external image

Fraud Alert Bait and Switch like it was 2005

fraud alert

maxd

Forum & Complaints Team Lead
Staff member
Joined
Jan 20, 2004
Location
Pictland
We’re sorry to have to announce that there is a major scam in progress on the iGaming scene and players are being caught up in like little fishies in big, bad net.

to spoof, v.: to create a fake site using the name and/or branding of a well-known website, or a variation thereof, to pose as the real thing and scam players

The problem is that good casinos — or at least legitimate casinos — are being spoofed all over the place and there is not much being done to stop it.

Imagine that you are a player well familiar with MyBestCasino. That’s just a name I’ve made up but it will serve our purpose. Let’s say you receive an attractive Ad or promo or whatever for MyBest and it looks good! About time eh? Anyway you click on the link in the Ad and are taken to MyBest123.casino.

Hang on, “MyBest123.casino”? What’s this “123” stuff? These days we’ve become accustomed to redirects like this so most people wouldn’t give it a second thought and would proceed to login. Let’s call your login First Trap.

Ok, so you’ve logged in, maybe a few things look a little different at the casino but hey, sites get updated all the time so whatever, right?

You proceed with a deposit — Second Trap — and presumably all goes well enough and let’s say you are even lucky enough to score some winnings (Third Trap). Of course when you go to withdraw suddenly things start going wrong in a bad way: delays, excessive demands, maybe even “verification deposit” requests (Fourth Trap), and so on.

The bottom line is things are going off the rails here and you’re not happy. So let’s say you file a complaint at your favourite affiliate site :D and the answer you get back is that MyBest has no knowledge of your winnings and in fact you account has been cleaned out (Fifth Trap) so what are you even talking about?

The point we are making is that MyBest123 is a spoof site: they are stealing the good name of MyBest and using it to rip players off bigtime! MyBest123 is a pirate operation set up for the sole purpose of cheating existing players out of their login details (First Trap), their deposits (Second Trap), “winnings” (Third Trap), “verification deposits” (Fourth Trap), and maybe even clean out your account (Fifth Trap).

Some of these pirate sites go no further than harvesting login details, they don’t even attempt to act and behave like a functioning casino. They just throw up error pages, give BS excuses on Telegram, etc. All the while more players are trying to login in and they are hoovering those up too.

But maybe the pirates are in it for the big score and they do pretend to be a real casino, for a time. They might take those deposits but somehow the games are broken so no playing. Or they do have pirated games running and are happy to rake in as much cash as they can, but withdrawals? “Ooo, very difficult, no can do just now, so sorry”. Or, to get another stab in, maybe they ask for a nice fat “verification deposit” to help move things along.

The bottom line is that is Scam City from start to finish, they’ve laid out the bait and if the player falls for it it’s all gravy for the fraudsters.

There’s one last wrinkle here that is worth mentioning, it may sound a little far-fetched but in these days of anonymous everything on the internet you’re going to need some serious skills to find even a thread to follow on skullduggery like this: what if a low-level operator buys up MyBest and has the notion of running MyBest123 in parallel, but secretly of course. MyBest operates normally, MyBest123 is there to do the nasty to players, and MyBest denies any connection between them and their doppelgänger, MyBest123.

Do we have proof of this last bit of rogueness? Well, yes and no. First, it’s got to be said that if MyBest is actually up to this level of trickery then it’s not like they’re going to admit it, are they? What we have seen is a MyBest123 victim getting a response from a known MyBest executive regarding their account balance. Is that a smoking gun? Damn near, at least we think so. The excuse was “they must have an account both places” and utter silence on any further inquiries. Player said the account balance mentioned by the MyBest guy was very close to what was in their now inaccessible MyBest123 account but that’s where things went from murky to opaque as all casino interactions quickly dried up entirely. So you make your own call on this one, we know we have.

