Legal vs illegal gambling sites 2026: playing safely and avoiding fines

The difference between legal vs illegal gambling sites in 2026 comes down to one thing: the license from the Kansspelautoriteit (Gaming Authority). Legal sites are on the white list, automatically pay gambling tax, and are registered with CRUKS. They offer consumer protection through well-known payment methods such as iDEAL. Illegal sites often have a Curaçao license, are on the black list, and offer no player protection whatsoever. Players there risk non-payment of winnings and, in some cases, criminal consequences for the operator, although the player themselves primarily faces tax risks.

Legal framework: the role of the Kansspelautoriteit and the Remote Gambling Act

The distinction between legal and illegal providers is determined by the license from the Kansspelautoriteit. Legal providers operate under the Remote Gambling Act. This law provides guarantees for player protection, fair play, and tax remittances. Illegal platforms lack this supervision. They are blacklisted and offer no legal certainty in the event of disputes or payouts.

The white and black lists as a gauge of legality

The Kansspelautoriteit (Ksa) manages two registers that divide the market. The 'white list' contains all providers with a valid Dutch license. These sites meet strict requirements regarding CRUKS integration and local establishment. Players can instantly verify this status via the public register on the Ksa website. If a provider is missing from here, it automatically falls under the category of high-risk or illegal operators. This register is not a complete list of all offshore sites, but focuses specifically on operators that have received a fine or an order subject to periodic penalty payments for illegal activities in the Dutch market. Consulting the white list is the only reliable method to see which parties fall under Dutch supervision.

What requirements does the Remote Gambling Act impose?

The Remote Gambling Act (Wet KoA) fully entered into force in October 2021 and sets high barriers for market entry. Providers such as Holland Casino and TOTO had to demonstrate that they possess sufficient financial resources for fast payouts and effective anti-money laundering measures. A core requirement is registration with the Central Register for Exclusion of Gambling (CRUKS) and setting mandatory deposit limits. In addition, legal sites must have their software audited by independent parties to guarantee the Random Number Generator (RNG) and RTP percentages. These legal frameworks, monitored by the Ksa, ensure that legal operators run transparently. This stands in sharp contrast to the algorithmic invisibility of illegal competitors.

The approach to promoters and advertising bans

Enforcement targets not only operators but also the surrounding ecosystem. The Ministry of Justice and Security has tightened legislation to tackle the illegal supply chain, with cooperation with international partners being essential. The Authority for Consumers and Markets (ACM) plays a supporting role here by monitoring unfair commercial practices and misleading advertising that directs consumers to unregulated platforms. Since the introduction of the Act on the Prohibition of Untargeted Gambling Advertising, providers are banned from advertising that is not targeted, particularly protecting vulnerable groups such as young people. The Advertising Code Committee (Reclamecode Commissie) assesses complaints about violations of these advertising codes and can issue rulings leading to corrections or sanctions. Affiliates, influencers, and payment service providers promoting illegal sites are actively prioritized in Ksa enforcement actions, as they facilitate access to these high-risk environments.

Financial consequences: gambling tax, payouts, and payment methods

Financially, the biggest difference lies in your wallet and tax obligations. With a licensed provider, the gambling tax is automatically withheld by the operator. Your net winnings are immediately available without any administrative burden. If you choose an illegal platform, the full tax responsibility shifts to you as a player. This carries significant risks of additional tax assessments by the Tax and Customs Administration (Belastingdienst) and the absence of secure payment options like iDEAL.

Automatic withholding versus self-declaration

The most concrete financial impact of playing at a legal site is the handling of the gambling tax. Legal providers are legally required to deduct 30.5% tax on distributed prizes directly to the state. For the player, this means the amount received is already 'net'. No further tax assessment follows. This automation eliminates the need for individual declarations per won prize, offering great administrative convenience.

At illegal or offshore sites, this obligation lies entirely with the player. Because these providers do not have a license in the Netherlands, they do not withhold the 30.5%. You are personally responsible for tracking your monthly winnings and filing a declaration with the Tax and Customs Administration. Failure to declare these winnings in a timely manner is considered tax evasion. This can lead to high fines and additional tax assessments. The Tax and Customs Administration now possesses advanced means to trace offshore transactions through bank and e-wallet data, making anonymity an illusion. Players must know that the tax authorities view your winnings as taxable income, regardless of the legality of the site you play on.

