Skip to content
ProvenPayouts
We earn commission when you sign up through our links. It never changes the ProvenPayouts Score — see how we rank.
Guide

How to spot a rogue crypto casino before you deposit

A rogue casino is identified from documents, not from design. Before you deposit, run four checks in this order, then price the bonus. First, look the licence number and company name up in the regulator's own public register and confirm your domain is covered. Second, search the independent complaint-mediation databases for a pattern of large withdrawals voided on unevidenced grounds. Third, read the withdrawal section for limits, fees and processing windows, and treat silence as worse than a low cap. Fourth, read the terms for clauses permitting confiscation at the operator's sole discretion. Each check is free. Every one fails closed: what you cannot verify, treat as absent.

How do you verify a licence claim in three minutes?

A licence claim in a website footer is a string of text the operator typed. Verification means going the other way round: take the licence number and the licensed company name off the site, then search the regulator's own public register. The Malta Gaming Authority, the UK Gambling Commission and the Curaçao Gaming Authority all publish searchable licence-holder lists, and the Maltese register also lists the URLs each licence authorises. Three things must match: the company name, the licence number, and the specific domain you are about to deposit on. A badge image proves nothing, because the casino serves the image itself; only a link that lands on the regulator's page counts. Two failure modes are worth naming. Costa Rica issues no gambling licence at all, so a company registered there holds ordinary business registration and nothing more. And if the named jurisdiction publishes no searchable register, then even a genuine licence gives you no channel to complain through, which is the only thing a licence is actually for.

Which clauses let a casino keep your money without breaking its own rules?

Most money that is never paid out is withheld under a clause the player accepted at sign-up. The dangerous ones share a shape: unbounded discretion, no deadline, no appeal. Search the terms for the phrase "sole discretion" and read every sentence it appears in. Then look for "irregular play", "bonus abuse" or "advantage play" defined so loosely that ordinary behaviour qualifies, such as low-risk betting patterns or simply clearing a bonus efficiently. Look for a right to hold funds for a security review with no stated maximum duration, a right to close an account and forfeit the balance, and a right to amend the terms without notice and apply the new version to money already on deposit. Contrast these with clauses that are perfectly reasonable: a maximum bet while wagering, a list of excluded games, identity verification before a first payout. Those are bounded, expressed as numbers, and checkable before you deposit. The test is bounded against unbounded, not lenient against strict.

Why is an unstated withdrawal limit worse than a low one?

A published cap is a number you can multiply before you commit. Suppose the terms cap withdrawals at 5,000 a month and you eventually win 40,000. That is 40,000 divided by 5,000, so eight monthly requests, more than half a year of waiting. Unwelcome, but you knew it going in and you can price it. Silence is worse, because it means the operator decides the pace after you have won, when its incentives have flipped. Read the withdrawal section for four numbers: the minimum per transaction, the maximum per day, week or month, the fee per withdrawal, and the stated processing window. Fees compound with caps. If a cap forces eight separate withdrawals and each carries a flat fee of 20, that is eight times 20, so 160 removed from the win by the structure alone. Also check whether pending withdrawals can be reversed back into playable balance. A reverse-withdrawal feature exists for one reason, and it is not your convenience.

What does a max cashout cap actually cost you?

A max cashout caps what you may withdraw from bonus-derived winnings, usually as a multiple of the bonus or a flat figure. Price it against the turnover the bonus demands. Take the worked example published on break-even table: a deposit of 100 with a 100% match, wagered 35 times on deposit plus bonus, is 35 times 200, so 7,000 of turnover. At a 4% house edge, which is a 96% RTP slot of the kind bonus terms usually steer you onto, the expected cost of generating that turnover is 7,000 times 0.04, so 280, against a bonus of 100. Realistic value is 100 minus 280, so minus 180. Now add a cap of three times the bonus. The most you can ever take out of that bonus is 300, while the expected cost of reaching the point where you are allowed to take anything is 280. The cap removes the long tail that was the only argument for accepting a negative expectation. Caps are normal; caps that sit near the expected clearing cost are the tell. Run your own figures in bonus calculator.

What does the wagering multiplier tell you about the operator's intent?

