The hidden dangers of illegal online casinos: a complete risk guide

Risks of playing at an illegal online casino include heavy tax claims by the Tax Authority, total absence of consumer protection, and exposure to cybercrime. Players pay 37.8% gambling tax on winnings themselves, while payouts are often refused. In addition, there is no link with CRUKS, which worsens gambling addiction, and active playing is punishable under the Betting and Gaming Act.

Fiscal pitfalls: why the player pays the bill

Playing at illegal online casinos brings direct financial and legal risks for the Dutch user. Because these providers fall outside the supervision of the Gaming Authority, they do not pay gambling tax in the Netherlands. The tax authority shifts this obligation entirely to the individual player, who is personally liable for the payment to the Tax Authority. In addition, participation in unregulated offerings constitutes a criminal offense under the Betting and Gaming Act, meaning players not only pay tax but also lose their consumer rights.

Do I have to pay tax on winnings at an illegal casino?

Yes, the Tax Authority considers winnings from unregulated sources as taxable income. With legal providers, the casino pays the tax directly, but at illegal online casinos, this structure is lacking. The player must declare the net winnings themselves in their income tax return. Our analysis shows that the tax authority strictly enforces this, regardless of the foreign location of the operator. This creates an unequal situation in which the player pays twice: first through any hidden costs or bad odds, and then through the tax assessment.

The mechanism behind this levy is simple but painful. Legal casinos in the Netherlands are licensed and legally required to pay the gambling tax before the winnings are paid out. For the player, the rate at a legal provider is therefore effectively zero percent at the moment of payout. At an illegal provider, which is often established in a country without a tax treaty with the Netherlands or simply refuses to cooperate, the Dutch state views the operator as 'untraceable' for tax purposes. Therefore, the Tax Authority targets the only person who is within reach: the player. You are personally responsible for the declaration and payment. Ignoring this can lead to additional assessments, fines, and even seizure of other assets.

How high is the gambling tax at unlicensed providers?

The rate for gambling tax is currently 37.8% on the net profit. This percentage is applied to the amount remaining after deducting the stake. With legal Dutch license holders, this rate for the player is often 0%, because the provider has already paid the tax. When playing on sites without a Ksa license, you therefore keep less than two-thirds of your winnings. State Secretary Hans Vijlbrief emphasized that this high rate is intended to make the legal offering more attractive, but for the player at illegal platforms, it means a substantial loss of return.

Suppose you win €1,000 net at an illegal casino. In theory, you keep €622 after tax deduction. However, in practice, the situation is even more complex. Many illegal casinos offer bonuses with high wagering requirements. If you win with bonus money, the definition of 'net profit' for the Tax Authority may turn out differently than you expect. Moreover, your administration must be perfectly in order to demonstrate what your stake was versus your payout. Illegal platforms rarely provide detailed, fiscally valid overviews. This means that in case of doubt, the Tax Authority can consider the entire payout as profit, leading to an even higher tax burden. The risk that you ultimately pay more tax than you actually won is real when playing with unregulated parties.

Is playing at an illegal casino punishable for the user?

Yes, under the Betting and Gaming Act, participation in games of chance without a license is punishable. Although the enforcement of the Gaming Authority focuses primarily on providers and facilitators such as banks, the player does indeed run risks. You are technically punishable, which can lead to freezing of funds or problems in disputes. Furthermore, all protective measures lapse, such as the link with CRUKS, meaning vulnerable players run extra risks. Illegal online casinos take no responsibility for your gaming behavior or financial safety.

Although criminal prosecution of individual players is less frequent in practice than imposing fines on operators, the legislation remains clear: participating is prohibited. This means you cannot appeal to the court if you are scammed. A contract with an illegal provider is void. If a casino refuses to pay out, you cannot go to civil court to reclaim your money, because the basis of the agreement (gambling with an unlicensed party) is contrary to public order. This legal vulnerability is one of the biggest, yet least understood, risks for the Dutch player.

Financial risks: fraud, money laundering, and lost money

The risks of playing at an illegal online casino are fundamentally different from those at legal providers because you fall completely outside the protection of Dutch law. Players not only risk losing their stake due to manipulated games, but are also exposed to serious Cybercrime. Without supervision, any form of consumer protection is lacking, leaving financial data and play funds directly vulnerable to malicious practices.

Do you get money back from an illegal online casino?

No, there is no Dutch legal system or dispute committee that helps with non-payments or bankruptcies. When an offshore operator refuses to pay out, you as a player are left empty-handed. Illegal platforms often operate from jurisdictions where local authorities offer no recourse for Dutch consumers. Unlike legal sites, where separated player funds are mandatory, illegal providers can easily disappear with the capital. The Gaming Authority can take enforcement action against the provider, but this rarely leads to restitution for the individual player.

