An online gaming site can look polished, display a PAGCOR logo, accept payments through a familiar e-wallet, and still be unlicensed or fraudulent. The safest way to check legitimacy is to verify the exact website address, brand, operator, and authorized game offering against PAGCOR’s current official records—not against screenshots, advertisements, influencer endorsements, or a “license certificate” sent by the site itself.

This guide explains how Philippine online gaming regulation works, how to perform a reliable license check, which red flags should stop you from depositing, and what to do if you have already sent money or cannot withdraw your balance.

What “Licensed and Legitimate” Means in the Philippines

A site is licensed when the proper Philippine government regulator has authorized a particular operator to offer specified gaming services under stated conditions.

That authorization is not automatically transferable to:

Another company using a similar name
A different website address
A mirror site or mobile app
A social media account
An agent, affiliate, or “VIP manager”
A game category not covered by the authority
An offshore operation claiming to serve players outside the Philippines

A site may be technically connected to a licensed brand but still have operational problems, such as unreasonable withdrawal delays, unclear bonus conditions, weak customer support, or mishandling of personal data. Conversely, a fraudulent site may copy the name, logo, layout, and licensing details of a real operator.

For this reason, legitimacy should be tested at two levels:

Regulatory legitimacy: Is the exact operator, brand, domain, and game offering officially authorized?
Operational legitimacy: Does the platform clearly identify itself, protect player information, process transactions according to disclosed terms, and provide a functioning complaint procedure?

The first question is the most important. A site that fails the regulatory check should not receive your money or identification documents.

Philippine Legal Framework for Online Gaming

PAGCOR’s licensing authority

The Philippine Amusement and Gaming Corporation, commonly called PAGCOR, derives its authority from Presidential Decree No. 1869, as amended by Republic Act No. 9487 of 2007. Its charter authorizes it to operate and license casinos, gaming clubs, gaming pools, and similar gaming activities within Philippine territorial jurisdiction, subject to exceptions created by other franchises or special laws. (Lawphil)

For locally authorized electronic gaming, PAGCOR’s regulatory functions cover activities such as:

Electronic casino games
Sports betting
Online poker
Electronic bingo
Traditional bingo offered through authorized systems
Numeric and specialty games
Online platforms operated in connection with authorized gaming businesses

PAGCOR publishes information about these activities through its Electronic Gaming Licensing Department. (PAGCOR)

A business registration from the Securities and Exchange Commission, Department of Trade and Industry, Bureau of Internal Revenue, or a local government unit does not replace a gaming license. These registrations may show that a company or business name exists, but they do not prove that it is authorized to accept bets.

What makes gambling “illegal”

Under Executive Order No. 13 of 2017, illegal gambling generally includes a wagering activity that:

Has not been authorized or licensed by the government agency legally empowered to regulate it; or
Is conducted outside the territory, conditions, game offering, or authority granted by the regulator.

The Supreme Court has likewise emphasized that the absence of the required government authorization—or operating contrary to the terms imposed by the proper regulator—is central to determining whether a gambling activity is illegal. (Lawphil)

This is why a real license held by one operator does not validate every website that uses the operator’s name.

The POGO ban does not mean every Philippine online gaming site is illegal

A common source of confusion is the nationwide ban on Philippine Offshore Gaming Operators, or POGOs.

Executive Order No. 74 ordered the cessation of offshore gaming operations by December 31, 2024. Congress later enacted the Anti-POGO Act of 2025, Republic Act No. 12312, which permanently prohibited offshore gaming conducted from the Philippines for players located abroad. It also revoked previous offshore gaming licenses and removed the authority of government agencies to issue new ones. (Lawphil)

Therefore, a website claiming in 2026 that it is legal because it holds an old “POGO,” “IGL,” or Philippine offshore gaming license should be treated as a serious red flag.

However, the Anti-POGO Act did not abolish every form of locally regulated online gaming. PAGCOR continues to publish a list of authorized domestic brands and domains. The crucial question is whether the exact platform appears in PAGCOR’s current official records.

How to Check if an Online Gaming Site Is Licensed

1. Begin with PAGCOR’s own verification website

Go directly to PAGCOR Guarantee, PAGCOR’s public verification platform for authorized online gaming sites.

