An online lottery game is not legitimate simply because it displays a government logo, appears in an app store, has thousands of social-media followers, or allows a small withdrawal. In the Philippines, the safest test is whether the exact game, operator, brand, and website address are authorized by the correct government regulator. This distinction matters because PCSO lotteries, PAGCOR-regulated electronic games, and offshore gambling operate under different legal rules—and scammers often blur those categories.

Start by Identifying What Kind of “Lottery” It Is

Many websites use the word “lottery” loosely. Before checking a license, determine what the platform is actually offering.

Type of game	Correct authority to check	Common examples
National lottery	Philippine Charity Sweepstakes Office (PCSO)	Lotto 6/42, 6/45, 6/49, 6/55, 6/58, 2D, 3D and 4D Lotto
Small Town Lottery	PCSO	Authorized local STL operations
Electronic casino or bingo	Philippine Amusement and Gaming Corporation (PAGCOR)	Online slots, electronic bingo and casino-style games
Numeric game licensed as electronic gaming	PAGCOR	Number-based games that are not PCSO Lotto
Offshore gaming or former POGO operations	Prohibited under current law	Sites claiming an old PAGCOR offshore or POGO license
Informal numbers game	Usually illegal	Jueteng, masiao, “last two,” bookies or bets based on official draw results

A platform claiming to sell “PCSO Lotto” should trace directly to PCSO authority. A PAGCOR license does not automatically authorize an operator to sell PCSO lottery tickets. Similarly, PCSO authority to conduct lotteries does not authorize casino games.

What Makes an Online Lottery Game Legal in the Philippines?

PCSO controls Philippine national lotteries

The PCSO derives its authority from Republic Act No. 1169, the PCSO Charter, as amended. The law authorizes PCSO to conduct charity sweepstakes, lotteries and similar activities. The Supreme Court has also recognized that Philippine lotto is a government-authorized game operated under PCSO’s statutory franchise. (Lawphil)

For a game using the names, number combinations, draw schedules or results of PCSO Lotto, verify it through the official PCSO website rather than through a link supplied by an agent, influencer or text message.

PCSO’s earlier web-based E-Lotto pilot ended on July 12, 2024. Any platform claiming to be that same E-Lotto service should therefore be treated cautiously unless PCSO has issued a newer authorization that identifies the exact domain or application. PCSO now also uses official digital initiatives and subdomains, such as LottoMatik, which shows why the complete internet address—not merely the brand name—must be checked. (www.foi.gov.ph)

PAGCOR regulates authorized electronic gaming under its jurisdiction

PAGCOR operates under Presidential Decree No. 1869, as amended by Republic Act No. 9487. Its authority covers casinos, gaming clubs, gaming pools and similar activities, except games placed by law under another regulator such as PCSO.

PAGCOR’s Electronic Gaming Licensing Department publishes lists of accredited gaming system administrators, registered brands and approved domain names. As of July 16, 2026, PAGCOR’s list identifies the legal entity, game offering, main brand, sub-brand and authorized website address. (PAGCOR)

The critical rule is an exact four-part match:

The company must appear on PAGCOR’s current list.
The brand must appear under that company.
The particular type of game must be approved.
The exact domain or URL you are visiting must be listed.

A real company’s name can be copied by a fake website. A licensed brand can also be cloned using an unapproved domain that differs by only one letter.

A claimed POGO license is no longer valid

Republic Act No. 12312, or the Anti-POGO Act of 2025, bans and declares unlawful offshore gaming operations in the Philippines. It permanently revoked previous POGO-related licenses and removed the authority of PAGCOR and other agencies to issue new offshore gaming permits. (Lawphil)

This does not prohibit every domestic PAGCOR-regulated online game. It prohibits offshore gaming operations conducted in the Philippines for offshore players. However, a website advertising itself as a “PAGCOR-licensed POGO,” “IGL,” “offshore lottery” or “international PAGCOR gaming platform” is relying on a category of license that is no longer legally operative.

How to Verify an Online Lottery Website Step by Step

1. Do not use the platform’s own license link

Open a new browser tab and manually enter the regulator’s official address:

PCSO: pcso.gov.ph
PAGCOR: pagcor.ph

Do not rely on a button labeled “Verify License.” A scammer can make that button open a fake regulator page.

PAGCOR has repeatedly warned that fraudulent websites use its logo, fabricated certificates and forged signatures. It has specifically advised the public to verify information through the official PAGCOR website and official communication channels. (PAGCOR)

2. Check the complete domain, character by character

Compare the address in your browser with the domain appearing on the regulator’s list.

