Guide · WalletConnect explainedUpdated 9 October 2026
Guide
5 of 10casinos show a WalletConnect route at login
WalletConnect Explained: what a QR scan actually opens
By Elias Varga
WalletConnect is the technology that lets a mobile crypto wallet sign in via QR code to a webpage on your laptop. Scanning the QR code doesn’t move your coins; it opens a secure connection that lets the webpage reach out to your wallet to sign a message. The guide follows a session, from scanning the QR code to disconnecting from it, and names the casinos that enable WalletConnect. The guide explains what a session allows a webpage to do and what it can’t do.
- 700+wallets, by walletconnect.com
- 30 daysan active pairing's expiry, by the specification
Where it appliesSee the WalletConnect casinosThe five with a QR route, scored.
See the WalletConnect casinos
What WalletConnect is, by its own pages
An open protocol since 2018
Walletconnect.com says the technology allows wallets, apps and institutions to communicate securely. The site says the technology has been under development since 2018. It has an audit of the source code. The site says the network processed over 400 billion dollars of transactions in 2025 and has 700+ wallets and 80,000 apps and 900 million users.
A channel, not a permission
In the specification, Sign is defined as a remote signer protocol that lets web3 wallets communicate with dApps securely. The wallet is always the signer. The website can communicate a message to your wallet, and nothing can be signed without your knowledge and approval.
Encrypted end to end
Wallets build on WalletKit, which its documentation calls an end-to-end encrypted solution for wallets to connect to applications and sign messages and transactions. This has been audited by Trail of Bits, including its encryption stack. The relay that transports the messages carries ciphertext; the key that opens it is in a QR code, on a page, on your phone, and nowhere else.
A session, from the scan to the disconnect
- 5 minan unanswered code lives
- 30 daysan active pairing lives, refreshed on use
- 1 tapper request, on the phone
- The page makes a key and a code. In the pairing specification's words, the site creates a random symKey and a pairing topic that is a sha256 hash of that key, and puts them in a URI shared as a QR code or a deep link. Whoever scans the code holds the key to the channel, which is why the code must come from the casino's own page.
- The wallet scans, and the pairing settles. An inactive pairing expires 5 minutes after being created if nothing answers; once the wallet confirms, the pairing is active with a 30-day expiry, refreshed to another 30 days on each peer after any request or response. The pairing is the pipe; the session comes next.
- The site proposes a session. Pairing and session are decoupled in version 2: a URI is shared to construct a pairing proposal and only after settling the pairing can the dapp propose a session. The proposal names the chains, the accounts and the methods the site wants, and the wallet shows it for approval.
- Requests arrive on the phone. The login message, and later any deposit, is a request inside the session. Each one appears in the wallet with its own Approve and Reject; the site cannot answer for you. Trust Wallet's gaming guide describes exactly this: approve transactions directly from your mobile device while playing on your computer.
- Either side ends it. The wallet lists the session under its connections and can delete it; the site can too; otherwise it expires. Ending the session closes the pipe and nothing else: the casino account, the balance and any approval already on the chain are untouched.
Where the QR sits at the ten casinos
| Casino | Where WalletConnect appears | What the scan opens | Read on |
|---|---|---|---|
| Dexsport | The sixth of six wallet icons under the email field | A sign-in message; nothing follows it | Dexsport review |
| BC.Game | An icon beside MetaMask under Log in directly with; it shows a QR code for the app | A sign-in message; an email can be added later | BC.Game review |
| Metawin | The single Web3 Wallet button opens a picker with a QR code row and a search over 560 wallets | A sign-in message; nothing follows it | Metawin review |
| Solcasino | A Wallet Connect tile, sixth of eight, beside four Solana wallets and MetaMask | A sign-in message; a username is chosen or assigned | Solcasino review |
| Just.bet | Continue with a wallet opens a Privy list of 603 wallets with a QR option | A Privy sign-in message | Just.bet review |
| Bitcasino.io | In the cashier only: Connect Wallet offers WalletConnect beside MetaMask after an email login | A deposit, not a login | Bitcasino.io review |
| BetFury | Not offered; the TON Connect button is TON's own standard, a separate protocol with its own QR | A TON wallet session, not a WalletConnect one | BetFury review |
| Roobet, Rollbit, Fairspin | Not offered: MetaMask only, no QR code | No phone route | WalletConnect ranking |
WalletConnect's ranking scores the five on what the scan opens and what follows, and Trust Wallet's ranking reads the same screens for the phone wallet most frequently behind the scan.
