Site verification and consumer reporting
How to record and report a suspected fake casino website
A copied licence number, seal or casino name can be a warning, but it is not proof by itself. This guide helps you stop contact, preserve the exact web address without reopening it, compare claims with official records and send a proportionate report to the right body.
The safe first step
Do not revisit the site to collect more evidence
Stop logging in, paying, downloading or uploading documents. Preserve only records you already hold, such as the original message, browser history entry, payment reference or screenshot. Use an official register and reporting service reached independently, not a link, phone number or support address supplied by the suspected site.
Stop before you check anything else
- Do not open the link again. The National Cyber Security Centre advises people not to click a suspicious link. Carefully copy an already-held URL or write it down if that is safer.
- Do not sign in or reset a password through the site. Do not supply a password, one-time code, payment detail, identity document or selfie.
- Do not pay a release, verification or tax fee. A request for another payment is not evidence that funds will be released.
- Do not download a certificate or app. A file offered by the site may be unsafe and does not independently verify a licence.
- Use a trusted device where possible. If you think a device or account may be compromised, use another device to reach your bank or official reporting service.
Create a safe evidence record from material you already hold
Record facts separately from your conclusion. Do not label the website fraudulent in your notes unless a competent authority has confirmed that finding. Use suspected, claimed, mismatched or unverified where that is what the evidence shows.
Swipe sideways to see every column.
| Field | What to record | Safety limit |
|---|---|---|
| Exact URL | Full address from an existing message, history entry or record, including the domain ending. | Do not reopen it merely to copy the address. |
| How it reached you | Search result, advert, email, message, social post or another source. | Keep the original message without replying. |
| Claimed identity | Casino name, legal operator, licence number, regulator and contact details shown in records you already hold. | Describe these as claims until independently matched. |
| Official comparison | Register used, search date, operator result, exact listed domains and licence status. | Reach the register independently and save its own URL. |
| Request made | What the site asked you to pay, disclose, download or do. | Do not comply in order to gather more evidence. |
| Money or data exposed | Masked payment reference, date, amount, data category or account affected. | Never place full card, account, password or identity numbers in the record. |
If you need to organise several files, use the complaint evidence pack for filenames, redaction and chronology. Its complaint route is separate from a suspicious-site report, so do not assume an operator complaint is safe or available here.
Check the licence claim against an independent register
For a claimed Gambling Commission licence, use the Commission's public register reached from its own website. A GB-licensed business must display that it is licensed and link to the register. The register can show its trading names, website domains, licensed activities, address, current status and regulatory action.
- Match the legal business. A similar casino or group name is not enough.
- Match the exact domain. Compare the hostname character by character, including the domain ending.
- Match the status and activity. A real number can belong to a business or activity that does not cover the claimed website.
- Save the register result. Record the official URL and check date without returning to the suspected website.
Our casino licence guide explains operator, domain and licence matching in more detail. An empty or conflicting search result is a reason to stop and report the concern. It is not, by itself, a final finding of fraud. Use the UKGC public-register evidence checklist to preserve the exact fields, searches and non-finding limits.
Treat warning indicators as questions, not proof
Swipe sideways to see every column.
| Indicator | Question to record | What it does not establish |
|---|---|---|
| Copied licence number or seal | Does the official record list this legal business and exact domain? | A seal image or real number does not prove that the website is licensed. |
| Copied casino or company branding | Does an independently reached official source identify this domain? | Visual similarity alone does not identify the person operating the site. |
| Recognised game or payment logo | Is there primary evidence of the relationship for this exact site? | A logo does not validate the operator, account, payment or complaint route. |
| Different payment recipient | What name appears on the existing statement or receipt? | A different descriptor can require investigation but is not an automatic fraud finding. |
| Urgent document or payment demand | What was requested, by which channel and for what stated reason? | Urgency is a risk indicator, not proof of who sent the request. |
The government transparency record for the Commission's illegal website identification tool recognises both false positives and false negatives. It records licensed-database checks and human review before reporting, enforcement or takedown. Your report should therefore preserve uncertainty rather than presenting an automated or personal check as a final verdict.
