Guide · Crypto casino rug pullsUpdated 9 October 2026

Guide

10,515 ETHbridged to ZKasino by 10,000+ users, April 2024

Crypto Casino Rug Pulls: three dated cases and the pattern

Elias Varga, CryptoReel editor By Elias Varga

This report covers what’s verifiable. That means it covers the Dutch criminal case with two arrests; the Solana Casino that closed and returned vault balances; and the Web3 Casino domain that expired and went up for sale, each with its date and its source. This report outlines the pattern and states what a wallet login protects and what it does not protect.

  • 2arrests in the Dutch ZKasino case
  • 3Web3 casinos gone since April 2024, on this page

Where it appliesWhere a deposit sitsWhere the deposit sits while you play.

Where a deposit sits

Checks before a deposit

Crypto casino rug pulls: betswirl.com on 8 October 2026, a Porkbun page saying the domain has expired and is for sale at auction
betswirl.com, 8 Oct 2026

Three cases, with dates and sources

  • 10,515 ETHbridged to ZKasino
  • €11.4m+seized at the first arrest
  • $1.2bnwagered at Luck.io before it closed
CaseWhat happenedDatesSource
ZKasinoLaunched as a blockchain casino promising an airdrop to users who bridged ETH, to be returned within 30 days; 10,515 ETH arrived from 10,000+ users, and about $33 million was moved to Lido instead. The FIOD arrested a 26-year-old man and seized over 11.4 million euros of assets; Interpol issued a Red Notice for a 21-year-old Norwegian, later arrested in the UAE. Prosecutors: there was never any intention to return the invested funds. A 72-hour return process was announced a month on; the ETH was not returned by 2025.Launch 20 April 2024; arrest 29 April 2024; FIOD release 3 May 2024; Red Notice 6 March 2025; UAE arrest announced 3 July 2025FIOD, Public Prosecution Service, Cointelegraph
Luck.ioA non-custodial Solana casino with over $1.2 billion in bets and 286 million lifetime bets announced its closure on X and told users to withdraw from the Smart Vaults through its site or the Proov Protocol tool; the report cites influencer spending of up to $500,000 a month. Its own page later read: closed as of April 29, 2026; all withdrawable Smart Vault balances have been returned on-chain to their owner wallets.Closure announced 24 April 2026; closed as of 29 April 2026; its page on 8 October 2026 is belowCryptopolitan, 24 April 2026; luck.io, shown below
BetSwirlbetswirl.com, a Web3 casino domain, served a registrar's sale page: the domain has expired and is currently for sale at auction.8 October 2026betswirl.com, shown below

Figures and wording as each source gives them; nothing on this page is a prediction about a casino still running.

betswirl.com on 8 October 2026: a Porkbun page saying the domain has expired and is for sale at auction
betswirl.com as it loaded on 8 October 2026: expired, for sale at auction.
luck.io on 8 October 2026: a page saying Luck.io is closed as of April 29, 2026 and Smart Vault balances were returned on-chain
luck.io as it loaded on 8 October 2026: closed as of 29 April 2026, vault balances returned on-chain.

The pattern, and the one counter-pattern

A way in with no way out. The prosecutors in the case against ZKasino say the smart contract design suggests no return was intended, and the 30 day bridge promise to return ETH was a sham. All the reviewed casinos have a cashier with a deposit address. The relevant question is whether the withdrawal route has ever paid you, which is why the checks described below start small.

Spend that outruns the game. According to Cryptopolitan, Luck.io processed $1.2 billion in bets and paid influencers up to $500,000 a month. It eventually said it would close, with no reason given. Unless something else holds them, a business that closes takes custodial balances with it.

A domain that lapses. betswirl.com has lapsed and is now in auction. There have been no announcements, cases, or fraud records. Their site has simply disappeared, as well as the balance held in a company with a lapsed domain. The rule here is to check every casino listed on the site monthly. Dead casinos are removed within the month.

The counter-pattern: a vault that returns. Luck.io's closed page states that Smart Vault balances are returned to the owners' wallets, and Just.bet's escrow contract on Arbitrum carries an exit using a Merkle proof. Where the balance is held in a contract the player can leave, a closure is a closure. Where it's held in a company wallet, it's the company's decision. On-chain vs custodial draws that line across the ten.

Checks before a deposit, in the order they pay off

  1. Test the way out first. Deposit a small amount, play a little, and withdraw it before any larger deposit. A cashier that pays a small withdrawal is not proven safe; one that does not is proven unsafe. The withdrawal guide lists each casino's route, fee and the wagering it requires before a cash-out.
  2. Read where the balance sits. Nine of the ten reviewed casinos hold deposits in a company balance; Just.bet holds USDC in an escrow contract on Arbitrum with an exit by Merkle proof. Only the second kind can be left without the operator's help.
  3. Read the licence as the casino states it. Each review quotes it verbatim, or marks NOT DISCLOSED, and links the regulator's register where there is one. A licence names a company and a regulator; it does not hold the money.
  4. Read the withdrawal clauses. How long, how much per day, which checks: BetFury's terms allow an anti-fraud hold of up to seven days; Fairspin caps withdrawals at 1,000 USDT a day; Metawin's FAQ says $2.50 flat with a $20 minimum. A casino that publishes none of this has published its answer.
  5. Check the company and the domain are current. The terms name an operator; the regulator's register names it too, where there is one; the domain resolves to the casino and not to a registrar. betswirl.com failed the last of those on 8 October 2026.
  6. Keep the balance small. The one check that works after the fact. A deposit the size of an evening's play is the most any closure can take; the burner wallet guide is built on that.

