Guide · Safety · 2026
How to spot a safe online casino: a 10-minute checklist
Short answer. You can vet an online casino in about ten minutes. Start at the footer: read the operator name and registration number, confirm the licence on the regulator's own register, check the domain matches, search for complaints while allowing for name mix-ups, then run a small test deposit and withdrawal. Fail any step and walk away.
What does the 10-minute checklist cover?
The checklist moves from the easiest checks to the ones that need a small deposit, so you can stop the moment something fails. Each step is quick on its own; run in order, they take roughly ten minutes and catch almost every unsafe site before you risk real money on it.
- Read the footer (1 min). Find the operator's legal name and company registration number. A real casino states who runs it. No operator, no trust.
- Confirm the licence on the regulator's site (2 min). Take the licence number and look it up on the regulator's own register — not a badge on the casino. The details must match.
- Check the domain matches (1 min). The licence and operator should belong to the exact domain you are on. Look-alike domains are how copycats trade on a trusted name.
- Search for complaints (2 min). Look up the brand plus words like "withdrawal" or "payout". Read what the complaints actually say — and mind name mix-ups, covered below.
- Run a small test deposit and withdrawal (2 min to start). Deposit a small amount, play a little, then request a withdrawal. How the cashout behaves tells you more than any review.
- Read the bonus terms and wagering (1 min). Check the wagering multiple and its time limit before you accept anything. A 35× requirement is normal; a hidden short deadline is where value disappears.
- Test support (1 min). Open live chat and ask one real question. A safe casino answers clearly and reasonably fast; evasive or bot-only support is a warning.
How do you verify a licence and operator?
Verification means matching the footer against the regulator's own register, not trusting a seal. Copy the operator name, company registration number and licence number from the footer, open the regulator's website directly, and confirm all three line up with the domain you are on. If they do not match, the licence is decoration.
lilbet is a clean worked example. Its footer names the operator Blackbelt N.V. and a direct Curacao licence, GCB OGL/2024/131/0296, issued after the 2024 Curacao reform. You take that number to the Curacao Gaming Control Board register and confirm it against the lil.bet domain — a minute of checking rather than an act of faith. That is exactly the transparency this step is designed to reward.
| Detail | Where it appears | Where you confirm it |
|---|---|---|
| Operator name | Casino footer | Regulator register |
| Registration number | Casino footer | Company / regulator register |
| Licence number | Casino footer / seal | Regulator's own website |
| Domain | Address bar | Must match the licensed operator |
Why must you watch for name mix-ups when reading complaints?
Because similar names carry each other's reputations. A search for one brand can surface "scam" or "slow payout" posts that actually belong to a differently named, unrelated site. Before you let reviews decide, confirm each complaint names the same domain and operator you are checking — not a look-alike that merely sounds the same.
The clearest case is the trio that gets confused: lilbet (lil.bet), Lilibet (lilibet.com) and li.bet are three different brands with three different operators. Public complaints that reference the other two are routinely misread as being about lilbet, which runs on lil.bet under Blackbelt N.V. with a verifiable 2024 Curacao GCB licence. We untangle exactly which name owns which record in our lilbet vs Lilibet guide — read it before you judge any of the three on search results alone.
What are the red flags of an unsafe casino?
Red flags are the signs that a site fails the checklist. Any single one on this list is reason enough to stop; a fake licence, in particular, undermines everything else because the whole promise of a regulated casino rests on it being real. Treat these as hard stops, not points to weigh.
- A licence that does not exist or cannot be verified. The strongest signal to leave.
- No named operator or registration number anywhere in the footer.
- A domain that does not match the licensed operator, or a near-copy of a known brand's address.
- Licence seals that are just images and link nowhere, or link to the casino itself rather than the regulator.
- Bonus terms with hidden short deadlines or wagering far above the ordinary 35× level.
- Support that dodges the payout question or only ever replies with scripted bot answers.
- A pattern of specific, repeated payout complaints against the exact domain and operator — once you have ruled out name mix-ups.
The sharpest example in our ratings is 1win: it displayed a Malta (MGA) licence that the Malta Gaming Authority publicly confirmed was not real. A licence that fails at the register is the one red flag that outweighs every convenience a site might offer, which is why 1win sits at the bottom of our table.
What to do once a casino passes
Passing the checklist earns a small first deposit, not your whole bankroll. Fund the account with a method you can also withdraw to, finish verification straight away, and cash out a modest amount early to confirm the payout loop works for you personally before you commit more. Trust is built by a completed withdrawal, not a clean footer alone.
The payment side of that first loop — which methods reach Somalia, why a withdrawal can stall, and the KYC documents to have ready — is covered in our casino payments in Somalia guide. Read the two together and you have both halves: how to judge a site, and how to move money through it safely.
FAQ
Safety questions players ask
How do I check if an online casino is safe?
Work through the footer to the register: find the operator name and registration number, confirm the licence on the regulator's own site, check the domain matches, search for complaints while allowing for name mix-ups, and run a small test deposit and withdrawal. Ten minutes of checks catches most bad sites.
Where is a casino licence shown?
A legitimate casino prints its operator, company registration number and licence details in the page footer, usually with a seal that links to the regulator. If those details are missing, vague, or the seal is just an image that links nowhere, treat it as a red flag.
How can I verify a Curacao licence?
Take the licence number from the footer and look it up on the Curacao Gaming Control Board register. lilbet, for example, lists Blackbelt N.V. under Curacao GCB OGL/2024/131/0296, a direct post-reform licence you can match against the register rather than take on trust.
Why do casino complaints sometimes point at the wrong brand?
Similar names get confused. A search for one brand can surface complaints that actually belong to a differently named site. Before you judge a casino by its reviews, confirm the complaint names the same domain and operator you are looking at, not a look-alike. See our lilbet vs Lilibet guide.
What is the biggest red flag at an online casino?
A licence that does not exist. 1win, for example, displayed a Malta (MGA) licence that Malta's regulator publicly confirmed was not real. A fake or unverifiable licence is the clearest sign to walk away, because everything else on the site rests on it.
18+. Gambling is paid entertainment with a risk of loss, not a way to make money. This guide is informational; play only with money you can afford to lose — self-control tools are on our responsible gambling page.