Most bad casinos give themselves away within the first minute on the homepage. The hard part isn't spotting them — it's actually looking. This guide is the eight checks I'd run before funding any account I haven't used before. Each one takes 30 seconds and rules out most of the bad operators in the wild without much false-positive risk for the legitimate ones.
1. No license number — or one you can't verify
The single biggest signal. A legitimate operator displays a license number in the footer, and you can verify it on the regulator's public register in 30 seconds. If you can't find a number, or you find one but it doesn't resolve to anything on the regulator's site, the casino is unlicensed by your standard.
The full walkthrough — including which register URL to use for UKGC, MGA, Curaçao and Anjouan — is in the verifying a license guide. The shortcut: do notrely on the seal in the footer. Always navigate to the regulator's site directly, because fake seals linking to spoofed registers are a real scam.
2. Curaçao "orange seal" in 2026
Specific to one jurisdiction, but worth its own bullet because a lot of legacy operators are still trading on the old branding. The Curaçao reform (LOK, 20 December 2024) replaced the old master/sub-license model with direct licensing by the new Curaçao Gaming Authority. Operators transitioning from the old regime displayed an orange seal. That seal permanently expired on 15 October 2025.
If you see an orange seal in a casino footer today, the operator failed to complete the LOK transition. Active licensees in 2026 show green (B2C) or blue(B2B) seals. Anything else is either an old jurisdiction's seal or, more likely, a stale graphic the operator hasn't updated. Either way, treat it as unlicensed for your purposes.
3. T&Cs that make withdrawals nearly impossible
Read the bonus T&Cs and the withdrawal section before you deposit, especially if you're tempted by a welcome bonus. Specific things that should make you walk:
- Wagering requirements above ~50× the bonus + deposit. The industry norm is 30–40× on bonus only. Anything above 50× is designed to make withdrawals statistically improbable.
- Maximum bet rules during wagering of $1–$2.If you accept a $200 bonus and the T&Cs say "maximum bet $2 until wagering complete", any $5 bet voids everything you've won — even if it's your own money on top.
- Bonus expiry under 7 days. Forces you to play through fast, often through slot games with low RTP, before life gets in the way.
- "Discretionary" clauses.Phrases like "the casino reserves the right to void any winnings deemed irregular" with no defined criteria. That's an escape hatch the operator uses when you win.
- Maximum withdrawal limits per week or month.If you win $20,000 and the policy is "$1,000/week", your money is held for 20 weeks. Some operators use this to stall you into closing the account voluntarily.
These aren't illegal in unregulated jurisdictions. Some are even disclosed up front. The point is that you read them before depositing, not after winning.
4. Hidden or missing physical address
Every regulated casino has a registered office somewhere. The regulator requires it; the license filing makes it public. A legitimate operator's footer or "About Us" page lists the parent company's legal name and registered address — often Curaçao, Malta, Gibraltar, or the Isle of Man.
Watch for: vague references to "international company", addresses that resolve to known shell-company providers in Belize or the Marshall Islands without any other jurisdiction, or addresses that don't match the regulator's register. A mismatch between the footer and the public register is a signal the operator is using paperwork from a different entity — possibly one that surrendered its license.
5. Reviews that look manufactured
Healthy casinos have a long-tail mix of 1, 2, 3, 4 and 5-star reviews on Trustpilot, AskGamblers, and Casino.org. Pure 5-star streaks, especially clustered in time, are usually paid. Other signs of fake reviews:
- Reviews posted within minutes of each other on the same site.
- Reviewer profiles created the same week as their first review.
- Generic praise ("great casino, fast payouts") with no specifics on which game, which payment method, which timeframe.
- An aggressive response from the casino on every negative review with the same template, asking the user to email a specific support address — without addressing the substance.
Cross-check the casino name on Reddit (specifically /r/onlinegambling and /r/CryptoGambling) and on Casino.guru's complaint database. Search for "[casino name] withdrawal" or "[casino name] not paying". A pattern of recent complaints with the same theme — withheld winnings, KYC stalls, closed accounts after wins — is a far better signal than the casino's star rating.
6. No provably-fair option for crash / dice / instant games
For games with house-edge math you can verify (Crash, Dice, Plinko, instant lotteries), provably-fair implementations are the table stakes in 2026. The operator commits to a hashed server seed before each round, the player can supply or rotate a client seed, and after the round you can verify the outcome was determined by those inputs — not the operator's mood.
The full mechanics are in the provably-fair Crash explained guide. The red flag: a casino that offers Crash, Dice or similar games without any "Fairness" or "Provably Fair" section in the game UI, no published implementation details, and no way to seed-rotate. That's a casino relying on regulatory trust alone for game integrity. For crash-style games specifically, that's a step backward.
7. KYC traps: easy to deposit, painful to withdraw
Watch for the asymmetry. A legitimate casino runs KYC at one of two points: at signup (low-friction, document upload at the start), or at first withdrawal above a threshold (e.g. €1,000+). Either is fine. The bad pattern is "deposit instantly with no KYC, but pay out only after extensive identity checks, source-of-funds documentation, and a manual review" that mysteriously stretches beyond the operator's stated timeline.
The mitigation: complete KYC before you have a balance to withdraw. If the casino offers identity verification at signup, do it then. If it doesn't, do a small test deposit and attempt a small withdrawal before scaling. The friction at small amounts is the friction at large amounts — except the time pressure is gone.
8. Aggressive bonus pushing or "sticky" deposits
Two specific patterns to watch:
- The bonus is auto-applied and you can't opt out. Legitimate casinos let you decline bonuses; if you can only deposit with the bonus attached, the wagering requirements then apply to your ownmoney too. That's a deposit you can't withdraw without playing through the bonus terms.
- "Sticky" bonus terms — the bonus amount is non-withdrawable.You deposit $100, get a $100 sticky bonus, but only the $100 you deposited (and any winnings) are withdrawable. The bonus exists only to be wagered. This is sometimes legitimate, but should be disclosed clearly upfront, not buried in T&Cs.
Either pattern by itself isn't damning. Both at once, plus no opt-out, is a sign the operator's commercial model depends on bonus mechanics rather than honest house edge.
The 60-second pre-deposit checklist
- License number visible in footer? (no → walk away)
- Number verified on regulator's public register? (no → walk away)
- Curaçao seal: green or blue, not orange? (orange → walk away)
- T&Cs read; wagering ≤50×, no surprise max-bet rules? (yes → continue)
- Physical address matches the regulator's register? (yes → continue)
- Reviews show real distribution, not pure 5-star? (yes → continue)
- Provably-fair available for crash/dice games? (yes for crash sites → continue)
- KYC completed before deposit, or test withdrawal done first? (yes → continue)
It's genuinely a minute of work. The cost-benefit on a casino you'll fund $50+ into is silly to skip. If you do find yourself in a dispute already, the escalation playbook is in the unpaid winnings guide.
