The hidden dangers of illegal online casinos: a complete risk guide

Risks of playing at an illegal online casino include heavy tax claims by the Tax Authority (Belastingdienst), complete absence of consumer protection, and exposure to cybercrime. Players themselves pay 37.8% gambling tax on winnings, while payouts are often refused. In addition, there is no link with CRUKS, which worsens gambling addiction, and active play is punishable under the Gambling Act.

Tax pitfalls: why the player pays the bill

Playing at illegal online casinos entails direct financial and legal risks for the Dutch user. Because these providers fall outside the supervision of the Gaming Authority (Kansspelautoriteit), they do not pay gambling tax in the Netherlands. The tax authority shifts this obligation entirely onto the individual player, who is personally liable for the payment to the Tax Authority (Belastingdienst). In addition, participation in unregulated offerings is a criminal offense under the Gambling Act, causing players to not only pay tax but also lose their consumer rights.

Do I have to pay tax on winnings at an illegal casino?

Yes, the Tax Authority considers winnings from unregulated sources as taxable income. With legal providers, the casino pays the tax directly, but at illegal online casinos this structure is lacking. The player must declare the net profit themselves in their income tax return. Our analysis shows that the tax authority strictly enforces this, regardless of the foreign location of the operator. This creates an unequal situation where the player pays twice: first through any hidden costs or poor odds, and then through the tax assessment.

The mechanism behind this levy is simple but painful. Legal casinos in the Netherlands are licensed and legally required to pay the gambling tax before the winnings are paid out. For the player, the rate at a legal provider is therefore effectively zero percent at the moment of payout. With an illegal provider, which is often located in a country without a tax treaty with the Netherlands or simply refuses to cooperate, the Dutch state views the operator as 'untraceable' for tax purposes. Therefore, the Tax Authority turns to the only person who is within reach: the player. You are personally responsible for the declaration and payment. Ignoring this can lead to additional assessments, fines, and even seizure of other assets.

How high is the gambling tax at unlicensed providers?

The gambling tax rate is currently 37.8% on the net profit. This percentage is applied to the amount remaining after deducting the wager. At legal Dutch license holders, this rate for the player is often 0%, because the provider has already paid the tax. When playing on sites without a Ksa license, you therefore keep less than two-thirds of your winnings. State Secretary Hans Vijlbrief has emphasized that this high rate is intended to make the legal offering more attractive, but for the player at illegal platforms, it means a substantial loss of return.

Imagine you win €1,000 net at an illegal casino. In theory, you keep €622 after tax deduction. However, in practice, the situation is even more complex. Many illegal casinos offer bonuses with high wagering requirements. If you win with bonus money, the definition of 'net profit' for the Tax Authority might turn out differently than you expect. Moreover, your records must be in perfect order to prove what your stake was versus your payout. Illegal platforms rarely provide detailed, tax-valid overviews. This means that in case of doubt, the Tax Authority can consider the entire payout as profit, leading to an even higher tax burden. The risk that you ultimately pay more tax than you actually won is real when playing with unregulated parties.

Is playing at an illegal casino punishable for the user?

Yes, under the Gambling Act (Wet op de Kansspelen), participation in games of chance without a license is punishable. Although the enforcement by the Gaming Authority (Kansspelautoriteit) primarily targets providers and facilitators such as banks, the player certainly faces risks. You are technically punishable, which can lead to the freezing of funds or problems during disputes. Moreover, all protective measures, such as integration with CRUKS, lapse, leaving vulnerable players at extra risk. Illegal online casinos take absolutely no responsibility for your gaming behavior or financial safety.

Although criminal prosecution of individual players is less frequent in practice than imposing fines on operators, the legislation remains clear: participating is prohibited. This means you cannot appeal to the courts if you are scammed. A contract with an illegal provider is void. If a casino refuses to pay out, you cannot go to civil court to claim your money back, because the basis of the agreement (gambling with an unlicensed party) is contrary to public policy. This legal vulnerability is one of the biggest, yet least understood, risks for Dutch players.

Financial risks: fraud, money laundering, and lost money

The risks of playing at an illegal online casino are fundamentally different from legal providers, because you fall completely outside the protection of Dutch law. Players not only run the risk of losing their stake due to rigged games, but are also exposed to serious cybercrime. Without supervision, any form of consumer protection is absent, meaning financial data and playing funds are directly at risk from fraudulent practices.

Can you get your money back from an illegal online casino?

No, there is no Dutch legal system or dispute committee that helps with non-payments or bankruptcies. When an offshore operator refuses to pay out, you as a player are left empty-handed. Illegal platforms often operate from jurisdictions where local authorities offer no recourse for Dutch consumers. Unlike legal sites, where segregated player funds are mandatory, illegal providers can easily disappear with the capital. The Gaming Authority can enforce rules against the provider, but this rarely leads to restitution for the individual player.

