Abstract

Reporting an online casino app in the Philippines depends on the nature of the violation. If the app is unlicensed, falsely claims to be licensed by PAGCOR, refuses withdrawals, uses fake payment channels, solicits minors, promotes gambling through influencers, collects identity documents suspiciously, or operates as part of a scam network, the report may be made to several authorities at once: PAGCOR for regulatory action, PNP Anti-Cybercrime Group or NBI Cybercrime Division for criminal investigation, CICC for cybercrime coordination and online scam reporting, the bank or e-wallet provider for payment tracing or freezing, and the app store or social media platform for takedown.

The most important first step is to preserve evidence before the app, page, chat group, payment account, or website disappears. Screenshots, screen recordings, transaction receipts, app links, usernames, wallet addresses, bank accounts, advertisements, chat logs, and withdrawal-denial messages are often more valuable than a general complaint.

In the Philippines, gambling is generally prohibited unless authorized by law. Online casino operations offered to persons in the Philippines must be properly licensed or authorized by the relevant Philippine regulator. PAGCOR has warned the public against illegal online betting operations and has stated that participation in unauthorized gaming activities is punishable by law. (PAGCOR)

I. Introduction

Online casino apps have become common in the Philippines. Some are lawfully licensed and regulated. Others are illegal, fraudulent, misleading, or connected to scams. A suspicious online casino app may appear on Google Play, the Apple App Store, a direct APK download link, Facebook, Telegram, TikTok, Messenger, Viber, WhatsApp, a website, or a private invitation link.

The problem is not limited to gambling. Many illegal online casino apps are also connected to:

identity theft;
e-wallet fraud;
unauthorized withdrawals;
fake “VIP” deposits;
refusal to pay winnings;
illegal lending or debt harassment;
money laundering;
cybercrime;
human trafficking-linked scam hubs;
influencer-led illegal promotion;
phishing;
malware;
fake customer support;
fake PAGCOR accreditation.

PAGCOR launched a verification platform intended to help users identify whether online gaming sites are duly licensed before playing or making payments, and the platform hosts a regularly updated list of PAGCOR-licensed internet gaming platforms. (Philippine News Agency)

II. Basic Legal Rule: Online Casino Apps Must Be Authorized

The basic Philippine rule is that gambling is not freely allowed as an ordinary business. It must be authorized, licensed, and regulated.

An online casino app may be reportable if it:

accepts bets from persons in the Philippines without proper authority;
falsely claims to be licensed by PAGCOR;
uses the PAGCOR logo or fake license certificates;
refuses to pay legitimate withdrawals;
manipulates games or balances;
uses minors or allows minors to gamble;
encourages gambling through misleading advertisements;
uses influencers or agents to promote illegal betting;
receives payments through personal bank or e-wallet accounts;
collects identity documents for suspicious purposes;
uses phishing links or malware;
impersonates legitimate platforms;
operates through a scam hub or foreign syndicate.

PAGCOR has publicly warned against websites using its logo and fabricated license certificates to mislead the public into believing they are licensed or accredited. (PAGCOR)

III. Licensed Online Gaming vs. Illegal Online Casino App

A lawful online gaming operator should be verifiable through official regulatory channels. It should have a clear legal entity, authorized platform, official payment channels, responsible gaming safeguards, and compliance with Philippine rules.

An illegal online casino app often has one or more of the following:

no verifiable PAGCOR listing;
fake PAGCOR seal;
copied license certificate;
foreign “license” but no Philippine authority;
no registered Philippine entity;
anonymous operators;
payment to personal GCash, Maya, bank, or crypto accounts;
constantly changing domains;
APK download outside official stores;
withdrawal blocked unless more money is deposited;
“tax,” “unlock,” “verification,” or “anti-money laundering fee” demanded before withdrawal;
customer support only through Telegram or Messenger;
aggressive recruitment bonuses;
influencer codes or referral links;
promises of guaranteed winning strategies.

The fact that an app is downloadable from an app store does not automatically mean it is lawful in the Philippines.

IV. Why Reporting Matters

Reporting an illegal online casino app may help:

trigger regulatory verification;
preserve digital evidence;
support takedown requests;
help law enforcement trace payment accounts;
protect other users;
support refund or dispute requests;
identify criminal syndicates;
stop influencer or affiliate promotion;
prevent minors from accessing gambling;
expose fake PAGCOR claims.