Watch for substitutions such as:

.com instead of .ph
an added hyphen
doubled letters
numbers replacing letters
extra words such as “official,” “vip,” “play,” “ph” or “app”
a subdomain placed before an unrelated main domain

For example, brand.pagcor.ph would be a subdomain of pagcor.ph, but pagcor.ph.fakegaming.com belongs to fakegaming.com. The important portion is the main registered domain immediately before .com, .ph, .net or another domain ending.

A padlock or https:// only means that the connection is encrypted. It does not prove that the operator is licensed.

3. Match the legal company and brand

A license certificate should identify the actual corporate operator. Compare that name with:

the company in PAGCOR’s current list;
the operator named in the website’s terms and conditions;
the merchant name shown during payment;
the name appearing on official receipts; and
the company responsible for withdrawals and complaints.

A Securities and Exchange Commission registration merely establishes that a corporation or partnership was registered. It does not, by itself, authorize gambling or lottery operations.

4. Verify the particular game offering

A company authorized for electronic bingo is not automatically authorized to offer sports betting, online poker or numeric games.

On PAGCOR’s list, read the “game offering” column beside the brand. For PCSO games, compare the game name, ticket price, draw schedule and mechanics with the official PCSO game page.

A common illegal scheme accepts bets on the outcome of a legitimate PCSO draw without actually selling a PCSO ticket. The draw itself may be real, but the bookmaker taking the bet may still be illegal.

5. Check whether the regulator’s list is current

PAGCOR’s licensee and domain lists are updated. A screenshot from the operator, especially one with no publication date, is weak evidence.

Use PAGCOR’s Electronic Gaming Licensing page and open the latest available list. As of July 2026, PAGCOR’s published PDF expressly states its effective date, allowing players to identify whether a brand or domain has recently been added or removed. (PAGCOR)

If a domain does not appear, do not assume the PDF is simply outdated. Obtain confirmation directly from PAGCOR before depositing.

6. Look for proper age and identity controls

For PCSO Lotto, a player must generally be at least 18 years old to buy a ticket or claim winnings. PCSO states this requirement on its official lotto game pages. (PCSO)

PAGCOR-regulated gaming is generally restricted to persons 21 years old and above. PAGCOR also prohibits certain restricted persons, including students in Philippine schools, members of the Armed Forces and Philippine National Police, and specified government officials or employees connected with gaming regulation or operations. (PAGCOR)

A legitimate operator should normally conduct identity verification, commonly called KYC or “know your customer.” However, KYC alone does not prove legitimacy. Scam sites also collect IDs, sometimes to commit identity theft.

Never upload a passport, driver’s license, national ID or selfie until the exact domain has been independently verified.

7. Examine how deposits are collected

Warning signs include instructions to send money to:

a personal GCash or Maya account;
a rotating list of individual bank accounts;
a cryptocurrency wallet with no documented operator;
an agent’s personal account;
an account whose name is unrelated to the licensed company or disclosed payment processor; or
a QR code sent only through private chat.

Some legitimate operators use third-party payment processors, so a different merchant name is not automatically fraudulent. The processor should nevertheless be identified in the operator’s terms, payment page or customer-support records.

8. Read the withdrawal and prize rules before playing

Check the minimum withdrawal, processing period, rollover requirement, account-verification rules and dispute procedure.

Treat the following as major scam indicators:

payment of a “tax” before winnings can be released;
an “account upgrade” or “VIP activation” charge;
repeated deposits to correct a supposed verification error;
a “clearance,” “insurance” or “anti-money laundering” fee;
a request to deposit a percentage of the prize;
a demand to recruit other players before withdrawing; or
withdrawal rules disclosed only after a player wins.

Philippine taxes, where applicable, are not ordinarily collected by transferring money to a customer-service representative’s personal account.

9. Verify draw results independently

For PCSO games, use the official PCSO Lotto result search. Do not rely solely on a result graphic circulated through Facebook, Telegram, Viber or TikTok. (PCSO)

Check:

game name;
draw date and time;
winning combination;
ticket or transaction reference;
bet amount;
draw coverage; and
whether the ticket was issued before the betting cutoff.

A platform may display correct PCSO results while falsely claiming that the player placed a valid PCSO bet.

10. Ask the regulator about doubtful details

When the domain, operator or certificate is unclear, send PAGCOR or PCSO:

the complete URL;
screenshots of the license claim;
the company and brand name;
the application download link;
the payment account details; and
the game being offered.

Do not ask the platform to interpret its own license. The regulator’s written response is stronger evidence than statements from an affiliate, agent or customer-service representative.

