Scams to Avoid: Fake Bonus and Promo Codes

How the fake-code trade works

Three species share the same shelf. First, the harmless-but-useless: a code copied from an expired campaign, republished endlessly because the page ranks. It fails at the cashier and wastes your time. Second, the lead farm: a page that requires registration, a phone number or an app install before it will "reveal" the code, which does not exist. Third, the active scam: a code delivered in a direct message along with a link, where the link is a clone domain and the code is the reason you logged in without reading the address.

The third is the dangerous one, and the code is doing precise psychological work. It gives you a reason to hurry, a reason not to scrutinise the address bar, and a plausible story for why the offer is not on the operator's own promotions page.

There is also a quieter version: a genuine-looking code attached to terms nobody mentions. A large headline bonus with a wagering multiple and a time limit you were never shown is not a scam in the criminal sense, but the money is just as locked.

Where a real promotion lives

• On the operator's own promotions page, reached from an address you typed yourself
• Inside your logged-in account, where offers are attached to your account rather than to the internet in general
• With full terms displayed before you opt in: the wagering multiple, the base, the time limit, the maximum bet while a bonus is active, and which games contribute
• Without needing a code at all, in many cases — most campaigns now apply automatically on opt-in

If an offer cannot be found in either of the first two places, the useful assumption is that it does not exist. Asking support in writing takes a minute and settles it.

Claim, reality, response

Four scams that share the doorway

• The release fee. A clearance charge, tax or unlock payment demanded before a withdrawal moves. Operators deduct from a balance and never need money sent in to send money out.
• OTP and password phishing. "Read me the code so I can apply the bonus." A one-time code authorises a transaction, not a promotion.
• Fake agents on Telegram and Facebook, offering bonus top-ups and VIP tiers. Operators do not run promotions through social DMs.
• Clone domains a character from the real address, which is where most fake-code links lead.

Reading bonus terms before you opt in

Four numbers decide whether a bonus is worth claiming, and all four are in the terms rather than on the banner. The wagering multiple. The base it applies to — bonus only, or deposit plus bonus, which doubles the turnover required. The time limit. And the maximum bet allowed while a bonus is active, because exceeding it once can void the bonus and the winnings from it under many terms.

Add game weighting as a fifth. Slots usually contribute fully; live casino and table games often contribute a fraction or nothing, which is why people play for hours and see the requirement barely move. None of this is hidden — it is simply not on the banner. Screenshot the terms on the day you claim, because promotion pages change.

What a real KYC request never asks

Verification is legitimate and expected, normally before a first withdrawal. It asks for documents, through the site's own upload form. It never asks for secrets, and it is never a condition of a bonus delivered in a chat.

• Never a one-time password, PIN, MPIN or account password
• Never a transfer from you to "test" or "activate" anything
• Never remote access or a screen-sharing session
• Never ID photographs sent to a personal chat account
• Never a full card number and CVV typed into a chat

Direction is the tell: verification starts inside your logged-in account on a site you navigated to yourself.

Escalation route

1. The operator's own support, in writing, with amounts, dates and references, and keep every reply.
2. Your e-wallet or bank, through its own app and in-app help — never a number someone sent you.
3. PAGCOR's published players' concerns channel, reached from pagcor.ph typed into the address bar, with your ticket reference ready.
4. The PNP Anti-Cybercrime Group or the NBI Cybercrime Division for phishing, impersonation and theft; both publish current reporting channels on their official government sites.

We print no hotline digits: numbers change, and a stale number in a guide is the gap a fake helpline fills. This site is an independent guide for adults 21 and over — it takes no deposits, runs no games, issues no bonuses and cannot release a balance. If chasing a loss brought you here, the responsible-gaming page is the relevant one.