PAGCOR launched this service in June 2025 so that players could check licensed platforms before registering, depositing, or placing a bet. The page organizes authorized sites by gaming category and provides links intended to lead users to the legitimate domains. PAGCOR states that the information is updated to help the public distinguish authorized operators from illegal sites. (PAGCOR)

The safest procedure is:

Type the PAGCOR Guarantee address yourself or use a trusted bookmark.
Find the gaming brand on the official page.
Use the link provided by PAGCOR.
Compare the resulting address with the site you were originally planning to use.

Do not rely on a search advertisement. Fraudsters may buy sponsored results or create pages that closely resemble the real website.

2. Match the exact domain—not merely the brand name

PAGCOR also publishes a detailed list of accredited gaming system administrators, registered brands, and domain names.

The latest official list located when this article was prepared was dated June 30, 2026. It identifies, among other details:

The accredited gaming system administrator
The authorized game offering
The main brand
Root or sub-brands
The main domain
Approved subdomains or additional URLs
Offerings that have not yet begun commercial operations

Because PAGCOR can add, remove, suspend, or amend entries, always open the current document instead of relying on an old screenshot or downloaded copy.

Compare every character in the website address.

Address shown in your browser	What it actually belongs to
`login.brand.com.ph`	`brand.com.ph`
`sports.brand.com`	`brand.com`
`brand.ph.secure-login.com`	`secure-login.com`, not `brand.ph`
`brand-promo.net`	A separate domain that requires its own verification
`xn--...`	An internationalized domain that may disguise lookalike characters

Watch for:

Added hyphens or numbers
Misspellings
Extra words such as “official,” “vip,” “secure,” or “ph”
Different domain endings
Links shortened through URL-shortening services
A redirect to a domain not listed by PAGCOR
Unsolicited Android application files or APKs
Domains containing visually deceptive characters

A brand match without a domain match is not enough.

3. Confirm that the particular game is authorized

A platform may be authorized for one type of gaming but not another. Check whether PAGCOR’s list identifies the relevant offering, such as:

E-casino
Sports betting
Online poker
Electronic bingo
Numeric games
Specialty games

If the list marks an offering with an asterisk or states that commercial operations have not yet begun, do not assume that the operator may already accept deposits for it. The authority should cover the game you intend to play and should already be operational.

4. Check who is actually receiving your money

Before sending funds, compare the payment details with the operator’s disclosed identity.

A legitimate platform should not routinely instruct players to deposit into constantly changing personal accounts belonging to unrelated individuals. Be cautious when payments are directed to:

A personal bank account with no clear connection to the operator
Different e-wallet holders for every transaction
A cryptocurrency wallet provided only through private chat
An account described as a “cashier,” “handler,” or “VIP agent”
A QR code that hides the recipient’s identity
An account whose name does not match any disclosed company, payment processor, or accredited partner

Payment through a well-known bank or e-wallet does not prove that the gaming site is legal. Fraudsters also use legitimate financial services.

5. Inspect the operator information and legal notices

Look for clear, consistent information about:

The legal operator or licensee
Customer service channels
Terms and conditions
Deposit and withdrawal rules
Bonus and rollover requirements
Privacy and data-processing practices
Account suspension procedures
Complaint escalation
Responsible gaming controls

Compare the legal name shown in the terms with the operator information in PAGCOR’s records. A footer that merely says “PAGCOR licensed” without naming the licensee is weak evidence.

PAGCOR has previously warned that illegal operators used its logo and fabricated certificates to create an appearance of legitimacy. A logo, seal, certificate image, or claimed license number should always be independently verified through PAGCOR’s own website. (PAGCOR)

6. Check age, identity, and responsible gaming controls

Persons below 21 years old are prohibited from playing in PAGCOR-regulated gaming establishments and platforms. Other restricted persons include certain government personnel, members of the Armed Forces of the Philippines and Philippine National Police, persons included in the National Database of Restricted Persons, and holders of Gaming Employment Licenses. (PAGCOR)

A regulated site should ordinarily have procedures for:

Verifying the player’s identity and age
Preventing duplicate or prohibited accounts
Setting responsible gaming limits
Handling self-exclusion or family-exclusion requests
Responding to player complaints
Detecting suspicious transactions

PAGCOR permits self-exclusion periods of six months, one year, or five years. A spouse, parent, or adult child may also apply for family exclusion under applicable requirements. (PAGCOR)

KYC, or “know your customer,” verification is not proof by itself that a site is legitimate. Fake sites may collect passports, selfies, and identification cards for identity theft. Verify the domain before uploading sensitive documents.