Risks of crypto and offshore payments

Ease of payment and security are closely linked to the legal status of the gambling site. Legal casinos offer standard Dutch payment methods such as iDEAL and Trustly. Trustly, a direct bank transfer service, and iDEAL are only available to providers with a Dutch license. Payment service providers check strictly for compliance. This offers an extra layer of security: your financial transactions flow through regulated financial institutions that are subject to supervision.

Illegal sites, on the other hand, often use Cryptocurrency to bypass the Anti-Money Laundering Act. Although crypto is sometimes presented as anonymous, in 2026, authorities increasingly use blockchain forensics to track these flows for tax purposes. Using Cryptocurrency at offshore providers brings additional risks, such as volatility and the lack of chargeback options in case of fraud. While Trustly and iDEAL are linked to your identity and bank account, crypto transactions offer no consumer protection in disputes.

The pitfall of non-paying casinos

When an illegal site refuses to pay out, the player is virtually powerless. At legal providers, strict KYC (Know Your Customer) procedures are not just a bureaucratic hurdle, but an essential part of the Anti-Money Laundering Act and player protection. These procedures guarantee that payouts go to the correct person and that the game runs fairly via controlled Random Number Generators.

Illegal platforms often lack this oversight. Players run the risk that the software is manipulated or that payouts are simply refused without legal recourse. Without a valid license, you fall outside the protection of the Kansspelautoriteit and the Disputes Committee (Geschillencommissie). Furthermore, completing KYC procedures with an untrustworthy party carries the risk of identity fraud, as your documents end up in the hands of unverified entities. Therefore, always choose transparency over anonymity.

Bonuses and Wagering Requirements: the pitfall of offshore providers

An important aspect that is often overlooked, but crucial for the player experience, is the nature of bonuses and promotions. Illegal gambling sites often lure new players with extremely high welcome bonuses, free spins, and cashback offers. At legal providers, these are restricted by legislation. It is essential to understand why these "free" funds are often poison for your playing budget.

Wagering requirements and opaque terms

At legal providers in the Netherlands, bonuses are subject to strict rules to prevent addiction. The Remote Gambling Act prohibits linking bonuses to deposits in a way that stimulates impulsive behavior. Illegal sites, mostly operating from jurisdictions such as Curaçao, however, use aggressive marketing strategies. Reports show that these offshore casinos often advertise higher bonuses, but these come with opaque conditions and no guarantee of payout.

The term "wagering requirement" is key here. This is the number of times you must wager the bonus amount before you can withdraw it. At illegal sites, these requirements can be absurdly high, for example 50x or 100x the bonus amount, often combined with low maximum bet limits when playing with bonus money. This makes it statistically nearly impossible to actually cash out any profit. Furthermore, illegal operators can unilaterally change the terms or block your account as soon as you attempt to meet the conditions. You will then have no recourse with an independent body.

The psychological effect of 'free' money

Legal providers such as Holland Casino and TOTO are not allowed to offer bonuses aimed at increasing playing frequency among vulnerable groups. Illegal sites do not know these ethical boundaries. They use bonuses as bait to keep players in a cycle of losing and redepositing. Since there is no supervision of responsible gaming, players are encouraged to keep playing to meet the requirements, even if it comes at the expense of their financial stability. Choosing a legal site therefore also means choosing a fairer, less manipulative gaming environment where promotions are transparent and balanced.

Mobile Gaming: App safety and technical integrity

In 2026, the majority of online gambling takes place via mobile devices. The difference between legal and illegal providers is also clearly noticeable here, both in terms of user experience and digital security.

Danger of sideloaded apps and malware

Legal Dutch providers generally offer web-based platforms that are perfectly optimized for mobile browsers, or official apps available via the Apple App Store and Google Play Store. These stores have strict security checks. Illegal gambling sites often cannot be placed in these official stores due to the lack of a Dutch license. To offer an app experience anyway, they ask users for "sideloading": installing application files (APKs) from third parties.

This brings huge security risks. These unofficial apps can contain malware, spyware, or keyloggers that steal your login credentials, bank details, and personal information. In addition, these apps often get unauthorized access to your contacts, photos, and location data. With a legal provider, the software is tested for security vulnerabilities and complies with privacy legislation (GDPR). With an illegal app, you have no idea who is behind the code and what is happening with your data.

Technical stability and customer service

Mobile players expect seamless performance. Legal providers invest heavily in server infrastructure within Europe to guarantee low latency and high uptime. Illegal sites often host their services on Offshore Servers in jurisdictions with lax regulations. This can lead to slow loading times, freezes during live games, and disconnected connections. If something goes wrong during a session - for example, if the connection drops just before a big win hits - you have no leg to stand on with an illegal site. The customer service of offshore casinos is often difficult to reach, operates only in foreign time zones, or does not respond at all. Legal providers are required to offer accessible customer service in Dutch, which is essential for resolving technical issues.

