Before depositing money or uploading an ID to an online casino, verify the exact website address through the Philippine Amusement and Gaming Corporation—not merely the casino’s name, logo, social-media page, or claimed license number. Fraudulent operators can copy legitimate branding, create look-alike domains, and display fabricated PAGCOR certificates. The safest approach is to confirm that the exact domain appears in PAGCOR’s current official records, matches the authorized operator and game offering, and uses payment and customer-service details consistent with that record.

What Makes an Online Casino Legitimate in the Philippines?

For practical purposes, an online casino serving players in the Philippines should satisfy all of the following:

The operator is authorized by the proper Philippine gaming regulator.
The exact domain or URL being used is registered or recognized under that authorization.
The games offered fall within the operator’s approved gaming activities.
The platform follows age verification, identity verification, responsible-gaming, and regulatory requirements.
The operator does not falsely rely on an expired Philippine Offshore Gaming Operator or “POGO” license.

PAGCOR’s Electronic Gaming Licensing Department regulates locally offered electronic gaming activities, including e-casino games, sports betting, online poker, bingo, specialty games, and other approved online gaming products. PAGCOR publishes official records of accredited gaming system administrators, licensed casino brands, registered domains, affiliates, support providers, and gaming venues. (Pagcor)

A site may look professional and still be unauthorized. A working mobile application, HTTPS padlock, Facebook verification badge, celebrity endorsement, or successful small withdrawal does not prove that the platform is legally authorized.

Philippine Laws Governing Online Casinos

PAGCOR’s authority to license and regulate gaming

PAGCOR was created under Presidential Decree No. 1869, or the PAGCOR Charter. Its regulatory authority was extended and amended by Republic Act No. 9487 of 2007. Subject to statutory exceptions, PAGCOR has authority over licensed casinos, gaming clubs, gaming pools, and related gaming activities within Philippine jurisdiction. (Lawphil)

Executive Order No. 13 of 2017 directed government agencies to coordinate against illegal gambling and clarified that gaming licenses are limited to the authority and territorial scope granted by the regulator. A gaming license cannot simply be shared, leased, sold, or transferred to an unrelated website. (Lawphil)

This means that even when a company is genuinely licensed, another website cannot lawfully use that company’s license unless the specific arrangement and domain are recognized by the regulator.

Illegal and unauthorized gambling

Presidential Decree No. 1602 penalizes illegal gambling activities and participation in unauthorized games. The important distinction is authorization: gambling conducted under a valid regulatory framework is treated differently from an unlicensed operation merely claiming to be legal. (Lawphil)

POGOs and offshore gaming are now prohibited

The government first ordered the termination of Philippine Offshore Gaming Operator activities under Executive Order No. 74 of 2024. That order distinguished offshore gaming directed at players outside the Philippines from locally authorized online gaming regulated by PAGCOR. (Lawphil)

The prohibition was made permanent through Republic Act No. 12312 of 2025, which declared offshore gaming operations illegal in the Philippines and revoked existing POGO licenses and authority to issue them. (Lawphil)

Accordingly, a website claiming in 2026 that it is legitimate because it holds a current “PAGCOR POGO license” should be treated as highly suspicious. Local PAGCOR-authorized electronic gaming platforms are not the same as prohibited offshore gaming operations.

How to Check Whether an Online Casino Is PAGCOR-Licensed

1. Copy the exact website address

Do not search using only the casino’s brand name. Copy the full domain shown in your browser, such as:

examplecasino.ph
play.examplecasino.ph
example-casino.com

Pay attention to:

Hyphens
Extra letters or numbers
Unusual spellings
Different domain endings
Added words such as “vip,” “official,” “ph,” “bet,” or “play”
Subdomains appearing before the main domain

For example, casino-example.com and casinoexample.com are separate domains. One may be registered while the other is a fake clone.

A social-media link may also redirect through several addresses before reaching the actual gambling site. After the page loads, check the address displayed in the browser—not only the link shown in the advertisement.

