Preview: StraightPlay is launching soon. Some details are still being verified, so always confirm offers and terms on the casino's own site.
21+ · Play responsibly. Gambling problem? Call or text Help: 1-800-MY-RESETWe may earn a commission. How we make money →
Safety · 5 min read

How to spot an unsafe online casino in five minutes

The licensing, terms, and payment red flags that separate a legitimate casino from one that will not pay you.

The biggest risk in online gambling is not losing a bet. It is winning and never getting paid. These checks take about five minutes and screen out most sites that will give you trouble.

1. Check the license, then verify it

A real-money casino serving US players must be licensed by the gaming regulator in your state: the NJ Division of Gaming Enforcement, the Pennsylvania Gaming Control Board, the Michigan Gaming Control Board, and so on. Do not just trust a logo in the footer. Search the regulator's own list of approved operators. If a site offers real-money casino games in a state with no legal online casinos, it is unlicensed by definition.

A license from Curaçao or Anjouan does not make a site legal for US players, and those regulators offer you little help if a casino refuses to pay.

2. Read the withdrawal terms before you deposit

  • Is there a published minimum and maximum withdrawal? A low weekly cap (for example $500 a week) can make large wins take months to collect.
  • Are processing times stated? Legitimate casinos publish them.
  • Are there vague clauses letting the casino void winnings for "irregular play" without defining it?

3. Look for state-required protections

Licensed casinos must offer deposit limits, time-outs, and self-exclusion, and must verify your age and identity. A site that lets you play without any identity checks is a red flag. It will likely demand them, at length, when you try to withdraw.

4. Check what the payment methods tell you

Regulated US casinos take PayPal, Venmo, debit cards, and online banking, which all have their own fraud checks. A site that only takes crypto or gift cards, or pushes you toward them, deserves extra scrutiny. (Some legitimate sweepstakes casinos, like Stake.us, are crypto-first; check their state standing and complaint history instead.)

5. Search for complaints and enforcement

Search the casino's name plus "cease and desist," "lawsuit," and "not paying." State regulators and attorneys general publish enforcement actions. Our reviews track these for every casino we list, and they count for 25% of each score.

Red flags at a glance

  • Bonuses that look too good: 500% matches, or "no wagering" on huge amounts.
  • No physical company name or address in the terms.
  • Pressure tactics: countdown timers, "your account will expire" emails.
  • Support that cannot answer basic questions about withdrawals.
  • Accepting players from states where the product is illegal.

Every casino we rate passes these checks. See the full list of reviews or how we score legal standing.