Check the full address
Compare the domain with an address you independently verified earlier. Watch for substituted letters or a different ending. A copied logo does not establish who controls a website.
PNG PLAYER SAFETY CHECKLIST
Suspect a Fake Casino Website or Support Account?
A familiar logo or convincing message is not proof of identity. If a casino-related link or support request seems suspicious, pause before signing in, sending documents or paying.
Published by K99PNG for general education. This is not an independent review, a safety certification of K99PNG or another operator, or a money-recovery service.
1. Verify the website and the person separately
Start a separate conversation
Use a trusted bookmark or independently verified contact details. Ask whether the message and sender are genuine. Do not use the suspicious message's own link or phone number to verify it.
Background: PNGCERT phishing guidance and lookalike-domain examples.
HTTPS is not a trust certificate. It encrypts the connection; it does not prove that the operator is genuine. Scam websites can use HTTPS too. FTC explanation.
2. Check what the sender wants you to do
- Reveal a secret: do not tell another person your password, banking PIN or one-time verification code. Use codes only in a verified process you initiated.
- Act before you can verify: pressure to pay or disclose details immediately is a reason to pause, not to skip checks.
- Change the payment destination: independently confirm an unexpected recipient or payment instruction before taking any action.
- Install an app or allow remote access: do not follow an unsolicited sender's instructions to control your device.
BSP's PNG fraud warning covers impersonation through websites, social media and messages, including requests for banking secrets.
An unfamiliar request or a delayed withdrawal alone does not prove fraud. Ask for the written explanation and applicable terms through a verified channel. This checklist cannot decide a dispute or certify an operator.
3. Choose the action that matches what happened
You only received a message
Do not follow its links or open attachments. Preserve relevant evidence, then report the account through the messaging platform and block further contact.
You entered a password
From a trusted device, visit the genuine service directly and change it. Change reused passwords elsewhere too. Enable multi-factor authentication where supported and use the service's account-recovery process if locked out.
You installed suspicious software
Stop using the affected device for sensitive accounts. Seek trusted technical help, update security software and scan for malware. Use a different trusted device to secure affected accounts.
You shared banking details or paid
Contact your own bank or payment provider immediately. Explain what happened and ask about securing the account and whether a transaction can be stopped or recalled. Recovery is not guaranteed.
Further steps: FTC account and device guidance. It is US guidance; use your own provider and PNG reporting channels for local assistance.
4. Keep useful evidence, without exposing more information
Keep the website address, sender's handle or number, message timestamps, payment receipts and transaction references. Describe what was requested and what you already did.
Do not publish passwords, verification codes, identity documents or full banking details in public posts. Share sensitive evidence only through a verified reporting channel when needed.
Where PNG readers can seek help
- Your bank or payment provider: use its official app, independently verified website, branch or contact details. BSP customers can consult BSP's official contact page.
- Cybersecurity incidents: use PNGCERT's incident-reporting page. The published channel is not a promise of immediate response or reimbursement.
- Impersonation accounts: report the profile through the relevant social or messaging platform's reporting tools.