Explainer
How to Choose a Legit Online Casino: Ten Red Flags Worth Checking
Two of these ten take five minutes and eliminate most of the field. The rest are for when an operator passes the first two and you still have a feeling about it.
The two that do most of the work
A licence number that does not resolve, and a withdrawal clause with no limit on the operator's discretion. Between them these two account for the overwhelming majority of stories that end badly, and both are checkable before any money moves.
Everything below the first two is a weaker signal. Useful, worth knowing, and not a substitute for the five minutes those two require.
The licence badge links nowhere
An image that is not a link, or a link to the regulator's homepage rather than a register entry, is the most common single tell. A real licence resolves to a page naming the operating company.
The register entry names a different company
Worse than a broken link, and easy to miss because the badge does resolve. The company on the register should be the company in the terms and the footer.
The withdrawal clause is unlimited
A right to review any payout at any time for any reason, with no stated threshold, means no promise about speed survives contact with a large win.
Bonus terms are on a different page from the bonus
Separation is normal. Terms that are hard to find, or that reference a document that does not exist, are not.
The maximum win from a bonus is buried
Many offers cap what can be withdrawn from bonus winnings. A cap is fine; a cap disclosed three clicks away from a headline promising large sums is a choice.
Support has no answer before you deposit
Ask one specific question about the withdrawal threshold. The quality of that answer, before you are a customer, predicts the quality afterwards.
Complaints cluster on payouts specifically
Every operator has unhappy players. The pattern that matters is complaints about withheld withdrawals and shifting verification demands, repeated by people with nothing in common.
Terms change without a version or a date
Terms are allowed to change. A document with no effective date, no version and no change history means you cannot demonstrate what you agreed to.
The fairness claim has no tooling
"Provably fair" without a verifier you can run against a past round is a phrase. The tooling exists at operators that mean it, and it takes one click to find.
The company address is a template
An address that appears verbatim on dozens of other sites, or a registered office with no company name attached, tells you what kind of operation this is.
What is not a red flag
An offshore licence, which describes most of the category. A short trading history, which describes every operator at some point. Losing sessions, which describe the design of the product. And a verification request, which is normal and expected once a stated threshold is crossed.
Treating these as warnings produces a shortlist assembled from the wrong evidence, and it is how people end up dismissing reasonable operators while depositing at one whose licence badge is a JPEG.
The signals that appear after you have deposited
Everything above can be checked before an account exists. A second set only becomes visible afterwards, and knowing what they look like is what turns a bad experience into an early exit rather than a large one.
Watch what happens to a small first withdrawal. A request for documents at that point is normal and is not itself a warning; a request for documents that keeps expanding after each one is supplied is the pattern worth reacting to. So is a support conversation that answers a specific question with a general policy quotation twice in a row, which usually means nobody with authority has read it.
Two more are quieter. Terms that change while a balance is in play, with no notice and no version history, remove the basis on which you deposited. And a bonus that was credited without being claimed can attach wagering conditions to funds that were previously free to withdraw, which is why refusing unrequested promotional credit is a reasonable default rather than a cautious one. Any of these is a reason to withdraw and stop, not to wait for confirmation.
How to run the check in practice
Order matters, because the first two items disqualify faster than the rest inform. Open the licence badge, read the register entry, then find the withdrawal clause in the terms and read it to the end. That sequence takes about five minutes, and most sites that would eventually cost you money fail inside the first two. Only when a site survives it are the remaining signals worth your time. They are refinements on a shortlist, not a scoring system.
If it has already gone wrong
Keep everything in writing and inside the operator's own channel first, because an escalation body will ask for that record. Then escalate to whoever the licence names. Then stop depositing. The most expensive mistake at this point is continuing to play somewhere that has already shown you how it behaves under pressure.
Questions this raises
Is a Curaçao licence a red flag by itself?
No. Most of this category holds one, and it sets a real registration bar with a complaints route attached. It is a floor to clear rather than a mark of quality. The red flag is a licence badge that does not resolve to a register entry naming the company that operates the site.
What if an operator has bad reviews everywhere?
Read what the complaints are about rather than counting them. Slot outcomes and bonus terms generate complaints at every operator including the good ones. Withheld withdrawals, moved goalposts on verification and unanswered support at the payout stage are the pattern that predicts trouble.
Does a large brand mean it is safe?
It means it has more to lose from a public dispute, which is a genuine if indirect protection. It does not mean the terms are better; several of the largest operators in this category have the broadest review clauses, precisely because they can.
What should I do if a payout is withheld?
Document everything in writing, keep the exchange inside the operator's own support channel first, and escalate to whatever body the licence names. Then stop depositing. The most common mistake is continuing to play at an operator that has already demonstrated how it behaves.
Primary sources
- UK Gambling Commission public registerLook up a licence number against the regulator.
- Malta Gaming Authority licensee registerThe searchable register behind an MGA claim.
- Gaming CuraçaoOne of the licensors most often cited by crypto operators.
- FTC: cryptocurrency and scamsConsumer agency guidance on the recurring patterns.