Is This Casino Legit? The Test I Run Before I Deposit

Last updated: September 2026

🎥 Watch: Chip on the one check nobody runs

You can tell whether an online casino is legit in about ten minutes, without taking anyone’s word for it. Find the license number, look the operator up in the regulator’s own register, then read two clauses in the terms. Everything else is supporting evidence.

I went and read what the top results say about this. They will tell you the UK Gambling Commission is strict and Curacao used to be a free-for-all, which is true and roughly useless on its own. Not one of them tells you to type the number into the register and check the company name comes back matching.

That gap is the whole game. A bad operator can put a real regulator’s name and a real license number in its footer in about four minutes. What it cannot do is make the register agree that the number belongs to the company running that website.

So here’s the test I actually run, in order, with the two steps that decide it flagged. It works on any site, and it gets faster every time you do it.

The ten-minute test, in order

Eight checks, and you can do the lot on a phone while the kettle boils. Two of them carry most of the weight and the rest are corroboration.

1. Find the license number. Footer first, then the terms and conditions, then the About page. A site with no number anywhere has answered the question already.
2. Open the regulator’s register yourself. Type the address in. Never click the seal in the casino’s own footer, because a fake seal links wherever its owner wants it to.
3. Search the register and match the company name. This is the step that catches a real number on a fake site. Our license check guide walks through it properly.
4. Check the corporate footer. Company name, registration number, registered address. If any of the three is missing, walk away.
5. Read two clauses in the terms. Search for “withdrawal” and for “dormant”. You want published withdrawal limits and no fee that starts eating a balance after a few quiet months.
6. Read the bonus small print. Game weighting, max bet while a bonus is live, and any cap on what a bonus balance can pay out. Our bonus traps guide lists the ones that bite.
7. Check the payments and support pages. Published withdrawal limits, at least one fast method, live chat with real hours. Contact form only, on a site that wants to hold your money, is a weak answer.
8. Check the responsible gambling page. Deposit limits, loss limits, self-exclusion and a link to real support services. Missing tools are a fail on their own.

Fail one and you’ve got a question to ask. Fail two and there are four thousand other casinos.

Our license verifier runs the register step for you and points at the right regulator for whichever one the site claims.

The two checks that actually decide it

The register match and the withdrawal terms do most of the work. One tells you whether the operator is who it says it is, the other tells you whether it intends to pay you.

Why does the name match matter more than the number?

Because the number is copyable and the relationship isn’t. A license belongs to a company, and the register lists that company. If the footer says one company and the register says another, you’re looking at somebody else’s license printed on a stranger’s website, and it’s happened often enough that the Curacao regulator has published warnings naming specific sites.

While you’re there, most registers also publish enforcement history. The UK Gambling Commission’s own register carries a regulatory actions section listing action taken against licensees, which is a thirty-second search that tells you whether this operator has form.

What am I looking for in the withdrawal terms?

Numbers. A published minimum, a published maximum per day, week or month, and a stated processing time. A site that documents a $5,000 monthly withdrawal limit is being straight with you even though the limit is annoying. A site that says withdrawals are processed “in a timely manner” and names no figure at all has told you something too.

The reason this clause earns its place next to the register check is that the two failures it catches are completely different in character: the register catches an operator pretending to be somebody it isn’t, while the withdrawal terms catch one that is exactly who it says it is and has simply written itself permission to keep you waiting, cap what you take, or charge you for the privilege of leaving.

And check the mismatch. Instant deposits against a nine-day payout is a design decision, not a technical constraint.

Three kinds of site, three different tests

The license test only works on one of them, and running it on the other two produces a frightening result that means nothing at all.

This is where most advice falls over. Somebody reads a checklist, searches a register for their sweepstakes site, finds nothing, and concludes the place is a scam. It isn’t a scam. It was never going to be in there.

The same trap works in reverse on an offshore crypto site. You’ll find a license of some kind, you’ll verify it resolves, and you’ll trust it more than you should, because an offshore regulator that will take your complaint seriously from another continent is a rarer thing than the seal suggests.

