If you typed “how to report an online casino,” “casino won’t pay me,” or “online casino refuses to pay out” into a search engine, the answer is not straightforward — because the right complaint route is not the same for every player, every operator, or every state. It depends on what kind of site you used, where you are located, and whether the real failure sits with the casino, your bank, or the way the operator marketed itself to you. This guide cuts straight to the right authority and is honest about what each one can actually deliver.
Who this guide is for
You are probably here because a payout was blocked, an account was closed without explanation, deposits were retained, terms changed after you qualified for a withdrawal, or a KYC process started and never finished. The short version of what you need to know: there is no single U.S. gambling ombudsman. Depending on your operator and your state, the right complaint may go to a state gaming regulator, a state attorney general, the Consumer Financial Protection Bureau if the bank mishandled the dispute, or the Federal Trade Commission and IC3 if the conduct looks like fraud. This guide tells you which one applies to your situation and in what order.
The three questions that decide where you report
The reporting path is controlled by three questions, in this order.
Start with the regulator that actually licensed the site. For in-state licensed operators, that body has direct enforcement authority — it is the strongest complaint route available. Bodies with formal online-casino complaint processes include the New Jersey Division of Gaming Enforcement, the Pennsylvania Gaming Control Board, the Michigan Gaming Control Board, the Connecticut Department of Consumer Protection, the Delaware Lottery, the West Virginia Lottery, and the Rhode Island Lottery alongside the Rhode Island Department of Business Regulation. When a regulator licensed the operator, it can compel responses in a way no other authority can.
Offshore is a different situation entirely. The licence U.S. players encounter most often is Curaçao — but holding a Curaçao licence does not bring an operator inside any U.S. state’s regulatory system. The Curaçao Gaming Authority is explicit: it does not handle individual player disputes, cannot mediate, cannot arbitrate, and cannot order compensation. Complaints sent there may serve as supervisory intelligence, but they are not going to get your money back. Anjouan Gaming and the Kahnawake Gaming Commission also appear on offshore operator footers, but the practical consequence for a U.S. player is the same in each case — the operative complaint routes shift to your state attorney general, sometimes to your state gaming regulator’s unlicensed-enforcement arm if the site actively marketed into your state, and to federal consumer and banking channels where the payment conduct is the real problem. Curaçao’s LOK reform took effect December 24, 2024, and implementation continues through 2026, but the authority still does not function as a player-compensation body under that framework.
Sweepstakes operators need to be treated as their own category. The standard model presents play as a purchase of virtual currency, with sweepstakes entries or redeemable promotional coins offered as an accompanying feature. Several states have started treating that model — specifically where the redeemable coins function like wagerable value — as illegal gambling or deceptive consumer conduct. In 2025, the New York State Attorney General, working alongside the New York State Gaming Commission, stopped 26 online sweepstakes casinos from selling redeemable virtual coins in the state. Maryland Lottery and Gaming, the Michigan Gaming Control Board, and the Connecticut Department of Consumer Protection each took their own public enforcement steps against sweepstakes and unlicensed casino-style operators in the same period. That enforcement pattern is why sweepstakes complaints belong first with your state attorney general, and — in states that have moved actively — with the state gaming regulator as well. For the chargeback side of a sweepstakes dispute — including the billing-error categories that apply and the risks of initiating a dispute — our sweepstakes casino chargeback guide sets out the payment-dispute process separately from the regulatory complaint track.
The second question is what your state’s regime looks like. As of April 27, 2026, fully authorized real-money online casino gaming is operating in Connecticut, Delaware, Michigan, New Jersey, Pennsylvania, Rhode Island, and West Virginia through state-authorized systems. By contrast, some states have taken especially strong public positions against sweepstakes or unlicensed online-casino models, and a few states — especially Washington, Utah, and Hawaii — sit on the high-prohibition end of the spectrum. In Washington, transmitting or receiving gambling information over the internet is expressly criminalized by statute; Utah’s constitution forbids the legislature from authorizing games of chance and Utah’s code separately addresses online gambling; Hawaii’s attorney general has publicly described the state as having some of the strictest anti-gambling laws in the country.
