How to Verify a PAGCOR-Licensed Gaming Site and Spot Fake Clones

Fake gaming sites are one of the most common online scams in the Philippines. They copy a real brand’s look, buy ads or post in Facebook groups, take deposits, and then disappear. The good news is that checking a site properly takes about five minutes. This guide shows you how.

Why it matters

When you play on a PAGCOR-licensed site you have a regulator behind you: operators must verify ages, follow responsible gaming rules, and handle complaints. On an unlicensed or clone site you have none of that. If they refuse to pay, there is no one to escalate to.

Step 1: Use PAGCOR’s official list, not the site’s own badge

Any website can paste a PAGCOR logo in its footer. A logo proves nothing. What counts is PAGCOR’s own published list.

1. Go to the official PAGCOR website at pagcor.ph (type it yourself).
2. Look in the regulatory section for the list of accredited gaming system administrators and their registered brands and domain names. PAGCOR updates this list periodically and shows the date on the document.
3. Search the list (Ctrl+F on a computer) for the brand name.

Step 2: Match the exact domain

This is the step most people skip, and it is where clone sites win. The list records specific domain names for each brand. Compare letter by letter:

• Is the spelling identical? Watch for doubled letters, swapped letters, or “rn” pretending to be “m”.
• Is the ending the same? A brand registered with .com does not automatically own a .net, .vip or .ph version.
• Are there extra words or hyphens, such as “-official”, “-login” or “-bonus“?

If the exact domain is not on the list, treat the site as unlicensed, however professional it looks.

Example: GTAYA appears on PAGCOR’s list (dated 29 October 2026) under the operator TOPBET TECH CORP., registered with the domain gtaya.com. Information sites like this one are not gaming sites and do not take deposits. Always play on the registered domain.

Design can be copied. The registered domain cannot.

Step 3: Check the operator details on the site

Legitimate operators display the company name and license information, terms and conditions, a privacy policy, responsible gaming tools and a 21+ notice. Check that the operator company named on the site matches the one on PAGCOR’s list.

Step 4: Look at how they want your money

Licensed sites take deposits through their own cashier pages. Red flags include:

• Requests to send money to a personal GCash or Maya number.
• “Agents” in Telegram, Messenger or Viber who handle deposits for you.
• A fee or “tax” you must pay before a withdrawal is released.

Our GCash and Maya safety guide covers this in detail.

Step 5: Be suspicious of where you found the link

• Social media posts and ads offering huge bonuses, “guaranteed” wins or “hacks”.
• Text messages with a link and a “you won” or “free credits” message.
• Search ads that look like the brand but lead to a different domain.

The safest habit is to bookmark the registered domain once you have verified it, and always use that bookmark.

Common clone-site tricks

Quick five-minute checklist

1. Brand found on PAGCOR’s official list? ✓
2. Exact domain matches the list? ✓
3. Operator company name matches? ✓
4. HTTPS padlock present and no browser warnings? ✓ (Necessary, but not proof by itself.)
5. Deposits only through the site’s own cashier? ✓
6. 21+ notice and responsible gaming tools visible? ✓

What to do if you find a fake

• Do not deposit or enter personal details.
• Report the site to PAGCOR through its official channels.
• Report scams to the PNP Anti-Cybercrime Group or the CICC.
• Report the page or ad to the social platform where you saw it.
• Warn friends and family. Clone sites often spread through group chats.

Worked example: checking three links

Imagine you receive three links in a group chat, all claiming to be GTAYA. Here is how the check plays out:

The second and third examples are made-up illustrations of common clone patterns, not real sites we have checked.

Informational and affiliate sites such as this one are a separate case. They do not take bets or deposits, so they are not on the gaming list, but the place where you actually register and deposit must be the registered domain.

Reading the PAGCOR list properly

• Check the date on the document. Brands can be added or removed, so use the latest version.
• Find the operator row, not just the brand name. The list groups brands and domains under the licensed company.
• Read every domain listed. Some brands have more than one registered domain; only those listed count.
• Check the permitted games. The list can show what an operator is approved to offer, for example e-casino or sports betting. A site offering something outside that scope is a warning sign.

Browser checks that help (and their limits)

Protecting family members

Older relatives and first-time players are frequent targets of clone sites shared in group chats. A five-minute conversation helps: show them how to bookmark the registered domain, explain that no real site will ever ask for their OTP, and agree that they will ask you before depositing anywhere new. If a family member is struggling with gambling, PAGCOR’s exclusion program also allows certain family-initiated requests. See our responsible gaming page.

Questions to ask before you sign up anywhere

1. Where did I get this link, and could someone have changed it?
2. Does the domain match PAGCOR’s latest list, letter for letter?
3. Does the site show the operator’s company name, terms and privacy policy?
4. Are deposits handled only through the site’s own cashier page?
5. Does the site have a 21+ requirement and account verification?
6. Can I find deposit limits, cool-off options and self-exclusion in account settings?

If the answer to any of these is no or unclear, do not deposit. A legitimate operator will still be there tomorrow, after you have had time to check.

What a licence does and does not guarantee

A PAGCOR licence means the operator is regulated, subject to rules and complaint channels. It does not mean you will win, that bonuses are generous, or that every game suits you. Read the terms, set limits, and treat play as entertainment.

Verification at a glance

Only the first two signals actually confirm a licensed site. The others help, but a scam site can copy every one of them. If you only have time for one check, make it the exact-domain match against PAGCOR’s latest published list, and do it before you create an account or enter any payment details.

Written and reviewed by the GTAYA Editorial Team

Our guides are researched from official sources (PAGCOR, BSP, Philippine law) and reviewed before publishing. Rules that vary by table are flagged.

Read our editorial policy →