Guide · Safety and Licensing
How to Check if an Online Casino Is Licensed
A license is the only thing standing between you and a website that can keep your money with no consequences. Everything else you can evaluate about a blackjack site, the rules on the table, the bonus terms, the payout speed, the software, matters only if there is somebody with subpoena power who can force the operator to behave. So the license check comes first, before you deposit a dollar, and it should take about five minutes.
The check is not the same in every case. If you are playing at one of the licensed online blackjack sites in the seven US states with live regulated online casinos, verification is fast, free and conclusive: every one of those states publishes a public list, and if the site is not on it, the site is not legal there. If you are looking at an offshore site, verification ranges from genuinely possible to functionally impossible depending on which jurisdiction issued the paper, and this page will be blunt about which is which.
What follows is the actual procedure, regulator by regulator, plus the step almost every guide skips: most consumer brands are skins operating under somebody else’s license, so the name on the website often will not appear on the licensee list at all. Knowing how to trace a skin back to its licensee is the difference between a check that works and a check that produces a false negative.
On This Page
- What a License Actually Buys You
- The Skin Problem: Why the Brand Is Not the Licensee
- How to Verify a US State License, State by State
- How to Read a Casino Footer
- Verifying the Game Supply: The Second Layer for Blackjack
- Offshore Licensing Tiers, Ranked by What They Deliver
- The Curacao Transition, in Detail
- Red Flags You Can Actually Check
- Checks That Look Like License Checks but Are Not
- What a License Does Not Guarantee
- The Five-Minute Verification Checklist
- Casino Licensing FAQ
- Before You Play
The five-minute check, in summary
- Copy the exact domain from your browser bar, subdomain included, because regulators list addresses and not marketing names
- Open your state regulator’s public list and search for that domain first, not the brand
- If the domain is not there, search for the host casino property, because most brands are skins operating under somebody else’s license
- Read the footer for four things: a legal entity name with a corporate suffix, a license number, a registered address and an issuing authority
- Click the seal. A dead image is a picture; a link into the regulator’s own domain that names your domain is a check
- Open the terms and find the operating entity, then compare it to the footer and to the register entry
- Seven states publish a list to appear on: New Jersey, Delaware, Pennsylvania, West Virginia, Michigan, Connecticut and Rhode Island. Maine has passed LD 1164 but has not launched
- Nevada licenses online poker only, so a “Nevada online casino license” for blackjack is misrepresenting something
The operative source is always the regulator
This page is information, not legal advice. Licensing rules, registers and regulator structures change, sometimes quickly, and the operative source is always the regulator’s own current publication rather than any summary of it, including this one.
What a License Actually Buys You
“Licensed” is not a marketing badge. In a real jurisdiction it is a bundle of obligations a site would not take on voluntarily, and each one maps to a way you can lose money.
A regulator with enforcement power
A state gaming authority can fine an operator, suspend its license, order it to pay a player, and put its executives through a suitability investigation that reaches into personal finances. What has teeth is not the certificate on the wall but the standing threat to revoke it. Agency structure and powers vary; see US gaming regulators.
Mandatory testing
In every regulated state, the random number generator, the shuffle logic, the game rules and the platform must be tested by an accredited independent laboratory and approved before the game goes live, and re-approved when it changes. That is a separate process from licensing the company; a license is simply what forces it to happen. See RNG certification and testing labs.
Rules about your money
Regulated states require operators to hold player balances in reserve, separate from operating funds. New Jersey’s internet gaming rules at N.J.A.C. 13:69O require a reserve sufficient to cover the aggregate of all player account balances, and Michigan applies the same concept under the Lawful Internet Gaming Act. Offshore, this requirement usually does not exist in enforceable form, which is why an offshore collapse tends to take player balances with it; see what happens when a casino shuts down.
A dispute path that does not end at the operator
In a regulated state you exhaust the operator’s internal complaint process and then escalate to the regulator, which can compel a response and, in several states, order payment. Rhode Island puts iGaming patron complaint procedures with the director of the Division of State Lottery under R.I. Gen. Laws 42-61.2-3.4. The escalation route state by state is at how to file a complaint against an online casino.
Anti-money-laundering and responsible gambling duties
A US-licensed internet gaming operator is a financial institution for Bank Secrecy Act purposes and files currency transaction reports and suspicious activity reports with FinCEN, which is why it asks for identity documents and, at higher volumes, proof of where your money came from. See KYC verification. Licensees in all seven live states must also offer deposit, loss and time limits and honor a statewide self-exclusion list that binds every operator at once. No offshore regulator runs anything comparable.
Accountable, not generous
None of that makes a licensed site generous. It makes it accountable, which is a lower bar and a more useful one. Everything on this page is built on that distinction, and the closing section is about the things a license leaves entirely alone.
The Skin Problem: Why the Brand Is Not the Licensee
In every US state with regulated online casinos, the license attaches to a land-based property, not to a consumer brand. In New Jersey the holder is an Atlantic City casino licensee. In Pennsylvania it is a licensed category 1, 2 or 3 casino that has been granted an interactive gaming certificate. In Michigan it is one of the three Detroit commercial casinos or a federally recognized tribe. In West Virginia it is one of the four racetrack casinos or the casino at the historic resort hotel. In Delaware it is one of the three video lottery agents. The nationally advertised brands are skins: online products that operate under a host licensee’s authority, usually with a separate platform provider or operator license of their own.
So when you search a regulator’s list for “FanDuel Casino” and find nothing under that heading, the correct conclusion is almost never “unlicensed.” It is “you searched the wrong field.”