What to check on a sweepstakes site instead

No gaming regulator licenses a sweepstakes casino, because with no wager there is no gambling to regulate. The document doing the job a license would is the official rules.

• The official rules exist and are findable. Usually linked in the footer, sometimes buried in the terms. A sweepstakes operating without published rules has a serious problem.
• A free entry route is named in them. The postal method, the address, the format. This is the legal backbone of the whole model, and our AMOE guide covers what a real one looks like.
• The excluded states are listed. Every legitimate sweepstakes site names the states it will not accept. A site that claims to serve all fifty has not read its own lawyers.
• The corporate entity is named. Chumba’s footer, for example, names a Malta Gaming Authority license for promotional play games rather than a US gaming license. That is the correct shape for a sweepstakes operator and it is not a red flag.
• Redemption terms are published. Minimum redemption, processing time, and the identity check you will face. Our Gold Coins and Sweeps Coins guide explains why the two currencies behave differently.

Red flags that override everything else

Some findings end the conversation no matter how good the rest of the site looks, and a slick design is not evidence of anything except a budget.

• No license, or one that isn’t in the register. The single hardest fail on the list.
• The register shows a different company. Worse than no license, because somebody built this deliberately.
• No identity check at deposit. An operator that does not want your ID on the way in will want it on the way out, at the exact moment you are trying to leave with money.
• An enormous headline bonus with a small cap buried underneath. A five-thousand-dollar match that can only ever pay out two hundred is an advertisement, not an offer.
• Missing or broken responsible gambling tools. These are cheap to build and legally required nearly everywhere, so their absence is a choice.
• A named dispute body that doesn’t exist. Look it up. It takes ten seconds and it is occasionally fiction.
• Support that will not answer a plain license question. Ask them directly which regulator they hold a license with. A straight answer takes one line, and anything else is the answer.

Signals that an operator is genuinely trying

The positives are quieter than the negatives, and they are worth knowing because they separate a decent site from a merely legal one.

• A live audit certificate. eCOGRA, iTech Labs and GLI are the testing houses you will see. A logo that links to a real certificate on the auditor’s own site is a good sign. A logo that links nowhere is decoration.
• Published return figures next to the games. An operator willing to show you the number on each game is an operator that expects you to check it, and our slot RTP versions guide explains why the figure varies by site.
• A named dispute body with a working link. Independent escalation costs the operator money and they publish it anyway.
• Self-exclusion that reaches beyond the one site. Integration with a national scheme is real investment rather than a checkbox.
• Documented withdrawal speeds. Published, specific, and checkable against what actually happens.
• Ownership you can trace. A recognizable parent company with public filings, rather than a shell in an opaque jurisdiction.

What to do when it goes wrong anyway

Passing every check lowers your odds of trouble and does not remove them. If a withdrawal is refused or winnings are voided, there is a ladder, and it only works if you start at the bottom rung.

1. Complain to the operator in writing. Not live chat. Email or a ticket, so there is a record with a number on it, and keep every reply.
2. Screenshot everything now. The balance, the terms as they read today, the bet history, the support thread. Terms get edited and accounts get closed.
3. Escalate to the dispute body named in the terms. The operator’s own terms state who that is and how long you must wait first. It is free to you.
4. Take it to the regulator. The one whose register you searched at step three. They rarely recover your money, but they log the complaint and patterns are what trigger enforcement.
5. Tell your payment provider. If the money left by card or bank, they have their own dispute process and their own timescales.

Send us the full picture at editorial@chipreign.com as well. We track complaint patterns across operators and they change our scoring.

Does the regulator actually get my money back?

Rarely, and that disappoints people. A regulator’s job is licensing and enforcement, not debt collection for individuals. What your complaint does is add to a file, and files are what produce fines and license reviews. The dispute body named in the terms is the rung that’ll actually order a payment.

How this differs from the way we score operators

This page is your test, runnable in ten minutes before you deposit. Our scoring is a different animal, and it is worth knowing which one you are reading.

Every review on this site runs through an eight-category scorecard with fixed weights, deposit and withdrawal testing, and hard fails that stop an operator being reviewed at all. That is the full method and it takes days per operator, not minutes. It’s set out in how we rate casinos.