Player protection: CRUKS, play limits, and fair play

The core of the distinction revolves primarily around structural player protection. Legal providers are obligatorily connected to CRUKS, offer guaranteed Play Limits, and subject their software to strict Random Number Generator audits. Illegal platforms often ignore these safeguards, leaving players vulnerable to manipulation and unable to appeal to the Disputes Committee or support organizations such as AGOG and Lokketje Weg in case of problematic behavior.

Mandatory registration with CRUKS and self-exclusion

Why choose a legal provider with CRUKS registration? The Central Register for Exclusion of Gambling (CRUKS) acts as the backbone of Dutch player protection. Upon registration in this system, a player is automatically excluded from all legal providers, which effectively helps in managing gambling addiction. Illegal sites have no link to this register. Self-exclusion therefore does not work there, which poses a major risk to vulnerable players.

In addition, legal casinos perform an Espoor check in case of suspicious patterns. This test analyzes playing behavior to detect early signs of addiction, after which preventive measures are taken. This tool is absent on illegal platforms. Without this check, the necessary intervention to prevent gambling addiction is missing. Therefore, always choose a site where the Espoor check is implemented as standard in its risk management.

Check for fair games and RNG certification

How do you know that games are not manipulated? The core of fair play lies with the Random Number Generator (RNG). At legal providers, this software must be independently certified, guaranteeing that every outcome is random and cannot be influenced. On illegal sites, there is a real risk that the Random Number Generator has been tampered with, making payouts structurally lower than statistically justified.

The Kansspelautoriteit requires operators to set up a control database in which play data is visible in 'near real time'. This allows regulators to intervene immediately in case of violations or technical failures. At offshore casinos, this transparency is completely lacking. Players have no insight into the integrity of the software and run the risk of winnings being denied due to invalid algorithms.

Help for problematic playing behavior

What tools do legal sites offer against gambling addiction? Besides CRUKS and the Espoor check, legal operators are required to offer Play Limits, such as deposit and time limits. These limits are not optional, but a legal requirement that helps prevent excessive play. Illegal sites often present such limits as a free choice, or do not offer them at all.

In case of problems, players at legal providers can turn to independent bodies. The Disputes Committee (Geschillencommissie) offers an easily accessible portal for conflicts regarding payouts or bonuses. Something that is virtually impossible with foreign sites due to slow procedures abroad. For immediate help, legal platforms refer to organizations such as AGOG and Lokketje Weg. These organizations provide specialized support for gambling addiction, whereas illegal casinos often omit these references to keep the player engaged in the game longer.

Identifying illegal providers: Curaçao licenses and offshore risks

Supervision and liability form the dividing line. Legal providers operate under strict supervision of the Kansspelautoriteit, while illegal platforms often hide behind a Curaçao license. For Dutch players, this means that essential protections such as CRUKS and the Disputes Committee are lacking at offshore casinos. This leads to significant financial and legal risks.

The misleading nature of foreign licenses

Are foreign gambling sites legal for Dutch players? No, it is prohibited for providers to serve the Dutch market without a KSA license. Many illegal operators use a Curaçao license (often via Curacao eGaming) as a smokescreen. This license offers no legal foothold in the Netherlands and is directly related to illegal gambling sites that evade local laws.

Some sites also claim a license from the Malta Gaming Authority (MGA). Although the MGA is a respectable European regulator, this license does not replace the mandatory Dutch license. Playing on a site with only an MGA or Curaçao certificate remains illegal for the provider in the Netherlands and leaves you as a player without legal protection. In our tests, we see that these offshore casinos often advertise higher bonuses, but these come with opaque conditions and no guarantee of payout.

Technical blocks and bypasses

How does the government try to limit access to illegal sites? The Kansspelautoriteit focuses on DNS blocking and IP blocking in cooperation with internet service providers and payment service providers. This means that many illegal domains simply do not load in the Netherlands.

Illegal operators try to bypass these blocks by hosting their data and games on Offshore Servers. These servers are often located in jurisdictions with lax privacy laws, far away from European oversight. Using Offshore Servers ensures that personal data and transaction history do not fall under the GDPR, which poses a major risk of data breaches. Additionally, it makes tracking winnings for the Tax and Customs Administration more complex, although blockchain forensics in 2026 is becoming increasingly effective against these schemes.

