Rug Pulls and Fake Crypto Casinos: Recognising Scam Patterns
Exit scams, fake provably-fair systems, token pump-and-dumps, and cloned gambling sites — how these scams work and what to look for before depositing.
Crypto gambling combines two domains already dense with fraud: cryptocurrency and unregulated gambling. The pseudonymity of blockchain transactions, the ease of deploying a slick website, and the difficulty of international legal enforcement create conditions where scam operators can disappear with player funds and face minimal consequences. This article maps the most common patterns so you can recognise them before they cost you money.
Exit Scams: The Classic Rug Pull
An exit scam — often called a rug pull in crypto contexts — follows a predictable playbook:
- A gambling site launches with competitive odds, smooth UX, and generous promotions
- It builds a player base and accumulates deposits in its hot wallet
- At a chosen moment (often timed to a large tournament payout or a moment of low scrutiny), the operators withdraw all funds and shut down
- Domains go dark; support goes silent; social accounts are deleted
The window between launch and exit can be days, weeks, or years. Some operations run legitimately for extended periods to build trust and larger balances before pulling out. The longer they run, the larger the eventual theft.
Warning signs of a potential exit scam in progress:
- Withdrawal delays that were not present before
- Support becoming unresponsive or responses becoming vague
- Site features degrading or games becoming unavailable
- Social channels going quiet after previously active engagement
- Promotional generosity increasing suddenly (to attract more deposits before exit)
Fake Provably Fair: The Technical Bluff
“Provably fair” is a legitimate cryptographic system that allows players to verify that game outcomes were not manipulated after bets were placed. However, displaying a provably fair badge or verification widget does not mean the system is correctly implemented — or implemented at all.
Fraudulent sites use several tactics:
- Showing verification tools that do not function: The widget exists but always returns a valid result regardless of the actual server seed used
- Pre-computing outcomes after bets are placed: The server seed is chosen after seeing the bet, then a plausible-looking verification hash is generated
- Using a legitimate front-end with rigged back-end RNG: The displayed hash chain is real but disconnected from the actual outcome calculation
- Copying another site’s verification documentation and presenting it as their own
How to spot genuine provably fair: the system should allow you to verify past bets using your own client seed (which you set before play), the server seed hash (revealed before play), and the server seed (revealed after the round completes). If any of these elements cannot be independently verified after the fact, the system is not genuinely provably fair. Our detailed provably fair guide explains how to actually run these verifications yourself.
Native Token Scams: Pump, Dump, and Play
Some crypto gambling platforms launch their own native token — often described as giving holders a “share of house profits,” governance rights, or staking rewards. These arrangements frequently follow a pump-and-dump structure:
- The platform pre-mines a large supply of tokens and retains the majority
- Players are incentivised (through rakeback, bonuses, or marketing) to buy and hold tokens
- Buying pressure raises the token price; early holders and the platform sell into the rally
- Token value collapses; players holding tokens for rakeback rewards find them near worthless
- The platform continues operating (it still profits from the house edge) while token holders absorb the loss
Platform tokens are investments in addition to being gambling vehicles. Unless you understand the token economics, the team’s holdings, and the vesting schedule, treating them as straightforward rakeback instruments understates your actual risk.
Cloned and Phishing Sites
Established licensed crypto gambling brands are regularly cloned. Scammers register near-identical domain names (changing one character, swapping .com for .io, adding or removing a hyphen) and replicate the design exactly. Players who arrive via search results, social media ads, or referral links may not notice the difference.
On cloned sites, everything appears to work — including small withdrawals. The scam typically emerges when a player attempts a large withdrawal, which is delayed indefinitely or denied with fabricated KYC requirements, until the player abandons the claim.
Before depositing anywhere:
- Type the domain directly or use a verified bookmark — never follow links in ads or direct messages
- Check the exact domain character by character
- Cross-reference the site against independent review sources that verify licensing (see our reviews section)
- Look for a verifiable licence number from a recognised regulator; read our regulation and legal guide to understand what legitimate licences look like
Rigged Games That Cannot Be Detected
Not all fraud is as dramatic as an exit scam. Some operators simply adjust their RNG to return less than the stated RTP, particularly on large bets. Without genuine provably fair verification, there is no way to detect this. Even with provably fair, if the house edge is set higher server-side than advertised, the verified randomness tells you nothing about whether you received the correct payout.
A 5% house edge where you were told 1% is theft. Verify stated edges and test payouts on small amounts before increasing stakes.
Due Diligence Checklist
Before depositing at any crypto gambling site:
- Verify the regulatory licence number on the issuing authority’s public register
- Confirm the provably fair system using the verification process in our provably fair guide
- Check independent community forums for withdrawal complaints older than 30 days
- Test a small withdrawal before making a significant deposit
- Confirm the domain exactly; bookmark it if you plan to return
- Research the ownership entity — anonymous teams are a significant risk factor
For harm reduction resources if gambling has affected you financially, visit the responsible gambling page.