Illegal online gambling can also be linked to broader cybercrime activity. Philippine authorities have raided suspected online gambling and scam hubs, including operations allegedly involving illegal online gaming, cryptocurrency schemes, romance scams, and investment scams. (AP News)

V. First Step: Preserve Evidence Before Reporting

Before filing any report, preserve evidence. Do not rely on memory. Online casino apps and websites can disappear quickly.

A. Evidence to Capture

Save the following:

App name;
App icon;
App store link;
Package name or developer name;
Website URL;
APK download link;
Telegram, Messenger, WhatsApp, Viber, or Discord group links;
Username or account ID used in the casino app;
Player ID or referral code;
Screenshots of deposit instructions;
Screenshots of withdrawal attempts;
Screenshots of blocked withdrawals;
Screenshots of fake “tax,” “unlock,” or “verification fee” demands;
Customer service chat logs;
Advertisements;
Influencer videos or posts;
Referral links;
Bank account numbers;
GCash, Maya, GrabPay, ShopeePay, or other wallet numbers;
Crypto wallet addresses;
Transaction receipts;
Emails;
SMS or OTP messages;
Any fake license or PAGCOR certificate shown.

B. Use Screen Recording

If possible, record a screen video showing:

opening the app;
account username;
wallet balance;
deposit history;
withdrawal history;
denial messages;
customer support conversation;
license claim;
payment instructions.

C. Do Not Deposit More Money to “Test” the App

Do not send more funds just to prove the scam. If the app says you must pay taxes, verification fees, AML fees, VIP upgrade fees, or withdrawal unlocking fees before release, treat that as a serious red flag.

VI. Where to Report an Online Casino App

A report may be filed with several offices depending on the issue. In serious cases, parallel reporting is usually best.

A. Report to PAGCOR

Report to PAGCOR when the issue concerns:

unlicensed online casino operations;
fake PAGCOR license;
unauthorized use of PAGCOR logo;
suspicious online gaming website;
refusal to pay winnings by an unregulated operator;
illegal online betting directed at Philippine users;
misleading claim of PAGCOR accreditation.

PAGCOR is the principal gaming regulator. It has warned that unauthorized gaming activities are punishable and has warned against fake online gaming sites using the PAGCOR name or logo. (PAGCOR)

What to Include in a PAGCOR Report

Include:

app name;
website or app link;
screenshots of the app;
screenshots of claimed PAGCOR license;
payment account details;
proof of deposits;
proof of withdrawal denial;
chat logs;
advertisements;
influencer or affiliate links;
your contact details;
short narrative of what happened.

Purpose of PAGCOR Reporting

A PAGCOR report may help determine whether the app is licensed, whether it is falsely using PAGCOR credentials, and whether regulatory or blocking action should be taken.

B. Report to the PNP Anti-Cybercrime Group

Report to the PNP Anti-Cybercrime Group when the online casino app involves cybercrime, fraud, identity theft, phishing, hacking, harassment, illegal online solicitation, or digital payment fraud.

Cybercrime reporting in the Philippines is available through law-enforcement agencies, including the PNP Anti-Cybercrime Group. A cybersecurity reporting reference also cautions users to verify that they are dealing with legitimate law-enforcement channels using official .gov.ph domains. (CyberSecurity.PH)

When PNP-ACG Is Especially Relevant

PNP-ACG is especially relevant if:

you lost money;
the app refuses withdrawal and demands more deposits;
the app stole your identity documents;
your account was hacked;
the app used phishing links;
someone used your bank or e-wallet account;
agents threatened or harassed you;
the app is promoted through fake social media accounts;
minors are targeted;
the app is part of a broader online scam.

C. Report to the NBI Cybercrime Division

The NBI Cybercrime Division may receive complaints involving online fraud, cybercrime, illegal gambling-linked scams, impersonation, identity theft, and syndicate activity.

NBI reporting is particularly useful where:

large amounts are involved;
multiple victims exist;
the operators are organized;
there are foreign links;
there are fake documents;
there are bank accounts, e-wallets, or crypto wallets to trace;
you need a formal complaint for possible prosecution.