A search that works
- Copy the exact address from the browser bar, subdomain and path fragment included
- Search the regulator’s list for the domain first
- If the domain is absent, search for the host casino property instead
- Then check whether your brand sits among the sites authorized under it
- Treat the licensee as a state-by-state fact that changes with commercial deals
A search that produces a false negative
- Typing the marketing name into a list that indexes web addresses
- Assuming that a brand absent under its own heading is unlicensed
- Assuming the licensee behind a brand in one state holds it in the next
- Matching a lookalike address to the entry for the real one
- Stopping at the first empty result instead of tracing to the host property
The worked walkthrough: New Jersey and Pennsylvania side by side
Here is what those relationships actually look like, drawn straight from the two states that publish the mapping in full. In New Jersey, the Division of Gaming Enforcement groups every authorized internet gaming site under its casino licensee. The Pennsylvania Gaming Control Board’s list of licensed interactive gaming certificate holders does the same job with different pairings, and the differences are the instructive part.
| State | Licensee or certificate holder | Consumer brands and sites operating under it |
|---|---|---|
| New Jersey | Golden Nugget Hotel Casino and Marina | casino.fanduel.com, goldennuggetcasino.com, nj.betrivers.com |
| New Jersey | Resorts Casino Hotel Atlantic City | casino.draftkings.com, mohegansuncasino.com, pokerstarsnj.com, hollywoodcasino.com, thescore.bet |
| New Jersey | Borgata Hotel Casino and Spa | nj.betmgm.com, nj.partycasino.com, wheeloffortunecasino.com, stardustcasino.com |
| New Jersey | Hard Rock Hotel and Casino Atlantic City | nj.bet365.com |
| New Jersey | Ocean Resort Casino | nj.playstar.com, betocean.com |
| Pennsylvania | Valley Forge Casino Resort | FanDuel Casino, Stardust Casino |
| Pennsylvania | Hollywood Casino | DraftKings Casino, BetMGM, PokerStars |
| Pennsylvania | Rivers Philadelphia | BetRivers, PlaySugarHouse, Borgata Online Casino |
| Pennsylvania | Harrah’s Philadelphia | Caesars Palace Online Casino, Horseshoe Online Casino |
Read those two lists against each other and you will see the trap
Borgata is a casino licensee in New Jersey and a skin under a different company’s certificate in Pennsylvania. Stardust runs under Borgata in New Jersey and under Valley Forge in Pennsylvania. FanDuel Casino runs under Golden Nugget in New Jersey and Valley Forge in Pennsylvania. There is no national mapping. The licensee behind a brand is a state-by-state fact, and it changes when commercial deals change.
One more consequence of this structure: a license is state-specific. An operator licensed in New Jersey has no authority to accept a wager from a player sitting in Pennsylvania, and both states enforce that with mandatory geolocation. If you cross a state line, you are being checked against a different license, which is why apps refuse play in the wrong state rather than silently continuing. See how casino geolocation works for the mechanics.
How to Verify a US State License, State by State
Seven states have live, regulated online casino gaming and therefore real-money online blackjack: New Jersey, Delaware, Pennsylvania, West Virginia, Michigan, Connecticut and Rhode Island. Maine has passed an online casino law, LD 1164, but has not launched as of August 2026, so there is no Maine licensee list to check yet. Nevada, despite the obvious assumption, licenses online poker only and has no regulated online casino or online blackjack at all, so any site claiming a “Nevada online casino license” for blackjack is misrepresenting something.
Seven states publish a list you can appear on
If you are 21 or older and physically inside one of these seven, verification is fast, free and conclusive. Maine has passed LD 1164 but has not launched as of August 2026, so there is no Maine licensee list yet. Anywhere else, there is no state list to appear on, and every site offering you real-money blackjack is offshore.
Here is where each regulator’s public list actually lives and what to type into it.
| State | Regulator | Where the public list lives | What to search for |
|---|---|---|---|
| New Jersey | Division of Gaming Enforcement, Office of the Attorney General | The “Internet Gaming Sites” page at njoag.gov, under the Division of Gaming Enforcement | The exact domain, including subdomain. Sites are grouped under the casino licensee that hosts them. |
| Pennsylvania | Pennsylvania Gaming Control Board | The “Interactive Gaming Operators” directory at gamingcontrolboard.pa.gov, plus the board’s PDF of licensed interactive gaming certificate holders and authorized interactive gaming websites | The brand in the directory, then the full URL in the PDF to see which certificate holder it sits under |
| Michigan | Michigan Gaming Control Board | “Authorized Online Gaming and Sports Betting Platform Providers in Michigan” at michigan.gov/mgcb, plus the board’s spreadsheet of authorized operators and providers | The platform provider’s legal entity name and the tribal or Detroit casino operator it is paired with |
| West Virginia | West Virginia Lottery | The licensing lists at business.wvlottery.com, specifically the i-Gaming License List and the i-Gaming Registrant List | The casino property name on the license list, and the vendor or brand company on the registrant list |
| Connecticut | Department of Consumer Protection, Gaming Division | The state’s eLicense lookup at elicense.ct.gov | Credential types “Online Gaming Operator” and “Online Gaming Service Provider,” searched by business name, with status set to active |
| Rhode Island | Division of State Lottery (Department of Revenue) for iGaming rules and patron complaints; Department of Business Regulation, Division of Gaming and Athletics, for vendor and personnel licensing and casino supervision | DBR’s gaming and athletics pages at dbr.ri.gov and the Lottery’s rules and regulations at rilot.com | The single authorized iGaming brand tied to the state’s two licensed casino facilities |
| Delaware | Delaware State Lottery Office | The iGaming page at delottery.com, which names the three authorized sites | The exact site address, one per licensed video lottery agent |
New Jersey
New Jersey has the most useful list in the country because it publishes the mapping you actually need. The Division of Gaming Enforcement’s Internet Gaming Sites page lists every authorized site by web address, grouped under the Atlantic City casino licensee whose internet gaming permit covers it. That means you can verify a brand you have never heard of in about fifteen seconds: find the domain, see which casino it hangs off, and you are done.