7. Do not mistake technical features for a gaming license

The following may be useful security signals, but none proves regulatory authority:

Feature	What it really proves
HTTPS padlock	The connection is encrypted; it does not prove that the operator is licensed
Mobile app-store listing	The app passed some platform requirements, not Philippine gaming authorization
SEC or DTI registration	A business or company exists; it does not authorize gambling
Mayor’s permit	The business has a local permit for stated activities; it does not replace PAGCOR authority
PAGCOR logo	The image can be copied
High social media following	Followers and engagement can be purchased or manipulated
Celebrity endorsement	The endorsement may be paid, false, outdated, or unauthorized
Positive online reviews	Reviews may be fabricated or posted by affiliates
E-wallet payment option	The payment service exists; it does not validate the gaming site

In August 2025, the Bangko Sentral ng Pilipinas directed supervised financial institutions to remove in-app links providing direct access to online gambling platforms while it developed further safeguards. Therefore, the presence or absence of an e-wallet shortcut is not a reliable license test. (Bureau of the Treasury)

8. Apply a simple stop-or-proceed test

Do not deposit unless you can answer yes to all of these questions:

Is the exact brand shown in PAGCOR’s current official records?
Is the exact domain or URL listed or directly linked by PAGCOR?
Is the particular game offering authorized and already operational?
Does the operator identity match the official record?
Are the deposit and withdrawal rules clearly disclosed?
Is there a functioning customer service and complaint channel?
Does the site perform appropriate age and identity verification?
Are payment instructions consistent and traceable?

One unexplained mismatch is enough reason to stop and verify directly with PAGCOR.

Warning Signs of an Illegal or Fake Gaming Site

Common red flags include:

“Guaranteed” winnings or fixed daily returns
A demand to pay tax, insurance, clearance, verification, or unlocking fees before withdrawal
Repeated requests for additional deposits after a withdrawal request
A balance that increases dramatically but cannot be withdrawn
Pressure to act immediately because a “promo” is expiring
Customer support available only through Telegram, Messenger, WhatsApp, or Viber
An agent who asks you to surrender your account password or one-time PIN
A website that changes domains frequently
An app distributed only through a private APK link
A claimed POGO or offshore gaming license issued before the current ban
A foreign license presented as if it were automatically valid in the Philippines
Terms allowing the operator to confiscate funds for vague reasons
No legal operator name or physical contact information
A PAGCOR certificate that cannot be verified through an official PAGCOR source
Payments directed to multiple unrelated personal accounts
Requests to recruit other players in exchange for commissions or “investment” returns

A particularly common scam involves showing a large account balance and then requiring the player to pay a “withdrawal tax.” Legitimate Philippine taxes are not normally collected by sending money to a random personal account identified by a chat agent.

Records to Save Before Depositing

Save evidence while the site is still accessible. Web pages, chat histories, accounts, and transaction records may disappear once a complaint is made.

Record	What to preserve
Website information	Full URL, homepage, operator name, license claim, terms, privacy notice
Account information	Username, player ID, registration email, verified phone number
Deposits	Date, amount, bank or e-wallet, transaction reference, recipient name and account
Withdrawals	Request date, amount, status, rejection reason, promised processing time
Communications	Emails, texts, chat logs, agent names, phone numbers, social media profiles
Promotions	Bonus terms, turnover requirements, screenshots of representations
Identification submitted	Type of ID, date uploaded, recipient or upload page
Technical evidence	App name, APK file, browser history, device details, redirect addresses
Complaints	Ticket numbers, customer service replies, dates and times

Take full-page screenshots showing the address bar when possible. Retain original files and emails instead of saving only edited images. Do not crop out timestamps, usernames, transaction references, or recipient details.

What to Do if You Already Paid or Cannot Withdraw

1. Stop sending additional money

Do not pay another “verification fee,” “tax,” “AML clearance,” “account upgrade,” or “withdrawal bond.” Fraudulent platforms often invent a new charge each time the victim complies.

Change passwords immediately if you reused the same password elsewhere. Contact your bank or e-wallet if you disclosed an OTP, PIN, card number, security code, or account credentials.

