Scams to Avoid: Fake Bonus Offers and Promo Codes
A promo code that arrives by text, in a comment or from a stranger is almost never a gift. At best it is an affiliate tag; at worst it is the opening line of a theft. JL9 is an independent guide, not a casino. It takes no deposits, runs no games and issues no codes, vouchers or bonuses of its own. Here is how fake bonus offers work, a table of claims and replies, four other scams, and the route for reporting. 21+.
How a real bonus works, briefly
A genuine promotion is listed on the operator's own promotions page, is applied by the operator's system inside your account, and comes with written terms: a wagering multiple, eligible games, a maximum bet, often a maximum cashout and an expiry. The amounts are set by the operator and change. That is the baseline; anything that departs from it deserves a second look.
Five shapes a fake bonus takes
- The pay-to-unlock code. "Use code X for a free credit, just send a small activation amount to this number first." The activation is the scam.
- The phishing link. A message with a code and a link to a copy of the login page, which collects your password.
- The no-terms giveaway. A page or post promising free credit with "no wagering", requiring your account details or ID photos to "register" for it.
- The agent top-up. Someone offers a bonus larger than the site's if you deposit through them to a personal wallet.
- The winner notice. "Your number won a raffle bonus", with a fee, tax or verification payment to claim.
Claims, and what to do
| The claim | Why it is false | What to do |
|---|---|---|
| "Exclusive code, not on the website" | Real promotions are honoured by the system and listed by the operator | Check the promotions page; ask official support |
| "Pay a small amount to activate your free bonus" | A bonus that costs money to receive is a sale, and here there is nothing being sold | Do not pay |
| "No wagering, withdraw immediately" | Bonuses without conditions are rare and would be advertised by the operator itself | Read the terms on the operator's site |
| "Send your login so we can credit the bonus" | Bonuses are credited by the system, not by a person logging in as you | Never share a login |
| "You won. Pay the tax first to claim" | You cannot win a draw you did not enter, and fees are not collected in advance by transfer | Delete the message |
| "Code expires in one hour" | A deadline discourages checking | Check anyway |
The quieter version: affiliate codes dressed as generosity
Not every unsolicited code is theft. Many are referral codes that pay the sender a commission when you register or lose. That is legal marketing, but the presentation is often dishonest: invented bonus sizes, fake screenshots of withdrawals, claims of "sure win" games. The code itself may work. The promises attached to it are the sender's, not the operator's, and nobody is obliged to honour them.
Reading bonus terms before claiming anything
- Wagering multiple: how many times the amount must be staked.
- Game weighting: which games count, and by how much.
- Maximum bet while a bonus is active.
- Maximum cashout from bonus funds.
- Expiry.
- Whether the deposit is locked with the bonus.
If a promotion's terms cannot be found, treat that as the answer. Volatility matters here too: clearing a large wagering requirement on a high-volatility slot is a wide-swing exercise that many balances do not survive.
Four other scams
Fake customer-support numbers placed in ads and comment replies. Cloned domains that differ from a real address by a character. Predictor apps that claim to forecast slot results. "Release fee" demands before a withdrawal is paid. Each asks for money or credentials outside the operator's own cashier and account pages.
What a real KYC request never asks for
Fake giveaways often ask for ID photos "to qualify". Real verification happens only inside your logged-in account at the operator, by upload.
| Never requested by genuine KYC | Why |
|---|---|
| Password, OTP or wallet MPIN | These authorise access and payments; identity checks do not need them |
| Any payment, deposit or fee | Verification is free |
| ID photos sent to a chat account, page or personal email | Documents sent that way can be reused for identity fraud |
| A selfie holding a handwritten note for a stranger | A common ingredient in opening accounts in your name |
| Remote access or screen-sharing | It hands over the device |
If you paid or shared details
- Stop further payments.
- Change the casino password, email password and wallet MPIN.
- If you sent ID photos, note which ID and watch for accounts or loans you did not open.
- Report the transfer in your wallet app.
- Keep the message, link, code and payment receipt.
Escalation
Go first to the operator's own support through its website and ask whether the promotion exists. For any transfer, use your e-wallet's in-app helpline, opened from within the app and never from a number someone supplies. PAGCOR lists a complaint channel on its official website for issues involving licensed operators or misuse of their names. Fraud can be reported to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. Get each contact detail from the body's own official page.
Frequently Asked Questions
Are promo codes from Facebook groups safe to use?
A code may be a harmless referral tag, but the promises posted with it are not the operator's. Confirm any promotion on the operator's own page.
Does JL9 give out promo codes?
No. JL9 is an independent guide. It issues no codes and no bonuses.
Is a "no deposit bonus" always a scam?
No, operators sometimes offer them, with terms. It is a scam when you must pay, share a login or send ID to a third party to receive it.
Why would a scammer want my ID photo?
To open wallet or loan accounts in your name, or to pass verification on accounts used for fraud.
The code worked but the bonus was smaller than promised. What now?
The operator's published terms govern. A third party's promise carries no weight; ask official support what the promotion actually is.
Can I report a fake promo page?
Yes: to the platform hosting it, to the operator being impersonated, and to the cybercrime units if money was taken.