Evidence That Does Not Prove a Lottery Site Is Legitimate

Claim or feature	Why it is insufficient
“PAGCOR certified” logo	Logos can be copied
Photograph of a license	Certificates can be altered or fabricated
SEC or DTI registration	Business registration is not a gaming license
App-store availability	Store approval is not Philippine regulatory approval
Celebrity or influencer endorsement	Endorsers may not have verified the license
Thousands of followers	Followers and comments can be purchased
Small successful withdrawal	Scam sites sometimes allow early withdrawals to build trust
Live customer support	Scammers may operate organized support teams
Correct PCSO draw results	The site may simply copy publicly available results
Foreign gambling license	It does not replace Philippine authorization for operations directed at players in the Philippines

Common Online Lottery Scams in the Philippines

A fake PCSO ticket-buying service

The platform claims to purchase official tickets for customers but provides only a digital image, internal reference number or editable receipt. There is no verifiable PCSO-issued ticket or authorized transaction record.

A bookmaker using PCSO results

The operator accepts bets on 2D, 3D or jackpot numbers and pays according to official PCSO results. Although the reference draw is legitimate, the betting operation may constitute an illegal numbers game.

Republic Act No. 9287 penalizes participation in illegal numbers games. A bettor may face imprisonment of 30 to 90 days, while collectors, coordinators, operators, financiers and protectors face substantially heavier penalties. (Lawphil)

A cloned PAGCOR brand

The scammer copies the name, colors and logo of a licensed operator but uses a different domain. The fake site may even reproduce the real company’s address and license number.

A fake jackpot notification

The victim receives a message saying that a phone number, email address or social-media account won a lottery that the victim never entered. The supposed winner is asked to pay taxes, delivery charges or processing fees.

A withdrawal-fee cycle

The player sees a large balance but cannot withdraw it. Each payment creates a new problem: incomplete KYC, incorrect tax code, insufficient turnover, frozen wallet, risk-control review or required security deposit.

A balance shown inside an unverified app is not proof that real funds exist.

What to Do If You Already Sent Money

Stop sending additional payments. Do not pay another fee to recover the first transfer.
Contact the bank or e-wallet immediately. Report the transaction as fraudulent and request account preservation, transaction tracing and any available temporary hold.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, and BSP Circular No. 1215 provide mechanisms for financial institutions to temporarily hold funds involved in disputed transactions and conduct coordinated verification. Recovery is not guaranteed, but rapid reporting can materially improve the chance that funds have not yet been transferred onward. (Bangko Sentral ng Pilipinas)
Preserve evidence before deleting anything. Save:
- the complete website URL;
- app name and download link;
- screenshots or screen recordings;
- chats, emails and text messages;
- payment receipts and transaction IDs;
- bank, wallet and cryptocurrency addresses;
- account names and telephone numbers;
- license certificates;
- withdrawal attempts; and
- the date and time of every transaction.
Change compromised passwords. Begin with the email account connected to the gambling platform, followed by banking, e-wallet and social-media accounts. Do not reuse the old password.
Report the platform to the correct regulator. Send PCSO-branded schemes to PCSO and PAGCOR-branded electronic gaming schemes to PAGCOR.
File a cybercrime or fraud complaint. The NBI Online Complaint page accepts complaint information, while the NBI Cybercrime Division handles computer-related offenses. The NBI’s Citizens’ Charter states that complainants are asked to complete a complaint form, present relevant evidence and provide a sworn statement. (National Bureau of Investigation)
Escalate unresolved bank or e-wallet complaints to the BSP. The financial institution’s own consumer-assistance channel is the first level. If the response is unresolved or unsatisfactory, the complaint may be escalated through the BSP Online Buddy or the BSP Consumer Assistance Mechanism. (Bangko Sentral ng Pilipinas)

Documents commonly needed for a complaint

Document or evidence	Practical purpose
Government-issued ID	Establishes the complainant’s identity
Transaction receipts	Shows the amount, recipient and transaction time
Bank or e-wallet statement	Confirms movement of funds
Screenshots and chats	Shows representations and demands made by the operator
Website and app details	Helps identify the digital platform
Written chronology	Gives investigators a clear sequence of events
License or certificate shown by the site	Allows verification of forgery or misuse
Device containing the original records	May be needed for digital examination

Do not edit screenshots or crop out the date, time, URL, sender information or transaction reference. Keep the original files and create a separate copy for annotations.

