A practical guide to verifying an offshore casino licence

By Alistair Fenwick · Updated 05 August 2026 · 10 min read

Why licence verification matters more than operator reputation

Reputation is the first thing most players check when considering a new casino. Licence verification is what our team checks first. The reason is simple. Reputation reflects the aggregate experience of past players, which is useful but backward-looking. A verified licence, or a failed verification, tells you something concrete about the operator's willingness to submit to any regulatory framework at all. In the pattern we observe, licence verification failures precede reputation collapse rather than following it, which makes them the more predictive of the two signals for someone considering deposit.

What a genuine licence actually buys

A genuine licence buys three things, in descending order of value. First, a public record that the operator exists as a regulated entity with named directors and a registered address. Second, an accountability point at which disputes can theoretically escalate. Third, a set of operational conditions the operator has agreed to observe, which vary enormously between jurisdictions but always exist to some degree.

None of these is a guarantee of good conduct. What they represent is the minimum threshold below which the operator has not even bothered to appear regulated. Below that threshold, no meaningful due diligence is possible. Above it, further due diligence remains necessary but has something to work with.

How forged licences reach players

Forged licences reach players through three main channels. The most common is a display seal that appears authentic but references a licence number that returns no result on the regulator's portal. The second is a licence number that returns a result for a different entity than the operator claims to be. The third is a licence that was genuinely issued but has expired, been revoked or been suspended without the operator updating its footer accordingly.

All three are checkable with a few minutes of effort. The forgery works because most players do not run the check. Our team runs every check every time, without exception, and the pattern of what we find is stable enough to inform the register's operating assumptions about which operator groups tolerate which types of forgery in which markets.

Why we treat verification as continuous

A licence verified today may be revoked next month. Our register records the verification date for each operator and rechecks quarterly at minimum. Where an operator's licence status changes, the file is updated and any player enquiries about the operator receive a fresh check result rather than a cached one.

The rhythm matters because offshore licensing regimes generate more churn than UK players expect. Operators enter administration, get sold to new corporate groups, lose licences for non-payment of fees, and quietly re-list under different names. Our verification approach treats the licence as a live property that requires ongoing attention rather than a one-time gate to pass.

Verifying a Curacao licence through the Gaming Control Board

Curacao issues the largest volume of offshore casino licences visible from the UK. Since the September 2023 reforms, verification is done directly against the Curacao Gaming Control Board portal rather than through legacy master-licensee chains. This section walks through the specific verification steps, what a valid record looks like, and the discrepancies our team most commonly encounters when running the check against operator claims.

Using the Gaming Control Board portal

The Gaming Control Board portal at gaming-control.org lists active licensees with a searchable interface. Enter the licence number exactly as displayed on the operator's site, including any prefixes or suffixes. The portal returns either a match, with issue date and status, or a null result. A null result on a claimed active licence is the strongest possible signal that the licence is forged or expired.

Save the search result as a screenshot. If verification fails, save that too, with the search parameters visible. Both outcomes are evidence for any later dispute, and both should be preserved before any deposit decision. Our team's practice is to include the portal screenshot in every operator dossier, regardless of the verification outcome.

What a valid record actually shows

A valid record shows the licence number, the issue date, the current status (active, suspended or revoked), the licensed entity's registered name and address, and, in most cases, the domains covered by the licence. The domain list matters because a licence issued to Entity X for Domain A does not automatically cover Domain B, even if operated by the same entity.

Cross-reference the entity name against the operator's terms of service. Where the terms name a different company than the licence record, additional investigation is required to determine whether the mismatch is a legitimate group structure or a signal that the licence displayed does not actually authorise the site's activity. Both patterns exist in our register.

Common Curacao verification failures

The most common failure is a licence seal image displayed prominently on the site with no clickable link to a live regulator record, and no licence number visible for portal search. That combination is designed to look regulated without submitting to actual verification, and our editorial position is that any operator relying on it should be treated as unlicensed until proven otherwise.

The second most common failure is a licence number that returns a result for a different entity, often a shell company with no operational relationship to the site's actual owner. Where this occurs, the site is using someone else's licence, which is a serious form of regulatory misrepresentation. Both patterns appear in a meaningful fraction of the operator claims our team checks.