Regards,

Max Drayman
Forum & Complaints (PAB) Team Lead
sussexmskpartnershipeast.com

PS. After all that you may have asked yourself “so what do I do?” Simples: never, Never, NEVER follow random links that you’ve received off email, Telegram, Facebook, wherever unless you know and trust the source. Remember, you can always get the name of the offer, go directly to the legitimate site, get on chat and say “hey, what about this bonus?” and they’ll be able to set you right. If they insist that you follow the link you were given then screenshot that part of the chat and proceed, if you feel you must. That way you’ll at least have some proof that the legit site sent you off to wherever and you may — MAY — have what you need to shame them into doing the right thing if it comes to that.
 
Last edited by a moderator:
Yes, there's been a lot of these recently, piggy-backing or spoofing if you like, the names of legitimate casinos.

Remember, there's no limit to the deceit the scammers will indulge in.

Well, if this is all too depressing, there's always jack-a-mole.
 
… If it sounds too good to be true, it probably is. If you're in doubt, go directly to the website and ask support rather than clicking the link.
Given all the fakery and phishing that’s going on these days this needs to become everyone’s standard procedure. This one step alone would eliminate 90% of the cases of people getting ripped off.

- Max
 
But something does not make sense in this either.

Yes I get emails and text messages from dodgy casinos all the time and I never ever click them and I actually report and block the numbers for them but I get them daily. On Fridays I get the most amount of text messages from these fake casinos though.

But what I am unsure is when you stated in the OP that you "login" to one of those spoofed casinos? How can you login to a spoofed casino? How did that spoofed casino get your login details? That would have meant the original casino either sold that data or they had a data breach and our data got leaked? Or it was an employee of that casino who leaked it?

I just wanted you to clarify that for me because what you said and how you stated it was missing some important info that you probably should have said and explained in more detail?
 
A spoofed casino would probably login with any provided details, a little bit of data validation notwithstanding.
 
A spoofed casino would probably login with any provided details, a little bit of data validation notwithstanding.

Ok yeah now I understand.

So yeah they can spoof the login form to make it appear they logged in, then just show some sort of lobby page or profile page that looks very similar to the casino they are trying to replicate.

Then they can store what ever info you entered into that form to login or any other details you give them to deposit in the scam fake casino and bam they could then potentially even try login to your original casino account and get all your real personal details including your name and address and phone number and email etc.

Be aware everyone.
 
Norway has now passed legislation that requires internet providers to block domains for well-known casinos precisely to make it difficult - preferably impossible - for Norwegian players to play at foreign casinos.

It is therefore a completely logical and simple explanation for why casinoname.com takes the easiest solution to register casinoname1.com since the blocking rules in the network obviously seem to work on domain names.

It is of course possible for scammers like you are speculating about here to register casinoname-1257.com etc. that is for sure.

My strategy is always this:

Always visit the casino by typing directly into your browser: casinoname.com to be redirected to the current alternative domains. Then you at least know that you can trust being on the right domain without being scammed.

Stay away from Dama N.V. casinos, Hollycorn aswell I read, check the domain name with Claude or ChatGPT and the AI Chatbot will quickly root out the owner of the website. They have at least cheated me out of 10,000 NOK in winnings on 3 occasions all Dama N.V. last year so they are notorious scammers - organized and systematized... LEGAL!?! As a player there is very little you can do about it when they never manage to pay out and all the problems that ALWAYS arise... in the end, you do not get your money...

Stick to Malta registered casinos then you are safest, and by all means don't take too long to make a small withdrawal so you can test that they actually respect you as a customer... That's what's important here, we as players have to actually check who we play with... there are plenty of shady casino providers here...
 
Although I don't like casinos that operate on White Label and don't recommend anyone play at them, it's still important to understand that different casinos with a Dama NV license have different owners. Among Maltese casinos there are also plenty of scammers. Sometimes a casino with a Curacao license can be better than one with a Malta license, especially if you're not looking at major international brands.

Also, a player can do quite a lot both in Curacao and Malta, but it's very difficult. Perhaps the recent EU court ruling that allows cases to be heard in the country of residence rather than where the casino is licensed will help with this.
 


Write your reply...

Users who are viewing this thread

Accredited Casinos

Read about our rating system and how it's done.
Back
Top