Guide
How to check whether an online casino is trustworthy
Carolina Nunes
Regulation and safety editor · 9/7/2026

Before creating an account, submitting documents or making a deposit, check the federal authorization, the address you are visiting and how the company handles complaints, payments and personal data. The free, publicly accessible list maintained by the Secretaria de Prêmios e Apostas do Ministério da Fazenda, SPA/MF, is the starting point. The .bet.br domain is a requirement for authorized operators, but it does not replace checking that list.
Confirm authorization with SPA/MF
Visit the SPA/MF section on the Ministério da Fazenda portal and find the list of authorized companies. Look up the platform and check whether its authorization is active. Compare the official details with those displayed on the website, including the authorization number. An image of a license in the footer is not enough. Check when you are evaluating the platform: authorizations may be suspended or revoked.
Check the full address in your browser
On a mobile device, tap the address bar to view the full address and compare it with the domain shown on the official list. Fake pages may copy the appearance of well-known brands to capture login details, documents and money. Links of this kind circulate through SMS, WhatsApp and social media ads. In your browser's security information, also check the certificate's validity and which domain it was issued for. An encrypted connection protects data during transmission; this alone does not prove that the company is authorized.
Read complaints and the responses to them
Research the company's reputation on complaint portals, forums and social media. Read the complaint, the company's response and the outcome, noting recurring problems and how they were handled. On Reclame AQUI, the “Would Do Business Again” indicator helps you understand the level of trust among people who rated the company after experiencing a problem. Reports of accounts being closed without explanation deserve attention. Consider the context of each case without treating an isolated complaint as proof of fraud.
Read the privacy policy before submitting documents
The policy should explain how data is collected, stored and used. Platforms authorized by SPA/MF must protect personal data in accordance with the LGPD. Check this information before providing documents or biometric data. Identity verification helps protect accounts and prevent fraud; liveness detection makes it harder to use static photos. Two-factor authentication strengthens access security. These measures do not remove the need to check the address and authorization beforehand.
Examine payment methods and withdrawal conditions
Authorized platforms accept Pix and other traceable payment methods, but offering Pix does not prove legitimacy. Be wary of services that exclusively accept obscure options or unknown intermediaries. Read the withdrawal conditions and the rules for paying out winnings before depositing. Authorized platforms must comply with their published rules without unilateral changes. Unexplained delays deserve investigation. Do not make a deposit just to test whether the website is genuine.
Check the contact details and test customer support
Look for contact information in Portuguese and dispute resolution channels. Support may be available through chat, email, telephone or social media; check which channels the company actually provides. Before registering, send a question about privacy or withdrawal conditions through the channel listed at the address you have already verified. Assess whether the response clarifies the issue and allows you to keep a record of the interaction. A quick response alone does not prove the platform's trustworthiness.
Checking seals and audits
Seals and audits also need to be checked. Legitimate seals generally link to the responsible institution: verify the reference with the issuer instead of relying solely on the image displayed by the casino. Independent laboratories such as eCOGRA, GLI and iTech Labs check game integrity. A certification indicates which parameters have been audited; check which game, software or service it covers. It does not replace SPA/MF authorization or predict the outcome of a bet.
Stop the verification process if there are discrepancies
Authorization does not eliminate the risk of losing money