How to spot a scam crypto casino: a checklist with real examples

No single sign proves a crypto casino is a scam, but a few checks done before the first deposit catch most of the sites that end up on my Shit List. Verify the licence on the regulator’s own register, with the exact domain. Read the withdrawal, verification and conduct clauses, not the bonus banner. Then read the complaint record for patterns and for whether the operator answers. This guide turns those checks into a list you can run in half an hour. Each item comes with a real example from the sites I have reviewed, including the three currently listed: Linebet, Rollbit and Winnita.

Check 1: the licence is on the regulator’s register, for this exact domain

A licence line in a footer is a claim. It becomes a fact when the regulator’s own site confirms three things: the licensee company, the licence number and status, and the domain you are on. Footers I have read fall into four groups.

Note the first row. Linebet holds a valid licence and is still on the Shit List. A licence is the minimum, not a verdict.

How to verify, regulator by regulator

• Curaçao (CGA). The genuine seal links to a certificate on the regulator’s domain, cert.cga.cw, showing the licensee, status and approved domains. In January 2026 the CGA warned about a network of unlicensed “GEM55” sites that copied its seal as a static image with no verification link, as reported by the Curaçao Chronicle. Click the seal and read the URL you land on.
• Anjouan. The public register lists company, status, licence number, type, issue and expiry dates, and domains. Rollbit’s licence to Acacia Tech Ltd is there, valid to 2027-08-20.
• Status and history. A licence can lapse. The Curaçao certificate third parties once cited for Rollbit now returns “cannot be found”. A former BC.Game operator, Small House B.V., stayed on the CGA’s enforcement register as revoked, according to the Curaçao Chronicle. The CGA’s own registry PDF lists Mostbet’s licensee as “Assessment in progress” past its 23 March 2026 date.

Match the domain character by character. The Anjouan register lists linebetglobal.com under a different company, Savoska LLC, and I found nothing linking it to linebet.com. A licence for a lookalike domain covers the lookalike. The licence guide explains what each regulator actually supervises.

Check 2: the company behind it is named, and named consistently

You should be able to write down who you are contracting with. Three patterns are worth a second look.

• No company at all. Winnita’s terms (§2.1) refer to “the company with which the customer is concluding the agreement” without ever naming one. The footer gives an email address and an Italian phone number.
• Two names for one site. Rainbet’s terms and AML policy name Rain Group Ltd, while the home page’s structured data names RBGAMING N.V. with the same registration number. Not a scam signal on its own, but a question to put to support before you deposit.
• Undisclosed owners. Casino Guru marks Bovada’s owner as undisclosed. The named operator since 2017 has been Harp Media B.V., per a 2026 ownership article; the people behind it are not published.

The register is also a map. Aspro N.V.’s Curaçao licence covers asprobet.com, betingsite.com and xparibet.com as well as linebet.com. If one brand under a licence has a complaint pattern, look up its siblings before you trust them.

Check 3: the terms do not contain the classic traps

Scam casinos rarely hide their rules; they write them down and count on nobody reading. The withdrawal and conduct sections take ten minutes. These clauses are the ones that later explain the complaints.

One clause alone proves little; several legitimate operators carry one or two. Winnita carries five, and it has no licence.

Check 4: you know when KYC will be asked, before you win

“KYC demanded only after a win when deposits sailed through” is one of the four things that put a site on the Shit List. The defence is to find the trigger in writing before you play. A published trigger is a better sign than “at any time”. Cloudbet requires verification at USD 2,200 of cumulative deposits (T&C 21.1.5). Sportsbet.io’s AML policy requires ID on the first withdrawal regardless of amount. Shuffle checks ID before the first withdrawal. Rollbit’s help centre says only that you “might be required to complete up to level 5 verification”, with no threshold.

The complaints show what an open-ended rule looks like when it is used. A Finnish Rollbit player completed KYC level 4 and still had a $2,200 withdrawal held at “Pending – Contact Support”; support then wrote that the funds were forfeit. Another had 2,180 USDT blocked after three KYC levels and a multi-account accusation. At Linebet, an Indian player’s withdrawal of about 20 lakh rupees stayed in “security verification” after the documents were sent.

The practical test: make a small first withdrawal soon after your first deposit. If it triggers documents, you learn the rule while little is at stake. If it pays, you have a baseline and a hash.

Check 5: the complaint record shows a pattern, and whether anyone answers

Every casino has angry customers. What separates a slow operator from a dangerous one is the share of complaints left unresolved and whether the operator replies to mediators at all.

Figures as read on 2026-10-06. Winnita is the lesson in this table. Its Casino Guru Safety Index was 7.4, “Above average”, while four withdrawals of €900 to €12,000 were closed unresolved between July and September 2026. Aggregate scores lag. Read the newest ten complaints, not the index: dates, amounts, the operator’s stated reason, and whether it ever replied.

Single complaints prove little either way. Three or more independent, documented cases of unpaid or confiscated withdrawals within twelve months is the threshold I apply before listing a site, along with a revoked or fake licence.

Check 6: the reviews are not bought or scrubbed

Review platforms catch some manipulation, and when they do they say so. Trustpilot’s page for BC.Game reads that its rating is unavailable “due to a breach of our guidelines” and that it removed “a number of fake reviews”. In the US, the FTC’s rule announced on 14 August 2024 bans fake reviews, reviews bought for a particular sentiment, and review suppression through threats or intimidation. Offshore operators are not reached by it, but it is a useful list of what to look for.

• Bursts of five-star reviews in a short window, written in the same style, with no detail about a withdrawal.
• A five-star and one-star split with almost nothing in between.
• Terms that punish public criticism, like Winnita’s §28.
• “Reviews” on sites paid per sign-up that never quote a clause or a complaint.

On the last point I am not neutral either: this site earns from some of the operators it lists. That is why my reviews quote the clause, the complaint and the date, so you can check me instead of trusting me.

Check 7: payout and fairness claims come with evidence

“Instant withdrawals” is a banner. A transaction hash with a timestamp is evidence. My payout tests log real withdrawals with the hash and explorer link, and the withdrawals guide compares declared times with measured ones. The same rule applies to fairness. A provably fair claim means something when the site publishes its method and a verifier, as Gamdom and Wolf.bet do; it means nothing as a slogan. The provably fair guide shows how to check a bet yourself.

The checklist in one table

Two fails is a reason to keep deposits small and withdraw early. A fail on 1 together with a fail on 5 is a reason to leave.

When the checks fail after you have deposited

1. Stop depositing and request a withdrawal of what is withdrawable now, in writing.
2. Answer document requests exactly and keep copies with dates.
3. Keep every transcript, request ID and transaction hash. The pending guide has a support template.
4. Use the regulator’s complaint route where the licence is real; for a Curaçao licensee such as Linebet, that is the CGA.
5. File with a mediator such as Casino Guru’s complaint centre, and send me the evidence for the Shit List.

The freeze guide lists the clauses operators use to hold balances and what each one requires of you.

The short version

Verify the licence on the regulator’s register for the exact domain, and make sure a named company stands behind it. Read the withdrawal and conduct clauses before the bonus. Know the KYC trigger before you win, and read the newest complaints for whether the operator answers. Treat banners as claims and hashes as evidence. Sites that pass these checks are in the crypto casinos category, and sites that failed them with documented cases are on the Shit List.