A rigged or scam online casino gives itself away through a cluster of red flags: no verifiable licence on a regulator’s register, no independent RNG certification, predatory bonus terms designed to void winnings, and a documented pattern of stalled or refused withdrawals. Any single flag warrants caution; two or more means walk away.

Every legitimate operator can attract complaints — that alone proves nothing. What separates a genuinely dangerous site from an ordinary one is a pattern of the flags below, and the fact that none of its safety claims survive a two-minute check.

The top red flags

1. No licence — or a licence you can’t verify. A licence is only real if it appears on the regulator’s own public register. Scam sites paste an official-looking badge, quote a number, or claim to be “licensed in Curaçao” — none of which means anything until you confirm it at the source. A genuine seal links back to the regulator’s verification page, not to another page on the casino. (See how to verify a casino licence.)

2. A borrowed or fake licence number. A common tactic is displaying a real licence number that actually belongs to a different, legitimate operator, betting that players won’t notice the name mismatch.

3. No independent RNG or fairness certification. Legitimate games are tested by independent labs — eCOGRA, iTech Labs, or GLI — which examine the RNG’s randomness, unpredictability and resistance to manipulation. No named lab, no linked certificate, no fairness page is a serious warning sign. A real certification seal is clickable and resolves to the tester’s own domain.

4. Predatory bonus terms built to void winnings. Watch for: sky-high wagering (Great Britain now caps online bonus wagering at 10x, citing a “£10 bonus with a 50x requirement” as the abuse it fixed); wagering applied to deposit + bonus rather than bonus only; a low max-bet cap while a bonus is active where a single oversized spin voids everything; game weighting that makes table games clear nothing; short time limits; and low max-cashout caps that confiscate winnings above a ceiling.

5. Deposits are easy; withdrawals are a maze. Across both major complaint services, delayed and withheld payments are consistently the number-one dispute category. The classic rogue pattern: money in is instant, but a withdrawal triggers endless “verification” loops, repeated document requests, accusations of “bonus abuse”, or an account lockout. KYC deliberately deferred to the withdrawal stage is used to hold funds hostage.

6. Vague, discretionary, buried terms. Fair operators disclose numeric caps, named games and deadlines up front. Predatory ones scatter conditions across pages, hide rules in FAQs, and rely on undefined language — “irregular play”, “management reserves the right” — invoked only after you win.

How the scams actually work

Fake and dead licences. Since Curaçao’s LOK reform (in force 24 December 2024), the old system of master licences selling sub-licences was abolished and legacy sub-licences expired in January 2025. The CGA is now the sole direct issuer, and a valid licence shows a green (B2C) seal linking to the CGA’s database — yet scam sites still display old, invalid master/sub seals.

Clone and white-label networks. Investigators have documented “clone” networks tying a dozen-plus domains to one operation — near-identical sites from the same template, same logo, shared support email, and hardcoded fake statistics (identical “players online” counts across brands). They claim to operate “since 2017” while domain records show registration months ago. The tell is shared predatory terms across near-identical sites.

Confiscation and advance-fee tactics. The endgame is non-payment: show initial wins, then block the withdrawal, cite a terms breach or endless verification, and sometimes demand extra crypto framed as an “AML verification deposit” that never leads to a payout. Rings then rotate to a fresh domain so complaints never stay attached to one name.

How to verify a casino is legit — checklist

  1. Find the licence details in the footer (regulator, number, operating company).
  2. Check the regulator’s own register — confirm status Active and the company name matches. (Full register links: how to verify a licence.)
  3. Click the licence seal — it must link to the regulator’s verification page for that operator.
  4. Verify RNG/fairness certification — a named lab (eCOGRA, iTech Labs, GLI) with a live certificate.
  5. Read the withdrawal and bonus T&Cs before depositing — wagering multiplier, bonus-only vs deposit+bonus, max-bet-during-bonus, game weighting, max-cashout caps.
  6. Cross-check complaint history — search the casino on Casino Guru and AskGamblers for non-payment/confiscation patterns.
  7. Confirm a dispute route exists — UK-licensed operators must use a Gambling Commission-approved ADR provider, free to you.

If any step fails, do not deposit. See also our gambling licences compared ranking.

Sources

General information, not legal advice. 18+. Play responsibly.