1. Verify the licence on the regulator register
Every legitimate operator publishes a licence number in the footer. Click it. If the link is a logo image with no destination, that is the first red flag. Cross-reference the number against the regulator's public register: UKGC (gamblingcommission.gov.uk/public-register), MGA (mga.org.mt/licensee-register), Curaçao (gamingcontrolcuracao.org). If the operator name does not match the licensee, leave.
2. Check who owns it
Tier-1 operators publish a "Legal entity" or "Licensed by" line — usually a company in Malta or Gibraltar. Search Companies House (UK), MFSA (Malta), or the Gibraltar registry. A site with no traceable corporate parent is, at best, single-use.
3. Search complaints — but read carefully
AskGamblers, ThePOGG, and the regulator's ADR (Alternative Dispute Resolution) lists publish operator complaints. Volume normalised by operator size matters more than absolute numbers. A single confirmed fund-confiscation case is more damning than 100 "withdrawal was slow" reports.
4. Look at payment processors
Visa, Mastercard, Skrill, Neteller, Trustly, PayPal — these processors review their merchants. If a casino accepts only crypto and obscure altcoin gateways, the corporate due diligence floor is much lower. Not automatically a red flag (many legitimate crypto casinos exist), but a signal to weight the other checks heavier.
5. Read the T&Cs (the dormant-account clause)
Search for "dormant", "inactive", or "max win". Predatory operators bury clauses like "winnings forfeit after 30 days of inactivity" or "max withdrawal €500 per week regardless of balance". These exist at offshore operators and almost never at tier-1 licensed sites.
Frequently asked
Is a Curaçao licence automatically a scam signal?
No — many legitimate operators (Stake, BC.Game, Rollbit) operate under Curaçao licences. It just means the regulator imposes a lower compliance floor than UKGC or MGA. Apply the other four checks more carefully.
What do I do if I suspect a scam after depositing?
Open a complaint with the regulator (UKGC has an ADR scheme; Curaçao's GCB now accepts complaints since 2023). Charge back via your card issuer if the deposit was within 120 days. Document everything in writing.