Where the ten reviewed casinos hold a deposit

  • 1casino with a contract-held balance
  • 9with a company-held balance
  • 0fully on-chain
CasinoWhere your deposit sitsExit if the site goes darkRead on
Just.betUSDC in an escrow contract on Arbitrum; the balance is WINRAn emergency exit by Merkle proof, by its review; no licence, by clause 1 of its termsJust.bet review
Dexsport, BC.Game, BetFury, Metawin, Roobet, Bitcasino.io, Solcasino, Rollbit, FairspinA casino balance in the operator's own systems, credited when the deposit landsNone by contract; the terms' withdrawal clause and any regulator the casino namesWeb3 casino ranking

The ranking links every review.

BC.Game sign-in dialog with email and password fields and a row of login buttons including MetaMask and WalletConnect
The sign-in dialog, 8 October 2026: email and password, then Cwallet, a passkey, Google, X, Telegram, MetaMask, WalletConnect, LINE and Steam.

The on-chain casino ranking scores the ten on this. It says that, out of all of them, none are fully on-chain.

What a wallet login stops, and what it does not

A wallet login protects you from

  • A password leak: there is no password, and the signature cannot be reused thanks to its nonce
  • A deposit from the wrong wallet: the connect prompt names the account
  • A drainer's approval, if you read the prompt: a login never needs one
  • Exposure of your other holdings, if the login wallet is a burner

It does not protect you from

  • A casino that takes the deposit and closes: the balance is the casino's from the moment it lands
  • A lapsed domain or a bankrupt operator: no signature reaches a company that is gone
  • A contract written to keep the money: ZKasino's bridge had a contract too
  • A licence that names a regulator with no reach where you live: this site gives no legality verdicts

Provably fair is a separate promise. It pertains to how a bet is decided, not if the payout is made. Provably fair on-chain covers how a bet is decided, and is Web3 gambling legal? covers the legal side of things.

Rug pull questions players ask

Is rug pulling in crypto illegal?

The Dutch authorities consider the alleged offences fraud, embezzlement and money laundering in the only known case of the prosecution of casinos by the Dutch authorities. The FIOD arrested a 26-year-old man on 29 April 2024, for the alleged offences and the Public Prosecution Service considers the ZKasino scheme a rug pull. A country decides what the offence is in its own jurisdiction and this site does not render legal opinions.

How does a crypto casino rug pull work?

ZKasino is the example. The platform launched on 20 April 2024 and promised to airdrop a token to users who bridged ETH. The ETH was to be returned in 30 days. More than 10,000 users sent 10,515 ETH to the platform, and around $33 million of it was moved to the Lido staking protocol instead. The prosecutors say the suspects’ communication demonstrated there was no intention to return the invested funds. The deposit route worked; the withdrawal route did not exist.

How do I spot a rug pull before it happens?

No check is a guarantee, so this site only covers what can be read. The licence as the casino states it, or NOT DISCLOSED. Where the balance is, in a company wallet or contract you can leave on your own. A withdrawal route tested with a small amount before a large deposit. Terms that state how and when withdrawals are made. Company and domain names that are provided and are current. The checks section above provides more information.

Are rug pulls profitable for the people who run them?

The ZKasino case shows over 11.4 million euros worth of assets seized at the first arrest including cash, real estate and a car. There is a Red Notice issued by Interpol dated March 6, 2025 and another arrest in the UAE with an extradition request. Cointelegraph also reported the accused losing $27 million in a leveraged position as ETH price fell. The money was not kept, users also didn’t get it back.

Did Luck.io rug pull?

Not by the record. Luck.io announced its closure on April 24, 2026, and encouraged users to withdraw their Smart Vaults via its site or the Proov Protocol vault withdrawal tool, as reported by Cryptopolitan from Luck.io's X post. Luck.io’s site also states it is closed as of April 29, 2026. It also states that all Smart Vault balances that were withdrawable have been returned to their user’s wallets. A casino that closes and pays out is a closure. It is shown on this page due to vault design being the key difference between the two outcomes.

Can a non-custodial casino rug pull?

Designs where the balance sits in a contract you can leave without the operator's help dictates what a disappearance can be: Luck.io says the vault balances are back on chain, and Just.bet’s escrow contract on Arbitrum has an emergency exit by Merkle proof, per their review. The contract can still be written poorly, or drained by the authors, and no reviewed casino is fully on-chain, so the honest answer is: it narrows the loss to what the contract doesn’t cover.

Does a licence stop a rug pull?

It provides a regulator to complain to and a company to name in a court case, but doesn’t hold the money. BC.Game’s operating companies’ bankruptcy ruling (12 November 2024) by the Curaçao court, later contested, is the type of event a license makes visible. Each review quotes the licence as the casino states it, or NOT DISCLOSED, and, where possible, links the regulator’s register.

What do I do if a casino stops paying?

Document it. The date of the withdrawal request and the balance. The contract’s own exit is explained in Just.Bet’s review. Luck.io has a vault tool. For a company-held balance, there is no self-service exit, which is the entire argument for using a burner wallet and keeping deposits small.

The ten casinos, each with where its deposit sits on its review

Keep reading

Elias Varga, CryptoReel editor, in Lisbon

About the author

Elias Varga writes CryptoReel from Lisbon. He records a closure or a lapsed domain as a dated fact with its source and a screenshot, never as a prediction about a casino still running.

Play it safe

You must be 18 or over to gamble, and older where your country says so. Fund a separate wallet with what you can afford to lose, and treat a loss as the cost of the evening. If gambling stops feeling like a pastime, Gambling Therapy offers free help in many languages. Our responsible gambling page lists more services and the limit tools casinos offer.