At legal casinos, player funds must be separated from corporate capital. This ensures that, should the casino go bankrupt, your balance is still available for payout. Illegal casinos rarely apply this segregation. Your money is often used directly for operational costs or, in the worst-case scenario, directly siphoned off. Once a site stops communicating or goes offline, there is no authority that can help you. Police reports are registered, but they rarely lead to international legal recovery. The costs of an international lawsuit never outweigh most wagered amounts, leaving victims financially disadvantaged.

How do KYC procedures work at illegal providers?

At legal casinos, Know Your Customer (KYC) serves to prevent fraud and verify age, in accordance with the Anti-Money Laundering Directive. However, illegal providers often only ask for identity documents at the moment of payout, without securely processing this data. This procedure is a pitfall: your passport copy and bank statements can be misused for identity theft instead of compliance. Because these operators are not bound by European privacy legislation, there is a real risk that sensitive personal data is sold on the dark web. This makes the player vulnerable to further financial fraud, independent of the gambling itself.

The pattern is often the same: you can play and deposit freely, but as soon as you want to withdraw a significant amount, customer service asks for a copy of your ID, proof of address, and sometimes even a selfie with your passport. At a legal provider, this data is stored encrypted and strictly protected. With an illegal provider, you have no guarantee that this data is secure. In fact, many criminals specifically use these 'KYC moments' to collect high-quality identity data. With your passport copy and bank details, they can take out loans or open other accounts in your name. The damage caused by this often exceeds the loss of the gambling amount itself.

Security risks of crypto and obscure payment methods

Illegal casinos often promote cryptocurrency such as Bitcoin, because transactions are untraceable and bypass banking supervision. This anonymity facilitates money laundering, where criminal networks launder illegally obtained money through gambling platforms. For the player, this means you might appear complicit in criminal offenses without knowing it. In addition, many of these sites lack proper SSL encryption, which opens the door to phishing attacks. Without an encrypted connection, hackers can intercept payment details during deposits. The use of obscure e-wallets or vouchers further increases this risk, as these methods do not offer a chargeback option in case of fraud.

The use of cryptocurrency seems secure because of blockchain technology, but at illegal casinos, the infrastructure is often weak. Hackers can target the casino's hot wallets, but also the connection between your device and the server. If a site does not have a valid SSL certificate (recognizable by the padlock in the browser), your traffic is sent unencrypted. This makes 'Man-in-the-Middle' attacks possible, where hackers intercept your login details or wallet addresses. Furthermore, if you deposit crypto to an address linked to money laundering practices, your own wallet can be flagged by exchanges. This can lead to the freezing of your own crypto funds at legal exchanges like Binance or Coinbase, because they are required to report suspicious transactions. You thus lose not only your gambling money but also your personal assets.

Health risks: absence of CRUKS and duty of care

The risks of playing at an illegal online casino are not only financial, but especially psychologically and medically serious. Because these platforms operate outside the Gambling Act, any form of mandatory duty of care is absent. Players do not have access to the Central Register for Exclusion from Games of Chance (CRUKS) and cannot use helplines like Loket Kansspel or Stichting AGOG for direct intervention, which significantly increases the risk of unchecked gambling addiction.

Does CRUKS work at casinos without a Dutch license?

No, illegal providers do not have a technical link with CRUKS, meaning self-exclusion is completely ignored. The register is a crucial tool for responsible gaming, developed by the Gaming Authority to protect players with a gambling addiction against themselves. At legal casinos, registration in this system leads to an automatic block of at least six months. However, illegal platforms operate outside this ecosystem. Even if a player has excluded themselves through the official channel, access to foreign sites remains open. In fact, many illegal affiliates direct their marketing specifically at search terms like ‘casino without Cruks’ to attract precisely this vulnerable group. This fundamentally undermines national prevention policy. Where legal providers are required to monitor risky behavior and intervene, this control is completely absent at illegal sites. The absence of these safety nets means that help organizations such as Stichting AGOG and Loket Kansspel are often only brought in when debts have already become unmanageable, instead of preventively.

Why are illegal sites dangerous for young people?

There is no age verification according to Dutch standards, making it easy for young people to access addictive games. In the regulated market, strict rules apply to players between 18 and 24 years old, such as the ban on bonuses and lower deposit limits. Illegal casinos do not apply this protection. Research shows that minors can sometimes gamble without restriction on these platforms because there is hardly any verification of 18+ age. In addition, influencers and aggressive marketing campaigns on social media like TikTok target young people disproportionately, who are extra susceptible to gambling addiction. This combination of low thresholds and targeted advertising creates a high-risk environment. The Gaming Authority indicates that illegal gambling sites pose a specific risk to vulnerable groups, including minors, because consumer protection and supervision are completely lacking.

Young people are neurologically more sensitive to the reward systems that gambling activates. Legal casinos in the Netherlands are not allowed to advertise to this target group and must strictly verify age. Illegal sites do not do this. They often simply accept a date of birth without verification, or use vague methods that are easily bypassed. As a result, teenagers can come into contact with high-stakes gambling at an early age, laying the foundation for problematic behavior later in life. Marketing via social media, where influencers present gambling as quick wealth or a lifestyle, reinforces this effect. Without the restraining factors of Dutch legislation, such as limits and cooldown periods, young people spiral downward more quickly.

