Crypto scams targeting casino players: seven schemes and how to recognise them

A card payment can be disputed, and with a bank transfer the bank can sometimes help. A crypto transfer has no such fallback: once money has gone to another address on the chain, neither the casino, the exchange nor the wallet maker will reverse it. That is why a crypto casino player's biggest risk is often not the casino itself but what happens around it — fake sites, fake accounts and fake signatures.

Below are seven schemes that are often described in the crypto world and that target casino players specifically. With each scheme comes a sign to recognise it by and one habit that stops it.

1. A cloned casino site and the "mirror link"

The fraudster copies a well-known casino's design and puts it on a domain that differs by one letter, a hyphen or the ending. On login the password and two-factor code go to the fraudster; on deposit the fraudster's address is shown. In Estonia the domains of casinos without an Estonian licence are often blocked, so players look for "mirror links" — and that is exactly where clones are easiest to find.

Habit: open the casino only from a bookmark you created after checking the address. Our casino reviews describe each house; a link from a chat or an ad is not a checked source. Concept: phishing.

2. Fake customer support

You post on social media or in a Telegram group that a withdrawal is delayed. A few minutes later "support" writes to you — casino logo, official tone, quick help. Then comes the request: verify the account, share your screen, enter your seed phrase "to synchronise" or send a small amount "to unlock the account".

Habit: real support does not write to you first in a private message, and no genuine service ever asks for a seed phrase. Contact support only through the chat or email on the casino's site.

3. Address poisoning

The attacker sends a zero-value transaction to your wallet from an address whose beginning and end resemble your usual casino or exchange address. The fake address appears in the transaction history. If next time you copy the address from the history, you send money to the attacker. The scheme is common with TRC-20 and ERC-20 stablecoins. More: address poisoning.

Habit: copy the address from the casino cashier every time and check the middle characters too, not only the beginning and end.

4. Wallet drainers and fake bonuses

An "exclusive bonus", an "airdrop" or "free spins" ask you to connect a wallet and sign a transaction. The signature is actually a token approval that lets the attacker's contract take your tokens — now or later.

Habit: an ordinary casino deposit is a simple transfer and needs no approve signature. A real bonus is activated in the casino account, not in the wallet.

5. "Guaranteed strategies" and prediction bots

Telegram channels and videos sell "signals", Martingale-style systems or programs that supposedly predict the results of provably fair games. None of them work: without the server seed the result is unpredictable and the house edge remains in every betting system. Often the "bot" is itself malware looking for wallet files on your computer.

Habit: if someone sells a way to beat the casino, they are really selling something else. The maths is set out in the post house edge and expected value in original games.

6. The withdrawal "tax", or advance-fee fraud

A fake casino or fake platform shows you a large balance, but to withdraw it asks you first to pay a "tax", "insurance", an "AML check fee" or "account activation". After paying, a new demand comes. A real casino may ask for KYC documents or charge a withdrawal fee stated in its terms, but it deducts that from the balance rather than asking for a new deposit.

Habit: if a withdrawal requires a new transfer, stop. Check in the terms what is actually required and see the complaints guide.

7. Investment or friendship fraud dressed as a casino

A new acquaintance on a social network or dating app tells you how they earn at a particular "crypto casino" or "platform" and helps you get started. The platform actually belongs to the fraudster and the balance is only a number on the screen. Such schemes are also described by the Financial Supervision Authority in its warnings.

Habit: do not transfer money to a platform you found through a new acquaintance, and do not let anyone "guide" you through screen sharing.

What to do if the money is already gone

1. Stop the damage. Change the password and 2FA, log out all sessions. If the seed phrase leaked, create a new wallet and move the remaining money there at once.
2. Gather evidence. TXID, addresses, dates, screenshots of chats and pages. Check in a block explorer where the money went.
3. Report. Go to the police and inform the casino through its official channel if a clone used its name. A stablecoin issuer can sometimes freeze a criminal's address, but that requires an official request and is not guaranteed.
4. Avoid the second scam. After a loss "recovery agents" often appear, promising for a fee to bring back the stolen crypto. That is the second round of the same scheme.

And one more thing: after a scam there is a temptation to earn the lost amount back by playing. That is the worst possible plan. If you feel play has turned into making up for a loss, take the self-test, read the responsible gambling page or call the free number 15410. The whole safe-deposit routine is gathered in the guide crypto casino security and the security checklist.