2. Search PAGCOR’s official online-gaming directory

Go directly to the PAGCOR Guarantee directory of authorized online gaming websites. Search for the brand, then compare the listed website against the domain in your browser.

PAGCOR introduced this public directory to help players identify duly licensed gaming sites before registering, depositing, or making payments. The directory covers several authorized game categories and displays the corresponding domains. (Pagcor)

Confirm all of the following:

The exact domain appears in the directory.
The spelling matches character for character.
The brand name corresponds to that domain.
The listed gaming category matches the games being offered.
You are not visiting a copy that merely resembles the listed website.

Do not assume that every website containing a legitimate brand name is authorized.

3. Cross-check PAGCOR’s detailed regulatory lists

PAGCOR’s regulatory application and licensing page provides more detailed records, including:

Accredited Gaming System Administrators
Registered brands and domain names
Licensed casino websites
Accredited affiliates
Support service providers
Licensed gaming venues

The official lists identify the gaming system administrator or casino operator, main brand, sub-brand, game offering, primary domain, subdomain, and additional URLs. The lists available when this article was prepared were dated June 30, 2026, showing why readers should always consult the latest version rather than relying on an old screenshot or downloaded certificate.

When checking the list, compare the following fields:

Detail to check	What should match
Brand	The name displayed by the casino
Main domain	The root website address in your browser
Subdomain or additional URL	Any alternate login or gaming address
Gaming administrator or operator	The company claiming to run the platform
Game offering	Casino, sports betting, poker, bingo, or another approved category
List date	The most recent PAGCOR publication available

A brand may be real while a specific promotional, payment, or “VIP” domain is not listed. That mismatch should be resolved before money or documents are sent.

4. Ask PAGCOR to confirm an unclear domain

Contact PAGCOR when:

The brand appears but the domain does not.
The casino gives you a certificate that cannot be independently verified.
The domain appears only in an old list.
The platform says it recently changed its website.
Customer service claims to operate “under” another company’s license.
A listed site redirects you to an unlisted payment or registration page.

PAGCOR’s Electronic Gaming Licensing Department lists eGaming_Policy@pagcor.ph as an official contact address. PAGCOR’s published trunk lines are +632 8521-1542 and +632 8522-0299. (Pagcor)

Include:

The complete domain
Screenshots of the website and claimed license
The operator’s stated corporate name
The license or accreditation number being used
The date and time you accessed the site
The social-media page or advertisement that directed you there

Keep PAGCOR’s written response. It may become useful evidence if a dispute later arises.

5. Check whether the site enforces age and identity verification

PAGCOR prohibits persons below 21 years old from playing in regulated gaming establishments and platforms under its responsible-gaming framework. Authorized operators are expected to use identity and age-verification controls. (Pagcor)

A platform should normally request enough information to establish the player’s identity. Depending on the operator and transaction, this may include:

Full legal name
Date of birth
Residential address
Mobile number or email address
Government-issued ID
Selfie or liveness check
Source-of-funds information for certain transactions

However, KYC—meaning “Know Your Customer”—is not proof of legitimacy by itself. Scammers also collect IDs. Verify the domain first, confirm that uploaded information is being submitted through the authorized site, and read its privacy notice.

A casino that allows anonymous high-value deposits, ignores age restrictions, or instructs players to use another person’s identity presents serious regulatory and fraud concerns.

6. Read the withdrawal and bonus rules before depositing

A legitimate license does not mean every transaction will be automatically approved. Withdrawals may be delayed by incomplete KYC, anti-money-laundering checks, unmet bonus conditions, payment-account mismatches, or investigations into prohibited activity.

Before depositing, save a copy of the terms covering:

Minimum and maximum withdrawals
Processing periods
Identity-verification requirements
Turnover or wagering requirements
Bonus expiration
Prohibited betting patterns
Dormant-account charges
Account closure
Dispute procedures
Grounds for withholding or cancelling winnings

Be especially cautious when the casino demands an additional “tax,” “verification deposit,” “unlocking fee,” “AML fee,” or “insurance payment” before releasing money. Philippine taxes and regulatory charges are not normally collected through an unexplained transfer to an employee’s personal account.

