Crypto Casino Red Flags: A Checklist

Licence problems are the most common and most verifiable red flag. Follow the steps in our licence verification guide: footer, seal, official register.

• No licence at all, or a company registration presented as one. Betpanda and Cryptorino showed only a Costa Rica company, Star Bright Media S.R.L., and did not appear in the Anjouan or Tobique registers.
• A revoked or expired licence still displayed. Rollbit's footer claimed a Curaçao licence whose certificate read 'Revoked'; the Curaçao register listed it as 'Expired' in its 10 September 2026 edition. Chips.gg's seal showed VALID while the Anjouan register listed an expiry date of 17 July 2026.
• A certificate that contradicts the register. Cloudbet, BetFury, Duelbits and Thunderpick had Curaçao certificates reading 'Active' while the register showed the term had ended and renewal as 'Assessment in progress'.
• A licence for a different company or domain than the site claims.
• An old Curaçao master licence number ending in /JAZ presented as current. The master licence system was abolished when the LOK took effect on 24 December 2024.

In our research, identity checks triggered only when a player requests a large withdrawal are the single most common pattern in player complaints. The casino accepts deposits with no questions, then asks for documents after a big win and may find a reason to close the account, for example that the player is in a country the terms exclude.

Read the verification section of the terms before depositing. If the operator reserves the right to request any document at any time and to void winnings if you cannot provide it, assume that right will be used when the amount is large. In our methodology, accepting players from restricted countries and then blocking payouts through KYC caps a casino's Trust Score at 50.

Some terms limit how much can be withdrawn per day, week or month, or cap the maximum win on a single bet or from a bonus. A weekly withdrawal limit far below the size of possible wins means a large win may take months to receive, during which the terms or the operator's circumstances can change.

• Daily, weekly or monthly withdrawal limits.
• Maximum win per bet or per game round.
• Maximum bet rules while any bonus is active, which can void all winnings if broken once.
• Wagering requirements that apply to your deposit as well as the bonus.

Clauses that let the operator confiscate balances for 'irregular play', 'abnormal betting patterns' or 'bonus abuse' without defining those terms give the casino broad discretion to refuse payment. Look for concrete definitions. If the only definition is 'at the sole discretion of the company', treat it as a red flag, especially at an operator whose licence offers no independent dispute resolution.

Several crypto casinos run their own tokens, such as RLB (Rollbit), SHFL (Shuffle), BC (BC.Game) and TGC (TG.Casino). This links the platform's health to the token's market price. It becomes a stronger concern when rakeback, rewards or VIP benefits are paid in the in-house token, because the value you receive depends on a market the operator can influence and that can fall sharply. A token presale funding a new casino is a further sign that the business model depends on token sales.

Crypto casinos hold large amounts in hot wallets to process withdrawals quickly, which makes them targets. In September 2023, about $41 million was stolen from Stake, a theft the FBI attributed to North Korea's Lazarus Group; the operator covered player balances. Not every operator can or will do that.

A past incident is not automatically disqualifying. What matters is how the operator responded: whether it disclosed promptly, made players whole and explained what changed. Also note that no major crypto casino we track publishes a verifiable proof of reserves covering its liabilities to players, so solvency cannot be checked from outside.

Many casino lists are advertising. On 14 September 2026, the gambling section of DappRadar, a well-known on-chain analytics site, showed a 'Top Gambling Sites' leaderboard in which positions 1 to 36 were paid placements marked AD, with a bonus and a visit button but no on-chain metrics. The page text said the ordering reflected real on-chain activity rather than editorial choice. The organic, data-based list began at position 37, and Stake, the operator with the largest 24-hour deposits in that snapshot, appeared at position 38.

The advertised positions 1 and 3 were Betpanda and Cryptorino, the two brands for which our audit found no gambling licence. Several advertised listings also used 'No KYC' and 'VPN friendly' slogans. When a ranking does not clearly separate ads from data, assume the top positions are paid.

• Look for an 'AD', 'Sponsored' or 'Paid link' label.
• Check whether the ranking publishes its method and data.
• Check whether unlicensed operators appear at the top.

A regulator seal should open a certificate on the regulator's own domain that names the site you are on. Warning signs include a seal that is only an image, a certificate on an unrelated domain, a certificate for a different company, or placeholder text. In one case in our audit, a site's code still contained a template footer reading 'License No. 1234567' alongside its real licence; a licence number misprinted in the footer, as we saw with 1xBit, is a smaller but related sign of carelessness.

Some operators run many mirror domains, often to get around blocking by national regulators. Mirrors make it harder to know which company you are dealing with and whether the domain is covered by the licence. In our data, 1xBit is flagged for operating through mirror domains, and MyStake is on France's ANJ blacklist with blocking requested by Australia's ACMA. Before depositing, confirm the exact domain appears in the licence register, and be wary of links to 'new addresses' shared through chat apps or social media.

Treat the checklist as a filter, not a guarantee. A casino that passes every item can still close accounts or delay payments. Gambling is for adults 18+ or the legal age where you live. Offshore crypto casinos are not part of national self-exclusion schemes such as GamStop or CRUKS, and many do not offer robust deposit limits. If gambling stops being fun, contact BeGambleAware, GamCare or Gambling Therapy.