Verify the domain rather than the name
New Jersey lists specific addresses such as nj.betmgm.com/en/casino and casino.fanduel.com, and the specificity is the point. A site at a lookalike address is not covered by the entry for the real one. New Jersey’s internet gaming framework sits in the Casino Control Act at N.J.S.A. 5:12-95.17 and following, with operating rules at N.J.A.C. 13:69O, and the Division also publishes lists of licensed and registered ancillary companies and vendors if you want to check who supplies the games rather than who runs the site.
Pennsylvania
Pennsylvania splits the job across two documents and you want both. The board’s interactive gaming operators directory is the fast consumer check, listing the roughly two dozen approved online casino brands in the state, from Bally Bet and bet365 through to Wind Creek Online. If a brand is not in that directory, stop. The second document closes the loop: a board PDF titled along the lines of “Licensed Interactive Gaming Certificateholders and Authorized Interactive Gaming Websites,” listing each certificate holder and, underneath it, the exact URLs it is authorized to operate. That is where you confirm the address in your browser bar is the address the board approved and which land-based casino is answerable for it.
Pennsylvania’s authorizations are also unusually granular. Under 4 Pa.C.S. Chapter 13B, interactive gaming certificates were issued by category, with separate authorization for games simulating slot machines, for non-peer-to-peer table games played against the house, and for peer-to-peer games such as poker, each carrying a $4 million authorization fee with a discounted combined price during the original 2018 petition window. Blackjack sits in the table games category, so a certificate holder authorized only for slot-style games cannot offer you a blackjack table.
What a state license costs an operator
Statutory fees in three of the seven live states. These are not casually obtained.
Michigan
Michigan’s structure follows the Lawful Internet Gaming Act, Public Act 152 of 2019, and it is the most tribal-heavy of the live states. Internet gaming operator licenses go to the three Detroit commercial casinos and to Michigan’s federally recognized tribes, and each of those licensees contracts with a platform provider that actually runs the site. So the Michigan check has two halves: the operator, which is a casino or a tribe, and the platform provider, which is the company behind the brand.
The board publishes an “Authorized Online Gaming and Sports Betting Platform Providers in Michigan” page and a downloadable spreadsheet of authorized operators and providers that shows the pairings. A concrete example of how far a brand can sit from its licensee: Hillside Michigan LLC is the platform provider doing business as bet365, operating for the Little Traverse Bay Bands of Odawa Indians. Nothing on the consumer site puts that tribe’s name in front of you, but that is the licensee. See tribal gaming and online blackjack.
The board also runs a “Legal vs. Illegal Gaming” resource and issues cease-and-desist letters to offshore sites accepting Michigan players, which is a useful secondary signal: a site publicly ordered to stop serving your state is not merely unlicensed, it is on the regulator’s radar.
West Virginia
West Virginia caps the market by statute. W. Va. Code 29-22E-6 allows no more than five interactive wagering licenses, and eligibility is limited to holders of a valid racetrack video lottery license or a license to operate a gaming facility, which in practice means the four racetrack casinos plus the casino at the historic resort hotel. The application fee is $250,000, the license runs five years, and renewal is $100,000 for each subsequent five-year term.
That cap is your shortcut: every online blackjack brand in the state must trace to one of five properties. The West Virginia Lottery posts the paperwork at business.wvlottery.com as two PDFs, the i-Gaming License List naming the licensed casinos and the i-Gaming Registrant List naming the vendors and service companies registered to work with them. W. Va. Code 29-22E-5 also creates a separate management services provider license, the category covering the company that actually runs the platform, and requires a licensee to display its license or keep it available for inspection.
Connecticut
Connecticut is the narrowest market of the seven, and that makes the check trivial once you know the rule. Under Conn. Gen. Stat. Section 12-850(21), a master wagering license may be held only by the Mashantucket Pequot Tribe, the Mohegan Tribe of Indians of Connecticut, or the Connecticut Lottery Corporation. Online casino gaming, including blackjack, is reserved to the two tribal master wagering licensees, and Section 12-852 contemplates each contracting with an online gaming operator to run the platform. The practical result is that Connecticut has two online casino brands, not twenty, and anything else advertising online blackjack to Connecticut residents is unlicensed.
To verify, use the state’s eLicense lookup at elicense.ct.gov, where gaming credentials sit alongside every other state license under types including “Online Gaming Operator,” “Online Gaming Service Provider” and “Gaming Services Provider.” Search by business name and filter to active status. Connecticut describes the lookup as a primary source of verification updated instantly, which is stronger language than most states use about their own lists. Under Section 12-857 an online gaming operator license carries a $250,000 initial fee and $100,000 annual renewal, so these are not casually obtained.
Rhode Island
Rhode Island is different in kind from the other six, and the difference matters when you go looking for a licensee. Rhode Island iGaming is run through the state lottery: the Division of State Lottery holds the authority to implement, operate, conduct and control iGaming at the state’s two licensed casino facilities, Bally’s Twin River Lincoln Casino Resort and Bally’s Tiverton Casino and Hotel. There is one consumer-facing iGaming brand, not a marketplace of skins.
