A casino clone site is a fraudulent copy of a real, licensed brand — same design, same logo, often the same licence number — hosted on a slightly different web address to steal deposits. The defence is to verify the exact domain against the operator’s official channels and the regulator’s register, because a clone can fake everything on the page except being the genuine, licensed website.

Clones work because they outsource the persuasion to a brand you already trust. You recognise the look, spot a licence number, and deposit — never noticing the address bar reads something subtly wrong.

How a clone attack works

  1. Scammers copy a legitimate casino’s homepage, logos, and often its full content.
  2. They host it on a lookalike domain — a spelling variation, a different extension, or an extra word.
  3. They paste in the real operator’s genuine licence number to pass a quick glance.
  4. They drive traffic via search ads, social posts, or unsolicited messages.
  5. Deposits are accepted; withdrawals never process. The site later vanishes or reappears under a new address.

The domain check — your best defence

Everything on the page can be faked except the address itself. Compare the domain character by character with the official site.

Clone tacticExample patternWhat to do
Misspellingcasinno / caz1no / doubled lettersRead the name letter by letter
Different extensionbrand.net instead of brand.comConfirm the real extension via the register
Added wordbrand-vip, brand-play, official-brandThe real brand rarely adds marketing words
Homoglyphszero for O, one for lZoom in; check suspicious characters
Fresh, unknown domainregistered days agoTreat brand-new lookalikes with suspicion

Find the real domain a safe way: through the operator’s verified social accounts, a trusted review or affiliate site’s outbound link, or the domain listed on the regulator’s public register. Never reach a casino through a search ad or a link in an unexpected message — both are prime clone vectors.

Licence: real number, wrong site

A clone will happily show a genuine licence number. That number lives in a register entry that names one authorised company and, frequently, its permitted websites. Look the number up yourself on the regulator’s own site (for example authorisation.mga.org.mt for Malta or cert.cga.cw for Curacao) and confirm the domain you’re on is actually covered. If it isn’t, the licence doesn’t apply to you — the number is stolen decoration.

Other clone tells

  • Payment red flags. Genuine operators use structured cashier systems. Be very wary of a site asking you to send crypto to a personal wallet address, pay an “agent,” or use an odd manual transfer — a classic clone/scam signature.
  • Support that can’t do basics. Ask a specific account or withdrawal question. Clones often run thin or scripted support that dodges specifics.
  • Pressure and urgency. Countdown timers, “deposit now or lose this bonus,” and DMs pushing a link are engineered to stop you checking the domain.
  • Broken trails. Dead links, seals that don’t click through to the regulator, mismatched company names in the footer, or a terms page that names a different brand.
  • Too-good offers. A headline bonus far beyond what the real brand advertises is bait.

A 60-second clone check

  • Read the domain letter by letter against the official site.
  • Reach the site only via a verified channel, not a search ad or DM.
  • Look the licence number up on the regulator’s register and confirm the domain is listed.
  • Refuse any request to pay a personal wallet or “agent.”
  • Test support with a specific question before depositing.

If anything feels off, stop. A real casino’s identity is fixed and verifiable; a clone’s whole business model is hoping you don’t check.


18+ only. Gambling should be entertainment, never a way to make money — the house always keeps a mathematical edge. If it stops being fun, take a break. Support is available at BeGambleAware.org.