Write W for the multiplier and h for the house edge as a fraction. On a bonus-only base the bonus breaks even when W equals 1 divided by h, which at a 4% edge is 25x. On a deposit-plus-bonus base, with m the match as a fraction, break-even is m divided by the product of h and one plus m, which at a 100% match is 1 divided by 0.08, so 12.5x. The algebra carries a useful consequence: m over one plus m is always less than one, so a deposit-plus-bonus offer can never break even above 1 over h. At a 4% edge, 25x is a ceiling on every structure. Six crypto casinos whose archived terms state both a multiplier and its base illustrate the point, because every one sits above that ceiling: KatsuBet at 45x on deposit plus bonus, BitStarz at 40x bonus-only, mBit at 40x bonus-only, 7Bit at 35x on deposit plus bonus, Mirax at 35x on deposit plus bonus, and Vavada at 35x bonus-only. The figures come from the operators' own archived bonus pages. Pricing above break-even is the market norm, not a rogue signal. The rogue signal is a headline multiplier that never states its base, because the same number is two different bills.

How do you read a complaint record rather than a star rating?

Independent mediation services such as Casino Guru, AskGamblers and ThePogg publish individual complaint threads, including the operator's own replies. The aggregate score is the least informative part; the threads are the evidence. Read for four things. Does the operator reply at all, or does it go silent once a mediator is involved? When it refuses a payout, does it cite a specific clause and produce evidence, or does it gesture at a general security or fraud finding it will not detail? Do the disputes cluster at large amounts, while small withdrawals sail through? And did any resolution only arrive after the mediator escalated? Volume alone means very little, because a large site generates more complaints in absolute terms, so normalise against size before drawing a conclusion. Weight an unresolved complaint the operator ignored far above one it argued and won. A casino that defends its clause in public is applying a rule; a casino that stops replying is not. Our own avoid list is editorial judgement built on the same public record.

What is a dormancy clause, and why does it belong on this list?

A dormancy or inactivity clause states what happens to a balance you leave untouched. It takes two shapes: a recurring administration fee charged against the balance once a stated period of inactivity passes, or outright forfeiture of the balance to the house. Neither is unusual, and in well-drafted terms both the period and the fee are written down. It earns a place on a rogue-casino checklist for two reasons. First, it is the only clause in the book that takes money from a player who is doing nothing at all, which makes it a pure test of the operator's posture. Second, its wording is an excellent proxy for the rest of the document. A clause that names the inactivity period, names the fee, and commits to notifying you before charging it was written by someone who expected to be read. A clause that forfeits a balance after an unspecified period, or lets the operator declare an account dormant at its discretion, is the same unbounded-discretion pattern that appears in the confiscation clauses. The practical response is the same either way: never leave a balance parked.

In what order should you run these checks before depositing?

Run the disqualifying checks before the pricing ones, because most people do it backwards and start from the headline offer. First, the licence lookup in the regulator's own register. If the company, number and domain do not all match, stop; nothing further matters. Second, search the complaint-mediation databases by operator name for withdrawal disputes, and read three or four threads in full. A pattern of large payouts voided without evidence is disqualifying on its own. Third, read the withdrawal section for limits, fees and processing windows. Fourth, read the bonus terms for the multiplier, its base, the maximum bet while wagering, the max cashout, the expiry window and the game weighting. Fifth, only now, do the arithmetic on whether the bonus is worth taking. Steps one and two decide whether to deal with the operator at all; steps three to five decide what the deal costs. One more habit is worth adopting: complete identity verification while your account is quiet, not when you are trying to cash out a win. A KYC check triggered by a large withdrawal is a common origin of payment disputes. Our shortlist tool at casino matcher and the ranking at global ranking apply the same filters.

What do these checks not tell you?

They tell you what the operator has committed to in writing, and which disputes it has publicly lost or quietly ignored. They do not tell you it will pay you next week. ProvenPayouts does not deposit money, does not time its own withdrawals and publishes no test logs; the score attached to each operator is an editorial judgement about documents and public records, never a measurement of a payout. A verifiable licence and a clean mediation record improve the odds and, more importantly, give you somewhere to go if it goes wrong. Neither is a guarantee, and no operator-side check alters the arithmetic of the games themselves. A 96% RTP slot keeps 4 units of every 100 staked over the long run whether the casino behind it is exemplary or appalling. A lower house edge is a slower loss, not a gain, and no bonus, strategy or provably-fair proof reverses that sign. Treat every deposit as money spent on entertainment, and treat these checks as protection against being cheated on top of the ordinary cost.

