How to spot an illegal or scam online casino site

Start from the right question

Elsewhere, a guide like this would teach you to tell a licensed casino from an unlicensed one. In Malaysia that question has a short answer: no online casino is licensed here, and the Court of Appeal ruled in 2023 that online gambling is an offence in Peninsular Malaysia. Our plain-English guide to the law explains the ruling. That leaves a more practical question for anyone who has been sent a link or an invitation: is this site simply illegal, or is it set up to take your money and never pay anything back?

The warning signs below come from how these sites ask you to pay and how they behave when you try to withdraw. They are not a test you can pass. A site that shows none of them is still not legal.

Eight warning signs

1. An agent signs you up. You are added on WhatsApp, Telegram or WeChat by someone who creates your account, sends you a link and handles your deposits. Regulated operators do not normally recruit customers through personal chat accounts.
2. You pay a person, not a company. The deposit goes to a personal bank account, an account whose name does not match the casino, or an e-wallet number. Accounts like this are often "mule" accounts, rented or stolen to move money.
3. The account number keeps changing. Each deposit uses a different account. Scam operations often rotate accounts as each one is reported and frozen.
4. It borrows a famous name. The site uses a brand such as bet365, LeoVegas or Mr Green on an address that is not the brand's own. On the UK register, for example, the live LeoVegas address is leovegas.co.uk and leovegas.com is inactive, as our LeoVegas licence check shows.
5. The licence does not check out. The footer shows a badge or number, but the regulator's own register does not list that company for that web address, or the licence has ended. Mr Green Limited's UK licence, still quoted on some sites, was surrendered in October 2024.
6. The bonus is too big. A deposit match or "free credit" far larger than your deposit, with a turnover or wagering requirement that is never explained up front or that grows each time you get close to it.
7. Withdrawals need a payment first. You win, ask to withdraw, and are told to pay a "tax", "verification fee", "unlock fee" or extra deposit before the money can be released. This is the clearest sign of all. Nothing you pay will release the money.
8. Pressure and secrecy. You are told the offer ends today, that you must not tell your bank what the payment is for, or that your account will be frozen unless you pay more.

Check an account before you pay: Semak Mule

The Royal Malaysia Police Commercial Crime Investigation Department runs a free portal called Semak Mule at semakmule.rmp.gov.my [1]. You type in a bank account number or phone number, and it tells you whether police reports have been lodged against it. It takes under a minute.

Use it as a red-light check, not a green light. If the account shows reports, do not pay. If it shows "No Record Found", that only means no one has reported it yet; scam accounts are often brand new. A clean result does not make the payment safe or the site legal.

If you have already paid

1. Call 997. The National Scam Response Centre works with Bank Negara Malaysia and the police, and answers 24 hours a day [2]. The government asks victims to call within 24 hours so banks can try to block the money before it leaves the account it was sent to.
2. Tell your bank. Use your bank's official hotline from its website or the back of your card, never a number the site or agent gave you. If you have already reported to your bank, it works with the centre directly, so you do not need to call 997 again for follow-ups.
3. Make a police report at your nearest police station, with screenshots of the chat, the site, the account numbers and your transfer receipts.
4. Stop paying. Ignore any offer to "recover" your money for a fee. Recovery offers that appear after a scam are often a second scam.

Why there is nowhere to complain

In a country that licenses online casinos, a player with a dispute can go to the regulator or an independent complaints service, and the operator risks its licence if it refuses to pay. None of that exists for an online casino used from Malaysia. A foreign licence protects the customers it was issued for, and the foreign regulator has no duty to a player in Malaysia. That is why the steps above concentrate on stopping payments quickly rather than on winning a complaint later.

When it is not about the money

Many people reach a page like this after losing more than they meant to, sometimes while trying to win back earlier losses. If that sounds familiar, the problem is the gambling, not just the site. A self-exclusion button on an illegal site will not protect you, but talking to someone will. Befrienders KL answers 24 hours a day on 03-7627 2929, and our page on gambling help in Malaysia lists more free, confidential support, including help for families.

Sources