Picking a vertical you trust — say, licensed sports betting or an established crypto casino — is only half the decision. The other half is the specific site: its own license, its own track record, its own history of paying (or not paying) withdrawals. Two sites in the same category can be completely different bets, and the gap between them is invisible until you actually check.
This guide focuses on that second half — the due-diligence pass you run on one specific casino before you create an account there. For the broader checklist of what makes a good operator (bonuses, payments, support), see our guide to choosing an online casino; this one is about a narrower question: is this specific site legitimate at all.
Why research a specific site, not just a category
New gambling domains launch constantly. Most are ordinary new operators trying to build a real business. Some are unlicensed sites — occasionally outright clones of a trusted brand's design — built to take deposits, delay or deny withdrawals, and disappear once complaints start piling up. Nothing about how a site looks tells you which one you're on; a rogue site can be better designed than a licensed one. The only way to tell the difference is to check the things that a scam site can't fake as easily as its homepage.
Note
If you take one thing from this guide: verify the license number on the regulator's own public register before you deposit anything. A polished site with no verifiable license is not a legitimate casino, no matter how established it looks.
The checks that actually catch a rogue site
Run through these before your first deposit at any casino you haven't used before:
- License number, verified independently — don't just trust the number in the footer. Look it up on the regulator's own site (MGA, UKGC, Curaçao, etc.) and confirm the operator name matches.
- How long the domain has actually existed — a site claiming years of reputation with a domain registered a few months ago is a mismatch worth noticing.
- Independent reviews and complaint history — search the operator's name plus "complaints" or "withdrawal problem" before you sign up, not after. A site with a pattern of unresolved payout complaints across multiple independent forums is a stronger warning than any single bad review.
- Ownership and contact transparency — a real company name, a physical business address, and a working support channel. Anonymity here is not automatically disqualifying, but it removes a layer of accountability you'd otherwise have.
- Site security basics — a valid SSL certificate is table stakes, not a differentiator; its absence is disqualifying on its own.
- Whether it's impersonating a brand you already trust — check the exact domain, not just the name. Rogue sites sometimes use a near-identical URL to a licensed operator to borrow its trust.
None of these individually prove a site is safe. Together, they're what separates "looks fine" from "actually checked."
Using our Safety Index as a fast first signal
Working through that full list by hand takes time, which is exactly why we built the Safety Index — paste in any gambling site's URL and get an instant score out of 10, based on technical and reputation signals about that domain (things like how established it is and how securely it's run), cross-checked against what's publicly known about the operator. It's free, takes seconds, and requires no signup.
Note
The Safety Index is a first signal, not a substitute for the checklist above. It doesn't yet verify gambling licenses — a high score means the site has an established, securely-run history, not that it's guaranteed licensed or fair. Use it to quickly rule out obvious red flags (a brand-new, thin-history domain), then still confirm the license yourself.
A practical way to use it: before depositing anywhere new, run the domain through the Safety Index first. A low score on a site you've never heard of is a reason to slow down and dig into the checklist above before going further. A reasonable score doesn't end the research — it just means it's worth continuing to the license check and the rest of the list, rather than walking away immediately.
Red flags worth stopping for
Any one of these is a reason to pause before depositing, regardless of how the rest of the site looks:
- No license number anywhere, or one that doesn't match the regulator's register when you look it up directly.
- Withdrawal terms that are vague, hidden, or only appear after you've already deposited.
- A pattern of unresolved complaints about withheld or delayed payouts.
- Pressure to deposit quickly — countdown timers on bonuses, urgency language discouraging you from "just looking around first."
- A domain that's barely months old presenting itself as a long-established brand.
- Contact options limited to a single anonymous email, with no live chat and no physical business details.
Put it together
Trusting a vertical is not the same as trusting a specific site in it — that decision gets made operator by operator, every time you're considering somewhere new. Verify the license directly, check the domain's actual history and complaint record, and run it through our Safety Index as a fast first pass. None of these replace each other; together they're what "doing your research" actually means in practice. For the fuller picture on choosing between operators once you've cleared this bar, see our guide to choosing an online casino, and for keeping the whole thing under control once you're playing, see how to gamble safely.