7. Examine the payment recipient

The payment instructions should be consistent with the operator or its disclosed payment service provider.

Warning signs include:

Payments to changing personal bank accounts
Instructions sent only through Telegram, WhatsApp, or Messenger
A recipient name unrelated to the operator
Requests to divide one deposit among several accounts
Payments through cryptocurrency with no formal receipt
Requests to describe a gambling deposit as “family support,” “purchase,” or another false transaction
Customer service insisting that deposits be sent outside the official platform

A legitimate casino may use an authorized payment processor, so the recipient’s name will not always be identical to the casino brand. The processor’s role, however, should be disclosed or capable of being verified.

8. Check the company with the SEC—but understand the limitation

You may search the operator’s claimed corporate name through the SEC eSEARCH service or obtain corporate records through SEC Express. SEC records can help confirm whether a company exists, its registered name, and the documents on file. (secexpress.ph)

An SEC registration is not a gaming license. It only shows that a corporation, partnership, or other registered entity exists. A scammer may use the name of a genuine corporation, and a registered company may still lack authority to operate an online casino.

What Different “Proofs” Actually Establish

Claimed proof	What it may establish	What it does not establish
Exact domain in PAGCOR’s current directory	Strong public evidence that the listed website is recognized by PAGCOR	That every similarly named domain is authorized
PAGCOR logo on the website	Nothing by itself	A valid license or registered domain
Digital or printed certificate	A claim that must be independently checked	Authenticity merely because it looks official
SEC certificate	Existence of a registered business entity	Authority to conduct online gaming
Foreign gaming license	Possible authorization in another jurisdiction	Permission to target or accept players in the Philippines
HTTPS padlock	Encryption between the browser and website	Honesty, solvency, or regulatory status
App-store listing	Acceptance for distribution under the store’s rules	Philippine gaming authorization
Positive reviews	Other users’ reported experiences, which may be genuine or paid	Regulatory legitimacy
Successful small withdrawal	The account paid once	Future withdrawals or legal authorization

PAGCOR has specifically warned that illegal offshore gaming websites have used its logo and fabricated certificates to appear legitimate. (Pagcor)

Common Red Flags of an Illegal or Fake Online Casino

Treat the following as warning signs, particularly when several appear together:

The exact URL is absent from PAGCOR’s records.
The site claims to have a current POGO license.
The certificate cannot be verified through PAGCOR.
The operator refuses to provide its legal company name.
Customer service gives different company or license details each time.
The site pressures you to deposit immediately.
Bonuses appear unrealistically large or “risk-free.”
Withdrawals require repeated advance payments.
Payments go to unrelated personal accounts.
The domain was sent through an unsolicited text message.
The casino operates mainly through private chat groups.
The website frequently changes its domain.
The operator asks for your online-banking password, one-time PIN, or screen-sharing access.
The site requests remote access to your phone or computer.
Complaints are answered by threatening account closure or criminal charges.
The operator asks you to recruit depositors to unlock your balance.
The casino claims PAGCOR “guarantees” all winnings or investments.
The platform offers fixed daily returns rather than ordinary gaming activity.

Some scams combine gambling with an investment scheme. A person may be told to place “sure-win” bets, copy a supposed agent’s trades, or recharge an account to complete tasks. The displayed balance may be fictitious even when the website allows one early withdrawal to gain trust.

What to Do If You Already Sent Money or Uploaded an ID

1. Stop sending additional payments

Do not pay another fee to “release,” “verify,” or “recover” the account. Fraudsters commonly invent a sequence of charges after the first deposit.

Be wary of anyone who later contacts you claiming to be a lawyer, hacker, regulator, or recovery specialist who can retrieve the money after receiving another advance payment.

