Start by freezing the situation and saving evidence
If a site has asked you for money, documents, login codes, or a payment to "release" winnings, don't keep the conversation going while you decide what it is. Stop sending funds, stop uploading documents, and save what you can still see before pages, chat logs, or account screens change.
What you preserve now often matters more than what you remember later. Take screenshots of the account area, cashier screens, bonus terms shown at the time, chat transcripts, payment instructions, wallet addresses if crypto was involved, and every email or message header you can access. Save the exact web address you used, not just the site name. A cloned site often copies branding closely but differs in the domain, subdomain, or login page path.
Keep a simple timeline in your own notes: when you registered, when you deposited, when identity checks were requested, when a withdrawal was attempted, what reason was given for any hold, and what you were asked to do next. If a dispute later turns on sequence, this timeline helps you show whether the operator changed its explanation.
Change your password if you entered it on a suspicious page, and change it first on the email account attached to the casino account if that email could also be exposed. If you reused the same password elsewhere, change those accounts too. Phishing around gambling accounts often aims at the email inbox because password resets and payment notifications pass through it.
Report in the right order
The best reporting path depends on whether you are dealing with a fake site, a cloned login page, a payment scam, or a dispute with a real operator over terms or verification. Start with the channel closest to the problem, then move outward if the answer is missing or unsatisfactory.
| Situation | Who to contact first | What to include | What this route is for |
|---|---|---|---|
| Fake site or cloned login page | The site's hosting provider, domain registrar, search engine ad report form, and your email provider if the contact began by email | Exact URL, screenshots, message headers, and the page it imitates | Taking down impersonation and warning platforms that distribute it |
| Unauthorised card or bank activity | Your payment provider | Transaction record, merchant descriptor, screenshots, and timeline | Blocking further use of the payment method and disputing the transaction under the provider's own process |
| Crypto sent to a scam address | The exchange or wallet service you used, if any | Transaction hash, receiving address, network used, and conversation records | Flagging the address and preserving a record; on-chain transfers are irreversible once confirmed |
| Dispute with a real operator over account action or withdrawal hold | The operator's own complaints or dispute channel | Account email, reference number, dated screenshots, and the terms clause cited to you | Creating a formal internal complaint record before any external escalation |
| Suspected identity misuse after document upload | Your document issuer's guidance route and any account providers tied to the exposed identity data | What document was shared, when, and where | Protecting your identity and watching for follow-on misuse |
For a real operator dispute, use the formal complaints path rather than ordinary live chat if one exists. A functioning process usually has a named complaints channel, a reference or ticket number, and a later stage for unresolved disputes. If all you can find is general chat with no case reference and no written path onward, that is a sign to document carefully and keep copies of everything you send.
How to tell a dispute from a scam
Not every blocked withdrawal or document request is fraud. KYC is a standard identity-verification process and is often triggered before withdrawals. It typically involves a government ID and proof of address, but the exact requirements differ by operator and jurisdiction. A request for verification, by itself, is not proof of wrongdoing.
The difference is in the method, timing, and terms. A normal verification request is made inside the account area or through a clearly documented support process. A scam pattern is more likely to involve pressure, inconsistent explanations, or a new fee invented at the point of withdrawal. If someone claims you must send extra money, especially by crypto or person-to-person transfer, to unlock winnings, treat that as a major warning sign and preserve the message.
Read the term that is being applied to you, not just the support summary of it. If the site cites bonus playthrough, remember what wagering requirements mean: they are multipliers stating how much must be wagered before bonus-related funds can be withdrawn, and game weighting can change how much each wager counts. If a free spin or no-deposit offer is involved, winnings are commonly credited as bonus funds subject to playthrough, maximum-cashout caps, game restrictions, and expiry windows rather than as cash you can withdraw immediately. That does not settle the dispute, but it tells you which clause you need to check.
What fairness checks can and cannot tell you
If you are trying to decide whether a site's games are fair, separate game integrity from operator conduct. They are related, but they are not the same thing.
An RNG determines game outcomes. Independent testing laboratories are commonly used to certify RNG behaviour. That kind of certification speaks to game mechanics: whether the game behaves as designed and produces outcomes according to its programmed rules. It does not tell you how quickly withdrawals are handled, how disputes are treated, or whether a support team applies terms fairly in an individual case.
