How to check a gambling licence

On this page

1. First, a short note on safety
2. The 5‑Minute Audit (use this checklist right now)
3. The Quick‑Scan Matrix (print or save this)
4. Interlude: Two myths that cost people money
5. Deep‑dive: What separates legit from sketchy
6. Edge cases you will meet
7. The “ask two people” test
8. Where curated lists help (and how to use them)
9. Red flags recap (pin this)
10. Mini‑FAQ
11. Final note: Stay safe long‑term

Your friend drops a link in chat. “Fast payouts. Big bonus.” You feel the itch to try, but your gut says, “Wait. Check it first.” You do not want drama with slow cashouts, voided wins, or fake seals. You want a quick way to judge a site in minutes, not hours.

This guide shows you a fast, simple scan you can run right now. It takes five minutes. It uses public tools. It flags risk. It also shows deeper checks if you want to go further. Keep this page open the next time a “too good to be true” site shows up.

First, a short note on safety

Only use gambling sites if it is legal where you live and you are of legal age. Set limits. If gambling harms you or someone close to you, get help. You can find support at responsible gambling help.

The 5‑Minute Audit (use this checklist right now)

1) License status

Legit sites show a license number and the name of the regulator in the footer. Do not stop there. Click through and check the official register.

• For UK sites, use the UKGC public register.
• For Malta, use the MGA license search.

Green flag: the operator name and URL match the register. Yellow flag: the brand uses a white‑label under a parent license; learn which company is in charge. Red flag: no match, or the license belongs to a different site.

2) Fairness seals

Look for game testing seals. Real seals click through to a live page on the lab’s site with a certificate number and date.

• Check the directory of eCOGRA certified operators.
• Search for an iTech Labs certificate if you see their badge.

Green flag: active, recent cert that names the operator or platform. Yellow flag: old cert, or it names only a platform but not this brand. Red flag: static image (not clickable), or broken link.

3) Payouts and payment methods

Find the “Payments” or “Banking” page. Check payout times, fees, and KYC steps. Good sites show clear time frames and do not hide fees. They follow card rules and data rules like PCI DSS standards.

• Green flag: payout timeframes by method; KYC before first withdrawal; fair limits.
• Yellow flag: “up to” times only; high fees on some methods; unclear KYC steps.
• Red flag: “instant withdrawals, no ID ever”; fixed fee on every cashout; only one obscure payment method.

Need a quick map of common options and how they work? See this plain guide to Einzahlungsmethoden Casino (casino deposit methods, in German). It helps you compare speed and limits before you pick a method.

4) Site security

Make sure the site runs on HTTPS and has a valid TLS certificate. Click the padlock. For a deeper scan, use the free security configuration check.

Green flag: valid cert; no browser warnings; strong grade on scan. Red flag: mixed content, warnings, or strange redirects during payment.

5) Responsible play tools

Good sites help you stay in control. Look for deposit limits, time‑out, self‑exclusion, and links to support. In the UK, sites must link to self‑exclusion via GAMSTOP.

Green flag: tools in account settings, easy to set, clear help page. Red flag: no tools, or you must email support to set basic limits.

6) RTP and game info

Reputable sites show game Return to Player (RTP) and rules. This is often in the game info panel. UK rules require clear RTP display; see RTP disclosure requirements.

Green flag: RTP shown per game; provider names listed. Yellow flag: only a generic “average RTP” for the site. Red flag: no game info at all.

7) Dispute path (ADR)

When things go wrong, you want a fair referee. Some regulators require an approved ADR (alternative dispute resolution) body. Look for a clear “Disputes” or “Complaints” link and the name of the ADR, such as independent adjudication (IBAS).

Green flag: step‑by‑step complaint path with time frames and an ADR name. Red flag: “our decision is final”.

8) Terms and bonus rules

Open Terms & Conditions and the Bonus Terms. Scan for the big traps: very high wagering, max win caps from bonuses, game restrictions, and vague “abuse” clauses. For context on fair terms, see the UK’s CMA guidance on fair terms.

Green flag: clear, short rules; plain language; bonus caps stated up front. Red flag: small print that can void wins for minor errors.

9) Reputation and history

Do a fast background check. It takes one minute and can save you money.

• Scan the site’s Safe Browsing status.
• See past versions via domain history via Wayback.
• Check the operator name in a WHOIS lookup.

Green flag: stable brand, same owner, no malware flags. Yellow flag: many domain changes. Red flag: frequent rebrands after complaints.

• Footer: license name and number present?
• Payments page: cashout times listed?
• Game info: RTP shown?
• Account settings: deposit limit tool exists?

• No license link or a dead link.
• “Instant payouts, no ID ever.”
• Fake badges that do not click through.
• Terms that let the site void wins at will.

