Check the entire domain character by character and compare it with a current primary source. A familiar logo, HTTPS padlock, paid search placement or social account is not enough to prove a login page belongs to the operator.
Avoid login links in unsolicited SMS, messaging apps or emails. Type the verified address yourself or use a saved bookmark you created after checking the source. Never share a password, OTP, MPIN or recovery code with someone offering account help.
If credentials were entered on a suspicious page, change the password from a trusted device, contact the operator and wallet provider through known channels, and monitor account activity. See the login guide and domain checklist.
Related guides
Independent review · PAGCOR record · Responsible gaming · Home