At legal casinos, player funds must be separated from company capital. This ensures that, should the casino go bankrupt, your balance is still available for payout. Illegal casinos rarely apply this separation. Your money is often used directly for operational costs or, in the worst case, immediately siphoned off. Once a site stops communicating or goes offline, there is no authority that can help you. Police reports are registered, but rarely lead to international legal recovery. The costs of an international lawsuit never outweigh most played amounts, leaving victims financially disadvantaged.

How do KYC procedures work at illegal providers?

At legal casinos, Know Your Customer (KYC) serves to prevent fraud and verify age, in compliance with the Anti-Money Laundering Directive. However, illegal providers often only ask for identity documents at the moment of payout, without processing this data securely. This procedure is a pitfall: your passport copy and bank statements can be misused for identity theft instead of compliance. Because these operators are not bound by European privacy laws, there is a real risk that sensitive personal data is sold on the dark web. This makes the player vulnerable to further financial fraud, separate from the gambling itself.

The pattern is often the same: you are free to play and deposit, but as soon as you want to withdraw a significant amount, customer support asks for a copy of your ID, proof of address, and sometimes even a selfie with your passport. At a legal provider, this data is stored encrypted and strictly protected. At an illegal provider, you have no guarantee that this data is safe. In fact, many criminals specifically use these 'KYC moments' to collect high-quality identity data. With your passport copy and bank details, they can take out loans or open other accounts in your name. The damage resulting from this often exceeds the loss of the gambling amount itself.

Security risks of crypto and obscure payment methods

Illegal casinos often promote Cryptocurrency such as Bitcoin because transactions are untraceable and bypass bank supervision. This anonymity facilitates Money Laundering, where criminal networks clean illegally obtained money through gambling platforms. For the player, this means you can appear complicit in criminal offenses without knowing it. In addition, many of these sites lack proper SSL encryption, which opens the door to Phishing attacks. Without encrypted connections, hackers can intercept payment details during deposits. The use of obscure e-wallets or vouchers further increases this risk, as these methods offer no chargeback option in case of fraud.

The use of cryptocurrency seems safe because of blockchain technology, but at illegal casinos, the infrastructure is often weak. Hackers can target the casino's hot wallets, but also the connection between your device and the server. If a site does not have a valid SSL certificate (recognizable by the lock icon in the browser), your traffic is unencrypted. This makes 'Man-in-the-Middle' attacks possible, where hackers intercept your login details or wallet addresses. Furthermore, if you deposit crypto to an address linked to money laundering practices, your own wallet may be flagged by exchanges. This can lead to the freezing of your own crypto funds at legal exchanges like Binance or Coinbase, as they are obliged to report suspicious transactions. You thus lose not only your gambling money, but also your personal assets.

Health risks: absence of CRUKS and duty of care

The risks of playing at an illegal online casino are not only financial, but especially psychological and medical. Because these platforms fall outside the Betting and Gaming Act, any form of mandatory duty of care is absent. Players do not have access to the Central Register for Exclusion from Games of Chance (CRUKS) and cannot use helplines such as Loket Kansspel or Stichting AGOG for direct intervention, which significantly increases the risk of unchecked gambling addiction.

Does CRUKS work at casinos without a Dutch license?

No, illegal providers have no technical link with CRUKS, meaning self-exclusion is completely ignored. The register is a crucial tool for responsible gaming, developed by the Gaming Authority to protect players with a gambling addiction against themselves. At legal casinos, registration in this system leads to an automatic block of at least six months. Illegal platforms, however, operate outside this ecosystem. Even if a player has excluded themselves via the official channel, access to foreign sites remains open. In fact, many illegal affiliates target their marketing specifically at search terms like 'casino without Cruks' to attract precisely this vulnerable group. This fundamentally undermines the national prevention policy. Where legal providers are required to monitor risky behavior and intervene, this control is completely absent at illegal sites. The absence of these safety nets means that support organizations such as Stichting AGOG and the Loket Kansspel are often only called in when the debts have already become unmanageable, instead of preventively.

Why are illegal sites dangerous for young people?

There is no age verification according to Dutch standards, making it easy for young people to access addictive games. In the regulated market, strict rules apply to players between the ages of 18 and 24, such as the ban on bonuses and lower deposit limits. Illegal casinos do not apply this protection. Research shows that minors can sometimes gamble indefinitely on these platforms because there is hardly any verification of the age of 18+. In addition, influencers and aggressive marketing campaigns on social media such as TikTok target young people disproportionately, who are extra susceptible to gambling addiction. This combination of low thresholds and targeted advertising creates a high-risk environment. The Gaming Authority points out that illegal gambling sites pose a specific risk to vulnerable groups, including minors, because consumer protection and supervision are completely lacking.

Young people are neurologically more sensitive to the reward systems that gambling activates. Legal casinos in the Netherlands are not allowed to advertise targeting this group and must strictly check age. Illegal sites do not do this. They often simply accept a date of birth without verification, or use vague methods that are easy to bypass. This allows teenagers to come into contact with high-stakes gambling at an early age, which lays the foundation for problematic behavior later in life. Marketing via social media, where influencers present gambling as quick wealth or a lifestyle, reinforces this effect. Without the inhibiting factors of Dutch legislation, such as limits and cooldown periods, young people spiral downwards faster.

