Key takeaways
- Verify any licence claim yourself on the regulator's official site, such as pagcor.ph, never via a link the site gives you.
- Look for clear T&Cs, proper KYC, responsible gaming tools and independent testing from labs like GLI or eCOGRA.
- Most scams arrive by SMS, Telegram or Facebook "agents"; legit operators do not ask you to pay personal accounts.
- Score each site with our 10-point table. Anything under 7 is a pass. Also read our payments guide.
On this page
Fake gaming sites have become very convincing. They copy logos, use smooth apps and pay out small wins to build trust before they stop paying. At NIMOGAMING we test platforms with small personal budgets, and the same ten checks come up every time. Use this checklist before you deposit a single peso, and score the site using the table at the end.
This guide is for adults 21+ where online gaming is legal. In Malaysia online casinos are not licensed for local players, so the honest answer there is to not play real-money online casinos at all; see our legal guide. Malaysians will still find the phishing and account security tips useful for any app.
Checks 1–3: licence, domain and terms
1. Verify the licence on the regulator's own website
A licence badge in a footer proves nothing; anyone can paste an image. In the Philippines, go directly to pagcor.ph by typing the address yourself and check whether the operator and its website appear among authorised entities. The Philippine Amusement and Gaming Corporation is the regulator; remember that offshore gaming (POGO/IGL) operations were banned in 2024, so "offshore licence" claims aimed at Filipinos are a warning sign. In Singapore, check the Gambling Regulatory Authority.
2. Check HTTPS and the domain
Look for the padlock and "https://", but know that scammers get certificates too. More important is the domain itself. Watch for lookalikes with extra letters, hyphens or odd endings. Bookmark the correct address and always use the bookmark.
3. Read the terms and conditions
A real operator publishes clear terms: company name, licence details, withdrawal rules, bonus terms, complaint process and privacy policy. Missing, copied or contradictory terms are a big red flag. For bonus terms specifically, see our bonuses explained guide.
Checks 4–6: KYC, responsible gaming and testing
4. Proper KYC
Legit sites verify your age and identity before paying out. Strangely, "no ID needed" is a bad sign: it often means no regulator is watching. Our e-wallet and KYC guide explains what is normal.
5. Responsible gaming tools
Look for deposit limits, session reminders, time-outs and self-exclusion in the account settings, plus links to help organisations. Operators that hide these, or make them hard to use, care less about your wellbeing. Learn more on our responsible gaming page.
6. Independent game testing
Fair casino games use certified random number generators. Testing labs such as Gaming Laboratories International (GLI) and eCOGRA audit games and systems. A test seal should link to or be verifiable on the lab's own site. Our slots guide explains why RNG testing matters.
Checks 7–8: payments and support
7. Payment reputation
Search for the site's name plus "withdrawal" or "scam" and read recent experiences across several sources. Deposits should go to official merchant accounts, never a stranger's personal GCash or bank account. Sites that want "unlock fees" before paying out are scams, full stop.
8. Test customer support
Before depositing, ask support two specific questions: "What is your licence and where can I verify it?" and "How long does a first withdrawal take?" Clear, consistent, polite answers are a good sign. Vague replies, pressure to deposit or a switch to a personal chat app are not.
Checks 9–10: phishing, 2FA and fake agents
9. Phishing via SMS, Telegram and Facebook
Phishing is the number one way gaming accounts and e-wallets get emptied. Common tricks we see in the Philippines and Malaysia:
- SMS saying "You won ₱10,000, claim now" with a short link.
- Telegram groups promising "sure-win" patterns or "hacked" slots.
- Facebook pages copying a brand's name and logo, offering "exclusive" bonuses.
- Messages asking for your OTP to "verify" your account.
Never click links in unsolicited messages. Type addresses yourself. No real operator or e-wallet will ask for your OTP or password.
10. 2FA and fake "agent" accounts
Turn on two-factor authentication for your email, e-wallet and any gaming account that offers it. Then beware of "agents" or "loaders" who offer to top up your account for you, often in exchange for a deposit into their personal account. They may vanish with your money, or ask for your login. Legit operators let you deposit directly through official channels.
The NIMOGAMING scoring table
Give one point for each check the site clearly passes. Be strict: "probably" counts as zero.
| # | Check | Pass looks like | Point |
|---|---|---|---|
| 1 | Licence verified | Listed on the regulator's own site | 1 |
| 2 | HTTPS and correct domain | Padlock, exact bookmarked domain | 1 |
| 3 | Clear T&Cs | Company, rules, complaints all stated | 1 |
| 4 | Proper KYC | ID checks before withdrawals | 1 |
| 5 | Responsible gaming tools | Limits, time-outs, self-exclusion | 1 |
| 6 | Independent testing | Verifiable GLI/eCOGRA or similar | 1 |
| 7 | Payment reputation | Official merchant, timely payouts | 1 |
| 8 | Support test | Clear answers, no pressure | 1 |
| 9 | No phishing contact | No unsolicited SMS/Telegram promos | 1 |
| 10 | 2FA, no agents | Account security offered, direct deposits only | 1 |
How to read your score: 9–10 is a reasonable candidate; 7–8 means proceed only with a small test budget and extra caution; 6 or below is a pass. If check 1 or check 7 fails, walk away whatever the total.
Re-check sites over time
A site that scored well last year is not automatically safe today. Licences can be suspended, ownership can change and payment partners can drop out. Re-run the checklist every few months, and again whenever something feels different: new withdrawal rules, a new domain, sudden pressure from "account managers", or a change in which payment methods are accepted. If terms change after you win, screenshot both versions.
It also helps to know how we review sites ourselves. Our editorial policy explains how NIMOGAMING tests platforms and handles corrections, and our affiliate disclosure explains how partner links work, so you can judge our advice with full context. A good scorecard is only a starting point; your own small test deposit and withdrawal is the final word.
If you think you have been scammed
- Stop sending money, including any "fee" to recover funds.
- Change passwords and enable 2FA on your email and e-wallets.
- Report the transaction to your e-wallet or bank immediately.
- Keep screenshots, reference numbers and chat logs.
- Report to the relevant authorities in your country, and to the National Privacy Commission if your personal data was misused in the Philippines.
Staying safe is mostly about slowing down. For mobile-specific security, read our mobile play guide, and for more answers see the NIMOGAMING FAQ or meet our reviewer on the about the author page.
Frequently asked questions
How do I check a PAGCOR licence?
Type pagcor.ph into your browser yourself and look for the operator among authorised entities. Do not rely on badges or links provided by the site.
Is HTTPS enough to prove a site is safe?
No. HTTPS only encrypts the connection. Scam sites can have certificates too. Check the exact domain and the other points in our checklist.
What are GLI and eCOGRA?
Independent testing organisations that audit games and RNG systems. A genuine seal can be verified on the lab's own website.
Should I trust a Telegram "agent" who offers to load my account?
No. Deposit only through the official site or app. Agents asking for money into personal accounts are a common scam.
What score should a site get on the checklist?
Ideally 9–10. Anything at 6 or below is a pass, and failing the licence or payment check means walk away.
Keep reading
Browse all NIMOGAMING guides →
Top photo: Photo: Airman William Tracy, U.S. Air Force / Wikimedia Commons, Public domain (cropped)
.jpg){kind=link}
AI-assisted content: This article was drafted with help from AI writing tools, then reviewed, fact-checked and edited by Roland Dee. Games, payment options and promotions change — always confirm current details on the operator’s own pages and with the regulator, such as PAGCOR. 21+ only. Read our editorial policy.