In Rhode Island the regulator is split, and the wrong half costs you weeks
R.I. Gen. Laws 42-61.2-3.4 assigns iGaming rulemaking and the patron complaint process to the director of the Division of State Lottery within the Department of Revenue. The Department of Business Regulation, through its Division of Gaming and Athletics, licenses casino personnel and vendors and supervises the two casino properties. Name the wrong one in a complaint letter and you will lose weeks.
Rhode Island’s scale is genuinely small: as of June 30, 2025, the state’s iGaming platform offered 272 online slot games and six live dealer tables covering blackjack, roulette and speed baccarat.
Delaware
Delaware runs the oldest regulated online casino market in the country and one of the simplest to verify. Online gaming is a lottery product under 29 Del. C. Chapter 48, administered by the Delaware State Lottery Office, and it is offered through the state’s three licensed video lottery agents: Delaware Park, Bally’s Dover and Harrington. Since the platform transition, all three run on the BetRivers technology stack, at delawarepark.betrivers.com, ballycasino.betrivers.com and harrington.betrivers.com respectively.
Three sites, and the Delaware Lottery names them on its own iGaming page. If a site claims to offer legal online blackjack in Delaware and is not one of those three addresses, it is not a Delaware licensee. Players must be 21 or older and physically within Delaware, the same age floor as every other regulated state.
Tracing a skin to its licensee: the procedure
Put the pieces together and the trace is six steps, and it works in any of the seven states.
The six-step skin trace
- Copy the exact address from your browser, subdomain and path fragment included. Regulators list addresses, not marketing names, and lookalike domains are the whole point of the exercise.
- Read the footer’s licensing block, looking for a legal entity name and a phrase such as “operated by,” “under license from” or “on behalf of.”
- Open the terms and conditions and find the entity the contract is actually with. It is frequently different from the brand and sometimes different from the footer.
- Search the regulator’s list for the domain first, not the brand.
- If the domain does not appear, search for the host casino property instead, then check whether your brand sits among the sites authorized under it.
- Cross-check the entity name in the state’s business registry. An operator whose named company does not exist as a filed entity is a serious problem.
If the brand does not appear anywhere in the state’s list under any licensee, the conclusion is clean: it is not licensed there. There is no unpublished list, no pending status that permits real-money wagers early, and no reciprocity from another state. For what that means legally for the player rather than the operator, see are offshore casino sites legal.
How to Read a Casino Footer
The footer is where a site is supposed to tell you who it is. Scroll past the payment logos and look for four things.
The licensee’s legal entity name
Not the brand. You want a company name with a corporate suffix: LLC, Ltd., N.V., B.V., Inc. A footer that says only “licensed and regulated,” with no company behind it, is decoration.
A license number that resolves
It must resolve to a specific entry in a specific register. Under the old Curacao system, numbers looked like 8048/JAZ or 1668/JAZ, and thousands of unrelated sites shared them because those were master licenses being sub-let. A shared number is not a license, it is a reference to somebody else’s license. Modern regimes issue a distinct number per licensee.
A registered address
Take it and the entity name to the relevant company registry: the secretary of state’s business search in a US state, the local companies registry offshore. You are looking for two failure modes, an entity that does not exist at all and an entity registered weeks ago at an address shared with a crowd of unrelated shells.
A seal, and whether it does anything
This is the most misunderstood element on any gambling site. A regulator’s seal is a picture file. Anyone can right-click a legitimate site, save the image and put it on their own page, so the image itself carries exactly zero information about licensing status.
Three checks to run on a seal, in order
- Does it link anywhere at all, or is it a dead image?
- Does the link go to the regulator’s own domain, or to a page on the casino’s own site that merely looks official?
- Does the certificate that loads name this domain and this company, rather than some other operator’s? The third check catches the most sophisticated fakes, because copying a real certificate link is easy and getting your own domain onto it is not.
A current Curacao seal, for instance, should open the Gaming Authority’s certificate service at a per-licensee address showing an active status and the domain you came from. Kahnawake runs a logo certification program on the same principle, and Anjouan’s authority publishes a licence register and a verify-a-licence tool with defined status values.
Then open the terms and conditions and find the operating entity clause: “this website is operated by [company], registered in [jurisdiction] under number [x].” If that company is not the one in the footer and not the one on the license, the operator needs to explain the gap before you deposit. In a dispute, the entity in the terms is who you are actually contracting with.
One regulated-state note about footer furniture
Licensed US operators must carry regulator identification and responsible gambling messaging in the footer, including helpline numbers and links to the state self-exclusion program. A site claiming to be legal in a US state and showing none of that furniture is failing a display requirement its real licensees have to meet.
Verifying the Game Supply: The Second Layer That Matters for Blackjack
Licensing the operator is one half of the picture. The companies that build and run the games are licensed separately in every regulated state, and the approved-supplier list is an underused verification signal, especially for blackjack.
Pennsylvania licenses manufacturers and certifies or registers gaming service providers, and the Gaming Control Board publishes several lists at once: certified and registered providers authorized to work, a publicly traded provider list, an interactive and sports wagering notification list, and, unusually, a list of providers whose applications were denied. New Jersey licenses and registers casino service industry enterprises and publishes internet gaming ancillary company and vendor lists. Michigan runs a separate sports betting and internet gaming supplier license and announces supplier authorizations individually, including live dealer table game suppliers cleared to serve the state’s internet gaming operators and platform providers.
