Consumer evidence guide · 2026-09-06
How to Check and Report a Cloned Casino Domain
Review date: 6 September 2026. Editorially prepared for Casino Fact Check UK. This guide covers suspected cloned or unlicensed casino domains affecting people in Great Britain. It does not silently extend the Gambling Commission regime to Northern Ireland.
What a cloned casino domain means
A cloned casino domain may imitate a recognised gambling brand, copy its colours or wording, or use a lookalike address. Those features are warning signs, not proof of fraud. A similar name can also result from a separate business, a typo, a changed domain, or incomplete information. Do not call a domain fraudulent or a scam solely because its appearance is familiar or its address looks unusual.
The key question is whether the exact host you encountered is connected to the legal entity and domain recorded by the relevant regulator. The Gambling Commission’s business register exposes legal entities, licence status, domains, trading names and regulatory-action links. The register was recorded as updated on 5 September 2026 and checked here on 6 September 2026 (Gambling Commission business register, checked 6 September 2026).
How to tell if a casino domain is cloned
Compare the complete host, including the spelling before and after the final dot. A changed hyphen, extra word, substituted character, unfamiliar top-level domain, or redirect to a different host deserves caution. So do a mismatch between the brand name shown on the page and the legal entity or domain recorded in the register. These signals identify something to verify; they do not establish a finding.
| Signal to examine | Safe interpretation | What to record |
|---|---|---|
| One-character spelling difference | Possible lookalike address; not proof | Exact address and time seen |
| Brand and legal entity do not match | Needs register comparison | Trading name, entity and host |
| Unexpected redirect | Do not follow it to investigate | Original address and visible redirect details |
| Urgent payment or identity request | Potential risk signal | Message, date and payment instructions |
Do not enter credentials, upload identity documents, make a deposit or test a withdrawal merely to gather evidence. A screenshot, message or user report can preserve context, but it cannot by itself prove ownership, licensing or unlawful conduct.
Where to check an online casino domain
Start with the Gambling Commission’s public business register. Search the precise host and compare the listed legal entity, trading name and licence information. A brand search alone may be insufficient when several domains or trading names exist. The Commission also describes a method for identifying illegal gambling websites facing Great Britain and removing licensed sites from candidate results; that description explains regulatory work, but it is not a determination about every domain you may encounter (Gambling Commission illegal-online-gambling methodology, checked 6 September 2026).
| Comparison | Record | Limit |
|---|---|---|
| Exact domain | Copy the full host without altering it | A result does not prove that a lookalike host is connected |
| Legal entity | Note the registered business shown | A name match alone does not authenticate the page |
| Licence status | Note the status and relevant domain entry | Status can change; record the date checked |
| Regulatory links | Read any linked action information | Do not infer an outcome not stated in the record |
For a broader checking workflow, use licence checks and the UKGC licence-status guide. Those internal resources do not replace the current official register.
How to compare a suspicious host safely
- Stop using the suspicious address and do not revisit it to test a theory.
- Write down the exact host from the browser history, message or payment record, if safe to do so.
- Use a known official register address rather than a link supplied by the suspected domain.
- Compare domain, legal entity, trading name and licence status as separate fields.
- Save messages, receipts and account notices without opening unknown attachments.
- Record the date and time of each observation.
A register mismatch may be unresolved rather than conclusive. The available material does not verify any particular domain’s KYC process, payment handling, withdrawal performance, customer support or complaint outcome. No individual complaint, payment loss or investigative finding is established by this guide.
How to preserve URLs and payment evidence
Preserve the original URL, the message or advert that led to it, relevant emails, transaction references, dates, amounts and the payment method. Keep files in a safe location and avoid editing originals. If you make a copy for a report, label it as a copy. Do not publish personal data, card numbers, identity documents, passwords or recovery codes in a public post.
Do not click a suspicious link again simply to obtain a screenshot. The National Cyber Security Centre accepts reports of suspicious website URLs and advises people not to click a suspicious link (NCSC suspicious-website reporting guidance, checked 6 September 2026).
How to report an unlicensed casino in Great Britain
Use the Gambling Commission’s official reporting route for suspected illegal gambling. Give the exact host, how it was encountered, relevant dates, the register comparison and any safely preserved communications. Separate what you directly observed from what another person told you. Do not present a suspicion as a confirmed offence.
The Commission’s published methodology concerns identifying illegal GB-facing gambling websites and removing licensed sites from candidate results. It does not mean that an absence from a search, a visual resemblance or a user allegation is by itself a regulatory finding (Gambling Commission methodology, checked 6 September 2026).
Where to report suspicious links and possible fraud
The NCSC accepts reports of suspicious website URLs. Follow its current instructions and do not return to the suspicious address. If money, credentials or personal information may have been exposed, contact the relevant bank, card issuer or payment provider through an independently verified channel.
Citizens Advice explains how consumers in England can preserve scam details and route reports to the national fraud-reporting service (Citizens Advice reporting guidance, checked 6 September 2026). This route is described specifically for England; do not assume that the same reporting arrangements apply throughout the UK.
| Situation | Practical route | Information to retain |
|---|---|---|
| Possible illegal gambling | Gambling Commission reporting route | Exact host, register comparison and dates |
| Suspicious URL | NCSC reporting guidance | URL and message context, without reopening it |
| Possible payment or identity exposure | Bank, card issuer or payment provider | Transaction reference, date and amount |
| Consumer in England affected by suspected fraud | Citizens Advice guidance and its stated national route | Communications, payment records and chronology |
What not to infer from online reports
User reviews, social posts and review-platform entries can highlight questions for checking, but they are user-context material rather than proof of cloning, licensing or fraud. Operator-controlled statements are also distinct from an independent regulatory record. No user report, operator statement, screenshot, withdrawal test, KYC result, support exchange or complaint outcome has been verified for a named domain in this guide.
For reporting and correction context, see our methodology, scam warnings and contact corrections. The correction route is available for factual errors or newly dated primary records; it does not guarantee a particular editorial or regulatory outcome.
Answers to common questions
How can I tell if a casino domain is cloned?
Compare the exact host with the Gambling Commission register and check for spelling changes, unexpected redirects and mismatches between the displayed brand and recorded legal entity. These are warning signs requiring verification, not proof that a domain is cloned.
Where can I check an online casino domain?
Use the Gambling Commission’s public business register, comparing the exact domain, legal entity, trading name, licence status and any regulatory-action links. Record the date because register information can change.
How do I report an unlicensed casino in Great Britain?
Use the Gambling Commission’s official reporting route and provide the exact host, dates, register comparison and safely preserved communications. Describe suspicions as suspicions and distinguish direct observations from user reports.
Should I revisit a suspicious casino link?
No. The NCSC advises not to click a suspicious link. Preserve the address from a safe record such as browser history or a message, then use an independently verified official reporting route.
Who should I contact after paying a suspected scam site?
Contact your bank, card issuer or payment provider promptly through a verified channel, preserve transaction details and consider the relevant fraud-reporting route. Do not send further money or disclose additional credentials.
Evidence boundaries and attribution
Primary sources used here are the Gambling Commission, the National Cyber Security Centre and Citizens Advice, each dated above. They establish the recorded claims attributed to them, not a finding about a particular casino domain. The editorial team has not verified any domain-specific licence, legal entity, KYC process, payment, withdrawal, support interaction, complaint or fraud outcome. Signal: not assigned. That position could change only with current, domain-specific primary evidence or a properly documented official adverse record.
Editorial attribution: Casino Fact Check UK editorial desk. Corrections: contact corrections.