered address appears anywhere on the site
Licensed operators are generally required to identify themselves. Proves: there is nothing to verify, which is itself the finding. Does not prove: anything until you have checked the terms and conditions and the "About" page properly — it is often in small print rather than absent.

Money and withdrawals

You are asked to pay something before your winnings can be released
A tax, a clearance fee, an insurance premium, a verification charge, a currency-conversion deposit. Consumer-protection authorities document this advance-fee pattern in prize and sweepstakes fraud; reading it across to a gambling withdrawal is our inference, not theirs. Proves: you should not pay it — a legitimate operator deducts what it is owed from the balance rather than asking you to send more money to receive your own. Does not prove: nothing else needs to happen; treat it as the point where this becomes fraud reporting rather than a gambling complaint.
Payment is requested to a personal account, a cryptocurrency address, or an unusual channel
Proves: that the payment route is outside the systems that give you any recourse. Does not prove: the operator is fraudulent by itself, but it removes the chargeback and payment-dispute routes that are often the most realistic way to get money back.
Withdrawal conditions are unpublished, contradictory, or impossible to find
Proves: you cannot establish what you agreed to, and neither will a dispute-resolution body. Does not prove: bad faith — badly written terms are common. Save the terms as a file now regardless, because a link proves nothing if they change.
Terms or bonus conditions appear to have changed after your dispute began
Proves: only what you can evidence — which is why saving the terms matters before you complain. Does not prove: anything you cannot document. If you have the earlier version, it is significant evidence for an ADR provider.

Conduct and contact

There is no published formal complaints procedure
Licensed operators are generally required to publish one. Proves: the first rung of every escalation route is missing. Does not prove: that none exists — check the terms and conditions, where it is often buried rather than absent.
Support exists only as live chat, with no way to create a written record
Proves: you will struggle to evidence anything later. Does not prove: wrongdoing. Save chat transcripts during the session; many cannot be retrieved afterwards.
You are pressed to deposit more in order to "unlock" or "verify" a withdrawal
Proves: the request is not a legitimate verification step — identity checks never require a further deposit. Does not prove: it is the only problem; this pattern rarely stops at one request.
You were contacted out of the blue about winnings, an account or a bonus
Proves: treat the contact itself as unverified, including any link in it. Does not prove: the brand being named is involved at all — impersonating a real licensed operator is a documented technique, and the real operator may be a victim of it too.

What your tally means

Tick items above to see what they add up to.

Signals that are widely believed and are not evidence

These come up constantly. None of them establishes what people think it does, and treating them as decisive crowds out the checks that actually work.

Commonly cited signals and what they actually tell you
The signal	What it actually tells you
The site looks professional and well designed	Nothing. Regulator consumer research has found that apparent credibility actively suppresses the question of whether a site is licensed — it is a reason to check, not a reason not to.
It displays a licence badge	Nothing by itself. A badge is an image file. Only a seal that opens a certificate on the regulator’s own domain, naming your exact domain, carries weight.
It has a licence number in the footer	Nothing until matched. Numbers belonging to genuine licensees are copied onto other sites.
It is listed by review sites or has good ratings	Nothing about licensing. Much of that material is produced by businesses paid per referred customer.
It uses HTTPS and has a padlock	That the connection is encrypted. It says nothing about who is running the site.
It has been online for years	Nothing about current licence status, which can change at any time.
Your deposit went through instantly	Nothing. Taking money is not the part that gets disputed.
Friends use it without problems	Nothing about your position. Disputes surface at withdrawal, and often only after a large one.
It is not on any warning list	Very little. Of the authorities examined here, only Malta publishes one — see below.

Where regulators publish warnings

Regulators do not converge on a single approach here, and knowing which model applies stops you drawing a false conclusion from an empty search.

How each authority handles unlicensed and impersonating operators, as documented on 18 September 2026
Authority	Approach
Malta Gaming Authority	The only one of these publishing a standing, named list of unauthorised URLs, plus individual notices about sites impersonating its licensees. Operates a dynamic seal whose verification page is generated by the authority itself.
Great Britain Gambling Commission	No warning list or blocked-domain list located. Takes the opposite approach: requires its own licensees to display a licensed-status statement, an account number, and a Commission-supplied link to that licensee’s register record.
Denmark	Court-ordered blocking of illegal sites, plus a mandatory visual label that licensed sites must display.
Sweden	Prohibitions recorded in a supervisory-decisions register, and reports to police. No separate consumer warning list.
Netherlands	Fines and disruption through third parties — payment providers, hosting, platforms and app stores — rather than a public list of illegal providers.
Ontario	The consumer-facing directory of permitted operators is published by iGaming Ontario.