Choose the reporting route that matches the event
The bodies below have different jobs. Sending the same allegation everywhere can expose more personal data without improving the report. Use the narrowest route that fits, and read the service's current privacy information before submitting anything sensitive.
Swipe sideways to see every column.
| Situation | Official route | Useful record | Important limit |
|---|---|---|---|
| Suspected unlicensed gambling or gambling-related criminality | UK Gambling Commission complaints hub and Tell us something in confidence | Exact URL, how it was found, claimed operator and licence mismatch | The Commission does not decide an individual payment dispute through this report. |
| Suspicious, phishing or impersonation website | National Cyber Security Centre suspicious website form | Carefully copied URL and brief context about what it claimed or requested | A submitted URL is a report for investigation, not confirmation of a scam. |
| Money lost or account hacked in England, Wales or Northern Ireland | Report Fraud | Chronology, amount, payment reference, contact method and report number | Scotland uses Police Scotland. Reporting does not guarantee recovery. |
| Scam or misleading advert | Advertising Standards Authority complaint route | Advert, placement, date, destination URL and the claim being challenged | The ASA route concerns the advert and does not determine a casino payment dispute. |
If your issue is instead with a known operator and a safely verified complaint route, read the casino complaints and disputes guide. Do not use contact details from a suspected site to decide that distinction.
If money, credentials or personal data was shared
- Contact the bank or payment provider promptly. Use its trusted app, the number on the back of a card or an independently found official website. Describe what happened honestly. Do not assume that a refund, chargeback or payment reversal is available.
- Secure affected accounts from a trusted device. Change a reused password through the genuine service, review recovery details and use multi-factor authentication where available. Never approve an unexpected sign-in or one-time code request.
- Follow the correct fraud route. Report Fraud serves England, Wales and Northern Ireland. GOV.UK directs people in Scotland who lost money through an online scam to Police Scotland.
- Keep reports separate from sensitive evidence. Supply only what the official service asks for through its verified channel. Keep passwords, full card details, recovery phrases and unrelated identity records out of your reporting log.
Keep one reporting log
A short log prevents repeated submissions and shows which authority has which information. Keep reference numbers and follow-up instructions, but do not publish the log or send it to unrelated third parties.
Swipe sideways to see every column.
| Route | Date | Reference | Information supplied | Next step |
|---|---|---|---|---|
| [UKGC, NCSC, Report Fraud, bank or ASA] | [DD Month YYYY] | [case or submission reference] | [URL, masked transaction and evidence references only] | [official instruction or no action requested] |
Understand what a report does and does not establish
- Acknowledgement is not a verdict. It may confirm receipt only.
- A takedown is not a repayment decision. Website disruption and individual redress are different processes.
- No response is not approval. Some intelligence routes do not provide case updates.
- A register mismatch needs careful wording. Record the exact search and date rather than claiming more than it shows.
- Copies can reappear. Keep exact domains and dates separate so later sites are not assumed to be the same operator without evidence.
Avoid recovery and impersonation follow-ups
A person who already has your contact details may claim to be a regulator, bank investigator, lawyer, recovery agent or previous victim. Verify any contact through the organisation's independently reached official channel. Do not pay an advance fee, disclose a recovery phrase, install remote-access software or move money to a safe account on an unsolicited caller's instructions.
This page does not identify individual casinos as fake and does not provide a recovery service. It contains no casino recommendation, affiliate link, offer, rating, ranking or comparison placement.
Primary sources
- UK Gambling Commission: what gambling businesses must do
- UK Gambling Commission: register of gambling businesses
- UK Gambling Commission: complaints and confidential reporting routes
- National Cyber Security Centre: report a suspicious website
- GOV.UK: report internet scams and phishing
- Report Fraud: report cyber crime and fraud in England, Wales and Northern Ireland
- Advertising Standards Authority: make a complaint
- GOV.UK: Gambling Commission illegal website identification tool transparency record
Sources checked 26 August 2026. Reporting routes are rechecked monthly and after a public service or regulator change. This guide distinguishes a concern, a submitted report and a confirmed authority finding.