CURRENT EDITION
US guide · Safety & player rights
Account security around bonus messages
Promotional messages can be used to imitate a casino or steal an account. Protect credentials and verify links before reacting to an urgent offer.
- Use a unique password and available multifactor authentication.
- Verify messages through the known account site.
- A support agent should not need your one-time login code.
Treat urgency as a reason to pause
A message promising expiring credit can encourage fast clicks. Instead, open the known official site independently and check whether the offer appears in the account. The same practice helps distinguish a genuine promotion from a look-alike page.
Check the exact domain, not merely the brand name in a page title. A search advertisement, social profile, or message sender can use recognizable graphics without being the authorized service.
Reduce the damage of credential exposure
Use a unique password and enable multifactor authentication when offered. Keep the recovery email secure as well, because it can control password resets. Do not share account access with friends or family to let them use an offer.
Never send one-time login codes to someone claiming to activate a bonus. Do not install remote-access software or browser extensions from unsolicited support messages. A promotional credit does not require giving a stranger control of a device.
Respond promptly to suspicious activity
If you notice unauthorized logins or transactions, secure the email and account through official recovery channels, contact the operator, and preserve relevant messages. Ask whether sessions can be revoked and withdrawals paused while the issue is reviewed.
Keep promotional disputes separate from account compromise. A missing bonus can wait while credentials are secured. Avoid contacting a supposed recovery service that demands payment to retrieve gambling funds.
Worked example · hypothetical
Hypothetical example
A fictional text says a bonus expires in ten minutes and links to a misspelled domain. Opening the verified account independently shows no such offer. The absence of confirmation is a reason to ignore the link and report the message, not to enter credentials to investigate.
Common questions
Can a genuine-looking logo prove a message is authentic?
No. Logos and screenshots can be copied. Verify through the known official domain.
Should I share a login code with support?
No. One-time authentication codes protect account access and should not be handed to a caller or message sender.
Sources & further reading
Read the source alongside the explanation. Rules and published terms can change; check the current official position where you live.
How we research and maintain guides →