Because most of these authorities publish no warning list, absence from a warning list means almost nothing. The presence of a site on the MGA's unauthorised-URL list is meaningful; its absence from anything is not.

If several signals applied

Stop depositing Preserve evidence Verify the register Escalate, then report

Stop depositing. Whatever else is true, adding money to an unresolved position makes it worse.
Preserve the evidence now — account history, transcripts, the terms as a saved file. It degrades fast once an account is closed.
Finish the register check properly, using the legal entity and the exact domain. The checker routes you to the right register.
If money is already at stake, follow the escalation route, which sets out what each body can actually decide.
Report it even if you expect nothing back. Regulators use consumer reports as intelligence, and the lists that do exist are built from them.
Protect your payment methods, and never pay a fee to release your own balance.

Primary sources

Each link below goes to the issuing authority’s own website. Where a page could not be retrieved by our automated checks, that is stated rather than hidden.

Action Fraud Action Fraud – the UK's national fraud and cybercrime reporting centre
HTTP 403 Forbidden to automated access, independently reproduced — the whole site refuses automated fetches and no body was ever returned. Nothing about its reporting URL, telephone number, opening hours or geographic scope is verified, including whether Scotland is covered. A human must open it in a browser.
Checked 18 September 2026 · bot-blocked
Alcohol and Gaming Commission of Ontario List of Registered Internet Gaming Operators
Despite its title this page holds no operator data, no search box and no last-updated date. Its only outbound link goes to iGaming Ontario's Regulated iGaming Market page, not to the filterable Operators directory, which sits a further click away.
Checked 18 September 2026 · reachable
Federal Trade Commission Fake Prize, Sweepstakes, and Lottery Scams
United States consumer guidance about prize and sweepstakes advance-fee fraud, including invented-authority names. Applying it to online casino withdrawals is interpretation and must be labelled as such.
Checked 18 September 2026 · reachable
Federal Trade Commission ReportFraud.ftc.gov (fraud reporting service)
Loaded but returned a JavaScript-only shell with no readable content, so the intake form and its geographic scope are unverified. The destination is named on the FTC consumer page that was read successfully.
Checked 18 September 2026 · js-only
Gambling Commission Display of licensed status: technical requirements
Gives the exact footer wording a consumer should look for, and explains why footers show a short account number: it is 'the first block of 6 digits, removing any leading zeros' where they exist. The Commission also states the footer link must go to the licensee's own register record, not to the register's home or landing page.
Checked 18 September 2026 · reachable
Gambling Commission Illegal online gambling – Phase 1: exploring consumer pathways into using illegal gambling websites – Executive summary
Regulator research, not consumer guidance. Its central finding is that apparent credibility stops people questioning licensing at all, and that some users did not know they had used illegal sites.
Checked 18 September 2026 · reachable
Gambling Commission Illegal online gambling: consumer engagement and trends – Identifying illegal gambling websites
Published 25 September 2025. This describes the regulator's own methodology for identifying illegal sites; it is not a consumer checklist and contains no logo or seal guidance.
Checked 18 September 2026 · reachable
Gambling Commission Register of gambling businesses – full list
Browsable list with activity and remote/non-remote filters applied by an 'Apply filter' button. Query-string search parameters are ignored: five patterns were tested and each returned the unfiltered list, which a reader who does not notice would mistake for a result.
Checked 18 September 2026 · reachable
Gambling Commission Register of gambling businesses (search)
The search field is labelled 'Search by business name, trading name, domain name or account number', so domain search is officially supported. Two caveats the register states or demonstrates itself: 'Domain names and trading names are provided by the gambling business' — the domain list is self-reported, not compiled by the regulator — and no Commission page defines what the status values (Active, Expired, Forfeited, Lapsed, Pending, Revoked, Surrendered, Suspended) actually mean. The search is form-driven: there is no link that runs it for you.
Checked 18 September 2026 · reachable
Gambling Commission Unlicensed gambling: our approach to tackling unlicensed gambling
The regulator's own blog, by Chief Executive Andrew Rhodes, dated 21 October 2024. Listed for completeness: no claim in the research rests on it, and it is not a third-party news source.
Checked 18 September 2026 · reachable
iGaming Ontario Regulated igaming market directory
A point-in-time snapshot, not a live register — the page states the listing is accurate as of 1 September 2026. It does carry a search box and operator and category dropdowns, correcting the original research note that it was browse-only.
Checked 18 September 2026 · reachable
Kansspelautoriteit Kansspelwijzer — register of providers licensed to offer gambling in the Netherlands
The register on this page is an iframe served from the regulator's own prevention site. Do not use the search box in the page furniture: that is the Kansspelautoriteit's site-wide website search, which searches the regulator's site and not the register. Search inside the embedded register panel instead.