Missing game brakes: Autoplay and limits

Features such as Autoplay, which are banned in the Netherlands to prevent speeding up play, are offered here without breaks. The Dutch legislator banned Autoplay because it enables continuous play without conscious decision-making moments, which is a known trigger for gambling addiction. On illegal sites, this feature is often active by default, allowing players to enter a state of dissociation and lose large amounts more quickly. Legal stake and deposit limits are also missing; where legal casinos must enforce these, illegal platforms often offer very high or no limits at all.

The psychological impact of Autoplay should not be underestimated. It removes the micro-pauses in which a player would normally think about their next move. At illegal casinos, there is no algorithm monitoring playtime or losses to force a break. Players can continue for hours in a trance-like state, known as 'the zone', losing track of time and money. Because there is no legal maximum bet, players can gamble away astronomical amounts in a short time. With legal providers, there is a hard stop; with illegal providers, the only limit is the balance on your account or credit card, which often only leads to financial distress later.

Enforcement and recognition: the role of the Gaming Authority

The risks of playing at an illegal online casino are significant because these platforms operate outside the supervision of Dutch legislation. Although enforcement is primarily aimed at the providers, any form of consumer protection and CRUKS safety lapses for the player. The Gaming Authority acts harshly against providers targeting the Dutch market without a license, but cannot recover individual losses.

How do you recognize an illegal online casino?

A crucial indicator is the offering of iDEAL, a popular Dutch payment method, by an operator without a Ksa license. Legal sites integrate iDEAL within strict compliance frameworks, while illegal sites often abuse this method to build trust without performing the mandatory age and identity checks. In addition, these providers often lack a .nl domain or are not listed in the public register of the regulator.

Aggressive bonus offers with unclear terms are also a red flag. Platforms such as Mama.bet operate without a valid license from the Gaming Authority and specifically target Dutch players through localized marketing, despite this being in violation of the Betting and Gaming Act. Such sites often use high bonuses to lure players, but offer no guarantee of fair payouts or game integrity. Also pay attention to the language: illegal sites often have poorly translated Dutch texts or use automatic translation software, indicating a lack of local accountability.

What does the Gaming Authority do against offenders?

The Gaming Authority hands out high fines to repeat offenders and forces partners like Google and banks to block access to illegal sites. A prominent example is Fortaprime, the company behind sites like amonbet101.com. The regulator imposed a record fine of nearly 2 million euros on Fortaprime for facilitating illegal gambling offers without a license. This enforcement focuses not only on the operator, but also on the network of promoters that makes the offering possible.

Nevertheless, new sites continue to pop up. The Ksa works with internet providers to block domains, but tech-savvy users often find workarounds. The fines imposed are often symbolic for large international conglomerates that simply change names. Therefore, vigilance on the part of the player themselves is essential. Do not rely blindly on blocks; always check the license in the Ksa register yourself before depositing money.

Are licenses from Curacao or Malta safe?

A license from the Malta Gaming Authority (MGA) or from Curacao offers no legal protection in the Netherlands if the provider actively targets the Dutch market without Ksa permission. Many players confuse a foreign license with legal status, but Dutch law requires a specific local license. Without this permission, the player falls outside the scope of the Dutch complaints procedure and remains vulnerable to fraud and non-payments.

Although Malta and Curacao are reputable jurisdictions within the EU and beyond, their licenses have no value in the Dutch market if the provider does not have a Dutch license. Dutch legislation is territorial: anyone targeting Dutch players needs a Dutch license. An MGA license therefore does not protect you against the fiscal and legal risks described in this article. Only providers with an explicit Ksa license offer the full protection of Dutch law, including connection to CRUKS and the guarantee schemes for player funds.

About This Article - Editorial Standards

• Author: Sarah Weber - Casino Tester & Bonus Analyst

• Factually reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst

• Last updated: 2026-08-10.

This article on "risks of playing at an illegal online casino" was written by Sarah Weber and factually reviewed by Dr. Markus Hoffmann. Both regularly update the content for changes in regulation, licensing and bonus terms. All references to licences, regulators and statutes link to public sources (the local gambling regulator, the applicable local gambling statute).

About the Author

8+ years reviewing casinos, 200+ personally tested platforms across the EU and globally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialty: wagering requirements, withdrawal workflows, customer-support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators across multiple regulated markets. PhD in Economic Mathematics. Focus areas: bonus mathematics, wagering analysis, and player-protection systems.

Responsible Gambling

Gambling can be addictive. If you feel you are losing control of your play, please reach out to the relevant problem-gambling helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE you play with real money. Operator pauses and cooldown tools exist to keep play sustainable.

Legal Notice

The information in this article is provided for editorial and comparison purposes only and does not constitute legal advice. Players are responsible for compliance with local regulations.