D. Report to CICC

The Cybercrime Investigation and Coordinating Center, or CICC, is relevant for cyber-enabled scams and coordination among agencies. Public cybercrime reporting references list CICC as a cybercrime reporting channel and Scam Watch Pilipinas as a reporting route linked to the Inter-Agency Response Center. (CyberSecurity.PH)

CICC may be appropriate where the online casino app involves:

online scam activity;
fraudulent gambling app;
phishing;
impersonation;
fake app download links;
social media-based cyber fraud;
coordinated online promotion of illegal gambling.

E. Report to Your Bank or E-Wallet Provider

If you deposited money through a bank, GCash, Maya, or other payment channel, report immediately to the financial institution.

Ask for:

transaction tracing;
fraud report;
temporary freeze or hold if possible;
reversal or dispute process, if available;
preservation of account records;
official acknowledgment of complaint.

Banks and e-wallet providers may not always reverse gambling-related transactions, but early reporting may help preserve evidence or flag suspicious accounts.

Information to Give the Bank or E-Wallet

Provide:

transaction date and time;
amount;
reference number;
recipient name;
recipient account or wallet number;
screenshots of the app’s payment instructions;
proof that the transaction was induced by fraud;
police/NBI/CICC/PAGCOR report number, if already available.

F. Report to Google Play

If the app is on Google Play, report it directly through Google Play. Google’s own help page states that users can flag apps and report apps for illegal content or policy violations; the Play Store steps include opening the app page, tapping “More,” choosing “Flag as inappropriate,” selecting a reason, and submitting. (Google Help)

Report the app if it:

is illegal in the Philippines;
falsely claims licensing;
enables unauthorized gambling;
commits fraud;
manipulates reviews;
collects data deceptively;
uses misleading payment claims.

G. Report to Apple App Store

If the app is on the Apple App Store, use Apple’s “Report a Problem” link or the reporting option on the app page. Apple has stated that App Store product pages display a “Report a Problem” link so users can report concerns with content they purchased or downloaded. (Apple Developer)

Include the same evidence: app name, developer name, country availability, screenshots, payment proof, and explanation that the app appears to offer illegal or unauthorized online gambling to Philippine users.

H. Report to Social Media Platforms

If the app is promoted on Facebook, TikTok, YouTube, Instagram, X, Telegram, or messaging groups, report the posts, pages, ads, and accounts.

Report:

influencer posts;
affiliate codes;
referral links;
livestream gambling promotions;
“how to deposit” tutorials;
fake testimonial videos;
fake PAGCOR licensing posts;
groups recruiting players.

Platform reports help reduce exposure even before government action is completed.

I. Report to the National Privacy Commission if Personal Data Was Misused

If the app collected or exposed your personal data, ID photos, selfies, bank details, or biometric information, and you suspect misuse, identity theft, or data breach, consider a privacy complaint.

This is especially relevant if:

you uploaded a passport, driver’s license, national ID, or selfie;
the app used your identity for other accounts;
you received suspicious loan, SIM, or e-wallet activity after registering;
your personal information was posted, sold, leaked, or used for threats.

VII. Step-by-Step Procedure for Reporting

Step 1: Stop Using the App

Do not continue playing. Do not deposit more money. Do not pay “unlock” fees. Do not give more identity documents.

Step 2: Secure Your Accounts

Immediately:

change app password;
change email password;
change e-wallet PIN;
change online banking password;
enable two-factor authentication;
revoke linked cards if possible;
contact bank or e-wallet if card or wallet details were exposed.

Step 3: Preserve Evidence

Take screenshots and screen recordings before uninstalling the app.

Step 4: Verify Whether the App Is Licensed

Check whether the app or website appears on official licensed platform lists or PAGCOR verification channels. PAGCOR’s verification initiative was created to help players identify licensed internet gaming platforms before making payments. (Philippine News Agency)

If the app is not verifiable, treat it as suspicious.

Step 5: File a Regulatory Report With PAGCOR

Send the evidence and ask whether the app is licensed.

Step 6: File a Cybercrime Report

If fraud, hacking, phishing, identity theft, or refusal to release funds is involved, report to PNP-ACG, NBI Cybercrime Division, or CICC.

Step 7: Report Payment Accounts

Notify the bank, e-wallet, or crypto exchange used.

Step 8: Report the App Store Listing

Flag the app on Google Play or Apple App Store.

Step 9: Report Social Media Advertisements

Report pages, posts, videos, and influencers promoting the app.