Verifying an Anjouan licence through the Offshore Gaming Authority

Anjouan licences have proliferated since 2023 as operators sought alternatives during Curacao's transition period. Verification against the Anjouan Offshore Gaming Authority registry is possible but the registry is less publicly transparent than Curacao's. This section describes the verification workflow, its limits, and the specific patterns we have documented where operators claim Anjouan authorisation without appearing on the registry.

Using the Anjouan Gaming registry

The registry at anjouangaming.org accepts licence number queries and returns matching records where they exist. The interface is less polished than Curacao's, and the information returned varies in detail. At minimum, a valid record shows the licence holder, the issue date and the current status. Domain lists are less consistently published than on the Curacao portal.

Save the query result and the search parameters. If the record returns matches your expectation, retain the screenshot for the dossier. If it does not, that is diagnostic information of high value that should be preserved in the same file. The registry is updated periodically rather than in real time, so a licence issued very recently may not yet appear even if genuine.

Cross-checking against operator claims

Cross-check the entity name returned by the registry against the operator's stated corporate structure. Anjouan-licensed operators frequently use holding structures that involve Comorian or Anjouan-registered entities without those entities being the direct operator brand. This is not inherently suspicious, but it does require you to trace the corporate relationship rather than assuming the licence covers the visible brand.

Where the trace cannot be completed from public sources, the licence's coverage of the site's activity is unclear. Our team's rule is that unclear coverage weights against the operator in our internal scoring, even where a licence record technically exists. Ambiguity is itself a signal, particularly in a jurisdiction where regulatory transparency is less developed than in Malta or Gibraltar.

Anjouan-specific failure modes

Operators claiming Anjouan authorisation without appearing on the registry are the most common failure pattern. This is straightforward forgery and disqualifies the operator from any further consideration in our register. A related pattern involves operators displaying Anjouan seals with licence numbers that return results for wholly unrelated entities.

A third pattern, less common but more sophisticated, involves operators with valid Anjouan licences whose actual operational entity is registered in a jurisdiction with no gambling regulation at all, using the Anjouan licence as a marketing asset while running the operational business outside its scope. Detecting this pattern requires reading the terms of service and cross-referencing against corporate registries in the jurisdictions named there.

Verifying an MGA licence through the Malta Gaming Authority

MGA verification is the most reliable of the four common offshore checks. The Malta Gaming Authority maintains a searchable register with detailed licence records, current status information and clear domain coverage. Verification failures against MGA are much rarer than against Curacao or Anjouan, but they do occur, and the specific patterns matter because they usually indicate a more sophisticated form of misrepresentation than the licence-seal forgeries common with weaker regulators.

Using the MGA licensee register

The MGA register at mga.org.mt allows search by company name, licence number and brand. Records include the entity's registered address, licence class, issue and expiry dates, and the operational domains covered. The register updates promptly when licence status changes, so a suspension or revocation appears within days rather than months.

MGA licences are class-specific. A Class 1 licence covers casino games; Class 2 covers sports betting; Class 3 covers game supply. Verify that the licence class matches the operator's stated activity. A Class 3 licensee running a casino outside its class is a compliance breach that the MGA takes seriously, and the discrepancy is worth flagging even where the licence itself is otherwise valid.

What MGA records tell you beyond validity

MGA records include information not available at other offshore regulators, historical enforcement notices, key personnel changes, and the operator's participation in the Player Support Unit dispute framework. These additional data points give a fuller picture than pure existence-check verification provides.

Where the operator has faced MGA enforcement in the past, the record shows the specific finding and any resulting sanction. This is uniquely useful information because it lets you form a view of how the regulator has treated similar issues previously, which is often the best available predictor of how a future dispute might resolve. Our team weights MGA enforcement history heavily in the register's evaluation of any Malta-licensed operator.

MGA verification failures we have logged

The most common MGA verification failure is not forgery but scope mismatch. An operator claims an MGA licence but the licence in question does not cover UK-facing activity, either because the licence class excludes it, because the operator has separately committed to jurisdiction-limited operations, or because MGA licence conditions specifically exclude UK players.

The second common failure is expired licences displayed as current. Operators occasionally continue displaying MGA seals after their licences have lapsed. The register at mga.org.mt shows expired status clearly, so the verification catches this quickly. The lag between expiry and display update is usually a matter of weeks, but during that window the operator's compliance position is materially weaker than the site's public presentation suggests.