The Quick‑Scan Matrix (print or save this)

License status	Copy license number; search register	Footer; About; Regulator site	Brand and URL match	White‑label under parent	No match; fake details	UKGC / MGA
Testing seal	Click the badge; confirm live cert	Footer; Fairness page	Valid cert, recent date	Old or platform‑only	Static image; broken link	eCOGRA / iTech
RTP info	Open a game; read info panel	Game menu “i”	RTP shown per title	Only average RTP	No RTP listed	UKGC RTS
Payout times	Scan banking page for times	Payments/Withdrawal	Clear timeframes; fair fees	“Up to” only	“No ID ever” / high fees	PCI DSS
Security	Check HTTPS and padlock	Address bar	Valid TLS; no warnings	Mixed content	Warnings; odd redirects	Mozilla scan
Responsible tools	Find limits / self‑exclusion	Account settings	Built‑in tools	Support‑only setup	No tools	GAMSTOP
ADR (disputes)	Look for ADR name	Complaints page	Named ADR; steps shown	Email only	“Final decision” claim	IBAS
Terms & bonuses	Check wagering, caps	T&Cs; Bonus Terms	Clear, fair limits	Vague “abuse” rules	Hidden max win, high WR	CMA guidance
Reputation	Scan safety and history	Tools and archives	Stable brand	Some rebrands	Malware flag; churn	Safe Browsing, Wayback, WHOIS

Interlude: Two myths that cost people money

• Myth: “The site has HTTPS, so it must be legal.” Truth: HTTPS only means the connection is encrypted. It says nothing about a license or fair play.
• Myth: “They promise instant payouts with no ID.” Truth: Most sites must verify you before paying. A promise to skip KYC is a red flag.

Deep‑dive: What separates legit from sketchy

Licenses and where they are based

Regulators set rules and check sites. The UKGC and MGA are well known. They require clear terms, fair ads, and ADR. Some offshore bodies do less. If a brand is under a white‑label, learn who runs the platform and who holds the license. If a site blocks many countries but targets yours, make sure your country is allowed under the license. No license fit? Walk away.

Fairness tests and RTP, in practice

Labs test game code and random number generators (RNG). They also audit payout data. Names you will see include eCOGRA, iTech Labs, and GLI testing. A real audit leaves a public trail: a live cert page, a date, and a scope. RTP is the long‑term return, not what you will get in one session. The key is clear RTP per game and stable rules across providers.

Banking and security beyond the surface

Good operators do not store card details in plain text. They use tokenization and meet PCI DSS. They keep payouts simple: same method back to card or wallet, fair limits, and no hidden “admin fees”. They also protect sessions with TLS and set sane cookie rules. If the site sends you to a random third‑party page for pay, check the domain. If it looks off, stop.

Terms you should read (and how to do it fast)

Open Terms & Conditions. Use find (Ctrl/Cmd+F) for “wager”, “max win”, “irregular”, “verification”, and “dormant”. Note any caps on bonus wins, game lists that do not count to wagering, or rules that let the site seize funds for a small error. Compare with the CMA guidance on fair terms to spot outliers. If rules are opaque or change on short notice, do not deposit.

Edge cases you will meet

Crypto‑only sites

Some crypto sites run without a classic license. They can be fast, but risk is higher: no ADR, weak KYC, and less recourse. If you choose to try, test with a tiny amount. Check their provably fair docs and read recent community posts. But know this: no strong license means you carry the risk.

White‑label brands

Many small brands sit on big platforms. The platform holds the license. This can be fine, but you must know who runs payments and support. Check both the brand and the platform in the regulator’s register. If the brand hides the platform name, that is a yellow flag.

Rebrands after trouble

Some shady sites change names or domains after complaints. Use the Wayback Machine and WHOIS to see old pages and owners. A pattern of rebrand‑and‑run is a hard no.

The “ask two people” test

Before you deposit, ask two sources who do not profit from your choice. One can be an ADR or regulator help line. The other can be a trusted community or a consumer forum. If neither can confirm a green flag in 24–48 hours, pause.

Where curated lists help (and how to use them)

Curated lists can save time if they show how they test. Favor lists that share license lookups, payout timing tests, and bonus stress tests, not just promo codes. If you want a simple overview of deposit choices before you pick a site, this guide to Einzahlungsmethoden Casino explains common methods and trade‑offs in plain language.

Red flags recap (pin this)

• No license link, or license does not match the site.
• Badges that do not click through to a live cert.
• “No ID ever” or “instant payout guaranteed.”
• Hidden fees on withdrawals or a fee on every payout.
• RTP not shown; game info missing.
• No self‑exclusion or deposit limit tools.
• Terms allow the site to void wins at its sole discretion.
• History of domain hops and name swaps after complaints.

Mini‑FAQ

How do I verify a casino license number quickly?

Scroll to the footer, copy the license number, and search it in the regulator’s register (for UK, the UKGC public register; for Malta, the MGA license search). Make sure the brand name and the website URL match the record.

What does an eCOGRA or iTech Labs seal mean?

It means a lab tested the games or platform. Click the badge and check for a live page on the lab’s site with a date and the operator name. You can also cross‑check in the eCOGRA certified operators list or search for an iTech Labs certificate.

Are crypto‑only gambling sites ever “reputable”?

Some are well run, but many have no strong license and no ADR. That means more risk to you. If you try one, start tiny, test withdrawal once, and stop at the first red flag.

What payout terms are a red flag?

Claims of “instant payouts, no KYC,” high fixed fees on each withdrawal, unclear timing, or rules that let the site delay cashouts without reason. Good sites list time frames by method and follow data rules like PCI DSS standards.

How often should I re‑check a site I already use?

Do a short scan every few months or after any major change (new owner, new domain, new terms). Re‑check the license, payout times, and any new bonus rules.

Final note: Stay safe long‑term

Make this a habit: run the five‑minute audit before you deposit, keep a small test cashout to confirm speed, and set limits you can live with. If a site slips from green to yellow, slow down. If it turns red, walk away. Your money and time are worth more than any promo.