Scams to Avoid: Fake Bonus Codes and Promo Scams

Why bonus scams work better than most

A fake bonus does not feel like a risk. It feels like a gift, and it is aimed at somebody who is already willing to be persuaded — you were looking for an offer, so an offer arriving is not suspicious. There is no threat, no urgency to notice, no demand for money at the start. All it asks is one small step: enter the code here, log in there, or deposit through this link.

It also hides behind something legitimate. Real operators do run real promotions with real codes, so "here is a bonus code" is not an inherently strange sentence. The distinguishing question is never whether the code sounds plausible. It is where the code lives — and the only answer that counts is the operator's own promotions page, reached from inside your logged-in account.

The four shapes a fake bonus takes

1. The credential trap. A page styled like the operator asks you to log in to claim the code. The page is a copy on a lookalike domain, and what you have just submitted is a username, a password and, moments later, a one-time code.
2. The deposit middleman. An "agent" says the bonus only applies to deposits made through them. Money sent to a person is money the operator never sees, with no reference number and nothing for a regulator to trace.
3. The payment-for-a-bonus. A code is sold for a small sum, or requires a load top-up to "unlock". Operators do not sell their own promotions, and this is a pure cash transfer with a story attached.
4. The real code with a hidden condition. Sometimes the code genuinely exists, but you were shown the headline and not the terms — a wagering multiple applied to deposit plus bonus, a maximum-bet rule, a game-weighting table, an expiry. The scam here is the omission, and it is the one that costs a withdrawal.

The fourth is worth dwelling on, because it is not always fraud and it is the one that catches careful people. Any bonus you take attaches conditions to your own money. Reading the full terms page, not the offer card, is the only protection, and declining a bonus altogether is always allowed.

Five scripts and why each one fails

What a real verification request never asks for

Bonus scams very often end at a verification step, because that is where a code can be asked for without it seeming odd. KYC is dull and predictable, and the list of things it never involves is short enough to memorise. Anything here is a scam, however official the message looks.

• Your one-time code — spoken, forwarded, screenshotted, or typed anywhere but the operator's own screen
• Your account password, or your e-wallet MPIN or PIN
• A remote-access, screen-share or "helper" app so an agent can do it for you
• A fee, a load top-up or a deposit to activate, unlock or release verification or a bonus
• A card's three-digit security code, or a full card number typed into a chat window
• Identity paperwork sent to a chat handle or a private inbox rather than uploaded in your account
• An ID in someone else's name, or a relative's document to "get past the check"

The real process: you log in yourself, open the verification area in your own account, and upload an ID whose name matches both the casino account and the wallet or bank account you withdraw to. That name-matching rule stalls more Filipino withdrawals than anything else, and no agent can waive it for you.

Four tells

• The offer is not on the operator's promotions page. That alone settles it.
• Money has to move before the benefit arrives — a fee, a top-up, a deposit through a person.
• A code, a password or a screen-share is requested. All three are the same request.
• The conversation moves to Telegram or Messenger, because the operator's own channel keeps a record.

If you already clicked, paid or entered a login

1. Open the operator's site by typing its domain yourself and change your password immediately, then sign out all other devices and read the login history.
2. Reset the password on the email registered to the account, since every recovery runs through it.
3. If you entered a one-time code, assume the account was reached and check the withdrawal and bank-details sections for changes somebody else made.
4. Open your e-wallet's own app and look for transfers you did not authorise. Report anything wrong from inside that app — never through a number or link that somebody sent you. Speed matters.
5. If you paid an "agent", keep every screenshot and the transfer reference, and do not pay a second time under any explanation.
6. Report it to the operator through the support channel in your account, and ask for the case reference in writing.
7. Escalate to PAGCOR's published complaint channel, found by typing pagcor.ph yourself, with the operator's name, your case number and your evidence.
8. For phishing or fraud, use the PNP Anti-Cybercrime Group or the NBI Cybercrime Division through acg.pnp.gov.ph or nbi.gov.ph, where each publishes its current route.

This page prints no hotline numbers on purpose. Numbers go stale, get mistyped and get impersonated, and fake "hotlines" are advertised specifically to catch people searching for help. Take the current detail from the agency's own site, or use its online complaint form.

About this site

JILIPH cannot grant a bonus, release a withdrawal, unlock an account or reverse a deposit, because it is a guide and not an operator. Any message claiming to be from this site and offering a code, or asking for a fee, a login or remote access, is a scam borrowing our name. Gambling is for adults 21 and over; deposit limits, cooling-off and self-exclusion live on your operator's account page.