The third question is what exactly went wrong. If the main problem is the operator’s non-payment, closure, or retroactive rules, the complaint usually belongs with a gaming regulator if the operator is licensed, or with a state attorney general if it is offshore or sweepstakes. If the real failure is your card issuer or bank refusing to investigate or mishandling a billing-error or unauthorized-transfer dispute, the right federal route is usually the CFPB, not a gambling regulator. If the problem is deceptive promotion, false “licensed” claims, or misleading advertising, the FTC and state attorney general become more relevant. If the facts look like outright online fraud, identity theft, or coordinated criminal conduct, the IC3 route should be layered in as a referral mechanism.
State lookup table
Use this in the order shown. If your state appears in more than one row, use the row that matches your operator type.
| Category | States in category | Primary state authority | Secondary route | What this category can pursue |
|---|---|---|---|---|
| Regulated online-casino states | Connecticut, Delaware, Michigan, New Jersey, Pennsylvania, Rhode Island, West Virginia | State gaming regulator that licensed the operator | State AG for offshore or unlicensed complaints; CFPB if the issuer is the real problem | Licensed-operator complaints, compliance breaches, and in some states referrals or enforcement concerning unlicensed operators targeting residents. |
| Public sweepstakes / unlicensed-enforcement states | Connecticut, Maryland, Michigan, New York | State AG and, where active, state gaming regulator | FTC for deceptive marketing; IC3 if facts look fraudulent or coordinated | Public enforcement against sweepstakes casinos, illegal online casinos, or illegal advertising targeted into the state. |
| High-prohibition states | Hawaii, Utah, Washington | State AG or local/state law-enforcement track | FTC and IC3 for deceptive or cyber-enabled misconduct | Complaints framed around illegal gambling, deceptive practices, and unlawful targeting of residents, rather than a licensed-operator dispute process. |
| Default track for all other states | All remaining states plus the District of Columbia | State AG consumer-protection division | FTC for deceptive advertising or sweepstakes promotion misconduct; CFPB or state banking regulator if the bank is the problem | Consumer-protection, deceptive-business-practice, and bank-conduct complaints where no in-state online-casino regulator licenses your operator. |
A useful practical rule follows from that table. If your operator is licensed in your state, start with the gaming regulator. If the operator is offshore or a sweepstakes site, start with your state attorney general, then add a gaming-regulator complaint only if your state has public sweepstakes or unlicensed-operation enforcement. If your bank, card issuer, or payment processor mishandled the dispute, add the CFPB or a state banking regulator in parallel.
What each authority can and cannot do
State attorney general
State attorneys general are the primary enforcers of consumer laws in their states, and the National Association of Attorneys General maintains a state-by-state complaint directory. This is usually the best route for offshore casinos, many sweepstakes sites, misleading “licensed” claims, and broader patterns of unfair or deceptive conduct. It is also the default state route in states without regulated online casino licensing. What an AG is most likely to pursue is a pattern: repeated non-payment, deceptive marketing, illegal targeting of residents, or a large number of similar complaints. What an AG usually will not do is act as your personal contract lawyer in a one-off dispute with no broader public-interest dimension. For filing, attach the operator name, website and app details, your state, advertising screenshots, account history, correspondence, dates, amounts, and an explanation of why the conduct is deceptive or unfair.
If your main issue is recovering deposits or reversing charges rather than filing a regulatory complaint, our guide to offshore casino chargebacks in the US covers the payment-dispute track — including which fact patterns give you a viable chargeback basis and which do not.