Compare studios, not casinos
The live dealer table you sit at is not built by the casino brand. It is built and staffed by a studio operating under a supplier license, streaming to several casino brands at once. The payout on a natural, whether the dealer hits soft 17, whether surrender exists, whether you can double after splitting, all of that is a studio decision, not a brand decision. That is why the same table looks identical across four casinos in one state, and why comparing casinos for blackjack rules is usually the wrong comparison.
See live dealer blackjack, with supplier pages for Evolution and Playtech.
Supplier lists also give you a sanity check offshore. Cloned or emulated game clients are real at the low end of that market: the lobby art is copied, the underlying game is not the studio’s product, and the math is whatever the site wants it to be. A studio with something to lose does not license its live blackjack tables to an operator that cannot pass its own compliance review, so a claimed lineup that the studio does not acknowledge is meaningful. None of this is game certification, which is a separate process; for whether the shuffle itself is honest, see is online blackjack rigged.
Offshore Licensing Tiers, Ranked by What They Actually Deliver
Offshore licenses are not interchangeable, and the gap between the top and the bottom of this list is enormous. What follows ranks the jurisdictions that actually turn up in the footers of US-facing blackjack sites, by the only criterion that matters to a player: what can you independently verify, and what happens if the operator refuses to pay you.
One clarification that saves a lot of confusion
The strongest online gambling regulators in the world, the UK Gambling Commission, the Malta Gaming Authority, Gibraltar and the Isle of Man, essentially do not appear on sites accepting US customers, because those regimes restrict which markets their licensees may serve. If you see a UK or Malta claim on a site happily taking a deposit from Ohio, treat it as a claim to be checked rather than a reassurance, and check it in that regulator’s own register.
How much you can independently verify, by jurisdiction
Ranked on the only question that matters: is there a register you can read, and a body that will read your complaint.
| Jurisdiction | Authority and legal basis | What it requires | What you can verify |
|---|---|---|---|
| Curacao (current LOK regime) | Curacao Gaming Authority, under the National Ordinance on Games of Chance (LOK), in force since Dec. 24, 2024 | Direct licensing by the regulator, ultimate beneficial owner investigation, local substance, anti-money-laundering and counter-terrorist-financing obligations, ongoing supervision, and enforcement powers including suspension and revocation | A great deal. There is a public license register on the authority’s site and a per-licensee certificate service that shows status and the domains a license covers. |
| Panama | Junta de Control de Juegos, an executive secretariat under the Ministry of Economy and Finance, restructured by Decreto Ley No. 2 of Feb. 10, 1998 and amended by Law No. 49 of 2009 | A genuine concession process with real fees and AML obligations under Panama’s Law No. 23 of 2015 | Less than you would hope. The ministry’s public downloads are a supplier registry updated through October 2020 and a gaming venue location list dated June 26, 2019, with no separately published register of online betting concessionaires. Verifying a specific online license usually means writing to the board. |
| Kahnawake | Kahnawa:ke Gaming Commission, Mohawk Territory of Kahnawa:ke, under its Regulations concerning Interactive Gaming | Five license categories. Only one Interactive Gaming Licence has ever been issued, held by Mohawk Internet Technologies, which runs the hosting facility. Commercial operators hold Client Provider Authorizations; software companies hold Casino Software Provider Authorizations. | A published permit holder list pairing operator names with authorized URLs, plus a logo certification program that lets you click the logo to confirm a site. The weakness is freshness: when checked in August 2026 the permit holder page carried a last-updated date of Sept. 28, 2023. |
| Anjouan | Anjouan Offshore Finance Authority, Autonomous Island of Anjouan, Union of the Comoros | The lightest of the jurisdictions that issue anything resembling a gaming license. It grew rapidly as operators left the old Curacao structure. | A public licence register, a verify-a-licence tool, published status definitions and a registry disclaimer, and a stated practice of publishing enforcement actions. The mechanics exist. The track record of using them on behalf of an aggrieved player is close to nonexistent. |
| Costa Rica | None. There is no gaming regulator. | Local incorporation plus a cantonal commercial permit, the patente, for a data-processing business. Operators are generally expected to keep transactions outside local banks and to block Costa Rican residents. | Nothing relevant. A municipality issuing a business permit has no mandate to assess game fairness, testing, segregation of player funds or dispute handling, and does not. |
Keep the Kahnawake freshness caveat in view
Kahnawake’s permit holder list is the sort of document this whole page tells you to trust, and it is only as good as its last update. When checked in August 2026 the permit holder page carried a last-updated date of Sept. 28, 2023. A stale list can show a permit that has since lapsed and can omit one that has since issued, so treat an entry there as a starting point rather than a confirmation of current status.
A long tail of smaller jurisdictions also sells gaming paper, and new names surface every year as operators shop for the lightest available regime. Tobique in New Brunswick and Nevis in the Caribbean both turn up in footers. The evaluation does not change: find the register, find the entry, confirm the entry names this company and this domain. If any of those three steps has no answer, the license is not a consumer protection, whatever the seal looks like.
Read the right-hand column, not the left. The useful question is never “is this a real jurisdiction,” because they all are. It is “if this operator voids my winnings, is there a body that will read my complaint, has power to act, and has demonstrably done so.” Curacao under the new regime: a qualified yes, improving. Kahnawake, small and long established: a real complaint process with a real history. Panama: in practice you are on your own unless you are prepared to correspond with a government office in Spanish. Anjouan: the machinery exists and is untested. Costa Rica: there is no answer because nobody licensed anything.
The most misleading claim in the offshore market
“Licensed in Costa Rica” is not a gaming license. It is a business permit of the same species a print shop holds, and it provides no protection whatsoever. Treat it exactly as you would treat no license claim at all, because that is what it is.
