A casino is asking for extra ID documents I've never had to give before — is this a phishing attempt?
Legitimate casinos do require identity verification, but requests should go through the casino's own secure account portal; unexpected email attachments or links asking you to upload documents outside your account may be phishing rather than a real verification request.
Last reviewed: 5 July 2026
Explanation
Know-your-customer identity verification is a standard, legally required part of operating a licensed gambling platform, and being asked for a photo ID, proof of address, or a selfie holding your ID is normal, especially around your first withdrawal or when a payment method changes. This is not inherently suspicious when it happens through the casino's own official account dashboard.
However, scammers sometimes impersonate a casino's verification team through email or text, sending a link to a fake look-alike portal designed to harvest your uploaded ID documents and card details for identity theft, rather than for genuine account verification. These messages often create urgency, claiming your account will be suspended or your withdrawal cancelled if you don't verify within a short window through the link provided.
Before uploading any document in response to an email or text, log into your account directly by typing the casino's known web address yourself (not by clicking the message's link) and check whether a verification request genuinely appears in your account dashboard. If it doesn't, the message was very likely a phishing attempt, and you should report it rather than engage with the link at all.
Common red flags
- Verification request arrives by email or text with an urgent deadline and a clickable link
- Link leads to a page that looks similar to but not exactly matching the casino's real domain
- Request asks for documents or information beyond what the casino's own dashboard normally requires
- Message threatens account suspension or withdrawal cancellation if you don't act immediately
- Sender address doesn't match the casino's official domain
- No matching verification request visible when you log in directly through the casino's known website
What to do now
- Never click a verification link in an email or text; type the casino's known address into your browser directly
- Check your account dashboard directly to see if a genuine verification request is pending
- Compare the sender's email domain carefully against the casino's official domain
- Report suspicious verification emails to the casino's real support team through official channels
- Contact your bank if you already submitted card details through a suspicious link
- Enable two-factor authentication on your casino account where available
Frequently asked questions
Is it normal for a casino to ask for ID at all?
Yes, identity verification is a standard, legally required practice at licensed casinos, particularly around your first withdrawal — the concern is specifically about verifying the request came through official channels, not that verification itself was requested.
What should I do if I already uploaded documents to a fake portal?
Contact your bank about potential card compromise, monitor for identity theft, consider a credit freeze or fraud alert, and report the incident to your national fraud reporting body.