State gaming regulator
A gaming regulator matters most where the operator is licensed in-state. In New Jersey, the state says the Division of Gaming Enforcement accepts patron complaints and internet-gaming disputes; New Jersey’s internet-gaming regulations also require the operator to investigate each internet-gaming complaint and respond within five calendar days, then provide unresolved account, game-outcome, and illegal-activity complaints to the Division. In Pennsylvania, the Gaming Control Board has a dedicated complaint/dispute process for iGaming and says patrons may file within 30 calendar days of the incident. In Michigan, the MGCB requires you to complain to the provider first and wait at least 10 days. In Connecticut, consumers are told to contact the operator first and then file with DCP if unresolved. In Delaware, unresolved disputes move from the operator’s process to a full investigation by the Lottery Director. These regulators will pursue license violations, failures to follow gaming laws or approved controls, and in some states unlicensed operators marketing into the state. They usually will not resolve a purely offshore dispute where they never licensed the site. If your dispute involves a licensed operator and you want the full escalation framework from internal complaint through to legal action, our complete guide to resolving online casino disputes covers each stage in detail.
Consumer Financial Protection Bureau
The CFPB is about the financial institution’s conduct, not the casino’s conduct. It accepts complaints about credit cards, checking and savings accounts, prepaid cards, and money transfers, then routes the complaint to the company and says consumers generally get a response within 15 days. If your real issue is that the issuer ignored your evidence, failed to investigate, mishandled a billing-error or unauthorized-transfer dispute, or stonewalled you after repeated contacts, this is the right federal complaint route. It is not the place to ask a federal agency to discipline an online casino simply for refusing a payout. Your evidence should include the card or bank statement, dispute letters or emails, bank responses, dates, claim numbers, and the documents you previously sent the issuer.
Federal Trade Commission
The FTC’s remit is unfair and deceptive business practices — its reporting portal is built for fraud, scams, and conduct that misleads consumers at scale. In online-casino disputes, that makes it the right authority when an operator falsely presents itself as licensed, misrepresents how odds, bonuses, or redemption mechanics work, runs deceptive sweepstakes marketing, or fits a pattern that looks more like organised consumer fraud than a private gaming dispute. It is not a substitute for a regulator complaint against a licensed operator, and it is not a chargeback forum. What you send the FTC should focus squarely on the deception itself: screenshots of ads, onboarding pages, bonus representations, “licensed” claims, and whatever the operator did or said that directly contradicted those claims.
Internet Crime Complaint Center
IC3 is the right add-on when the conduct crosses into likely cyber-enabled fraud: identity theft, fabricated account “violations” used to steal balances, coordinated non-payment rings, or manipulated communications and payment requests. IC3 itself explains that it is the FBI’s intake point for cyber-enabled crime complaints and that complaints may be referred to federal, state, local, international, or partner agencies for possible action. That is the key limit: IC3 is a referral and intelligence channel, not a regulator that is going to order your money back. File there when the facts are serious enough that a fraud or cybercrime angle is real. Include transaction identifiers, payment details, account identifiers, email addresses, URLs, usernames, and all correspondence.
State banking or financial regulator
When your bank is state-chartered or your state offers a direct complaint channel against financial institutions, a state banking regulator can be useful alongside the CFPB. Examples include the California Department of Financial Protection and Innovation, the New York Department of Financial Services, and the Massachusetts Division of Banks, all of which publicly accept consumer complaints about financial institutions or financial services under their jurisdiction. This route matters when your dispute has turned into a bank-conduct case, not a casino-conduct case. Use it when the bank failed to process or review the dispute correctly, not when the casino simply refused payment.
Why the default answer fails
The default instinct is usually, “I’ll just file a complaint with the gambling regulator.” That only works reliably when a regulator actually licensed your operator.
For offshore operators, no U.S. gambling regulator licensed the site in the first place. For sweepstakes operators, the answer is state-dependent: some states have become active, but many still route the problem primarily through the attorney general or general consumer-protection channels. Even in regulated states, the gaming regulator’s job is supervision and enforcement, not acting as your private civil-litigation substitute. And if the real failure is your bank’s dispute handling, the gambling-regulator complaint is the wrong lead authority entirely. The practical answer is often more than one complaint filed in parallel, with each complaint framed to the authority’s actual jurisdiction.
