The question behind the name
When someone asks whether a specific bonus is legitimate, they are usually holding an offer that looks good and trying to work out whether it is a real promotion, a badly worded one, or a trap. The name on the offer matters less than the checks you can run yourself. A bonus is not a product you can authenticate by brand recognition; it is a set of terms attached to an account, and the terms are where an offer reveals what it is.
This article gives you a repeatable method. You will learn what a testing certificate does and does not prove, what a provably-fair badge can and cannot verify, which clauses in the terms page are the strongest risk signals, what a functioning complaints path looks like, and how to spot a cloned or phishing site before you type anything into it.
What the offer is
Start by separating the marketing line from the legal instrument. The marketing line is the headline: a matched deposit, a batch of free spins, a no-deposit credit. The legal instrument is the terms page attached to that headline. Every genuine promotion has one, and it is usually linked from the offer itself, the promotions page, or the cashier.
A no-deposit bonus is a promotional credit granted without a deposit. It is normally subject to wagering requirements, maximum-cashout caps, game restrictions and expiry windows, which determine whether any of it can become withdrawable. Free spins are spins granted at a fixed stake on specified slot titles, and winnings are commonly credited as bonus funds subject to wagering requirements rather than as withdrawable cash. None of these structures are suspicious on their own. What matters is whether the numbers that attach to them are disclosed, coherent, and consistent across the offer page, the terms page, and the cashier screen.
What a wagering requirement tells you
A wagering requirement, sometimes called playthrough, is a multiplier stating how much must be wagered before bonus-related funds can be withdrawn. As an example, a 30x requirement on a 50-unit bonus means 1,500 units must be wagered. Game weighting can change how much each wager counts, so the multiplier alone is not the whole picture.
Read the requirement in three pieces. First, the multiplier itself and what it applies to: the bonus only, or the bonus plus the deposit. Second, the game weighting table, because a slot may count fully toward the requirement while a table game counts at a fraction or not at all. Third, the maximum bet allowed while the bonus is active, because exceeding it can void the bonus and any winnings derived from it. An offer that hides any of these three pieces is a stronger risk signal than an offer with a high but clearly stated multiplier.
RNG testing and what it does not cover
A random number generator is the algorithm that determines game outcomes. Independent testing laboratories are commonly used to certify RNG behaviour, and that certification covers game mechanics, not an operator's financial conduct. A certificate tells you that the game's outcomes are generated by a tested algorithm under the conditions described in the certificate. It does not tell you that withdrawals will be paid, that the bonus terms are fair, that the operator is solvent, or that the site you are looking at is the site the certificate was issued for.
The checkable step is to find the certificate, note the laboratory name and the certificate number, and verify that number on the laboratory's own public register. A badge image on a footer is not verification; a certificate number that resolves on the laboratory's site is closer to one. If the certificate cannot be traced to a laboratory you can independently reach, treat the badge as decoration.
Provably fair: what the verification proves
Provably fair is a cryptographic scheme used by some crypto-based games where a hashed server seed is published before play and revealed afterwards, letting a player verify that the outcome was not altered after their bet. It verifies individual round integrity; it is not a licence, an audit, or a guarantee of solvency.
This matters because a site can run provably fair games and still delay withdrawals, impose predatory bonus terms, or disappear with deposited funds. The cryptographic check answers one narrow question: was this particular round altered after the bet was placed? It answers nothing about the operator's custody of your money, its dispute process, or its identity. Treat provably fair as a useful technical property of a game, not as a substitute for the other checks in this article.
Terms clauses that function as warning signs
Every operator writes its own terms, so no single clause is automatically illegitimate. But certain patterns reliably indicate that an offer is structured to make withdrawal difficult or impossible. You are looking for clauses that shift the outcome after you have already acted.
| Clause pattern | What it means in practice | Why it matters |
|---|---|---|
| Maximum cashout cap | A ceiling on how much of the bonus-derived winnings can ever be withdrawn | It caps the value of the offer regardless of outcome |
| Game weighting exclusions | Certain games count at zero toward playthrough | Playing the wrong game can void the bonus |
| Maximum bet while bonus active | A stated ceiling on wager size during playthrough | Exceeding it can forfeit the bonus and winnings |
| Expiry window | A time limit on completing the requirement | Unfinished playthrough forfeits the bonus funds |
| Withdrawal method restrictions | Limits on how and where winnings can be sent | Can create friction at the moment of withdrawal |
None of these clauses are hidden in fine print on a legitimate offer; they are stated, sometimes bluntly. The risk signal is absence or contradiction. If the offer page promises one set of numbers and the terms page states another, or if a clause is written so broadly that the operator can change it unilaterally after you claim, that is a structural reason to walk away.