The Curacao Transition, in Detail
Curacao matters more than the other offshore jurisdictions combined for anyone reading a US-facing blackjack site, because that is where most of them are licensed. It also just went through the biggest change in its regulatory history, and a lot of what you will read about it describes the system that no longer exists.
The old system
For roughly two decades, Curacao operated a master-and-sublicense model. The government issued a very small number of master licenses, and those master licensees in turn sold sublicenses to operators. Master license numbers such as 1668/JAZ, 8048/JAZ and 5536/JAZ appeared in the footers of thousands of unrelated casinos, because the number identified the master, not the operator. That was the structural flaw. The government had a relationship with four master licensees; it had no direct relationship with, and often no meaningful information about, the operators actually taking your deposits. There was no per-operator public register to check, and a footer license number told you nothing except which master had sold the sublicense.
What changed
The National Ordinance on Games of Chance, known by its Dutch abbreviation LOK, came into force on Dec. 24, 2024. It abolished the master-and-sublicense structure entirely, with legacy sublicenses expiring in January 2025 and legacy holders required to transition into the new regime. Licensing moved to the Curacao Gaming Authority, which now issues every license directly, investigates ultimate beneficial owners itself, imposes local substance requirements, enforces anti-money-laundering and counter-terrorist-financing obligations, and holds explicit enforcement powers including suspension and revocation. There are now separate business-to-consumer and business-to-business license categories, and supplier registration and licensing obligations have continued to tighten through 2026.
What a valid current license looks like
One license issued to one named company, not a sublicense number shared with hundreds of sites. An entry in the authority’s own public register. And a certificate, reachable from the seal, showing an active status and explicitly listing the domain you are visiting. The certificate service sits on the authority’s own certificate subdomain with a distinct identifier per licensee, which is what makes copying a seal image useless: the image is trivially forged, and a certificate for somebody else’s domain does not cover the site you are on.
How to check the register
The Curacao Gaming Authority publishes its license register on its own website, and that is the starting point rather than any third-party summary. Two caveats. The authority itself notes that its published overviews are not a guarantee of current validity because status changes over time, so the certificate service is the fresher of the two checks. And the register resisted automated fetching when this page was researched in August 2026, which is a limitation of scraping rather than of the register: it is built to be read in a browser by a human. Do it that way, with the license number and company name copied from the footer.
What the LOK still does not fix
The LOK is a genuine improvement in transparency, ownership scrutiny and enforcement authority. It is not a US state regulator. Curacao does not require the segregated player fund reserves New Jersey and Michigan do, does not run a statewide self-exclusion program binding all its licensees, and cannot compel an operator to pay a US player the way a state can compel its own. It is the difference between an unaccountable site and a traceable one, not between an unaccountable site and a protected one. See regulated versus offshore blackjack sites.
Red Flags You Can Actually Check
These are not vibes. Every item here can be confirmed or ruled out in a couple of minutes.
No licensing details anywhere
Check the footer, the about page, the terms and the responsible gambling page. A licensed operator has a compliance department that puts this in at least one of those four places because a regulator requires it. A site with none of it is not being minimalist.
A license number that does not resolve
You type it into the register and get nothing, or you get an unrelated company. Most common failure, most conclusive. The subtle version: an old-style Curacao sublicense number that resolves to a master licensee is also a failure, because it does not identify the operator you are dealing with.
A licensee entity that does not match the operator
The footer names one company, the terms name another, the register names a third. Related entities inside one group are normal and usually disclosed. Three unrelated names with no stated relationship is not.
An expired, suspended or revoked entry
Registers show status, and status is not decorative. Suspended means the regulator already found a problem. Check the expiry date too: a license that lapsed four months ago is a site running without one, whatever the footer still says.
A seal that is only an image
Click it. If nothing happens, it is a picture. If it opens a page on the casino’s own domain describing the license rather than a page on the regulator’s domain recording it, it is a picture with extra steps.
A certificate that names a different domain
The upgraded fake seal: the link is real, the certificate is genuinely active, and it belongs to somebody else. Read the domain field and compare it to your browser bar.
Terms that name a company the license does not cover
The terms define who owes you money. If the license covers Company A and the terms bind you to Company B, a complaint to Company A’s regulator gets answered, accurately, with the statement that Company B is not their licensee.
A recently registered domain
Run it through a public WHOIS lookup such as the one ICANN operates at lookup.icann.org. A creation date measured in weeks, paired with an aggressive welcome offer, is a well-established pattern. Established brands do launch new domains for legitimate reasons, but a new domain plus a new company plus no verifiable license is three signals stacked.
No contact route except a web form
Pair that with terms that reserve broad discretion over your winnings. Read the irregular play, bonus abuse and account closure clauses before you deposit. Blackjack players get caught here disproportionately, because blackjack is usually excluded from bonus wagering requirements or weighted at a small fraction, and low-house-edge play is exactly what an irregular play clause is drafted to catch. See voided winnings.
Checks That Look Like License Checks but Are Not
Several things sit in casino footers that readers treat as licensing evidence. None of them are.
The padlock in your browser bar
It is a TLS certificate. It confirms the connection is encrypted and the certificate was issued for that domain. Those certificates are free, automated and issued in seconds to anyone controlling a domain, fraudsters included. A padlock tells you nobody is reading your traffic in transit. It says nothing about who is on the other end.
Testing laboratory seals
An eCOGRA, GLI, iTech Labs or BMM Testlabs mark means a laboratory tested something, usually a random number generator, a game or a platform component. Valuable, and a different thing from a license: a lab certifies the math, a regulator licenses the company and can take its business away. Weak operators sometimes carry a lab seal and no license at all, which is a deliberate substitution.
