How To Spot Fake Casino License

A licence badge in the footer means nothing until you check the registry

Every crypto casino displays a licence badge somewhere — usually in the footer next to the responsible-gambling logos and the age-gate text. The badge typically looks official: a Curaçao Gaming Authority crest, an Anjouan ALSI seal, a Kahnawake Gaming Commission logo. The number alongside the badge claims to be the licence number. Both elements can be entirely fabricated. Fraudulent operators copy real licence numbers from legitimate brands, alter them by a digit, or generate plausible-looking numbers that never appear in any registry. The Curaçao LOK reform of December 2024 made the registry searchable for the first time, the Anjouan AOFA now publishes a current licensee list, and Kahnawake has run a public registry for years. The tools exist; almost no players use them. This guide walks through the registry lookup process for the five regulators relevant to crypto casinos in 2026, the specific data points to verify on each, the licence-number format clues that flag forgeries, and the steps to follow when a registry check fails. Five minutes of verification per casino prevents the most common rug-pull and exit-scam patterns.

What a real licence claim should contain

Three pieces of information appear on every legitimate licence: the regulator, the licence number in the regulator's specific format, and the licensee's registered name (which may differ from the casino brand). The licence number format is the strongest single fingerprint.

• Curaçao (CGA, post-LOK): Format OGL/YYYY/XXXX/XXXX, e.g. Stake's OGL/2024/1451/0918. Old master/sublicence numbers from 8048/JAZ Antillephone (and similar) all expired January 2025 and are no longer valid for new operators.
• Anjouan (ALSI/AOFA): Format ALSI-YYYYMMDD-XXX, e.g. Duel.com's ALSI-202411026-FI1. The date encoded in the number is the licence-issuance date.
• Kahnawake (KGC): Format issued through the KGC's portal, typically prefixed GPI or "Issued by KGC".
• Malta (MGA): Format MGA/B2C/XXX/YYYY or MGA/B2B/XXX/YYYY depending on B2C or B2B class.
• Gibraltar: Format RGL XXX, with RGL signifying Remote Gaming Licence.
• Isle of Man (GSC): Format issued by the Gambling Supervision Commission, typically four digits.
• Estonia (EMTA): Format HKT00000XXX issued by the Estonian Tax and Customs Board.

Forged licences typically fail one of three tests: the format does not match the regulator's pattern, the number does not appear in the registry at all, or the registered entity name does not match the operating brand. A simple cross-check defeats the majority of fakes.

How to verify each regulator step by step

1. Curaçao Gaming Authority. Navigate to gamingcontrolboard.cw (the official CGA portal). The public registry of active licensees is searchable by licence number or brand name. Enter the number from the casino footer. The result should show: status "Active", licensee name (the corporate entity, not always the brand), licence type (B2C or B2B), issuance date, and any conditions. A blank result or "no record found" means the licence is invalid. The CGA registry updates within 48 hours of any status change.
2. Anjouan AOFA. Anjouan's regulator publishes the current licensee list at anjouangamingauthority.com or via the registry portal alsi.org. The format encodes the date — the central YYYYMMDD section must correspond to a real issuance date. Search by company name or licence reference. The AOFA portal also lists each licensee's authorised verticals (casino, sports, poker, lottery, esports) — verify the verticals match the casino's actual offering.
3. Kahnawake Gaming Commission. The KGC publishes its licensee registry at gamingcommission.ca. The site lists every active licensee with brand names, corporate names, and licence status. Kahnawake's enforcement record is among the cleanest of any offshore regulator.
4. Malta Gaming Authority. The MGA's License Register at mga.org.mt is the gold standard. Search returns the company name, brand names operated under that licence, authorised verticals, suspension or sanction history, and the auditor responsible for technical compliance. The MGA is the most rigorous regulator in the crypto-casino space; very few crypto-native operators hold an MGA licence because of the cost (€150-300k) and the compliance overhead.
5. Gibraltar Regulatory Authority. Smaller register at gibraltar.gov.gi/gambling. Mostly tier-one fiat operators.
6. Isle of Man Gambling Supervision Commission. Register at gov.im/gsc. Premium offshore licence, used by some crypto-friendly operators in higher-trust tiers.
7. Estonia EMTA. Estonian Tax and Customs Board portal. Stake.com's Estonian licence (used for EU access via the cross-border framework) is verifiable here.