What to check, on the laptop and on the phone
Good signs
- The page showing the code is the casino's domain; the key in the code belongs to whoever drew it
- The session proposal on the phone names the chains and the one account you keep for play
- The first request is a message naming the casino, with no amount and no gas estimate
- The wallet's connections list shows one session for the casino, which you can end when you are done
Stop
- A code on a page you reached from a message, an ad or a search result rather than the address you typed
- A session proposal that asks for every account in the wallet, or for a chain you did not pick
- A first request that is a transaction or a token approval: a login never needs either
- A second code to scan after you are already signed in, from the same page
Sign-in with Ethereum describes the message carried by the first request, and Token Approval describes the request that should never happen during a login session.
What a session cannot do, and what it does not change
It cannot sign for you. Every request lands on the phone with an Approve and a Reject. A site that holds an open session can ask, and nothing else; the specification calls the wallet the remote signer for a reason.
It cannot read what you do not approve. The session proposal defines the accounts and chains that the site will see. Approving one account means the site will see one account; the rest of the wallet stays out of view, which is the burner wallet's job made explicit.
It does not change the casino. The deposit that a session approves becomes the casino's balance like any other; the country Clauses and the Verification clause on every review apply no matter what the route is. On-chain vs custodial draws that line.
WalletConnect questions players ask
What is WalletConnect used for?
For connecting a wallet on one device to a site on another, or a wallet app to a site in the same phone’s browser without an extension. The site displays a QR code or a link. The wallet scans or opens it. From then on, the site sends requests to the wallet over an encrypted channel. At a casino that means a phone wallet can sign the login message for a page opened on a laptop, and later a phone wallet can approve a deposit the same way.
What is WalletConnect (WCT)?
WCT is the native token of the WalletConnect Network. The site states WCT is the underlying asset of the WalletConnect Network economy for staking, governance, and rewards. A casino login never touches it: the protocol works the same way with or without the token, and no reviewed casino mentions it.
Is WalletConnect safe to use?
The WalletKit used by wallets was audited by Trail of Bits, and the specification for the protocol derives the channel from a key the QR code carries. What the protocol cannot evaluate is the page that displays the code. A session only carries requests; your approval on the phone is what moves anything, therefore read it like any other prompt: the site name, the request type and the amount.
How do I connect WalletConnect to Trust Wallet?
According to Trust Wallet's gaming guide, you point the camera at the code and wait for the sign-in message to appear on your phone. Once it appears you approve it. BC.Game, Solcasino, Dexsport, Metawin's, and Just.bet's pickers all display the WalletConnect button. Trust Wallet's guide walks you through all three options.
Which wallets are compatible with WalletConnect?
It says it has more than 700 wallets. Among the ones covered on this site, Trust Wallet's developer documentation states WalletConnect v2 with Ethereum and all EVM chains and Solana, and OKX Wallet's page states it is compatible with Wallet Connect. Bitget Wallet's documentation states it has a WalletConnect adaptor. Binance Wallet's states it supports Wallet Connect. Rabby Mobile places it in Settings. The MetaMask and Phantom apps scan codes, which is how Metawin's picker lists 560 names.
Does a WalletConnect session cost gas?
No, not really. Opening a session, signing a message to log in and ending a session are not transactions. A transaction is requested within a session, like a deposit from your phone's wallet. Gas is only incurred at that point, and it is not WalletConnect that incurs the gas cost, but the chain itself.
Can a site steal from my wallet through WalletConnect?
Not directly through the session itself. A session allows the site to prompt; all requests get routed to your phone for you to approve or deny, and a signature or a transaction only occurs when you approve it. The risk is the same as with an extension: a page made to look like a casino can show a code, open a session and prompt for a token approval. Read the request, not the code.
How do I end a session?
From the wallet: WalletConnect sessions appear under the app’s connections, and each has an end button. The specification lets the other party delete the session as well. Ending the session stops the page from making requests; it doesn’t log you out of the casino, undo an approval that is tied to the chain, or touch the funds the casino holds.
Casinos with a WalletConnect route at login
Keep reading
- RankingWalletConnect casinosThe five with a QR route, scored
- RankingTrust Wallet casinosThe phone wallet most often behind the scan
- GuideWhat does connect wallet mean?The same step without the QR
- Wallet guideTrust Wallet guideThe scanner, step by step
- Wallet guideOKX Wallet guideAn exchange wallet that states WalletConnect support
- GuideSign-in with Ethereum explainedThe message that arrives after the scan
About the author
Elias Varga writes CryptoReel from Lisbon. He opens each casino's login and records where the QR route sits, and keeps the dialog screenshots beside the claims; the protocol side comes from the specification itself.
Play it safe
You must be 18 or over to gamble, and older where your country says so. Fund a separate wallet with what you can afford to lose, and treat a loss as the cost of the evening. If gambling stops feeling like a pastime, Gambling Therapy offers free help in many languages. Our responsible gambling page lists more services and the limit tools casinos offer.