Missing play controls: Autoplay and limits

Features such as Autoplay, which are banned in the Netherlands to prevent gameplay acceleration, are offered here without intervals. The Dutch legislator banned Autoplay because it enables continuous play without conscious decision-making moments, which is a known trigger for gambling addiction. On illegal sites, this feature is often active by default, which can cause players to enter a state of dissociation and lose large amounts more quickly. Legal wagering and deposit limits are also missing. While legal casinos must enforce these, illegal platforms often offer very high limits or none at all.

The psychological impact of Autoplay should not be underestimated. It removes the micro-pauses in which a player would normally think about their next move. At illegal casinos, there is no algorithm that monitors playing time or losses to force a break. Players can continue for hours in a trance-like state, known as 'the zone', where the awareness of time and money is lost. Because there is no legal maximum bet, players can gamble away astronomical amounts in a short time. At legal providers, there is a hard stop. At illegal providers, the only limit is the balance in your account or credit card, which often only leads to financial distress later on.

Enforcement and recognition: the role of the Gaming Authority

The risks of playing at an illegal online casino are significant, because these platforms operate outside the scope of Dutch legislation. Although enforcement is primarily aimed at providers, any form of consumer protection and CRUKS security is lost for the player. The Gaming Authority acts harshly against providers that target the Dutch market without a license, but cannot recover individual losses.

How do you recognize an illegal online casino?

A crucial indicator is the offering of iDEAL, a popular Dutch payment method, by an operator without a Ksa license. Legal sites integrate iDEAL within strict compliance frameworks, while illegal sites often abuse this method to build trust without executing the mandatory age and identity checks. Additionally, these providers often lack a .nl domain or are not listed in the public register of the regulator.

Aggressive bonus offers with unclear terms are also a red flag. Platforms such as Mama.bet operate without a valid license from the Gaming Authority and target Dutch players specifically through localized marketing, despite this violating the Gambling Act. Such sites often use high bonuses to lure players, but offer no guarantee whatsoever of fair payouts or game integrity. Also pay attention to the language: illegal sites often have poorly translated Dutch texts or use automatic translation software, indicating a lack of local accountability.

What does the Gaming Authority do against offenders?

The Gaming Authority issues high fines to repeat offenders and forces partners such as Google and banks to block access to illegal sites. A prominent example is Fortaprime, the company behind sites like amonbet101.com. The regulator imposed a record fine of nearly 2 million euros on Fortaprime for facilitating illegal gambling offers without a license. This enforcement focuses not only on the operator, but also on the network of promoters making the offer possible.

Despite this, new sites continue to emerge. The Ksa works with internet service providers to block domains, but tech-savvy users often find ways around it. The fines imposed are often symbolic for large international conglomerates that simply change names. Therefore, vigilance on the part of the player themselves is essential. Do not trust blocks blindly; always verify the license in the Ksa register yourself before depositing money.

Are licenses from Curacao or Malta safe?

A license from the Malta Gaming Authority (MGA) or from Curacao offers no legal protection in the Netherlands if the provider actively targets the Dutch market without Ksa permission. Many players confuse a foreign license with legal status, but Dutch law requires a specific local license. Without this permission, the player falls outside the scope of the Dutch complaint procedure and remains vulnerable to fraud and non-payments.

Although Malta and Curacao are reputable jurisdictions within the EU and beyond, their licenses have no value on the Dutch market if the provider does not hold a Dutch license. Dutch legislation is territorial: anyone targeting Dutch players needs a Dutch license. An MGA license therefore does not protect you against the tax and legal risks described in this article. Only providers with an explicit Ksa license offer the full protection of Dutch law, including affiliation with CRUKS and the guarantee schemes for player funds.

About this article - Editorial standards

• Author: Sarah Weber - Casino Tester & Bonus Analyst

• Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst

• Last updated: 2026-08-10.

This article about "risks of playing at an illegal online casino" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content in response to changes in regulations, licenses, and bonus terms. All references to licenses, regulators, and legislation link to public sources (the local gaming authority, the applicable local gambling legislation).

About the author

8+ years of experience reviewing casinos, 200+ personally tested platforms within the EU and worldwide. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout processes, and customer service evaluation.

About the reviewer

More than 12 years of experience in the iGaming industry, including 5 years as a compliance consultant for license holders in multiple regulated markets. PhD in economic mathematics. Focus areas: bonus mathematics, wagering analysis, and player protection systems.

Responsible gambling

Gambling can be addictive. If you feel like you are losing control of your gaming, please contact the relevant gambling helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE playing with real money. Breaks and cool-down tools from the provider are there to keep gaming manageable.

Legal notice

The information in this article is intended solely for editorial and comparative purposes and does not constitute legal advice. Players themselves are responsible for complying with local regulations.