Provably fair tools, where offered on some crypto-based games, answer an even narrower question. The scheme publishes a hashed server seed before play and reveals it afterwards so the player can verify that the result was not altered after the bet. That helps you test individual round integrity. It is not an audit of the whole business, not proof of reserves, and not proof that your money is recoverable if the operator disappears or refuses a payment.
| Check | What it can verify | What it cannot verify |
|---|---|---|
| RNG testing certificate | That game outcomes follow the implemented rules and randomisation method under the tested setup | Withdrawal conduct, complaint handling, account closures, or the operator's finances |
| Provably fair verification | That a checked round was not altered after your bet under that scheme | That every game on the site uses the scheme, or that the operator will honour balances |
| Published RTP | A long-run statistical average return to players over very many rounds | What will happen in your session, or whether support will handle a dispute well |
| Bonus terms page | The written conditions attached to promotional funds | Whether support will explain those conditions clearly before problems arise |
That distinction matters when reporting. If your complaint is about vanished balances, identity pressure, or invented fees, an RNG certificate does not answer it. If your complaint is that a specific cryptographic check fails on a provably fair game, then save the seeds, hashes, and round record because that is evidence tied to the mechanism.
Terms clauses that deserve a closer read
You are not looking for a single sentence that proves fraud. You are looking for clauses that shift too much discretion to the operator or make withdrawal rights hard to understand before you deposit.
Read the sections on verification, duplicate accounts, source of funds, restricted payment methods, dormant accounts, bonus abuse definitions, maximum cashout on promotional winnings, game weighting, and account closure. Pay attention to whether the rule is specific and checkable or vague enough to be applied after the fact. "We may request documents" is broad but normal. "We may void winnings at our sole discretion for irregular play" without explaining what irregular play means is the kind of wording that deserves caution and screenshots before you play.
Look at whether terms are versioned or dated. If a dispute appears after a policy change, a dated copy helps you show what you accepted at the time. Save the exact promotional page too. Free spins and no-deposit offers often look simple in a banner but become restrictive in the detailed terms because winnings may convert into bonus funds, not withdrawable cash, and may be subject to caps and expiry.
Signs of phishing and cloned sites
Many gambling-related scams are not disputes with a real operator at all. They are lookalike sites, fake support accounts, or search ads and messages that push you toward a clone.
- A domain that is misspelled, padded with extra words, or uses an unusual subdomain for login or cashier access.
- Messages that create urgency around withdrawal release, KYC expiry, or account suspension and direct you to a link rather than your usual saved login page.
- Requests for one-time passcodes, wallet seed phrases, remote access, or payment to "verify" your account.
- Support accounts contacting you through unofficial channels and asking you to continue the case off-platform.
- A site that copies logos and colours but has broken links, inconsistent terms pages, or missing complaints information.
If crypto is involved, check the network named in the payment instruction carefully. On-chain transfers are irreversible once confirmed, and sending on the wrong network can create a loss that support may not be able to reverse. A phishing page may rely on haste here as much as on fake branding.
What a usable complaints path looks like
A genuine dispute process is not judged by a promise that a site is "fair". It is judged by whether you can follow a documented route from complaint to review.
Look for a dedicated complaints page or terms section that explains how to submit a formal case, what information they want, and whether unresolved matters can be escalated to an external dispute body or regulator's complaints channel where that exists. You are verifying structure, not reaching a verdict. If the site gives no written route, no reference number, and no way to preserve the conversation, your reporting package becomes even more important.
When you submit a complaint, keep it narrow and factual. State the account identifier, the disputed transaction or action, the date sequence, the clause cited, and the remedy you are asking for. Attach screenshots rather than paraphrasing them. If the operator changes its reason over time, answer each version in writing and keep the thread intact.
FAQ
Can I report a fake online casino if I never deposited?
Yes. A cloned site, phishing email, or fake support account can still be reported even if no money was sent. Include the exact URL, screenshots, and any message headers or usernames involved so platforms and service providers can identify the impersonation quickly.
If you entered a password or code, treat the incident as an account-security problem as well as a scam report and secure the affected accounts first.
Is a delayed withdrawal enough to prove an online casino is a scam?
No. A delayed withdrawal can happen for ordinary reasons such as KYC review, payment-method checks, or bonus-term verification. The question is whether the operator has a clear written process and whether the reason stays consistent with the terms that applied to your account.
If the explanation keeps changing, or you are told to send extra money to unlock funds, preserve that evidence and move from routine support to a formal complaint and payment-provider reporting where relevant.
Does provably fair mean the whole casino is trustworthy?
No. Provably fair verification is useful for checking that a covered game round was not changed after your bet. It says nothing by itself about complaint handling, balance security, solvency, or how the site treats withdrawals.
Use it as one check among several: terms clarity, identity-verification process, payment handling, and whether the site offers a real dispute path with records you can keep.
Gambling can be addictive. If you or someone you know needs support, visit BeGambleAware.org or call the National Gambling Helpline on 0808 8020 133.
Play responsibly
Gambling should be treated as paid entertainment, never as a way to earn income or recover losses. 1-800-MY-RESET (1-800-697-3738)
18+ or 21+ depending on where you are; follow the minimum age that applies to you.
This article is general information about how these mechanics work. It is not legal advice and not a recommendation to gamble or to use any particular operator. Availability and legality differ by jurisdiction — check the rules that apply where you are.