Every month a new CS2 or Rust gambling site launches, buys a few streamers, pays out for a week and then disappears with user balances. We track the corpses in our Site Graveyard — and the pattern is almost always the same. The good news: scam sites are lazy. If you know where to look, they expose themselves in under ten minutes.
1. No verifiable license — or a fake one
Legitimate skin and crypto casinos usually operate under Curaçao, Anjouan or Kahnawake licenses. A license badge in the footer means nothing on its own — scammers copy the image. Click it. A real license seal links to the regulator’s validator page with the operator’s company name. If the badge is a static image, or the validator shows a different company, walk away.
2. Provably fair that you can’t actually verify
Almost every scam site claims to be “provably fair”. Fewer than half let you check it. A real implementation shows you the hashed server seed before the round and lets you rotate your client seed. If the site only shows a generic “fairness” marketing page with no seeds, no hashes and no verification widget, treat every roll as rigged. Our Provably Fair Verifier lets you check seeds manually for eight game types — use it. If you want the full technical background, read our provably fair guide or the deep documentation at ProvablySmart.
3. Withdrawals that “temporarily” don’t work
The single most reliable scam signal. Deposits always work; withdrawals are “under maintenance”, require sudden KYC after you win, or get stuck in manual review forever. Before depositing anything meaningful, test the site with a small amount and withdraw immediately. A site that pays a $5 test in minutes will usually pay $500 too. A site that stalls $5 will never pay $500.
4. Fake traffic and botted chat
Open the chat and watch for ten minutes. Real communities argue, tilt and go off-topic. Botted chats post generic wins on a loop: the same usernames winning round amounts at suspiciously regular intervals. Same with “players online” counters — compare them against the site’s actual bet feed. If 40,000 people are online but the high-roller feed repeats the same five names, the counter is fiction.
5. No company behind the curtain
Check the terms of service for a registered company name and address, then search it. No company listed, a shell registered last month, or a company that runs twelve identical clone sites — all bad signs. Serious operators put their legal entity in the footer because they have to.
6. Unrealistic promotions
A 500% deposit bonus with no wagering requirements doesn’t exist. Neither does a site that hands out $50 of free balance to every new account with no catch. If the promotion looks like free money, the catch is that you will never withdraw it. Compare offers against the realistic bonuses on established sites like Gamdom or Stake to calibrate your expectations.
7. Domain younger than the hype
Run a WHOIS lookup. A site with “millions of users” whose domain was registered six weeks ago is lying about something. Young domains aren’t automatically scams — every site starts somewhere — but combined with paid influencer hype and anonymous ownership, they should lower your deposit to test amounts.
The 10-minute checklist
- Click the license badge — does it validate?
- Verify one bet with real seeds — does the math check out?
- Deposit small, withdraw immediately — does it arrive?
- Watch the chat — bots or humans?
- Find the legal entity — does it exist?
- Check the domain age — does the story match?
This is essentially the short version of how we rank sites at SkinsPoint. If a site fails two or more checks, it doesn’t matter how good the bonus looks — your skins are safer in your inventory.