Payment and security badges and trust scores
PCI DSS compliance, two-factor authentication and processor logos describe how a site handles card data and logins. A numerical trust score is somebody’s opinion rendered as a graphic. None of them is a register entry, and none can compel anyone to pay you.
A regulator that does not exist
The most complete version of the fake seal, and the one that defeats a careless check: an invented authority with a plausible name, a website with a coat of arms, and a register that returns a positive result for exactly the sites that paid for it.
The defense against an invented regulator is mechanical
Never reach a regulator by clicking a link on the casino’s page. Search the authority’s name yourself, confirm it is a government or recognized tribal body with a real legal instrument behind it, and find the register from that direction. For the seven US states the regulator is always a named state agency reachable from the state government’s own site.
Real verification
- A register entry you reached from the regulator’s own domain, found by searching for the authority yourself
- An entry that names this company and this domain, with an active status and an expiry date in the future
- A license number that is unique to one licensee rather than shared
- Terms that name the same operating entity the register does
- A company that exists in a filed business registry, with a history longer than the welcome offer
Theatre
- A padlock in the browser bar, which is free, automated and issued to fraudsters too
- A testing lab mark used in place of a license rather than alongside one
- PCI DSS badges, two-factor logos and a numerical trust score
- A seal image that links nowhere, or links to a page on the casino’s own domain
- A certificate that loads, is genuinely active, and belongs to somebody else’s domain
What a License Does Not Guarantee
A license is a floor. Being precise about what is not sitting on top of it matters, because overclaiming is how readers end up feeling betrayed by a site that was, technically, licensed the whole time.
What a license does deliver
- A regulator that can fine, suspend, revoke and in several states order an operator to pay you
- Independent laboratory testing of the RNG, the shuffle logic, the rules and the platform before launch
- Player balances held in reserve, separate from operating funds
- A dispute path that does not end at the operator’s own support desk
- Deposit, loss and time limits, and a statewide self-exclusion list binding every operator at once
What it does not
- Solvency. A license is not deposit insurance and there is no gambling equivalent of FDIC coverage
- Fair terms. A 40 times wagering requirement with blackjack excluded is fully compliant in every regulated state
- Fast payment. States set outer limits and complaint procedures, not service-level agreements
- Good blackjack rules. No state regulator requires 3:2, standing on soft 17, surrender or doubling after a split
- A welcome as a winner. Card counting is not a crime, and it is not protected by any state license either
It does not guarantee solvency. Reserve requirements on player funds are real protection, but a license is not deposit insurance and there is no gambling equivalent of FDIC coverage. Operators exit markets; offshore operators simply stop paying. Licensing changes how much warning you get and who can pursue them, not whether the money is guaranteed.
It does not guarantee fair terms. Regulators review terms for required disclosures and prohibited provisions. They do not rewrite commercial terms to be generous. A 40 times wagering requirement with blackjack excluded is fully compliant in every regulated state, and so is a maximum bet clause that voids a bonus if you exceed it by a dollar.
It does not guarantee fast payment. States set outer limits and complaint procedures, not service-level agreements. A withdrawal sitting in review for a week while documents are checked is normal compliant behavior, and it happens more at licensed sites than offshore ones precisely because the anti-money-laundering duties are real.
It does not guarantee good blackjack rules
This is the one no licensing guide mentions. No US state regulator requires a licensee to pay 3:2, to stand on soft 17, to allow surrender or to permit doubling after a split. A licensed casino can offer nothing but 6:5 tables on a continuous shuffler and be in perfect compliance. The rule set is a commercial decision, and 6:5 alone costs roughly 1.4 percentage points against an otherwise identical 3:2 game: good rules with correct basic strategy return in the neighborhood of 99.5 percent, and 6:5 does not come close. Licensing tells you the deal is honest, not that it is good.
It does not make you welcome as a winner. Regulated operators keep broad rights to close accounts and restrict play, and card counting, while not a crime, is not protected by any state license.
The Five-Minute Verification Checklist
Run these in order. Stop at the first hard failure.
The ten-step license check
- Identify your state. If you are in New Jersey, Pennsylvania, Michigan, West Virginia, Connecticut, Rhode Island or Delaware, you have a regulated option and a definitive check. If you are anywhere else, there is no state list to appear on, and every site offering you real-money blackjack is offshore. Your state page under blackjack by state has the specifics.
- Copy the exact domain from your browser bar, including subdomain.
- Open your regulator’s list using the table earlier on this page, and search for the domain. In New Jersey and Pennsylvania the domain will appear grouped under the casino licensee that hosts it. In Michigan, look for the platform provider paired with a tribal or Detroit casino operator. In Delaware, there are only three addresses and they are all named on the lottery’s own page.
- If the domain is not there, search the brand’s parent casino. Most brands are skins. Confirm the host licensee before concluding anything.
- Read the footer. Company name with a corporate suffix, license number, registered address, issuing authority. Missing any of the four is a question you should be able to answer from another page on the site.
- Click the seal. Dead image, or a link into the regulator’s own domain. If it opens a certificate, check that the certificate is active and names your domain.
- Open the terms and find the operating entity. Compare it to the footer and to the register entry. Any mismatch needs an explanation before you deposit.
- Check the entity in a company registry, the secretary of state’s business search in a US state or the relevant offshore companies registry. You are checking that it exists and how long it has existed.
- Run a WHOIS lookup on the domain. A creation date within the last few months is a reason to slow down.
