How Online Casinos Scam Players: 9 Tricks and Real Cases

There are two kinds of casino scam. The first is a casino that was never real: it takes deposits and pays nobody. The second is a real casino that pays most people, then uses its own rules to keep the money of the few who win big.

The first kind is a crime. The second is often legal on paper, which makes it harder to spot. We test casinos by depositing our own money and asking for it back, and these are the nine patterns we look for. Each one comes with a real case and a source you can check.

The short version

The trick	How to check
Fake casino Huge free credit, easy wins, then a “verification deposit”	Never pay to withdraw. Search the exact domain first
Withdrawal fee “Pay a tax or fee to release your winnings”	A real casino takes fees from the balance. It never asks for new money
Counterfeit games Famous slots that pay worse than they should	Pragmatic Play Verify app with the Round ID
Borrowed licence A seal that opens nothing, or opens on another domain	The certificate must show the exact domain you are on
KYC after the win Documents asked only at withdrawal, then again and again	Ask what they need before you deposit
Bonus trap Winnings cancelled for one bet over the max	Read the max bet line, screenshot the terms
“Malfunction” A big win voided as an error	Ask for the exact clause and the provider report
Paid in drops A $50,000 win paid $2,000 a week	Read the withdrawal limit before you play
Dormant account Balance eaten by fees after months away	Withdraw what you are not playing with

1. A casino that was never a casino

The cleanest scam has no games to rig, because the whole site is fake. On 26 October 2026 Gamecheck, a company that checks whether casino games are genuine, published an investigation into what it calls the Gambler Panel: one shared back end that it says runs more than 2,000 fake casino sites.

The pattern it describes repeats on every site. Ads on Instagram, TikTok and YouTube Shorts, sometimes with faked celebrity faces, offer a code for something like “$2,500 in free credits”. You play and win far more often than any real casino allows. When you ask to withdraw, you are told to make a “verification deposit” of around $100 in crypto. After that, support goes quiet. Gamecheck says the network pays more than 20,000 affiliates up to 70% of what victims send.

One detail matters for our readers. A domain on Gamecheck’s list is bc-game.us. BC.Game is a real casino we tested with our own money, and the fake one simply borrowed its name. Scam sites copy real brands because people search for real brands. Type the address yourself, or use a link you already trust.

2. “Pay a fee and we release your money”

This is the last step of almost every fake platform, casino or “investment”. The balance looks huge, the withdrawal fails, and a new condition appears: a tax, a fee, a verification payment, an anti money laundering deposit.

The FBI describes it plainly on its IC3 page on investment fraud: when the victim tries to withdraw, the account is frozen and they are told to pay taxes or fees first. Paying does not release anything. The FBI adds that victims often pay more at this stage than everything they deposited before, and that the next message usually comes from a fake “recovery” service asking for yet another fee.

A real casino that charges a fee takes it from your balance. It never asks you to send new money to get old money out. If anyone asks, stop there.

3. Real game names, fake games

A site can look like a normal casino and still cheat inside the games. The trick is to run pirated copies of famous slots with the payout changed.

Pragmatic Play, one of the biggest slot studios, has taken this to a US federal court. In a complaint filed in the Eastern District of Virginia, it says one network, called EDN in the filing, ran more than 2,500 sites with counterfeit copies of its games, and kept them alive with mirror domains each time a URL was blocked. The studio warns that fake versions can pay out less and put your personal data at risk.

You can check a Pragmatic game yourself: take a screenshot with the Round ID visible and send it through the studio’s free Verify app. One honest caveat. Real casinos can legally pick a lower RTP version of a real game, because many studios ship several. The game’s info screen shows which one you are playing, and that is worth a look before a long session.

4. A licence that belongs to someone else

A licence badge in the footer is a picture. Anyone can paste it. What matters is where it leads.

For Curaçao, which licenses a large share of crypto casinos, the regulator spells it out on its certificate policy page. A licensed site must show the Curaçao Gaming Authority seal, the seal must open cert.cga.cw, and the certificate must show the exact domain you are on. If it names a different domain, the regulator says the site is showing another operator’s certificate and should be treated as unauthorised or fraudulent.

So the check takes ten seconds: click the seal, read the domain on the certificate, compare it with your address bar. No seal, a seal that opens nothing, or a different domain means no. The CGA also keeps a licence register, but warns that it is an overview, and the certificate is the live status.

5. KYC that starts after you win

Asking for ID is normal. Casinos have to check who they pay. The trick is when they ask, and how often.

The pattern players describe: no questions at signup or deposit, then a big withdrawal brings a request for a passport. Then a selfie. Then a utility bill, a bank statement, a source of funds letter, a video call. Each step takes days and each answer brings a new question. Some players give up. Some casinos have terms that let them keep the balance if the documents come late.

That last part has been treated as unfair in the UK. In 2018 the Competition and Markets Authority got Progress Play to drop a term that confiscated money when identity checks were not done within a set time. In the CMA’s words, firms “cannot justify confiscating someone’s money simply because they do not provide information within a specific time frame”.

Before you deposit, ask support what documents they would need for a withdrawal the size you hope for, and save the answer. Casinos that paid us without paperwork are in our light KYC ward.

6. A bonus that works as a trap

Bonus terms are where real casinos keep most of the money they would rather not pay. The usual tool is the max bet rule. While a bonus is active, one bet over the limit, often around $5, lets the casino cancel the bonus and every win made with it. Players who forget it once, or never saw it, lose the whole balance at withdrawal.