An operator that passes the ten-minute test tends to land somewhere respectable on that scorecard. One that fails it is one we won’t review, whatever the commercial conversation looks like.

What this test can’t tell you

A pass is not a promise. Every check on this page is about whether the operator is who it claims to be and whether it intends to pay, and none of it touches the thing that actually takes your money.

The house edge is unaffected by any of this. A perfectly licensed, audited, fast-paying casino with a named dispute body and a spotless enforcement record will still keep a few cents of every dollar you stake, forever, because that’s the arrangement and it was never hidden from you. What the ten minutes buys is the removal of one specific risk: that you win and then discover the money was never going to arrive.

It also can’t tell you the bonus is worth taking. An operator can be entirely legitimate and still write terms that make its welcome offer close to worthless, and that’s a separate reading job covered in our bonus traps guide.

And it can’t protect you from yourself. That one isn’t a checklist at all, and if the honest answer is that the playing has stopped being fun, the tools on the responsible gambling hub matter more than anything on this page.

🎲 Chip’s Vegas

On the floor you never had to do any of this, because the building was the license. The Sands was the Sands. You could walk in, look at the carpet, look at who was working the pit, and know inside a minute whether the place was run properly or run by somebody’s nephew.

A website took all of that away and gave you a logo instead. Anybody can buy a logo. What nobody can buy is an entry in a regulator’s database with their own company name against it, which is why that one step is worth the other seven put together.

I’ve watched people lose money to bad luck their whole lives and that’s the deal, that’s what we signed up for. Losing it to a site that was never going to pay in the first place is a different thing entirely, and it’s the only kind that’s avoidable. Ten minutes.

Frequently asked questions

How do I know if an online casino is legit?

Find the license number on the site, open the regulator’s own public register, and confirm it returns an active license for the company named in the footer. Then read the withdrawal and bonus terms. Those two checks settle most of it in under ten minutes.

Can a casino display a fake license number?

It can do better than that. It can display a real number belonging to a genuinely licensed company, which is why the check that matters is whether the register returns that company’s name and not just an active license. The number alone proves nothing.

Why isn’t my sweepstakes casino in any register?

Because it isn’t legally a casino. With no wager there is no gambling, so no gaming regulator licenses it and no register lists it. Check the official rules, the free entry route and the excluded states instead. An absence from the register is not evidence of anything there.

Is a Curacao license good enough?

It sits below the UK and Malta on player protection, but the framework was rebuilt and the regulator now licenses operators directly. A current green seal that links to the official certificate host at cert.cga.cw means a real application was approved. An orange transitional seal in 2026 does not.

What is the single biggest red flag?

A license number that resolves to a different company than the one running the site. No license at all is bad, but it can be carelessness. A real number attached to the wrong name is deliberate, and it means somebody built the deception on purpose.

Does an audit logo mean the games are fair?

Only if the logo links to a real certificate on the auditor’s own site. eCOGRA, iTech Labs and GLI all publish verifiable certificates. A logo that links nowhere is an image file, and copying an image file is not difficult.

What if the casino refuses to pay me?

Complain to the operator in writing first, screenshot everything, then escalate to the dispute body named in its terms. After that, the regulator whose register you searched. Regulators rarely recover individual money, but complaints build the files that produce enforcement.

How often should I re-run this check?

Once per site is enough, then again if something changes. Ownership moves, licenses lapse and terms get rewritten. If a site suddenly changes its withdrawal limits or its support goes quiet, that’s the moment to look at the register again.

Related ChipReign guides

• How to check an online casino license: the register step in full
• Online casino licenses explained: which regulators actually protect you
• How we rate casinos: the eight-category scorecard behind every review
• Casino glossary: every term you’ll meet, in plain English
• Casino bonus traps: the small print that voids a win
• Responsible gambling hub: free, confidential help

The short version

Get the license number and the company name out of the footer. Open the register yourself and check they match. Read the withdrawal clause and the bonus cap. That’s eighty percent of it, and it costs you ten minutes once.

If it’s a sweepstakes site, read the official rules instead and stop looking for a license that was never going to be there.

What are the odds?

Document History