- Confirm the responsible gambling furniture is present: deposit and loss limits, self-exclusion, a helpline number. In a regulated state these are mandatory, and their absence contradicts any claim of state licensing.
If steps three and four both come back empty, you are finished
For a site claiming to be legal in your state, there is no further check, no pending-approval category that permits real-money play, and no reason to continue.
Casino Licensing FAQ
How long should a license check take?
About five minutes. Run the ten steps in order and stop at the first hard failure. In New Jersey it can be much faster than that: find the domain on the Division of Gaming Enforcement’s Internet Gaming Sites page, see which Atlantic City casino it hangs off, and you are done in about fifteen seconds.
Why is the brand I am looking at not on the regulator’s list?
Because most consumer brands are skins. In every US state with regulated online casinos the license attaches to a land-based property, not to a brand, so the name on the website often will not appear on the licensee list at all. Search for the domain first, and if that fails, search for the host casino property and check whether your brand sits among the sites authorized under it. An empty result under the brand name is almost never proof of anything.
Does the padlock in my browser mean the casino is licensed?
No. That is a TLS certificate. It confirms the connection is encrypted and that the certificate was issued for that domain. Those certificates are free, automated and issued in seconds to anyone controlling a domain, fraudsters included. A padlock tells you nobody is reading your traffic in transit and says nothing about who is on the other end.
Is a Costa Rica license a real gambling license?
No. Costa Rica has no gaming regulator. What operators hold is local incorporation plus a cantonal commercial permit, the patente, for a data-processing business. A municipality issuing a business permit has no mandate to assess game fairness, testing, segregation of player funds or dispute handling, and does not. Treat “licensed in Costa Rica” exactly as you would treat no license claim at all.
Is a Curacao license worth anything now?
More than it used to be. The National Ordinance on Games of Chance, the LOK, came into force on Dec. 24, 2024 and abolished the old master-and-sublicense structure. The Curacao Gaming Authority now issues every license directly, investigates ultimate beneficial owners, imposes local substance and AML obligations, and can suspend or revoke. There is a public register and a per-licensee certificate service. It is still not a US state regulator: no segregated player fund reserve requirement, no statewide self-exclusion, and no power to compel payment to a US player.
What does an old-style Curacao number like 8048/JAZ tell me?
Which master licensee sold the sublicense, and nothing else. Thousands of unrelated casinos carried numbers such as 1668/JAZ, 8048/JAZ and 5536/JAZ because the number identified the master, not the operator. A shared number is not a license, it is a reference to somebody else’s license. Legacy sublicenses expired in January 2025, so a footer still showing one in 2026 is a red flag rather than a credential.
How do I tell a real regulator seal from a fake one?
Run three checks in order. Does the seal link anywhere at all, or is it a dead image? Does the link go to the regulator’s own domain, or to a page on the casino’s own site that merely looks official? And does the certificate that loads name this domain and this company, rather than some other operator’s? The third check catches the most sophisticated fakes, because copying a real certificate link is easy and getting your own domain onto it is not.
Does Nevada license online blackjack?
No. Nevada licenses online poker only and has no regulated online casino or online blackjack at all. Any site claiming a “Nevada online casino license” for blackjack is misrepresenting something. The seven states with live regulated online blackjack are New Jersey, Delaware, Pennsylvania, West Virginia, Michigan, Connecticut and Rhode Island. Maine passed LD 1164 but has not launched as of August 2026.
Does a license mean the blackjack rules will be good?
No, and this is the point most licensing guides miss. No US state regulator requires a licensee to pay 3:2, to stand on soft 17, to allow surrender or to permit doubling after a split. A licensed casino can offer nothing but 6:5 tables on a continuous shuffler and be in perfect compliance. The 6:5 payout alone costs roughly 1.4 percentage points against an otherwise identical 3:2 game, where good rules with correct basic strategy return in the neighborhood of 99.5 percent.
What if the license number in the footer does not resolve?
Stop. It is the most common failure and the most conclusive. You type it into the register and get nothing, or you get an unrelated company. The subtle version is an old-style Curacao sublicense number that resolves to a master licensee, which is also a failure because it does not identify the operator you are dealing with.
Before You Play
Verifying a license protects your money from the operator. It does nothing to protect you from yourself, and the two problems are unrelated. Blackjack’s low house edge makes it feel controllable in a way that slots do not, which is precisely why session limits, deposit limits and a hard stop set in advance matter more here, not less. Every licensed US operator is required to give you those tools; use them before you need them. Anyone who feels gambling has taken the wheel can call 1-800-GAMBLER, free and in confidence, 24 hours a day. Our responsible gambling resources page lists state-specific helplines and self-exclusion programs.
Help is free and confidential
You must be 21 or older to play at a legal online casino in every regulated state. If gambling stops being fun, call or text 1-800-GAMBLER, 24 hours a day. Every licensee in the seven live states must offer deposit, loss and time limits and honor a statewide self-exclusion list that binds every operator at once.
USA Blackjack Sites is an independent informational guide to blackjack sites for USA players. We may earn a commission from some of the sites we list, at no extra cost to you, which does not affect our rankings. Licensing rules, public registers, regulator structures, license fees and the brand-to-licensee pairings on this page were researched for 2026 and change frequently; the operative source is always the regulator’s own current publication rather than any summary of it, including this one, and offshore register entries can be stale, as the Kahnawake permit holder page dated Sept. 28, 2023 shows. Verify anything you plan to act on before you deposit. This page is informational and not legal advice. You must be 21 or older to gamble. Gambling problem? Call 1-800-GAMBLER.