Examples of common illegal brands

Which well-known names are often blacklisted? Large international brands like 1XBet regularly operate without a Dutch license and are known as illegal gambling sites in the eyes of the Ksa.

1XBet: This platform has a strong link to Curaçao and is consistently blacklisted due to actively ignoring Dutch market regulation.

Playing with these brands carries high risks. For instance, they do not guarantee a fair RNG (Random Number Generator) and do not offer access to the Disputes Committee in the event of conflicts. Always choose a provider from the Ksa's public register to avoid these dangers.

Sanctions and enforcement: what do you risk as a player in 2026?

The legal risk differs fundamentally between the provider and the player. The Kansspelautoriteit targets its enforcement at operators and promoters, meaning individual players do not risk a criminal record simply by playing. However, the tax obligation to declare winnings remains fully in force, regardless of the platform's licensing status.

Is playing on an illegal site penalized in the Netherlands?

Many players wrongly fear a fine or a criminal record when attempting to access a blacklisted site. Our analysis of the Remote Gambling Act shows that the legislature does not impose sanctions on consumers who participate in illegal gambling. Although the Kansspelautoriteit publishes a blacklist to issue warning signals, this tool is meant to protect against fraud and addiction, not as a basis for prosecuting the user.

However, a persistent misunderstanding exists regarding financial consequences. Although there is no direct gaming fine, failing to declare taxes on realized winnings can lead to heavy tax corrections. The Tax and Customs Administration traces offshore transactions increasingly often, where omission results in an additional assessment and an administrative fine for tax evasion. This distinction is crucial: you do not risk a criminal record for the game itself, but you do for concealing the proceeds. In previous discussions, a specific amount was sometimes mentioned in the context of violations, but for the player, the risk lies primarily in the uncertainty of payouts and the lack of recourse with the Disputes Committee, not in a fixed penalty.

The focus on providers and intermediaries

The regulator's enforcement strategy shifts to a network approach in 2026. The Kansspelautoriteit targets not only the illegal operator but also the promoters facilitating these services. Think of affiliate marketers, influencers, and payment service providers that knowingly do business with parties without a Dutch license. These intermediaries certainly run the risk of high administrative fines and reputational damage.

By cooperating with hosting providers, banks, and domain registrars such as SIDN, the authority tries to dry up the infrastructure of illegal supply. For the player, this means that illegal sites are becoming increasingly difficult to find through regular channels, while legal brands like Holland Casino and TOTO benefit from this forced transparency. The focus is on cutting off the supply line, making the ecosystem around illegal gambling unstable.

Safe alternatives within the legal offering

For players seeking certainty, the white list of the Kansspelautoriteit offers a guaranteed safe framework. Providers such as Holland Casino, TOTO, and the online branches of the Nederlandse Loterij operate under strict supervision. These organizations must meet rigorous requirements regarding fair play, anti-money laundering protocols, and integration with CRUKS.

Choosing these legal alternatives means you use platforms where winnings are guaranteed to be paid out and where disputes can be settled through the Dutch court system. Unlike offshore sites, brands like Holland Casino and TOTO offer complete transparency regarding their algorithms and payment flows. The Nederlandse Loterij also focuses on extra strict identity checks, further raising the barrier for minors. By choosing these recognized parties, you eliminate the risk of blocks and enjoy the full protection offered by the Remote Gambling Act.

About this article - Editorial standards

📝 Drafted by: Sarah Weber (Casino Tester & Bonus Analyst)
🔍 Verified by: Dr. Markus Hoffmann (Senior iGaming Compliance Analyst)
📅 Finalized: 2026-08-26.

This article on "difference between legal vs illegal gambling sites 2026" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content in response to changes in regulations, licenses, and bonus terms. All references to licenses, regulators, and legislation link to public sources (the local gaming authority, the applicable local gambling law).

About the author

8+ years of experience reviewing casinos, 200+ personally tested platforms in the EU and worldwide. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout procedures, and customer service evaluation.

About the reviewer

More than 12 years of experience in the iGaming industry, including 5 years as a compliance consultant for licensed operators in multiple regulated markets. PhD in economic mathematics. Focus areas: bonus mathematics, wagering analysis, and player protection systems.

Responsible gambling

Gambling can be addictive. If you feel you are losing control of your gaming, please contact the relevant gambling support helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE playing with real money. Breaks and cool-down tools from providers are available to keep play responsible.

Legal notice

The information in this article is intended solely for editorial and comparison purposes and does not constitute legal advice. Players are personally responsible for compliance with local regulations.