Scams to Avoid: Fake Bonus and Promo Codes

A promo code posted by a stranger does one of three things. Nothing at all, which is the best case. It takes you to a cloned login page, which is the common case. Or it starts a conversation with someone who will eventually ask for your password, your one-time code or a transfer, which is the expensive case. Real promotions do not travel by chat message — they sit inside your logged-in account with terms attached. This page explains the code scam and the four that keep it company.

Why fake codes work so well

A code feels like insider information. It is short, it looks technical, and it implies that somebody knows something the website is not telling you. That is exactly the feeling the scam needs, because the gap between what the operator publishes and what the code promises is where belief in an insider forms. The code also costs nothing to distribute: one comment under a gameplay clip reaches thousands of people who are already thinking about depositing.

What the code is actually for depends on the operation. Sometimes it is pure bait for a cloned sign-in page, where the real product is your password. Sometimes it is a conversation starter, and the code is only the excuse for a friendly message. Sometimes it is affiliate fraud, where the code does nothing but the link attached to it pays somebody. In none of these cases does a 300 per cent bonus exist.

There is a quieter version worth naming, because it costs people real money without any theft at all. A code that technically works, attached to an offer with wagering and expiry terms nobody read, turns a modest session into a long one at a stake the player never planned. No scammer is involved, and the result is the same: money spent chasing a condition instead of playing for an hour. That is why the section below starts with the terms rather than with the code.

How to tell a real promotion

SignalA real promotionA fake code
Where you found itInside your logged-in account, or on the operator's own promotions pageA comment, a group, a forwarded message, an SMS
TermsLinked from the offer, with wagering, expiry and max bet statedNo terms, or terms that cannot be found
ClaimingApplied in the cashier or promotions area of your accountRequires you to send details to a person
SizeModest and conditionalImplausible, and larger than anything the site advertises
Who benefits if you clickYou, subject to the termsWhoever owns the link
What is asked of youA deposit through the normal cashierA login, a code, or a transfer to a number

Before claiming any bonus at all

  1. Find the terms from the offer itself. If they cannot be reached in two taps, do not claim.
  2. Read the wagering requirement, and check whether it applies to the bonus alone or to deposit plus bonus.
  3. Read the expiry. A short window is the most common reason a bonus and its winnings disappear.
  4. Read the maximum bet while a bonus is active. One oversized spin can void the lot.
  5. Read the game weighting table, because a bonus you cannot clear on the games you like is not a bonus.
  6. Finish verification first, so that nothing can be voided later for incomplete KYC.
  7. Decide whether you want a longer session at a higher stake than you planned. That, not the terms, is what a bonus usually costs you.

Four more scams you will meet

The claimWhy it is falseWhat to do
I am an agent and I can apply a special bonus to your accountOperator staff do not approach players in chat apps, hold accounts or apply bonuses from a personal profile.Block, report the profile, change your password.
Pay a release fee and your withdrawal clearsDeductions happen at the operator's end and are stated on its cashier page. Nobody who owes you money needs money first.Stop paying, raise a written ticket, keep screenshots.
Call this official support number for help with your bonusNumbers circulated in chats and comments are the fraud, and the caller asks for your OTP.Use only the contact route inside the operator's own site, and the e-wallet's in-app help.
This app shows which game is about to payResults come from a certified generator on the operator's server, and published RTP is a long-run average, not a schedule.Uninstall. These apps harvest credentials.
Your bonus is pending, confirm the code we sentThe code is a login or password reset they just started with your username.Never read out a code. Change your password and enable two-factor.

What a real KYC request never asks for

  • Your password. Not support, not an agent, not in any channel.
  • A one-time code. An OTP proves you are present, so a request for it means someone is acting as you now.
  • Money. There is no verification fee, release fee, unlocking fee or conversion fee.
  • Your e-wallet MPIN, or a card's CVV and expiry.
  • Remote access, screen sharing or an accessibility service so someone can help you.
  • ID documents through Messenger, Telegram, WhatsApp or email.

What real verification involves

It happens in the verification section of your own logged-in account: a government-issued ID, often a selfie or liveness check, sometimes proof of address. The rule that catches people is name matching — the account, the ID and the receiving e-wallet or bank account must all be the same person, which is why a payout aimed at a relative's number sits pending. Which documents are needed and when are set by the operator, so read its verification page before depositing rather than after winning.

If you used a code and something went wrong

  1. If you entered details on a page reached from the code, change that password immediately from a page you reached by typing the domain, and change anything that shared it.
  2. Turn on two-factor authentication, and sign out of other sessions if the operator offers that.
  3. If you transferred money to a person, report it from inside your e-wallet app's own help section.
  4. Open a written ticket with the operator from inside your account, with times, amounts and screenshots.
  5. Screenshot the code, the message, the profile and the domain you landed on, before blocking anyone.
  6. Report the account or page to the platform where you found it.

The escalation route

In order: the operator's own written support, from inside your logged-in account, keeping the ticket reference; then your e-wallet, strictly through its in-app help section, because a number someone sends you is part of the fraud; then the regulator, through PAGCOR's published player-concerns channel on pagcor.ph, using the route listed on that site; then the cybercrime route, through the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, using the details published on their own official websites. This page prints no phone numbers, deliberately.

About this page

JILIGM is an independent guide, not a casino. No deposits are taken here, no balances are held and no games are run — the site exists to explain how verification, payments and apps work in this market so you can check them yourself. Gambling is restricted to adults aged 21 and over.

We publish no bonus codes, no exclusive offers and no amounts, because any figure we printed would be out of date or invented. Promotions belong to the operator and live inside your account, with terms attached, and that is the only place worth claiming one.

Frequently Asked Questions

Are casino promo codes from Facebook or Telegram real?

Essentially never. A code from a stranger either does nothing, leads to a cloned login page, or starts a conversation that will eventually ask for your password, your one-time code or a transfer. Real promotions appear inside your logged-in account or on the operator's own promotions page, with terms attached.

How do I know a promotion is genuine?

By where you found it and whether terms are attached. A genuine offer sits in your account or on the operator's promotions page, links to its own wagering, expiry and maximum-bet conditions, and is applied through the cashier. A fake one has no findable terms and asks you to send something to a person.

Why do fake codes promise such large bonuses?

Because the implausible size is the hook. A figure larger than anything the operator advertises creates the sense that an insider is involved, and that belief is what the rest of the script depends on. The gap between the website and the promise is the scam, not evidence of a secret offer.

A message says my bonus is pending and asks me to confirm a code. Is it real?

No. A code sent to you is a login or password reset that somebody has just started using your username. No legitimate bonus requires you to read six digits to anyone. Do not reply, change your password from a page you reached by typing the domain, and enable two-factor.

Is a withdrawal release fee ever genuine?

No. Whatever an operator deducts is deducted at its end and stated on its cashier page. A demand for payment before your own winnings move is the scam reaching its point, and paying produces a second, larger demand.

Should I claim bonuses at all?

Only after reading the wagering requirement, the expiry, the maximum bet and the game weighting. Many readers are better off without one: a bonus usually buys a longer session at a higher stake than you planned, and that change in behaviour costs more than the terms do.

Where do I report a fake code or a fake agent?

Report the profile or page to the platform where you found it, and raise a written ticket with the operator from inside your account. If money was lost, use your e-wallet's own in-app help, then PAGCOR's published player-concerns channel on pagcor.ph, and the PNP Anti-Cybercrime Group or NBI Cybercrime Division via their official sites.

Before You Choose an Operator

Compare PAGCOR-licensed operators, read the bonus terms and set a budget before you deposit.

Continue Exploring