Verifying a Gibraltar licence through the Gambling Commissioner

Gibraltar licences are less common in the offshore market visible from the UK than they were before 2014, but they still appear on some operators and their verification follows a distinct process. The Gibraltar Gambling Commissioner publishes licensee information through the government portal rather than a dedicated regulator microsite, which changes the search workflow. This section describes the verification steps and the particular considerations that apply to Gibraltar operators serving UK-facing offshore markets.

Using the Gibraltar government portal

The Gibraltar portal at gibraltar.gov.gi lists licensees under the Gambling Commissioner's directorate. The listing is less searchable than MGA's register but more complete than Anjouan's. Licence numbers, entity names, licence types and current status are all published. Domain coverage is typically inferred from the entity's stated brands rather than listed explicitly.

For Gibraltar-licensed operators serving offshore markets, the verification challenge is often less about establishing that the licence exists and more about determining whether the licence extends to the specific activity being marketed to UK players. This is a scope question that Gibraltar's public documentation does not always answer clearly, and where our team flags for further investigation before drawing conclusions.

Cross-checking against Companies House records

Gibraltar-registered gambling operators often have parallel UK Companies House filings, either directly or through subsidiaries and holding companies. Cross-checking the Gibraltar record against Companies House gives a fuller picture of the operator's corporate structure than either source alone.

Where the UK entity has been dissolved, restructured or is currently in administration, this materially affects how any dispute might be pursued through UK-adjacent channels. Companies House records are free to search and quick to check; adding this step to any Gibraltar verification takes a few minutes and often surfaces information relevant to the operator's overall standing that is not visible from the gambling regulator side alone.

Gibraltar-specific considerations for UK offshore markets

Gibraltar's regulatory culture is closer to MGA and UKGC than to Curacao. Operators there tend to take licence conditions seriously, and enforcement, when it happens, tends to be substantive rather than symbolic. This makes Gibraltar operators structurally more trustworthy on average, but it also means the population of Gibraltar-licensed operators serving offshore-only markets is small.

Where a Gibraltar-licensed operator markets to UK players outside its UK-licensed subsidiary structure, the jurisdictional question of whether Gibraltar authority even covers the activity becomes central. Our team's practice is to write to the Commissioner's office in ambiguous cases before publishing any conclusion, because the answer sometimes affects how we characterise the operator's regulatory standing in the register.

Detecting forged and expired licences in the wild

The final piece of the verification handbook is a practical framework for spotting the specific signatures of forged and expired licences. These signatures are distinct from generic red flags because they apply to the licence claim itself rather than to the operator's broader conduct. Learning to spot them shortens verification time significantly and reduces the incidence of falling for sophisticated misrepresentations that survive superficial checks. The comparative table below condenses the key differences between the four common offshore regulators.

Visual signatures of forged seals

Forged seals typically share visual signatures. Low-resolution renders that pixelate on zoom, colour schemes that do not match the regulator's current branding, and text that does not perfectly reproduce the regulator's official name are the three most common. Comparing the operator's displayed seal against the regulator's own seal on its public site catches most straightforward forgeries.

Sophisticated forgeries reproduce the visual details more carefully. In these cases, visual inspection alone is not enough; the licence number check is the only reliable verification. Our team runs both checks on every operator claim, because visual signatures catch amateur forgery quickly and licence-number checks catch professional forgery reliably. Combining them provides near-complete coverage.

Handling expired and revoked licences

Expired licences occupy an ambiguous category because the operator held a genuine licence at some point but no longer does. Some operators continue displaying expired seals through negligence rather than intent. Others do so as a deliberate marketing strategy. Distinguishing the two requires reading the operator's response to enquiries about the expiry.

Revoked licences are more serious because revocation typically follows a substantive enforcement finding. An operator whose licence has been revoked is not merely unregulated; it is unregulated after a regulator formally concluded that continued authorisation was inappropriate. Our register treats revoked-licence displays as a disqualifying signal, because the operator's willingness to display a licence formally taken away signals a broader disregard for regulatory framing.

When to walk away without further investigation

Some verification failures justify walking away immediately. A seal displayed with no licence number, a licence number that returns no result on the regulator's portal, and an operator entity name that does not appear anywhere in the licence record all warrant termination of any further consideration. Each of these on its own is enough.

Combined with any other red flags from the broader register, the case for walking becomes even stronger. Our team's discipline is to walk decisively rather than continue investigating operators that have failed the initial licence check. Time spent investigating unlicensed operators is time not spent on documenting the operators that do submit to regulatory frameworks, and the latter serves readers better than the former.