What a functioning complaints path looks like
Before you deposit, find out what happens when something goes wrong. A functioning dispute path has four visible parts. First, a named complaints procedure: a stated channel, a stated response window, and a stated escalation step. Second, a regulator or alternative dispute resolution body that the operator points to, with enough detail that you can reach that body independently. Third, a record of how disputes are logged, whether by ticket number, email thread, or account history. Fourth, terms that describe what happens when the operator and the player disagree, rather than terms that simply reserve all discretion to the operator.
You are not looking for a guarantee that you will win a dispute. You are looking for evidence that a dispute can be raised, tracked, and escalated somewhere other than the same support inbox that ignored you. An operator that names no external body, no procedure, and no escalation path is asking you to trust it without recourse.
Signs of a cloned or phishing site
The most dangerous version of a fake bonus is not a bad offer on a real site; it is a convincing copy of a real site. Cloned sites reuse the layout, logos, and bonus language of a legitimate operator while routing deposits to a different destination. The checks here are mechanical, not judgment calls.
Check the domain character by character, because lookalike domains use substituted characters or extra words. Check the certificate details in your browser, not just the padlock icon. Check whether the site asks for credentials, deposit details, or identity documents before you have opened an account, because a legitimate registration flow does not ask for payment details first. Check whether the bonus terms link to a page on the same domain or to an external document. And check the deposit address carefully on any crypto transfer: on-chain transfers are irreversible once confirmed, require the correct network to be selected, and settle according to network confirmation times and fees rather than the operator's banking hours. A wrong network or address is not recoverable through a support ticket.
Building your own verification sequence
Run the checks in order, because each one filters a different failure mode. The sequence below is a method, not a scorecard; no single pass proves an offer is safe, and a single hard fail is enough to stop.
- Read the full terms page attached to the offer, not the summary on the banner.
- Write down the wagering requirement, the game weighting, the maximum bet, the cashout cap, and the expiry window.
- Check that the same numbers appear on the offer page, the terms page, and the cashier screen.
- Find the RNG certificate and verify the number on the testing laboratory's own register.
- If the games are provably fair, understand that this verifies round integrity only.
- Locate the complaints procedure and any external dispute body before depositing.
- Inspect the domain, the certificate, and the deposit address for clone indicators.
The offer's legitimacy is not a property you can read off its name. It is the sum of what the terms disclose, what the certificates certify, and what recourse exists when the outcome is not what the banner promised.
FAQ
What should I do if the bonus terms contradict the offer page?
Treat the contradiction as decisive. The terms page is the document the operator will enforce, so if it states a higher wagering requirement, a lower cashout cap, or a different game weighting than the banner, the banner was not the offer. Do not claim the bonus on the assumption that the more favourable version will apply.
Does a provably fair badge mean the site is safe to deposit on?
No. Provably fair verification confirms that individual rounds were not altered after the bet was placed. It says nothing about whether withdrawals will be processed, whether the bonus terms are reasonable, or whether the operator is solvent. Run the full verification sequence rather than treating the badge as a safety certificate.
How can I tell if I am on a cloned casino site?
Inspect the domain character by character, check the browser certificate details rather than the padlock icon, and confirm that the bonus terms link to a page on the same domain. Before any crypto deposit, verify the network and the address independently, because an on-chain transfer cannot be reversed once confirmed.
Gambling involves risk. Please only gamble with funds you can comfortably afford to lose. While we do our best to provide accurate information, we cannot guarantee the correctness of everything on our site. Remember that gambling can be addictive; if you or someone you know is struggling, seek help. In the US, call the helpline printed in the footer below.
Play responsibly
Gambling should be treated as paid entertainment, never as a way to earn income or recover losses. 1-800-MY-RESET (1-800-697-3738)
18+ or 21+ depending on where you are; follow the minimum age that applies to you.
This article is general information about how these mechanics work. It is not legal advice and not a recommendation to gamble or to use any particular operator. Availability and legality differ by jurisdiction — check the rules that apply where you are.