Step 10: Consider a Complaint-Affidavit

If you lost money or suffered identity misuse, prepare a complaint-affidavit with evidence for law enforcement or prosecution.

VIII. What to Put in the Complaint

A clear complaint should include:

A. Personal Details of the Complainant

full name;
address;
contact number;
email;
government ID, if required by the receiving agency.

B. Details of the App

app name;
developer name;
app store link;
website URL;
APK link;
screenshots;
logo;
social media pages;
usernames of agents.

C. Timeline

State:

when you discovered the app;
who invited you;
when you registered;
when you deposited;
how much you deposited;
when you tried to withdraw;
what the app or agent said;
whether more money was demanded;
whether you were blocked.

D. Payment Details

Include:

amount;
date and time;
bank or e-wallet used;
reference number;
recipient account;
recipient name;
screenshots of receipts.

E. Misrepresentations

State whether the app claimed:

PAGCOR license;
guaranteed winnings;
government approval;
legal operation;
tax clearance requirement before withdrawal;
AML verification fee;
account unlocking fee;
VIP upgrade requirement.

F. Loss or Harm

State:

amount lost;
personal data submitted;
threats received;
accounts compromised;
emotional or financial impact;
whether others were victimized.

IX. Sample Complaint Narrative

A complaint may state:

I respectfully report an online casino app operating under the name [app name]. I discovered the app through [Facebook/TikTok/Messenger/referral link] on [date]. The app claimed to be licensed or authorized to operate in the Philippines. I registered using my mobile number and deposited ₱[amount] through [bank/e-wallet] to [recipient account/name] on [date and time].

After playing and attempting to withdraw my balance of ₱[amount], the app refused to release the funds and required me to pay an additional [tax/verification/unlock/VIP/AML] fee. Customer support also sent messages instructing me to deposit more money before withdrawal.

I attach screenshots of the app, transaction receipts, chat logs, withdrawal denial messages, payment accounts, and advertisements. I request verification of whether this app is authorized and investigation for possible illegal online gambling, fraud, cybercrime, and misuse of personal data.

X. Complaint-Affidavit Structure

For a formal criminal complaint, the affidavit may contain:

title and venue;
personal circumstances of complainant;
description of respondent, if known;
facts in chronological order;
specific representations made;
proof of deposits;
proof of refusal to release funds;
proof of threats or additional demands;
screenshots and attachments;
statement of damages;
request for investigation or prosecution;
jurat before a notary or authorized officer.

The affidavit should be factual. Avoid exaggeration. Attach organized evidence.

XI. Legal Bases Commonly Involved

Depending on the facts, an illegal online casino app may involve several legal issues.

A. Illegal Gambling

Operating or participating in unauthorized gambling may be punishable under Philippine law. PAGCOR has expressly advised the public that participation in unauthorized gaming activities is punishable. (PAGCOR)

B. Cybercrime

If the app uses computer systems, websites, mobile apps, fake accounts, phishing links, hacking, or digital fraud, cybercrime laws may be implicated.

C. Estafa or Swindling

If the operator deceived users into depositing money through false claims, fake licenses, manipulated balances, or fake withdrawal procedures, estafa may be considered.

D. Falsification

Fake licenses, fake PAGCOR certificates, fake receipts, fake business documents, or fake identity documents may involve falsification.

E. Data Privacy Violations

Misuse of IDs, selfies, phone numbers, bank details, or personal information may raise data privacy concerns.

F. Money Laundering

Illegal gambling proceeds and fraud proceeds may raise anti-money laundering concerns, especially where multiple accounts, e-wallets, crypto wallets, and foreign transfers are used.

G. Human Trafficking and Forced Scam Operations

Some illegal online gambling and scam operations have been connected to forced labor and trafficking. Philippine authorities have investigated and prosecuted cases involving online scam complexes disguised as gaming-related operations. (AP News)

XII. How to Check If the App Is Suspicious

Use this practical test.

A. Licensing Test

Ask:

Is the app listed as authorized by PAGCOR?
Is the exact domain listed, not merely a similar brand?
Does the license belong to the operator, not a copied certificate?
Does the app use a legitimate payment channel?

B. Payment Test

Suspicious signs include:

payment to personal account;
payment to changing names;
payment to unrelated e-wallet numbers;
payment through crypto only;
payment through “agents”;
payment through QR codes that change frequently.

