CURRENT EDITION
UK guide · Safety & player rights
Fake bonuses and account-security checks
A bonus message can be used to imitate a gambling business and obtain credentials, documents or payments. A plausible logo and a familiar promotion style are not enough to establish authenticity.
- Verify the destination independently
- Protect credentials and documents
- Respond to exposure promptly
Verify the destination independently
Navigate to the known account or official business page yourself. Inspect the exact domain and avoid relying on a display name in an email. Search advertising and social messages can also be impersonated. A purported licence badge should be checked against the official record.
Protect credentials and documents
Do not disclose passwords or one-time authentication codes to someone claiming to activate a reward. Use only the verified secure process for identity documents. An unexpected request to pay a fee or deposit through a private account before releasing a prize is a reason to stop and verify.
Respond to exposure promptly
If you shared credentials, use the official account-security route and change affected passwords. Contact the relevant payment provider if a payment may be fraudulent. Preserve the message, destination and transaction details. Do not send more money to someone promising to recover the original amount.
Look for a mismatch, not a single magic sign
Scam messages can be well written and genuine messages can contain mistakes, so spelling alone is a weak test. More useful questions concern the destination, requested action and independent account record. Does the genuine account show the same message? Is the payment going through an established cashier or to a private address? Is someone asking for a code that normally protects login? A mismatch is a reason to stop and verify, not an invitation to challenge the sender or provide a small test payment. If money has already moved, contact the payment provider through a known route and preserve the evidence. Recovery promises can themselves be scams, particularly when another upfront fee is demanded.
- Open the genuine business account independently rather than trusting a link, QR code or display name in a message.
- Never share authentication codes or passwords to activate a promotion, speed a withdrawal or confirm a supposed prize.
- Keep the message and transaction references if reporting suspected fraud, while avoiding further payments or account access through the sender.
Worked example · hypothetical
A lookalike domain
An invented message uses a familiar brand name but points to a slightly altered domain. Opening the genuine account independently reveals no matching reward. That mismatch is enough to withhold credentials and seek confirmation; there is no need to test the link with a login.
Common questions
Does HTTPS prove a bonus message is genuine?
No. Encryption protects a connection to a domain; it does not establish that the domain belongs to the business you intended to contact.
Are the figures an offer or a promise?
No. They are hypothetical teaching figures. They explain definitions and calculations without recommending an operator, a deposit, a game or a strategy.
Sources & further reading
Read the source alongside the explanation. Rules and published terms can change; check the current official position where you live.
How we research and maintain guides →