Typical Fees and Timelines

Action	Typical cost	Practical timing
Check PCSO or PAGCOR’s published list	Free	Immediate
Ask the regulator for confirmation	Free	Often several working days
Report to a bank or e-wallet	Free	Immediately after discovery
File an initial NBI complaint	No government filing fee for investigative assistance	Intake may be completed the same day; investigation can take months
Prepare a separate notarized affidavit	Notarial fee varies	Usually same day
Escalate a financial complaint to BSP	Free	After first reporting to the bank or e-wallet

The most important deadline is practical rather than procedural: report the transfer before the recipient moves the money through additional accounts.

Barangay conciliation is usually not the first step when the operator is unknown, located elsewhere, organized as a corporation or involved in an offense outside the barangay lupon’s jurisdiction. A victim should not delay bank notification or cybercrime reporting merely to obtain a barangay certificate.

Special Considerations for OFWs and Foreign Players

A Filipino abroad should check both Philippine law and the law of the country where the player is physically located. A Philippine license does not automatically authorize an operator to accept bets in another country.

Similarly, a foreign gambling license does not prove that the platform may legally solicit players in the Philippines.

Foreign players should also consider:

whether the operator accepts foreign passports for KYC;
whether Philippine residency is required;
whether geolocation blocks play outside authorized areas;
whether winnings can be withdrawn to a foreign account;
whether the player’s home country prohibits remote gambling; and
whether uploading a passport to the platform creates immigration or identity-theft risks.

When funds were sent through a foreign bank or remittance provider, the sender should notify that institution and the cybercrime authority in the sender’s country immediately. Philippine agencies may investigate Philippine recipients, but they cannot directly freeze a foreign account without the applicable cross-border legal process.

Frequently Asked Questions

How can I check whether an online lottery website is registered with PAGCOR?

Open PAGCOR’s official Electronic Gaming Licensing page and download the latest list of registered brands and domain names. Match the company, brand, approved game and complete domain. A match in only one category is insufficient.

Is every online lottery game with a PAGCOR logo legal?

No. PAGCOR has warned that illegal sites copy its logo and use fabricated certificates. The exact website address must appear in PAGCOR’s current official records.

Can PAGCOR license a website to sell PCSO Lotto tickets?

A general PAGCOR gaming license does not replace PCSO’s statutory authority over national lotteries. A website claiming to sell PCSO Lotto should have authority traceable to PCSO itself.

Is the PCSO E-Lotto app still valid?

The previous PCSO E-Lotto web-based pilot ended on July 12, 2024. A current platform using that name should not be trusted merely because the old program once existed. Check for a newer PCSO announcement identifying the exact service and domain.

Is an online numbers game legal if it uses official PCSO results?

Not necessarily. A private bookmaker may copy legitimate PCSO results while operating an unauthorized numbers game. Republic Act No. 9287 can penalize both operators and bettors in illegal numbers games.

Are online lottery winnings released after paying a tax or clearance fee?

A demand to transfer tax, insurance, clearance or account-unlocking money to a personal bank or e-wallet account is a strong scam indicator. Do not send additional funds without independent confirmation from the regulator and the financial institution.

Does a successful small withdrawal prove the site is legitimate?

No. Fraudulent platforms may permit small withdrawals before encouraging larger deposits. Regulatory authorization must still be verified through PCSO or PAGCOR.

What is the legal age for online lottery and gaming?

PCSO Lotto generally requires players to be at least 18. PAGCOR-regulated gaming generally requires players to be at least 21 and excludes other restricted persons under its Responsible Gaming Code.

Can I recover money sent to an illegal lottery site?

Recovery is possible in some cases but is never guaranteed. Immediately report the transfer to the bank or e-wallet, request a fraud hold or tracing process, preserve all evidence and file complaints with the regulator and cybercrime authorities.

Is playing on an illegal lottery site itself punishable?

It can be. Republic Act No. 9287 expressly penalizes bettors in illegal numbers games, while Presidential Decree No. 1602 imposes penalties for participation in unauthorized gambling activities. Penalties become much more serious for collectors, agents, operators, financiers and protectors. (Lawphil)

Key Takeaways

Verify the exact operator, brand, game and domain through PCSO or PAGCOR.
A logo, certificate, SEC registration or app-store listing does not prove a gaming license.
PCSO regulates national lotteries; PAGCOR authorization does not automatically cover PCSO Lotto.
PAGCOR’s domestic electronic gaming system is different from offshore gaming.
Claims of a current POGO or offshore PAGCOR license are inconsistent with the Anti-POGO Act of 2025.
Never pay a tax, clearance, insurance or withdrawal-unlocking fee to a personal account.
PCSO Lotto generally requires players to be 18; PAGCOR gaming generally requires players to be 21.
Report suspicious transfers to the bank or e-wallet immediately, preserve the original evidence and file complaints with the appropriate regulator and cybercrime authorities.