Quick Answer
To check an online casino is genuine: verify its licence number directly on the regulator's own public register rather than trusting the badge shown on the site, look for independent game-fairness certification from a lab like eCOGRA or iTech Labs, search for a pattern of unpaid-withdrawal complaints rather than general negative reviews, confirm standard HTTPS security, test customer support with a real question before signing up, and start with a small deposit and an early test withdrawal. No single check is proof on its own, but a casino that passes all of them is very unlikely to be a scam.
There's no single test that proves an online casino is genuine, but stacking a handful of independent checks together gets you most of the way there. None of them require special tools or industry knowledge - just a few minutes before you hand over any payment details.
Start With the License - But Verify It Yourself
Every legitimate online casino operates under a licence from a gambling regulator, usually stated in the site's footer. The check most guides skip: don't stop at seeing a licence badge. Badges are just images - nothing stops a scam site from copying one off a legitimate operator's page. Instead, take the licence number and operator name you find and search the regulator's own website for its public licence register. Real regulators - Malta's MGA, the UK Gambling Commission, Gibraltar, and offshore bodies like Curaçao, Kahnawake, and Anjouan - all publish a searchable list of licensed operators. If the casino's name and licence number don't show up there, the badge on the page means nothing. Offshore licensing isn't itself a red flag - most casinos we review hold licences from Curaçao or similar bodies rather than the UKGC, which is normal for this kind of operator. What matters is whether the licence is real and checkable, not which jurisdiction issued it.
Look for Independent Game-Fairness Certification
A licence covers the business - who's allowed to operate and how disputes get handled. A separate signal covers the games themselves: independent testing labs like eCOGRA, iTech Labs, and GLI (Gaming Laboratories International) audit a casino's random number generator and issue certification when the games test as fair. This is a different check than reading reviews, and it's one most "is this casino legit" guides skip entirely. Look for a certification seal or a specific named lab, usually in the footer or a "fair play" page - and treat a vague claim of being "independently tested" with no lab named as no better than not being tested at all.
Search for Real Player Complaints, Not Just Star Ratings
A handful of negative reviews doesn't mean much on its own - even a well-run casino accumulates complaints from players who lost money and are frustrated about it, which is a normal part of gambling. What matters is the pattern. Search "[casino name] complaints" rather than just "[casino name] review", and look specifically for repeated reports of the same problem: withheld withdrawals, accounts closed right before a big win, or bonus terms enforced unevenly. A scattering of complaints about slow support or a disliked game library is normal noise; a consistent thread of unpaid winnings across multiple independent sources over time is the signal that actually matters.
Confirm the Security Basics
This one's quick: every legitimate casino runs on HTTPS, shown as a padlock icon next to the URL in your browser's address bar. Modern browsers already flag insecure, HTTP-only sites with an explicit warning, so this isn't something you need to hunt for - if your browser is warning you the connection isn't secure, that's reason enough to leave before entering any payment details. Beyond the padlock, check whether the casino offers two-factor authentication (2FA) and enforces a reasonably strong password on signup - both are signs an operator takes account security seriously rather than treating it as an afterthought.
Test Support Before You Deposit a Cent
Open live chat and ask a genuine, specific question before you sign up - something like a real question about withdrawal times for your preferred payment method, not a generic "hi". A legitimate casino answers with a specific, relevant response in a reasonable time; an illegitimate one either doesn't answer at all, takes hours, or replies with a templated message that doesn't actually address what you asked. This costs nothing and takes five minutes, and it's the single most revealing test on this list because it's the hardest thing for a scam operation to fake convincingly in real time.
Start Small and Test a Withdrawal Early
If everything above checks out, the last confirmation is a small real-money test: deposit a modest amount, play briefly, and request a withdrawal for whatever's left rather than waiting until you've built up a larger balance. A legitimate casino processes it within its stated timeframe, even if that's a few business days for a card withdrawal. A casino that stalls, adds unexpected verification hurdles, or simply doesn't pay out a small test withdrawal has told you everything you need to know before you've risked anything meaningful.
Red Flags That Mean Walk Away
No licence number anywhere on the site, or one that doesn't match anything on the regulator's public register. Overwhelmingly negative reviews concentrated on unpaid withdrawals rather than general complaints. No HTTPS padlock, or a browser security warning on the login or deposit page. Customer support that's unreachable, painfully slow, or answers with generic copy-paste replies. Bonus terms that are vague, hidden, or change after you've already opted in. And a stalled or refused withdrawal on even a small test amount - any one of these is worth pausing over; more than one is a reason to close the tab.
None of these checks is proof on its own - a casino could pass one and still fail the others. Run through all of them before you deposit anything meaningful, and you'll catch the vast majority of illegitimate operators before they cost you anything. If you'd rather skip the legwork, every casino in our rankings has already been checked against licensing, reputation, and payout history as part of how we rate them.