How to Check If a Casino Is Legal and Safe in Brazil
Check 1: The SPA Authorized List
The SPA publishes every authorized operator in SIGAP, the Ministry of Finance's betting management system. Search the operator's legal company name (not just the brand). If it is not on the list, it is not licensed in Brazil. This single check filters out most scams.
Check 2: The .bet.br Domain
Only .bet.br domains are authorized to operate. Check the address bar. Phishing sites sometimes use lookalike domains (for example, a brand name with extra words or different endings). Type the URL yourself rather than clicking links in ads or messages.
Check 3: CPF and Facial Recognition at Signup
Licensed operators must verify your identity with your CPF and facial recognition during registration. This feels intrusive, but it is the law working as intended: it keeps minors out and ties every account to a real, traceable person. A casino that lets you deposit with only an email address is not following Brazilian rules.
Check 4: Legal Payment Methods Only
The cashier should offer PIX, TED, debit cards, or prepaid cards - and nothing else. If you see credit cards, boleto, or crypto deposits, the site is not licensed in Brazil, no matter what its homepage claims. See our payment methods guide for the full legal menu.
Check 5: No Bonus Bait
Licensed operators cannot offer welcome bonuses or free bets as sign-up inducements. Marketing must also carry responsible gambling warnings and 18+ notices, and cannot target minors. Aggressive bonus advertising aimed at Brazilians is a red flag for an unlicensed operation.
Red Flags at a Glance
- Not on the SPA authorized list, or the company name does not match.
- Domain is .com, .io, .bet (without .br), or a lookalike of a real brand.
- No CPF or facial recognition required.
- Accepts credit cards, boleto, or crypto.
- Advertises welcome bonuses to Brazilian players.
- No responsible gambling tools or 18+ messaging.
- Support only via Telegram or WhatsApp with no company details.
If Something Goes Wrong
With a licensed operator: complain in writing to the operator first and keep the ticket number, then escalate to the SPA if it is not resolved. Our complaints guide gives you a process that gets results. With an unlicensed site, Brazilian regulators have little leverage - which is exactly why the five checks above matter.
Related Brazil Guides
FAQ
Where is the official list of licensed casinos?
The SPA publishes the authorized-operators list in SIGAP, the Ministry of Finance's betting management system. Search for the operator's company name there before depositing.
Is a .com casino site legal in Brazil?
No licensed operator runs on .com. Only .bet.br domains are authorized. A .com site targeting Brazilians is operating without a Brazilian license.
Do licensed casinos really ask for facial recognition?
Yes. CPF plus facial recognition at registration is a legal requirement under the SPA's KYC rules. A site that lets you deposit with just an email is not licensed.
A site offered me a big welcome bonus. Is it licensed?
Almost certainly not. Law 14,790 forbids licensed operators from granting bonuses as an inducement to bet. Bonus offers aimed at Brazilians are a strong sign of an unlicensed site.
I got scammed by a casino. What do I do?
If it was a licensed operator, complain to the operator first, then escalate to the SPA. Our complaints guide walks through the process step by step. If it was unlicensed, Brazilian authorities have little leverage - document everything and report it anyway.