2. Contact the bank or e-wallet immediately

Report the transaction through the institution’s official fraud channel. Ask for:

A fraud or disputed-transaction case number
Possible suspension, tracing, or recall of the transfer
Preservation of recipient-account records
Blocking or replacement of compromised credentials
Written confirmation of your report

Under the Anti-Financial Account Scamming Act and its implementing rules, covered institutions may temporarily hold disputed funds during coordinated verification. The initial hold may last up to five calendar days and may be extended for up to 25 additional days under applicable conditions. The account owner should report the disputed transaction without delay. (Bureau of the Treasury)

A voluntary deposit does not automatically qualify for a hold or reimbursement. The institution will examine whether there was deception, unauthorized access, account misuse, or another covered circumstance. Speed still matters because funds can be transferred through several accounts within minutes.

3. Make a written complaint to the operator

If the site appears on PAGCOR’s authorized list, submit a formal complaint through the operator’s published channel. Include:

Your complete name and verified account details
A chronological description of events
Deposit and withdrawal references
The exact amount disputed
Copies of relevant terms or bonus conditions
The specific resolution requested
A reasonable deadline for a written response

Keep the complaint factual. Do not threaten employees or send altered evidence.

4. Verify and report the platform to PAGCOR

Use the contact details of PAGCOR’s Electronic Gaming Licensing Department to ask whether the domain and offering are authorized or to report a suspected illegal or cloned site. PAGCOR’s official contact page lists its regulatory offices and telephone channels. (PAGCOR)

Provide the exact URL—not merely the brand name. Include screenshots of the license claim, payment instructions, communications, and any differences between the suspicious site and PAGCOR’s official listing.

5. Report suspected cybercrime

A fake gaming platform may involve estafa, identity theft, computer-related fraud, unauthorized access, or other offenses depending on how the scheme was carried out. Relevant cyber-enabled offenses may fall under the Revised Penal Code and Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Reports may be submitted through:

The NBI Cybercrime Division
The PNP Anti-Cybercrime Group eComplaint service
The Cybercrime Investigation and Coordinating Center reporting channel or hotline 1326
The Department of Justice Office of Cybercrime

The NBI Cybercrime Division’s Citizen’s Charter states that complaint intake is available to the general public without a filing fee. The initial filing and interview may take around one hour, although the investigation itself can take much longer. Complainants may be asked to execute a sworn statement or submit an affidavit, supporting documents, and relevant devices for examination. (National Bureau of Investigation)

Bring both printed and electronic copies where practical. Keep duplicate copies of everything you surrender.

6. Escalate unresolved financial-service complaints to the BSP

First use the bank or e-wallet’s formal complaint mechanism. If the institution does not respond adequately, escalate through the BSP Consumer Assistance Mechanism.

The BSP generally requires proof that you first raised the issue with the supervised financial institution. Submit the case reference, institution’s response, transaction records, identification, and a concise explanation of the unresolved issue. (Bureau of the Treasury)

Possible Legal Remedies

The available remedy depends on whether the platform is licensed, whether the transaction was authorized, how the site represented itself, and where the operator and recipients are located.

Possible courses of action include:

A regulatory complaint against a licensed operator
A bank or e-wallet dispute
A cybercrime or estafa complaint
A civil claim for damages or recovery
Preservation or freezing measures involving traceable funds
A complaint concerning misuse of personal data
Coordinated action against payment accounts used by an illegal operation

Articles 2013 to 2017 of the Civil Code of the Philippines contain special rules concerning games of chance. Article 2014 addresses recovery of gambling losses and limits an action to collect winnings, while Article 2015 addresses cheating or deceit. These provisions can be legally complex when applied to modern regulated gaming, electronic transactions, illegal platforms, and fraud. They should not be treated as an automatic guarantee that every lost deposit or displayed winning balance can be recovered. (Lawphil)

In practice, the most useful first steps are usually to preserve evidence, report the financial transaction immediately, determine whether the exact domain is authorized, and identify the real recipients of the funds.

Special Considerations for Foreigners and Filipinos Abroad

A foreign license is not automatically valid in the Philippines

A site may claim authorization from another country or offshore jurisdiction. That license may be relevant in the issuing jurisdiction, but it does not by itself authorize the operator to accept Philippine-facing bets or conduct gaming activities from the Philippines.