Checked 18 September 2026 · reachable
Kansspelautoriteit Register of licensees — English explainer for the Dutch licence register
An explainer, not the register itself: it tells a reader to search the company name, website, app or licence number, and links onward to the Dutch register tool.
Checked 18 September 2026 · reachable
Kansspelautoriteit (Netherlands Gambling Authority) Aanpak illegale online gokspelen
Dutch-language original. It references no public list of illegal providers for the Netherlands.
Checked 18 September 2026 · reachable
Malta Gaming Authority Licensee Register — Malta Gaming Authority
The landing page a consumer arrives at, with two tabs: 'Licensee Register' and 'URL Checker'. Both tabs are iframes onto separate subdomains, so a plain HTTP fetch returns essentially only the two headings — the tools have to be used in a browser. This page is the only place the URL Checker's real address is exposed to the public.
Checked 18 September 2026 · reachable
Malta Gaming Authority MGA Licensee Register — search application
A JavaScript application behind Cloudflare: a plain fetch returns only the shell string 'LicenseeRegisterFrontEnd'. Driven in a browser it offers exactly three fields — Licensee Name, Authorisation Status and Gaming Service — and displayed 'Last Updated: 18/09/2026 13:43', which is a data-refresh time, not a content-review date. The structural trap: Authorisation Status is a filter only and is not shown in the result cards, so a consumer who searches by name sees no licence status until they open the record's dynamic seal.
Checked 18 September 2026 · js-only
Malta Gaming Authority The MGA publishes notice on websites impersonating licensed operators
Confirms impersonation of licensees and false references to MGA licences. It does not confirm copying of a regulator's seal graphic; do not conflate the two.
Checked 18 September 2026 · reachable
Malta Gaming Authority Unauthorised URLs — Malta Gaming Authority
A static published list of domains the MGA has actively noticed, not a search tool and not a comprehensive blacklist — absence from it proves nothing. The page carries no last-updated date; the most recent notice date observed on it was 15/09/2026.
Checked 18 September 2026 · reachable
Spelinspektionen Illegal Gambling — how the Swedish regulator acts against unlicensed operators
The regulator publishes no blacklist or warning list of unlicensed operators. Bans appear only in the supervisory decisions archive, and the authority reports crimes to police rather than investigating them itself.
Checked 18 September 2026 · reachable
Spelinspektionen Licence and permit directory — English path of the Swedish licence register
Same register as the Swedish path and equally client-rendered. Filter labels, licence-type names and the Excel export buttons stay in Swedish even on this English page.
Checked 18 September 2026 · js-only
Spelinspektionen Supervisory decisions — archive of Swedish gambling enforcement decisions
Read in a browser; a plain fetch returns a shell. Entries run from 2019 to 2026, so it is a historical archive and not a current-status view. Filter values stay in Swedish on the English page. Only this English path works — the equivalent Swedish path returns 404 after the June 2025 site relaunch.
Checked 18 September 2026 · js-only
Spelinspektionen Swedish Gambling Authority — English section
The English section is a partial mirror. Key consumer pages — where to complain, illegal gambling, gambling problems — exist only in Swedish.
Checked 18 September 2026 · reachable
Spelinspektionen (Swedish Gambling Authority) The SGA's situation report — online gambling outside the licensed market (PDF)
Downloaded as a 733 KB binary PDF but never parsed — no text was read and no claim on this site rests on its contents. Listed because it is the likeliest official Swedish source on people gambling outside the licensed market despite an exclusion; a human must open it before anything is quoted from it.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Danish Gambling Authority (English section)
The English section lives under /en-us. Search-engine results pointing at /en/... paths are stale and return 404.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Have you discovered illegal gambling or illegal advertising?
Submission is via a link to the Authority's contact page, which neither analyst fetched, so that contact URL is not published here. The page also states a reporter will generally not be informed of the outcome.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Illegal gambling and advertising
No last-updated date. Danish DNS-blocking mechanics, the blocked-page notice text and all blocking statistics are unverified — the pages carrying them return 404.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Public and players (Danish Gambling Authority) Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Spillemyndigheden (Danish Gambling Authority) – home
Danish-language home page.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) Spiludbydere med tilladelse (gambling operators holding a licence)
Danish-language list. A search function is present at the top of the page; no filter controls were observed and the result fields did not render for an automated fetch. The list excludes gaming-machine licence holders and game suppliers, which have separate lists.
Checked 18 September 2026 · reachable
Spillemyndigheden (Danish Gambling Authority) The Danish Gambling Authority's label
Confirms the label is a legal requirement but is genuinely silent on the label's own text, on whether it links anywhere, and on misuse. No date shown. A mandatory label is not the same as a verifiable seal.
Checked 18 September 2026 · reachable