How to tell whether an online casino is legitimate

Five checks against a regulator's own record: the licence, the entity, withdrawal limits, the complaints route and what the site leaves out.

How to tell whether an online casino is legitimate

Five checks, each done against a regulator's own record rather than against anybody's opinion. They take about ten minutes the first time and two minutes after that.

None of them involve reading reviews, including ours.

Check one, the licence, in the register rather than the footer

The footer is text the operator typed. The register is the record.

Go to the regulator for the market you play from and search there. Malta publishes a licensee register and a URL checker, Britain a public register, Spain the Buscador de operadores, Denmark a list of licence holders, Germany a whitelist. Our regulator index has the links.

Search the URL if the register supports it. Otherwise take the company name from the terms and conditions and search that.

Check two, match the entity to the site

This is the check almost nobody does and it is the one that catches the most.

The company named in the site's terms and conditions should be the company holding the licence. A brand name that appears nowhere in the register is normal, because licences belong to companies. A licence held by a company that the site never names is not.

If the terms name no company at all, stop there. A licensed operator has no reason to hide its identity.

Check three, read the withdrawal terms before you deposit

Specifically three numbers: the maximum withdrawal per month, the maximum per transaction, and any cap applied to winnings from bonus money.

A monthly cap turns a large win into a payment plan. It is in the terms you accept, so finding it afterwards is not a dispute, it is a thing you agreed to. Find it first.

Check four, find the complaints route and the ADR entity

A licensed operator has to publish how to complain, the timescales and the escalation route, and has to have arrangements for you to take a dispute to an alternative dispute resolution entity, free of charge.

So look for the named ADR entity in the terms. If there is a named entity and a published procedure, you have a remedy when something goes wrong. If there is neither, you do not, and that is the most useful single thing you can learn about a casino before depositing.

Check five, look at what the site does not say

Three absences worth treating as findings.

No company name in the terms. No named ADR entity. No published withdrawal limits.

Any one of those is enough to walk away from, and none of them require you to judge anybody's honesty. They are things that are either on the page or not.

What these checks do not tell you

Whether you will enjoy it, whether the games are good value, or whether support is any use.

They tell you that there is an identifiable company, licensed in your market, with a published route to a free dispute resolution service. That is the floor. Everything above the floor is a separate question and most of this site is about those.

Read next

The register checks step by step: how to check an MGA licence yourself, how to check a DGOJ licence in Spain and how to check a Danish Spillemyndigheden licence. If something goes wrong, use a casino complaint email template.

The five checks

The five checks
CheckWhere you lookA fail looks like
1. Licence in the registerThe regulator's own registerNo record, or a status that is not current
2. Entity matches the siteThe site's terms, then the registerThe terms name no company, or a different one
3. Withdrawal limitsThe terms, before depositingCaps you only discover after winning
4. Complaints and ADRThe terms and the help pagesNo named ADR entity, no published procedure
5. The absencesThe whole siteAny of the above simply missing

Frequently Asked Questions

The casino has a licence seal. Is that enough?

Only if it is live and resolves to the regulator's own domain. A flat image is decoration. Check the register directly rather than trusting the badge.

It holds a licence, but not from my country's regulator. Does that count?

A licence is permission to offer gambling in the jurisdiction that granted it. For your question, the register that matters is your own market's.

Are reviews useless then?

For the question of whether an operator is licensed and identifiable, yes, because that is a matter of record you can check yourself in ten minutes. Reviews are for the questions records cannot answer.

Related Guides

The checks rely on regulators' own registers and UKGC complaints rules. How to apply them is general guidance. Last reviewed October 15, 2026.

Browse the Expert Knowledge Hub