Fake Casino Websites: Dutch Regulator Removes 26 Clones

The Netherlands Gambling Authority, Kansspelautoriteit (Ksa), has had 26 misleading casino websites removed after finding that they copied licensed Dutch operators and redirected visitors to illegal gambling services. The sites exploited a small but important difference in the address bar: they used .co.nl domains resembling operators’ familiar .nl addresses.

Nearly all 26 sites copied websites belonging to licence holders, according to the regulator’s 7 October announcement. The independent operator of the .co.nl domain removed them within 48 hours after the Ksa made contact. The case shows why recognising a casino’s name, colours or page design is not enough to establish that the website is genuine.

The imitation sites used existing gambling domain names with a different extension. A visitor could therefore see a familiar operator name followed by .co.nl rather than .nl, while the page itself resembled the licensed casino. The copied site then sent the visitor onwards to an illegal gambling provider.

This is more than a typo or a technical registration issue. The trusted brand acts as the lure, while the redirect separates the page the customer recognises from the service that ultimately receives the traffic. A copied interface can also make an unfamiliar domain look credible on a small mobile screen, where the full address may be less visible.

The regulator did not publish a list of the 26 domains or identify every copied operator in its announcement. Players should not infer that one particular licensed brand was involved unless its exact domain appears in an official warning. The confirmed point is the method: imitation .co.nl pages were used to direct visitors towards illegal gambling.

The initial action against 26 misleading domains led the regulator to other illegal gambling websites using the same extension. The Ksa says it has reported 86 websites to CO.NL so far and that those sites were removed. The figure includes the wider set identified through the investigation, not 86 additional copies of licensed operators.

Rapid domain removal limits access through those addresses, but it does not prove that the businesses behind them have disappeared. An illegal operator can use another domain, advertise through a different account or create a fresh imitation. Players should therefore treat a takedown as enforcement against specific web addresses rather than a permanent guarantee that the underlying scheme has ended.

The Ksa’s official Kansspelwijzer register lists businesses permitted to offer gambling in the Netherlands. It can be searched by company, licence holder, website or app and filtered by gambling type. For an online casino, the useful check is not merely whether the brand appears somewhere in the register; the website shown in the result should match the exact domain in the browser.

A padlock icon and HTTPS connection only mean that traffic to that domain is encrypted. They do not show that the domain belongs to the company it imitates, that the operator holds a Dutch licence or that withdrawals will be protected. Search advertising and a polished mobile layout are also not regulatory approval.

Consumers often use familiar branding as a shortcut for trust. That shortcut fails when a clone reproduces visual elements while changing the domain and destination. The operator being copied may remain properly licensed, yet the visitor can still end up outside that operator’s controls, complaints process and Dutch regulatory framework.

The distinction matters for personal data as well as deposits. Registration forms can request names, addresses, identity documents and payment information. If the site is not the licensed operator it appears to be, a customer may be disclosing sensitive information to an unrelated party. No further payment should be made to “verify” an account, release a withdrawal or move a balance from a suspicious site.

First, stop sending money or documents and preserve evidence. Save the complete domain, screenshots, emails, chat messages, payment references and any destination reached after a redirect. A screenshot of the page alone may omit the most important evidence, so include the browser address bar and note the date and time.

Contact the bank, card issuer or payment provider promptly if money or account details may be at risk. Change any password reused elsewhere and enable multi-factor authentication where available. If identity documents were supplied, follow the fraud-prevention guidance available from the relevant Dutch authorities and monitor accounts for unexpected activity.

The Ksa accepts reports about illegal gambling, unfair play and suspected fraud. Its guidance asks consumers to check the Kansspelwijzer, contact the provider where appropriate and report scams to the Fraudehelpdesk. The regulator also makes clear that it does not personally mediate or resolve an individual customer’s loss; reports support supervision and may lead to action where risks or repeated complaints emerge.

The removals do not mean that every .co.nl address is fraudulent or that every .nl gambling site is licensed. They identify a specific pattern found in this investigation. The durable lesson is to verify an exact service against the official register rather than relying on a country-code ending, a copied licence badge or a recognisable brand.

Review and comparison pages should be treated as discovery tools, not substitutes for the regulator’s current record. Before depositing, open the official register in a separate tab and repeat the domain check. Availability, legal status and licence coverage are jurisdiction-specific: a casino licensed elsewhere is not automatically authorised to target players in the Netherlands.

Gambling is for adults aged 18 or over in the Netherlands and every stake can be lost. Licence verification reduces the risk of using an impersonation or illegal service, but it does not make gambling safe or profitable. Set an affordable limit before play, do not chase losses and use Dutch support or exclusion services if gambling is becoming difficult to control.

Sources: Kansspelautoriteit, “Succesvolle aanpak gekloonde websites door Ksa” (7 October 2026, official takedown announcement and domain totals); Kansspelautoriteit, “Kansspelwijzer” (checked 8 October 2026, official register search guidance); Kansspelautoriteit, “Stel een vraag of doe een melding over een kansspel” (checked 8 October 2026, reporting and consumer guidance); and Global Gaming Insider, “KSA removes 26 gambling sites cloning licensed brands” (7 October 2026, secondary industry reporting).