Practical examples — verifying three real casinos

Stake.com. Footer claims licence OGL/2024/1451/0918 issued by the Curaçao Gaming Authority. Lookup on the CGA portal: status "Active", licensee "Sweepstakes Limited" (the corporate entity), licence type B2C, issuance date 2024, conditions include geo-block of restricted jurisdictions. Brand name does not appear directly in the register — the lookup works on corporate name. Cross-verify: Sweepstakes Limited matches the entity referenced in Stake's terms of service. This is the pattern for legitimate Curaçao licences after the LOK reform.

Duel.com. Footer claims licence ALSI-202411026-FI1 issued by the Anjouan Offshore Finance Authority. Lookup on the AOFA portal: status "Active", licensee "Immortal Snail LLC" (Nevis), valid through November 6, 2026, casino + sports + poker authorised. Cross-verify: Immortal Snail LLC matches the operator named in Duel's terms. The date encoded (20241026) matches the published issuance.

BC.Game (.com version). Footer claims Anjouan licence. Lookup on AOFA: licensee "BlockDance B.V." or affiliated entity. Status active. The .com version operates under Anjouan; the .vip mirror operates under Curaçao via a separate entity. The dual-licence structure is common for operators serving multiple geographies.

A red-flag example. A casino branded "CryptoSpinz" displays a Curaçao seal with licence number 8048/JAZ-XXXX. Lookup on CGA portal: no record. The old sublicence format under master licence 8048 has been expired since January 2025; any new operator claiming that format is either using a stale licence or fabricating one. Withdrawal of funds from an unlicensed casino has no realistic recourse.

Common mistakes and red flags

• Trusting the badge image alone. Logo PNGs are trivial to copy. The number is the only verifiable element.
• Skipping the brand-versus-entity check. Licences list the corporate entity, not the casino brand. If the brand name does not appear in the terms of service or on the regulator's portal, verify the corporate parent matches.
• Ignoring expired licences. Curaçao's January 2025 mass expiration of sublicences killed the old 8048/JAZ-format claims. Any casino still displaying that format with no replacement OGL number is operating without current authorisation.
• Confusing data-processing registration with gambling licence. Costa Rica operators register as data-processing businesses, not as gambling licensees. Marketing copy may imply a "Costa Rica licence" — there is no such thing in the casino-licensing sense.
• Trusting affiliate sites for verification. Most affiliate sites cut and paste licence claims from the operator without independent verification. The registry portals are the only authoritative source.
• Confusing CryptoCasino brand with CGA seal. A handful of casinos display logos that imitate the Curaçao Gaming Authority crest but are not actually CGA-issued. The portal lookup is the only test.
• Phantom regulators. "Gambling Commission of Vanuatu", "Pacific Gaming Authority", "Antigua Internet Gaming Commission" and similar names appear on some smaller operator footers. Most are either dormant, never operational, or do not exist at all. Stick to the seven regulators with active and verifiable registries.

FAQ

What if the licence registry shows nothing? The casino is unlicensed under the regulator it claims. Any funds deposited are at the operator's discretion to return; there is no regulatory recourse for stuck withdrawals. Avoid the casino.

Does the licence guarantee fair games? Partially. Licensed operators must run audited RNGs or provably-fair systems, segregate player funds, and respond to complaints through ADR mechanisms. The licence does not guarantee solvency — even licensed casinos can collapse and leave player balances stranded.

What about provably fair casinos without a licence? Some pure-crypto operators (early-stage projects, smaller Anjouan/Costa Rica entities) operate with weak or no formal licence but offer cryptographically verifiable game outcomes. Provably fair confirms game honesty; it does not confirm the operator will pay out. Treat unlicensed even with PF as high-risk.

Why do casinos hold multiple licences? Different licences cover different jurisdictions. Stake holds Curaçao for restricted-of-world, Estonia for EU access, Mexico for Mexican national permit, Colombia for Coljuegos, Peru for Mincetur. Multi-licence operators are typically more established.

What if my casino is licensed but refuses to pay? File a complaint with the licensor directly. CGA complaints flow through their formal portal under the LOK reform. AOFA has a complaints mechanism. eCOGRA and AskGamblers ADR are independent dispute services that several licensed operators use as a second layer.

Updated 22 May 2026.