FAQ

How can I check if a casino licence is real?

Take the licence number and the licensed company name from the casino's footer, then search the regulator's own public register rather than trusting the site. The Malta Gaming Authority, the UK Gambling Commission and the Curaçao Gaming Authority all publish searchable licence-holder lists, and the Maltese register also names the URLs each licence covers. Three things must match: company name, licence number, and the exact domain you intend to deposit on. A licence badge image proves nothing, because the casino serves that image itself. Note that Costa Rica issues no gambling licence at all, only ordinary business registration.

What is the fastest single check before depositing at a casino?

The licence lookup, because it is decisive and takes about three minutes. Copy the licence number from the footer, open the regulator's own register, and confirm the company name, the number and your intended domain all match the entry. If any of the three does not match, or the jurisdiction publishes no searchable register, stop there. A licence you cannot look up gives you no dispute channel, which is the only practical benefit a licence provides. Run it before reading a single word of the bonus offer, since a failed licence check makes every other question irrelevant.

Can a casino legally refuse to pay out my winnings?

Yes, under clauses you accepted at sign-up, which is why the terms matter more than the marketing. Legitimate refusals cite something bounded and checkable: you exceeded the maximum bet while a bonus was active, you played an excluded game, or you failed identity verification. Predatory refusals rest on unbounded discretion: broad definitions of irregular or abusive play, a security review with no stated deadline, or a right to void winnings and close accounts at the operator's sole judgement. Search the terms for the phrase sole discretion and read every sentence containing it before depositing.

Is a max cashout limit on a casino bonus normal?

Caps are common; what matters is the cap set against the turnover the bonus demands. Work an example: a 100 deposit with a 100% match wagered 35 times on deposit plus bonus is 35 times 200, so 7,000 of turnover. At a 4% house edge, typical of the 96% RTP slots bonus terms steer you onto, the expected cost of generating that turnover is 280, against a bonus of 100. If the cashout is capped at three times the bonus, the most you can ever withdraw is 300 while the expected cost of qualifying is 280. A cap sitting near the expected clearing cost removes the only upside.

What wagering requirement is too high to be worth taking?

Compute the break-even multiplier and compare. On a bonus-only base a bonus breaks even when the multiplier equals 1 divided by the house edge, so 25x at a 4% edge. On a deposit-plus-bonus base it is the match fraction divided by the product of the edge and one plus the match, so at a 100% match and a 4% edge that is 1 divided by 0.08, or 12.5x. Because the match term is always below one, no deposit-plus-bonus offer can break even above 25x at a 4% edge. The market standard of 35x to 45x therefore sits above break-even in every case. Always ask which base the multiplier applies to, since the same number means two very different bills.

What does it mean if a casino has a lot of complaints?

Very little on its own, because a larger casino generates more complaints in absolute terms. Read the threads on independent mediation services such as Casino Guru, AskGamblers or ThePogg rather than the aggregate rating. Look for whether the operator replies at all, whether refusals cite a specific clause with evidence or only a vague security finding, whether disputes cluster at large withdrawal amounts while small ones clear normally, and whether resolution only came after a mediator escalated. An operator that argues its case in public is applying a rule. One that goes silent once money is at stake is the warning sign.

Can a casino take money from an account I have not used?

Yes, if a dormancy or inactivity clause allows it, and many do. The two usual forms are a recurring administration fee charged against the balance after a stated period of inactivity, or outright forfeiture of the remaining balance. Well-drafted terms state the period, the fee and a notification requirement, and that is unremarkable. Terms that forfeit a balance after an unspecified period, or that let the operator declare an account dormant at its own discretion, show the same unbounded-discretion pattern found in confiscation clauses. The practical protection is the same in both cases: withdraw your balance rather than leaving it parked.

In what order should I check a casino before I deposit?

Run the disqualifying checks first, the pricing checks second. One, verify the licence in the regulator's own register and confirm company, number and domain all match. Two, search independent complaint-mediation databases for withdrawal disputes and read several threads in full. Three, read the withdrawal section for minimums, caps, fees and processing windows. Four, read the bonus terms for the multiplier, its base, the max bet while wagering, the max cashout, the expiry and the game weighting. Five, only then work out whether the bonus is worth taking. Also complete identity verification while your account is quiet, not when a large withdrawal is pending.

See the top casinos