TL;DR: Infoblox research reported by Cyber Daily on September 17, 2026 finds that casino sites that look alike can hide very different risks, from illegal gambling and money laundering to outright scams and malware. In an average month in 2026, Australian and New Zealand devices try to reach about 10 unique scam gambling domains. Rigged games and blocked withdrawals are typical.
Casino websites that look virtually identical can hide very different risks, according to Infoblox Threat Intel research covered by Cyber Daily. The findings matter for players, and for anyone who might click a casino ad.
Three kinds of casino sites
- Illegal gambling and money laundering. The largest group is over 1.7 million Chinese-language casino domains. Many operate like genuine casinos, with customer support and withdrawals.
- 'Scambling'. These sites present as gambling but are built to defraud customers, using rigged games or blocking withdrawals with delays and fees. They mainly target English-speaking users, including Australians.
- Malware infrastructure. A smaller group hides PeckBirdy command-and-control domains inside low-quality casino sites. Infoblox says activity in Australia and New Zealand has been very limited so far this year.
The Australian angle
Infoblox says that in an average month in 2026, clients in Australia and New Zealand try to connect to about 10 unique scam gambling domains, which likely steal money, and more than 100 illegal gambling sites, which likely help launder money. The researcher's point is that visual similarity is deliberate: a casino that looks harmless may not be.
How to spot a rigged site
- Withdrawals are delayed, denied or suddenly need a fee, tax or 'verification' payment.
- The site pushes bonuses that lock your balance behind impossible conditions.
- It reached you by an ad, direct message or a link from someone you do not know.
- It asks for identity documents or a crypto deposit before you can play.
What to do
Do not deposit more to unlock a withdrawal. Contact your bank, keep screenshots, and follow the steps in the Scamwatch and IDCARE recovery process. If an online investment or gambling pitch came through social media, compare it with real Australian investment scam cases and the social media age ban scams.
Fake shops work the same way. See iPhone 18 Pro scam sites, and for a dealer-side breach in Australia read the Auto-IT car dealer incident.
FAQs
Are scam casino websites common in Australia?
Infoblox reports that in an average month, Australian and New Zealand clients try to reach about 10 unique scam gambling domains and over 100 illegal gambling sites.
What is scambling?
It is a term for sites that present as gambling but are designed to defraud players, for example by rigging games or blocking withdrawals.
What should I do if I cannot withdraw my winnings?
Do not pay more fees or deposits to release the money. Contact your bank, keep evidence and report it to Scamwatch.
A quick self-check shows what strangers can see: use the free digital footprint checker.
Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.