C. Withdrawal Test

Red flags include:

withdrawal requires more deposit;
withdrawal requires “tax” paid to the app;
withdrawal requires AML fee;
withdrawal requires VIP upgrade;
withdrawal is delayed indefinitely;
customer support blocks the user;
balance is frozen after winning.

D. Identity Test

Red flags include:

excessive KYC documents;
unclear privacy policy;
request for front and back of ID plus selfie with ID;
request for bank card photos;
request for OTP;
request for remote access app;
request for SIM registration details.

E. Promotion Test

Red flags include:

influencer codes;
“guaranteed panalo” claims;
fake testimonials;
livestream betting;
minors in comment sections;
referral commissions;
“agent recruitment” model.

XIII. Fake PAGCOR License: What to Do

If the app displays a PAGCOR logo or certificate:

screenshot the page;
capture the full URL;
save the certificate image;
compare the exact operator name and domain with official verification sources;
report to PAGCOR;
report to the app store and social media platform;
include the false license claim in your cybercrime report.

PAGCOR has warned that fake offshore gaming websites use the PAGCOR logo and fabricated license certificates. (PAGCOR)

XIV. If the App Refuses to Pay Winnings

A common complaint is refusal to release withdrawals. PAGCOR noted that many complaints have been lodged against unregulated sites that refuse to pay winnings. (Philippine News Agency)

If this happens:

do not deposit additional fees;
screenshot the withdrawal request;
screenshot the denial reason;
screenshot any demand for additional payment;
preserve chat logs;
report to PAGCOR and cybercrime authorities;
notify your payment provider.

If the app is unlicensed, the issue is not merely a consumer dispute. It may be illegal gambling, cyber fraud, or both.

XV. If You Paid Through GCash, Maya, Bank Transfer, or Crypto

A. E-Wallet or Bank

Immediately report the transaction. Ask the provider to flag the recipient account and preserve records.

B. Credit or Debit Card

Contact the issuing bank. Ask about dispute, chargeback, card replacement, and fraud monitoring.

C. Crypto

Preserve:

wallet address;
transaction hash;
exchange name;
screenshots of instructions;
chat logs.

Crypto transfers are usually difficult to reverse, but evidence may help investigations.

XVI. If You Uploaded Your ID or Selfie

Take immediate protective steps:

change passwords;
enable two-factor authentication;
monitor e-wallets and bank accounts;
check for unauthorized loans or SIM activity;
report suspicious identity use;
consider filing a privacy complaint if data is misused;
keep screenshots of the app’s KYC request.

Illegal casino apps may collect identity documents for account takeover, mule accounts, SIM misuse, loan fraud, or future extortion.

XVII. If You Are Being Threatened or Harassed

Some illegal apps or agents threaten users who complain. Preserve the threats.

Report immediately if you receive:

threats of violence;
threats to post your ID;
threats to contact family;
threats to accuse you of illegal gambling unless you pay;
blackmail;
doxxing;
repeated abusive calls or messages.

This may involve cyber harassment, grave threats, unjust vexation, coercion, extortion, or data privacy violations depending on the facts.

XVIII. If a Minor Used the Online Casino App

If the app allows minors to register, deposit, or gamble, report this clearly.

Include:

age of the minor;
how the account was created;
whether age verification was absent;
deposits made;
advertisements targeting minors;
social media content appealing to minors.

This strengthens the public-interest aspect of the complaint.

XIX. Reporting Influencers and Affiliates

Influencers and affiliates may be reported if they promote unlicensed online casino apps, use referral codes, claim false legality, or encourage the public to gamble through illegal platforms.

Evidence should include:

video link;
screenshot;
date posted;
username;
referral code;
claims made;
link to the app;
comments showing recruitment.

Recent reporting indicates Philippine cybercrime authorities have referred influencers for possible prosecution over alleged promotion of unlicensed online gambling websites. (AGB)

XX. Reporting APKs and Direct Download Links

Illegal casino apps often avoid official app stores by distributing APK files.

Report:

the website hosting the APK;
QR code;
shortened URL;
Telegram file;
Facebook post;
influencer link;
malware behavior if any.

Do not install APKs from unknown sources. If already installed, consider scanning the device, changing passwords, and removing permissions.