2. Preserve evidence before the site disappears

Save:

Screenshots and screen recordings
The complete URL
Account profile and player number
Deposit and withdrawal history
Chat conversations
Emails and text messages
Advertisements and referral links
Terms and conditions
Claimed licenses or certificates
Bank or e-wallet receipts
Recipient names and account numbers
Cryptocurrency wallet addresses and transaction hashes
Telephone numbers and social-media profiles
Dates and times of each transaction

Export chats where possible. Do not rely exclusively on screenshots because the opposing party may later question whether they are complete.

3. Notify your bank or e-wallet immediately

Report the transfer as soon as possible and request:

Temporary protection for your account
Review of unauthorized or fraudulent transactions
Preservation of transaction records
Possible hold or recall of funds
Blocking of compromised cards, credentials, or devices

The Bangko Sentral ng Pilipinas advises customers to report suspicious transactions immediately to their bank or electronic-money issuer. Complaints should first go through the institution’s consumer-assistance mechanism. An unresolved complaint involving a BSP-supervised institution may be escalated through the BSP Online Buddy consumer-assistance channel. (Bangko Sentral ng Pilipinas)

A fund recall is not guaranteed. Speed matters because fraud proceeds may be transferred through several accounts shortly after receipt.

4. Secure your identity and accounts

When you have uploaded an ID or selfie:

Change passwords associated with the same email address.
Enable multi-factor authentication.
Notify your financial institutions of possible identity misuse.
Watch for unauthorized loans, SIM-registration attempts, or account openings.
Ask the relevant government agency about replacing a compromised ID when necessary.
Keep records of later calls, messages, or transactions using your identity.

Never disclose an online-banking password, card PIN, one-time password, recovery code, or complete screen-sharing access. A genuine KYC review should not require those credentials.

5. Report the incident to the proper authorities

Possible reporting channels include:

Office or channel	Appropriate use
PAGCOR Electronic Gaming Licensing Department	Verification of a claimed license, operator, domain, or gaming authorization
Bank or e-wallet provider	Fraudulent transfer, compromised account, recall request, or payment dispute
BSP consumer-assistance channel	Unresolved complaint against a BSP-supervised financial institution
NBI Cybercrime Division	Online fraud, identity misuse, fake casino websites, or technology-enabled deception
National Anti-Scam Hotline 1326	Reporting and referral of online scams
Local police or cybercrime unit	Immediate criminal complaint, threats, coercion, or identification of local suspects

The NBI Cybercrime Division accepts complaints from the public and requires a sworn statement and supporting documents. Its published citizen’s-charter process states that the initial assistance procedure has no filing fee and an estimated administrative processing time of about one hour and ten minutes. That estimate covers complaint intake—not the investigation, identification of suspects, prosecution, or recovery of funds, which may take considerably longer. An NBI online complaint facility is also available. (National Bureau of Investigation)

The National Anti-Scam Hotline may be reached through 1326. DICT materials also identify 1326@dict.gov.ph as a reporting address. (Dictionary)

6. Prepare a clear transaction chronology

A useful complaint should explain:

How you discovered the casino
When you registered
Which domain you used
What the operator represented about its license
How much you sent
Where each payment went
What was promised
What happened when you tried to withdraw
What additional payments were demanded
What steps you took with the bank, e-wallet, PAGCOR, or other agencies

Depending on the evidence, authorities may consider offenses involving fraud or estafa under Article 315 of the Revised Penal Code, illegal gambling, identity-related offenses, or violations committed through an information and communications technology system under the Cybercrime Prevention Act of 2012, Republic Act No. 10175. The applicable offense depends on the representations made, the flow of funds, the suspect’s intent, and the available evidence. (Lawphil)

Special Considerations for Foreigners and OFWs

Foreign citizenship does not replace Philippine regulatory requirements when a website is offering or facilitating gaming to a person located in the Philippines.

Foreign players should keep these points in mind:

A license from another country does not by itself prove authority to operate in the Philippines.
The website should still be checked against PAGCOR’s current official records.
A passport and proof of address may be requested for KYC.
The name on the player account should match the name on the payment account and identity document.
A request to apostille or notarize a passport merely to release ordinary winnings should be independently verified with PAGCOR.
A platform’s claim that it is legal because its servers or company are overseas is not sufficient.
An old POGO license cannot establish present legality after the offshore-gaming prohibition.