Check whether PAGCOR separately recognizes the exact Philippine-facing domain and offering. Do not accept statements such as “international license,” “globally regulated,” or “licensed overseas” as a substitute.

Foreigners playing while in the Philippines

Foreign players physically present in the Philippines should use the same PAGCOR verification process. The operator may require a passport, local address, visa or residency information, proof of payment ownership, and enhanced identity checks.

Before uploading a foreign passport or residence document, confirm that the domain is the one officially listed by PAGCOR.

Filipinos located abroad

A Filipino abroad should also check the gaming laws and regulator of the country or territory where the person is physically located. PAGCOR authorization concerns Philippine regulation; it does not guarantee that participation is lawful in another jurisdiction.

The fact that a website accepts registration or bypasses geographic restrictions does not establish legality.

Frequently Asked Questions

How do I check whether an online casino is PAGCOR licensed?

Search for the brand through PAGCOR Guarantee and compare the exact domain with PAGCOR’s current list of registered brands and URLs. Enter the site through the official PAGCOR link whenever possible.

Is a PAGCOR logo enough to prove that a website is legitimate?

No. Logos and certificate images can be copied. PAGCOR has warned the public about illegal sites using its logo and fabricated licensing documents. Verify the domain independently through PAGCOR’s official records.

Are all online casinos illegal after the POGO ban?

No. The ban applies to Philippine offshore gaming operations conducted for offshore players. PAGCOR continues to identify authorized domestic online gaming brands and domains. An old POGO or IGL license, however, is no longer valid authority for an offshore operation.

Is an online gaming site legal if it has an SEC registration?

Not necessarily. SEC registration establishes the existence of a corporation or partnership. It does not give the entity authority to operate an online casino, sportsbook, poker platform, or similar gaming service.

Is a site legitimate because it accepts GCash, Maya, or bank transfers?

No. Payment access does not prove gaming authorization. Check the exact domain through PAGCOR and verify the identity of the recipient before transferring funds.

What should I do if the brand is listed but the domain is different?

Do not deposit. The site may be an unauthorized mirror, affiliate, or clone. Use only the domain linked or listed by PAGCOR, or verify the different address directly with PAGCOR’s Electronic Gaming Licensing Department.

Can a licensed site still delay or reject a withdrawal?

Yes. A license does not mean every withdrawal dispute will automatically be resolved in the player’s favor. The operator may apply identity, anti-fraud, bonus, or account rules. Those rules should be clearly disclosed and fairly applied. File a written complaint and preserve the terms that were in effect when you deposited.

Can I recover money sent to a fake gaming site?

Recovery is possible in some cases but is never guaranteed. Contact the bank or e-wallet immediately, request tracing or a hold where available, preserve all evidence, and report the matter to PAGCOR and the appropriate cybercrime agency.

What is the minimum age for PAGCOR-regulated online gaming?

The minimum age is 21. A platform that knowingly allows minors to register, deposit, or play is not following PAGCOR’s responsible gaming requirements.

Should I pay a tax or fee before winnings can be released?

Do not send money merely because a chat agent claims that a tax, AML fee, insurance fee, or account-unlocking charge is required. Ask for the contractual and legal basis, verify the demand through the operator’s official complaint channel, and confirm that the site itself is authorized. Repeated advance-fee demands are a common fraud pattern.

Key Takeaways

Verify the site through PAGCOR Guarantee before registering, depositing, or uploading identification.
Match the exact brand, operator, domain, and game offering against PAGCOR’s current records.
A PAGCOR logo, SEC registration, e-wallet option, app-store listing, or celebrity endorsement is not proof of a gaming license.
Old POGO or IGL licenses do not authorize offshore gaming operations in 2026.
Do not deposit when the site redirects to an unlisted domain or uses unrelated personal payment accounts.
Preserve URLs, screenshots, transaction records, chats, account details, and withdrawal requests.
If money has already been sent, contact the bank or e-wallet immediately and obtain a formal case reference.
Report suspected illegal sites to PAGCOR and suspected fraud to the NBI, PNP Anti-Cybercrime Group, CICC, or DOJ Office of Cybercrime.
Never pay repeated “tax,” “verification,” or “unlocking” fees merely to obtain a promised withdrawal.