The Malta Gaming Authority has published a growing number of public notices warning consumers about unauthorized gambling websites that falsely claim MGA licensing. In 2025 alone, the regulator reviewed 109 URLs and found 42 containing fraudulent references to the MGA or its licensees.
The pattern is consistent: unlicensed websites display MGA branding, cite license numbers that do not appear on the regulator's current register, or reference companies whose licenses have been surrendered or cancelled. For players, the risk is direct — unlicensed operators fall outside Malta's consumer protection framework, with no regulatory recourse for disputes, delayed payments, or misuse of funds. For licensed operators, the damage is reputational: fake sites trade on the credibility that legitimate licensees have invested in.
This guide explains how to verify an MGA license, how the license numbering system works, and what operators can do when their brand is being impersonated.
How to Check a License in the MGA Register
The MGA maintains a public licensee register at mga.org.mt/licensee-hub/licensee-register. It is the only authoritative source for confirming whether a company holds a valid Malta gaming license.
The register is searchable by licensee name, authorization status, website URL, and gaming service type. Each entry shows the company name, company registration number, license reference, authorized URLs, and current status.
To verify an operator's license, search for the company name or the URL displayed on the gambling website. If the site does not appear in the register, or the license number shown on the site does not match an active entry, the claim is not valid — regardless of what logos, seals, or license references appear on the operator's pages.
The MGA also publishes a dynamic verification seal. Licensed operators are required to display this seal on their websites, and clicking it should link directly to the MGA's verification page for that license. If the seal does not link to the MGA website, or the link is broken, that is a warning sign.
How to Read an MGA License Number
MGA license numbers follow a standard format: MGA/B2C/[number]/[year] for business-to-consumer licenses or MGA/B2B/[number]/[year] for business-to-business licenses. For example, MGA/B2C/533/2018 identifies a B2C license, sequentially numbered 533, originally issued in 2018.
The B2C and B2B distinction matters. A B2C license authorizes the holder to offer gaming services directly to players. A B2B license authorizes the holder to supply gaming services, software, or platforms to other licensed operators. An operator displaying a B2B license number as if it were a player-facing authorization is misrepresenting its regulatory status.
If a website displays a license number, check it against the MGA register. A valid-looking number means nothing on its own — it must appear in the register as active and associated with that specific operator and URL.
The Problem of Surrendered Licenses
Not all false licensing claims involve entirely fabricated credentials. Some of the most misleading cases involve real license numbers that are no longer valid.
The MGA's January 29, 2026 notice flagged four unauthorized websites: slotvocalnocasheu.vip, joypang-0907.com, nobet177.com, and playxfortuna.com. Industry reporting found that two of those sites — joypang-0907.com and playxfortuna.com — cited license numbers belonging to Bayton Limited and SLTM Ltd. Both companies were previously licensed by the MGA, but their licenses were later surrendered.
A surrendered license is a voluntary termination. Under the MGA's procedures, the licensee must cease operations, refund player balances, settle outstanding fees, and remove all references to the MGA and the license from its websites. What happens in practice, however, is that the license numbers and Maltese branding persist — sometimes on the original operator's site, sometimes on entirely unrelated platforms that recycle the old credentials.
For players, this is particularly deceptive. The license number is real, the format is correct, and the company name may match a formerly legitimate operator. The only reliable check is the MGA's current register, which shows whether a license is active, surrendered, suspended, or cancelled.
What Licensed Operators Can Do About Brand Impersonation
The MGA's July 16, 2026 notice identified a newer pattern: unauthorized websites impersonating MGA-licensed operators. The regulator named three domains — manekicasino.bet, dragonaracasino.uk.com, and slot-hunter.at — that were designed to look like the online platforms of licensed operators, misleading consumers into believing they were dealing with regulated entities.
For operators whose brands are being copied, the issue goes beyond regulatory compliance. An impersonation site diverts players, creates customer service complaints that reach the real operator, and can trigger regulatory scrutiny if the MGA or players report problems associated with the brand.
If a licensed operator discovers a site impersonating its brand or misusing its MGA license number, it should report the unauthorized URL to the MGA directly at info.mga@mga.org.mt, file takedown requests with the domain registrar and hosting provider, document the impersonation (screenshots, WHOIS data, cached pages) for potential legal proceedings, and review whether its own MGA dynamic seal and verification page are correctly implemented and easily accessible to players.
Operators should also monitor for unauthorized use of their license numbers and company names on an ongoing basis. The MGA's unauthorized URL list is cumulative and publicly available, but it captures only what the regulator has been able to identify and publish.
For companies considering a Malta gaming license, the impersonation risk is a practical factor in brand protection planning — particularly for B2C operators building player-facing brands in competitive verticals.
