Scams to Avoid: Reading a Web Address to Catch a Cloned Casino Site
Cloned casino sites are identical to the originals in every way except one, and that one thing is printed at the top of your screen. Most people never read it. This page teaches how to read an address the way a browser does, which is the whole defence. PHFUN is an independent guide, not a casino. It takes no deposits, runs no games and has no player login. It is for adults aged 21 and over.
How a browser reads an address
People read an address from the left and stop at the first familiar word. Browsers work from the right. The part that identifies the owner is the registered domain: the last label before the ending, together with the ending. Everything to the left of that, and everything after the first single slash, is chosen freely by whoever owns the domain.
| Part of the address | Who controls it | How clones abuse it |
|---|---|---|
| Ending (.com, .ph, .net, .vip and others) | Chosen at registration | Same brand name registered under a different ending |
| Registered domain name | The registrant | One character changed, a hyphen added or dropped, a digit swapped |
| Subdomain (text before the registered domain) | The registrant, freely | The real brand's name placed here, in front of an unrelated domain |
| Path (text after the slash) | The registrant, freely | '/official', '/login' or the brand name, to look reassuring |
| Padlock / https | Anyone, at no cost | Present on clones too; proves encryption only |
So when checking a site, find the ending, step one label to the left, and read those two pieces together. That is who you are dealing with. The rest is decoration.
What clones say, and the reality
| Claim | Why it is false | What to do |
|---|---|---|
| 'This is the new official domain' | A real change is announced on the existing verified site and reflected in the regulator's records | Stay on your bookmarked address |
| 'Backup link in case the main site is down' | 'Backup' lists are how unfamiliar addresses are normalised | Wait, or contact support through the verified site |
| 'Secure site, see the padlock' | Any site can obtain a certificate | Read the registered domain instead |
| 'Licensed by PAGCOR', with a logo | A logo is a picture. A licence attaches to a named company and listed domains | Check PAGCOR's published list |
| 'Login to keep your account active' | Accounts are not kept alive by logging in on another address | Ignore |
| 'Scan this QR to open the official site' | A QR code hides the address until after you arrive | Read the address shown after scanning, before typing anything |
How clones find their visitors
- Paid search adverts placed above the genuine result.
- Links in SMS, including messages that appear inside an existing thread from a familiar sender name.
- Posts and private messages from fake agents on Telegram and Facebook.
- QR codes in images and on printed flyers.
- Typing errors: domains registered one keystroke away from the real one.
None of these routes involves you typing a verified address, and that is the point. The defence is equally simple: a bookmark made once, after checking, and used every time.
A routine that works
- Read the operator's terms for its company name.
- Find that company, and its recorded domain, on the licensee list PAGCOR publishes.
- Match the registered domain in your address bar to that record exactly.
- Bookmark it. On a phone, tap the address bar to see the full address before bookmarking.
- Use a password manager, which will decline to fill your login on a domain it has not seen.
PHFUN publishes no 'working links' or mirror lists and never will.
What a real KYC request never asks for
Clones commonly add a verification page to collect more than a password. A licensed operator's check takes place in your account on its verified domain and asks for a government ID, sometimes a selfie, sometimes proof of the payout account. It never asks for:
- Your wallet MPIN or banking password.
- A one-time code.
- A card's security number.
- A payment to verify, activate or unlock.
- A remote-access app.
- Documents sent to a person over chat.
Scams that share the clone's stage
Phantom balances and release fees. The clone shows winnings, then demands payment before withdrawal.
Fake support. A chat widget or phone number on the clone, staffed by the scammers.
Fake app downloads. An 'install our app' button serving an altered APK.
Bonus bait. A promotion that exists only on the clone, used to prompt a first deposit.
If you used a clone
- On a trusted device, go to the verified address and change your password.
- Change the same password anywhere else it is used, email first.
- Change your wallet MPIN if you entered it or any code.
- Check wallet and account history for unfamiliar activity.
- Record the clone's full address and how you reached it.
Reporting
- Tell the operator's support through its verified site; it will want the clone's address.
- Report any money moved through your e-wallet's in-app helpline or help centre, not a number passed to you.
- Report the impersonation through PAGCOR's complaint channel, as published on its website.
- For fraud, use the cybercrime route: CICC hotline 1326, the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, with contact details taken from their official websites.
Recovery of funds is not assured, and PHFUN can neither trace nor return money. It has no login, so a page under this name asking for a password is not this site.
Frequently Asked Questions
Which part of a web address shows who owns the site?
The registered domain: the last label before the ending, plus the ending. Text before it or after the slash can be anything.
Can a cloned site have the brand name in its address?
Yes, as a subdomain or in the path. That is why you read from the right, not the left.
Is a QR code to a casino site safe to scan?
Scanning is harmless, but read the address that opens before entering anything. A QR code hides its destination.
Why not use a list of mirror links?
Mirror lists get people used to trusting unknown addresses. Use one verified bookmark.
Does PHFUN have a login page?
No. PHFUN is an independent guide with no accounts, no cashier and no games.