OFWs accessing a casino while physically outside the Philippines may also be subject to the gambling laws and licensing rules of the country where they are located. PAGCOR authorization does not automatically make online gambling lawful in every foreign jurisdiction.

Frequently Asked Questions

How can I check a PAGCOR license number online?

Start with PAGCOR’s official online-gaming directory and detailed regulatory lists. Search the brand and compare the exact domain, operator, and game offering. When the license number or domain cannot be matched, send the details directly to PAGCOR’s Electronic Gaming Licensing Department.

Is every casino with a PAGCOR logo legitimate?

No. A logo can be copied in seconds. PAGCOR has warned about illegal sites using its logo and fabricated certificates. Verify the exact website address through PAGCOR’s own directory rather than clicking a “verification” link supplied by the casino.

Is an online casino legal if its company is registered with the SEC?

Not necessarily. SEC registration establishes corporate existence; it does not grant authority to operate an online casino. Gaming authorization must be verified separately with PAGCOR or the regulator legally responsible for the activity.

Are POGO websites still legal in the Philippines?

No. Offshore gaming operations were ordered to cease under Executive Order No. 74 of 2024 and were permanently prohibited by Republic Act No. 12312 of 2025. A current claim of authorization based only on a POGO license is a serious red flag.

Does PAGCOR regulate all gambling websites available to Filipinos?

PAGCOR regulates gaming activities and operators within the authority granted by Philippine law. The mere fact that a foreign website can be opened from the Philippines does not mean PAGCOR has licensed it or that it is lawful to offer services to Philippine-based players.

Why is a legitimate casino asking for my ID?

Regulated platforms use KYC procedures to verify identity, age, payment ownership, and compliance with responsible-gaming and financial controls. The request should occur through the verified official website. Never provide online-banking passwords, one-time PINs, or remote access to your device.

Can an online casino charge a fee before releasing winnings?

A casino may impose disclosed transaction charges or enforce legitimate account and bonus conditions. Repeated demands for “tax,” “AML clearance,” “unlocking,” “insurance,” or “verification” payments—especially to personal accounts—are common fraud indicators. Verify the demand with PAGCOR and the relevant financial institution before paying anything further.

What if the casino’s main brand is listed but my URL is different?

Do not deposit until the difference is resolved. The domain may be an authorized alternate URL, or it may be a clone using the legitimate brand. Check PAGCOR’s detailed list of main domains, subdomains, and additional URLs, then request written confirmation when necessary.

Can I recover money sent to a fake online casino?

Recovery is possible in some cases but is never guaranteed. The prospects depend on how quickly the transfer is reported, whether the recipient account can be frozen, whether the operators can be identified, and whether assets remain available. Immediately notify the bank or e-wallet, preserve evidence, and report the incident to the appropriate authorities.

Is a mobile casino app safer than a website?

Not automatically. An app can also be unauthorized, copied, or distributed through unofficial channels. Verify the operator and the official domain through PAGCOR. Download links should come from the verified operator’s website or recognized application store, but an app-store listing alone is not proof of a Philippine gaming license.

Key Takeaways

Verify the exact casino domain, not only the brand, logo, application, or certificate.
Use the official PAGCOR Guarantee directory and PAGCOR’s current detailed regulatory lists.
Confirm the operator, domain, subdomain, and authorized game offering.
A PAGCOR logo, SEC registration, foreign license, app-store listing, or HTTPS padlock is not enough by itself.
POGOs and offshore gaming operations are prohibited under Republic Act No. 12312 of 2025.
Legitimate regulated platforms should enforce the minimum age of 21 and use appropriate identity-verification controls.
Do not pay unexplained withdrawal, unlocking, tax, AML, or recovery fees to personal accounts.
When money or identification has already been sent, preserve evidence, contact the bank or e-wallet immediately, secure affected accounts, and report the matter to PAGCOR and the appropriate cybercrime authorities.