Other lines do the same job: “irregular play”, excluded games, a max cashout, a deadline. We explain each one, with the maths, in our guide to wagering requirements.

In the UK, the CMA made major operators agree that they cannot rely on vague terms to confiscate players’ money. Outside the UK, nothing forces that. Screenshot the bonus terms on the day you take the bonus, so you have something to argue with.

7. “The game malfunctioned”

Nearly every casino has a clause that voids wins caused by a “malfunction”. It exists for real bugs. It is also the easiest way to refuse a big payout.

The best known case is British. In January 2018 Andy Green won £1,722,500.24 on a blackjack game in the Betfred app. Betfred congratulated him, then refused to pay, saying the game provider Playtech had found a glitch. Green sued. In 2021 the High Court ruled for him: the judge found the clauses Betfred relied on unclear, not transparent and not fair. Betfred had to pay the win plus interest, the BBC reported, after a three year fight.

Two lessons. A “malfunction” claim should come with the exact clause and a report from the game provider, not just a line from support. And Green could take a UK licensed bookmaker to a UK court. Against an offshore casino with no real address, that road is far harder, which is why it matters where a casino is licensed before you deposit.

8. Paid in drops

A casino can promise to pay you and still make the win useless. The tool is a withdrawal limit: $2,000 a week, $10,000 a month. Win $50,000 at a casino with a $2,000 weekly limit and the last part reaches you about six months later. Until then the balance sits in your account, one click away from being played again.

The CMA went after this as well. In 2018 it got Jumpman Gaming and Progress Play to remove terms that made players take their money in instalments over a long period. Before you play for big wins, find the withdrawal limit in the terms. We note limits on every chart, and casinos with high limits are in our high limit ward.

9. A balance that goes dormant

Leave money in an account and stop logging in, and some casinos start charging a monthly inactivity fee until the balance is gone, or close the account and keep what is left.

The CMA’s guidance for gambling firms says dormant account charges must be clear, must not start before 12 months of inactivity, and the firm must try to return the money first. Offshore terms can be much harsher. The fix is simple: withdraw what you are not playing with.

And the casinos that just close

Some casinos need no trick. They slow down payouts, stop answering, and then the domain goes dark. When that happens to a casino we cover, its chart moves to our morgue and stays public, so anyone who searches the name later can see what happened.

How to check a casino before you deposit

Type the address yourself and compare it letter by letter with the brand you know.
Click the licence seal. The certificate must open on the regulator’s own site and show this exact domain.
Find the operator’s company name and look it up in the regulator’s register.
Read three lines in the terms: the withdrawal limit, the max bet with a bonus, and the malfunction clause.
Ask support in chat which documents they need for a withdrawal, and save the reply.
Start small. Deposit a little, play, and withdraw before you deposit more. That first withdrawal tells you more than any review.
Never send money to get money out.

Step 6 is how we work. Every casino on this site is tested with our own deposit and a real withdrawal, and every one of those withdrawals is on our lab results page. How we turn that into a score is on how we examine.

If it already happened

Stop depositing. Do not pay any fee to release the balance.
Save everything: screenshots of the balance and the chat, the terms as they were that day, and the transaction IDs of your deposits.
Ask the casino in writing which exact clause it is using. A vague answer is evidence too.
Complain to the licensing body named on the certificate, if there is one.
Report fraud to the police: ic3.gov in the US, Action Fraud in the UK.
Ignore anyone who offers to recover crypto for a fee.
Tell us. Reader reports decide which casino we check next.

FAQ

Q01Can online casinos be rigged?

In genuine games the payout is set by the studio and tested, although many studios offer several RTP versions and the casino picks one. Scam sites go further and run counterfeit copies of famous slots with a lower payout. Pragmatic Play has sued a network it says ran more than 2,500 such sites, and offers a free Verify app to check its games by Round ID.

Q02How do I know if an online casino is fake?

Warning signs are huge free credits with no conditions, ads with celebrities, winning almost every bet, a licence seal that does not open the regulator’s site, and any request to deposit again before a withdrawal. For Curaçao, the certificate on cert.cga.cw must show the exact domain you are on.

Q03Should I pay a fee to withdraw my winnings?

No. A real casino takes any fee from your balance. A request to send new money, called a tax, a fee or a verification deposit, is how fake platforms take a second payment. The FBI warns that paying does not release the funds.

Q04Can a casino refuse to pay winnings?

It can try, usually by pointing to a bonus rule, a document deadline or a malfunction clause. In the UK, regulators and courts have found several such terms unfair, including in the Betfred case, where a £1.7 million win had to be paid with interest. Offshore casinos are much harder to challenge, so read the terms before you play.

Q05Why does a casino ask for documents only when I withdraw?

Casinos must check who they pay, and many only do it at the first withdrawal. It becomes a problem when the requests keep growing, or come with a deadline that lets the casino keep your balance. Ask support what they need before you deposit and save the answer.

Q06What should I do if an online casino scammed me?

Stop depositing, save screenshots and transaction IDs, ask the casino in writing which rule it is using, and complain to its licensing body. Report fraud to the police, in the US through ic3.gov and in the UK through Action Fraud. Ignore anyone offering to recover crypto for a fee, because that is a second scam.

How Online Casinos Scam Players: 9 Tricks and the Cases Behind Them