XXI. Reporting Domain Names and Websites

If the app operates through a website, save:

exact URL;
domain name;
screenshots;
WHOIS data if available;
mirror domains;
payment pages;
login pages;
terms and conditions;
fake license page.

Authorities may use these for blocking, investigation, or takedown requests.

XXII. App Store Report vs. Government Report

Reporting to Google or Apple may help remove the app from the store, but it does not replace a government complaint.

A full response often needs both:

App store report for takedown;
PAGCOR report for regulatory verification;
PNP/NBI/CICC report for cybercrime investigation;
bank/e-wallet report for payment tracing.

Google allows users to flag apps for issues including illegal content and policy violations. (Google Help)

XXIII. What Not to Do

Do not:

deposit more money;
pay withdrawal taxes to the app;
pay “AML clearance” fees;
send OTPs;
send additional IDs;
install remote access apps;
threaten the agents;
delete chats;
uninstall before preserving evidence;
recruit others to recover losses;
accept a settlement requiring silence without legal review;
post sensitive personal details publicly.

XXIV. Remedies if You Lost Money

Possible remedies include:

regulatory complaint;
cybercrime complaint;
criminal complaint for fraud, depending on facts;
civil claim for recovery of money or damages;
bank or e-wallet dispute;
app store refund request, where applicable;
complaint against influencers or agents;
data privacy complaint if personal information was misused.

Recovery is not guaranteed. Early evidence preservation and prompt reporting improve the chances of meaningful action.

XXV. Common Scenarios

Scenario 1: App Claims PAGCOR License but Is Not Verifiable

Report to PAGCOR immediately. Attach screenshots of the claimed license, app link, and payment instructions.

Scenario 2: App Lets You Win but Blocks Withdrawal

Preserve the balance screen, withdrawal request, denial message, and any demand for more payment. Report to PAGCOR, PNP-ACG/NBI/CICC, and payment provider.

Scenario 3: Influencer Promotes a Casino App With Referral Code

Screenshot the post, save the link, record the referral code, and report the influencer post to the platform and cybercrime authorities.

Scenario 4: App Requires “Tax” Before Withdrawal

This is a common scam pattern. Do not pay. Legitimate tax obligations are not normally paid to random app wallets as a condition to unlock winnings.

Scenario 5: App Asks for OTP or Bank Login

Stop immediately. This may be phishing or account takeover. Report to your bank and cybercrime authorities.

Scenario 6: App Disappears After Deposits

Preserve receipts, app name, download link, payment account, and chat logs. File reports with law enforcement and payment providers.

XXVI. Practical Evidence Folder

Create one folder with subfolders:

App screenshots;
Payment receipts;
Chat logs;
Withdrawal proof;
Advertisements;
Influencer posts;
Fake license claims;
Identity documents submitted;
Bank/e-wallet reports;
Government complaint acknowledgments.

Name files by date, such as:

2026-05-05_GCash_Deposit_5000.png 2026-05-05_Withdrawal_Denied_Screenshot.png 2026-05-05_Telegram_Agent_Chat.pdf

Organized evidence makes the complaint easier to investigate.

XXVII. Short Reporting Checklist

Before submitting a report, prepare:

app name;
app link or APK link;
website URL;
screenshots;
payment receipts;
account numbers;
chat logs;
withdrawal denial proof;
fake license proof;
names or usernames of agents;
social media links;
your short written narrative.

Then report in parallel to:

PAGCOR;
PNP Anti-Cybercrime Group or NBI Cybercrime Division;
CICC or online scam reporting channel;
bank/e-wallet provider;
Google Play or Apple App Store;
social media platform.

XXVIII. Conclusion

To report an online casino app in the Philippines, first determine whether the issue is regulatory, criminal, financial, privacy-related, or platform-related. In many cases, it is all of these at once.

The safest approach is to preserve evidence immediately, stop sending money, verify licensing through official channels, report the app to PAGCOR, file a cybercrime complaint with PNP-ACG, NBI, or CICC if fraud is involved, notify banks or e-wallets, and report the app or advertisement to Google, Apple, and social media platforms.

A legitimate online gaming platform should be verifiable, transparent, licensed, and accountable. A suspicious app that hides its operators, uses fake licenses, accepts personal-account payments, blocks withdrawals, demands extra fees, or targets users through misleading promotions should be treated as a serious legal and cybersecurity risk.