MGA Unauthorized URL Notices: 2025–2026 Timeline
The following is a chronological list of MGA public notices concerning unauthorized websites falsely claiming MGA licensing or impersonating licensed operators. This list will be updated as new notices are published.
2025
- March 28, 2025 — nagacash9x.com, nagacash9b.homes, nagacash9b.beauty, nagacash9b.online, ebet.agency/en/faq
- May 30, 2025 — Multiple URLs (notice published; specific domains listed on MGA website)
- June 26, 2025 — phlove.org
- August 1, 2025 — m.c1al9.com, m.nkryu17dc.com
- October 7, 2025 — palmsbet1.com, flexiblesport.com, casino-europa.eu
- October 16, 2025 — casino1bet.online
- October 30, 2025 — immediate-connect.co.uk, pangagames.com, and others
- November 24, 2025 — lavbet321.com, kasinoseta.com
In total, the MGA reviewed 109 URLs in 2025 and added 42 to its unauthorized list. The regulator also issued 35 cease and desist letters, 22 warnings, and 30 administrative penalties totaling €162,520. One license was suspended and two were cancelled.
2026
- January 29, 2026 — slotvocalnocasheu.vip, joypang-0907.com, nobet177.com, playxfortuna.com (two sites linked to surrendered licenses of Bayton Limited and SLTM Ltd)
- February 2026 — rrbet.com, babu88bd.com, wagerstreet.net
- March 2026 — jackpotcitycasino-uk.uk, dragonia-casino.at, dragonia-de.de
- May 29, 2026 — siapwdku.net
- June 25, 2026 — op7.io, op7.vip, ufabet.black, playtok.bet, slotblastcasheu.vip, vulkanworld.com
- July 16, 2026 — manekicasino.bet, dragonaracasino.uk.com, slot-hunter.at (impersonation of licensed operators — first notice specifically addressing operator impersonation as a pattern)
- August 3, 2026 — Additional URLs (notice published on MGA website)
The MGA publishes all unauthorized URLs on its dedicated page at mga.org.mt/player-hub/unauthorised-urls.
Why This Matters for Players
Unlicensed operators are not bound by the MGA's consumer protection framework. Players who register and deposit on unauthorized sites have no regulatory recourse if the operator withholds funds, refuses to process withdrawals, manipulates games, or shuts down without notice.
The MGA's framework requires licensed operators to segregate player funds, maintain transparent terms and conditions, offer access to dispute resolution through approved ADR providers, and comply with responsible gambling obligations. None of these protections apply to unlicensed platforms, regardless of what branding they display.
Before registering or depositing on any gambling site that claims MGA licensing, players should check the MGA's licensee register, verify the dynamic seal links to the MGA's website, confirm the URL matches the one listed in the register, and check the MGA's unauthorized URL list.
Final Thoughts
The MGA's enforcement activity is increasing, but the volume of unauthorized websites using Malta's regulatory identity shows no sign of slowing. The regulator reviewed 109 URLs in 2025 alone. In the first half of 2026, the pattern has continued with multiple notices per month, including the first formal advisory on operator impersonation.
For players, the register is the definitive answer. For operators, monitoring and swift reporting remain the primary tools for brand protection. The MGA's unauthorized URL list is a useful resource, but it is reactive — operators who discover impersonation should not wait for a public notice before taking action.
Need Help With Licensing?
Equilex supports iGaming companies with MGA license applications, compliance structuring, AML/CFT documentation, and regulatory submissions. Complete the contact form on our website, and a regulatory specialist will respond within 24 hours.
FAQ
How do I check if a gambling site has a valid MGA license?
Search for the operator's name or website URL in the MGA's public licensee register at mga.org.mt. If the site does not appear as an active licensee, it is not authorized to offer gaming services under Maltese law.
What does an MGA license number look like?
MGA license numbers follow the format MGA/B2C/[number]/[year] for player-facing operators or MGA/B2B/[number]/[year] for supply-side companies. The number alone does not confirm validity — it must appear in the MGA's current register as active.
Can a website display a real MGA license number and still be unauthorized?
Yes. Some unauthorized sites display license numbers that belonged to companies whose licenses were surrendered or cancelled. The January 2026 notice identified sites using old license numbers from Bayton Limited and SLTM Ltd, both of which had voluntarily surrendered their MGA licenses.
What should I do if I find a site impersonating my MGA-licensed brand?
Report the unauthorized URL to the MGA at info.mga@mga.org.mt, file takedown requests with the domain registrar and hosting provider, and document the impersonation for potential legal action. The MGA publishes confirmed unauthorized URLs on its website.
How many unauthorized gambling sites has the MGA flagged?
In 2025, the MGA reviewed 109 URLs and added 42 to its unauthorized list. As of August 2026, notices have continued at a rate of several per month, covering individual sites and, more recently, coordinated impersonation campaigns targeting licensed operators.
