Why this is worth ten minutes
Popular gaming names attract clones, because a convincing copy of a login page is cheap to build and the reward — working credentials for accounts that hold money — is immediate. Every safeguard below exists to stop you typing a password into someone else's form.
Check the address itself
Read the domain one character at a time. Clones rely on substitutions that pass a glance: a lowercase l for an uppercase I, rn for m, an extra hyphen, a doubled letter, or a different ending such as .info or .xyz where the original uses something else. Check the part immediately before the first single slash — that is the real domain, and everything after it can be made to look like anything.
Check the connection
A padlock and HTTPS mean the traffic is encrypted between you and that server. It does not mean the server is honest — certificates are free and clones use them routinely. Absence of HTTPS is a firm reason to leave; presence of it is not a reason to relax.
Read the site as a whole
- Are contact, terms, privacy and responsible gaming pages present and readable?
- Does the text read as written for this service, or generically copied?
- Do internal links work, or do several lead nowhere?
- Are there promises of guaranteed winnings, guaranteed withdrawals or risk-free play?
- Is there sustained pressure to act now, claim a bonus or deposit immediately?
Guaranteed-outcome language is the clearest single signal. Nobody can honestly promise a result in a game of chance, so a site that does is either careless or dishonest, and neither is a good custodian of your money.
How you arrived matters
The riskiest route is a link forwarded in a chat, especially one with urgency attached. Safer routes are your own bookmark, an address you typed, or a link from inside the app you already trust. If you followed a link and then find yourself at a login form, stop and navigate there again independently before typing anything.
Warning signs during use
Be alert to a page asking for a one-time code outside a login you just initiated; a request for banking details on a page that is not the payment step; a support chat that asks for your password; and a sudden redirect to a different domain part-way through a form. Any one of those justifies closing the tab and, if you entered anything, changing your password immediately from a different device.
What to do if you think you used a clone
- Change the account password from a device you trust.
- Change the password anywhere else you reused it.
- Check payment apps and bank statements for unfamiliar activity.
- Report the incident to the service's support and, if money moved, to your bank.
Where this site fits
We publish guidance, not endorsements. Nothing here is a substitute for your own check, and we will not tell you a domain is safe because that is not something we can responsibly certify. For the fuller verification routine, see the official website page; for what this site is and is not, see the disclaimer.