The reporting process
The right order matters because several regulators expect you to preserve evidence and, in regulated states, to try the operator’s own complaint process first.
| Step | Who | Timeframe | Evidence required | Expected outcome |
| Preserve evidence | You | Immediately | Screenshots, transaction history, chats, emails, dated terms, advertising, KYC submissions | Prevents the operator from rewriting the record after the fact. |
| Formal written complaint to the operator | Operator support / formal complaints address | Same day; usually allow 10–14 days unless the state process says otherwise | A concise chronology, amount in dispute, what you want, and attachments | Written record and, in some states, a prerequisite for regulator escalation. Michigan requires an operator-first complaint and 10 days; New Jersey requires a five-day response on internet-gaming complaints. |
| Identify your authority cluster | You | Same day after sending operator complaint | State, operator type, misconduct type | Usually produces two tracks, not one: state complaint plus federal or banking complaint where needed. |
| File the primary state complaint | State gaming regulator or state AG | As soon as your operator-first step is complete, or immediately in offshore/sweepstakes cases | Account details, transaction history, correspondence, dated terms, screenshots of the offer and problem | Opens supervisory or consumer-protection review; may create a file or complaint number. |
| File the federal or bank-side complaint | CFPB, FTC, IC3, or state banking regulator | Parallel with the state complaint | Bank statements, dispute letters, misleading ads, URLs, payment data, bank responses | Routes the complaint to the correct federal or financial actor. |
| Pursue payment remedies in parallel | Issuer / bank | Do not wait for the regulator if the bank deadline is running | Statements, merchant descriptors, dispute timeline, proof of non-delivery or deception | Keeps reporting and financial-recovery tracks moving at the same time. |
The decision rule is simple. Licensed in-state operator: start with the gaming regulator. Offshore or sweepstakes operator: start with your state AG, then add the gaming regulator only if your state has been publicly active on unlicensed or sweepstakes enforcement. Bank or card issuer mishandled the dispute: file the CFPB complaint in parallel with whatever state complaint applies — do not wait for the state track to close first.
What you cannot realistically expect
You should not assume that a complaint automatically produces individual restitution. Sometimes regulators do recover money for consumers — Connecticut’s 2025 High5 settlement did exactly that, with more than $643,000 in restitution and additional funds for complaint-resolution and enforcement programs — but that is the exception you should hope for, not the baseline you should plan around. Regulators enforce, investigate, and pressure; they do not operate like small-claims courts in every case.
You also should not treat a complaint to the Curaçao Gaming Authority as your primary path to getting paid. The authority openly says it does not handle individual claims, cannot mediate or arbitrate, and cannot order compensation. That makes a Curaçao complaint a secondary supervisory signal, not a primary player-remedy route.
A direct civil action in U.S. court against an offshore operator is usually a poor first-line strategy for an ordinary player. The barriers are familiar: offshore location, forum clauses, service problems, and enforcement reality. Even Player Protection Legal’s own material on legal action stresses that court action is worth considering mainly when the operator is within reach of effective enforcement and the legal basis is strong. That is why, for offshore cases, complaints and payment-dispute routes usually come before litigation analysis.
Finally, there is no federal gambling-specific consumer regulator waiting to take your online-casino complaint as such. At the federal level, the work is split: the CFPB for the conduct of banks and card issuers, the FTC for unfair or deceptive business practices, and IC3 for cyber-enabled fraud referrals.
If parallel filings across a state AG, gaming regulator, and CFPB are required — or the operator has gone silent after repeated KYC submissions — Player Protection Legal handles these cases on a no-win, no-fee basis; our casino dispute legal services and how we assess whether a claim is worth pursuing explain what we look for before accepting a case.
What to monitor and when legal help changes the outcome
If you want to keep your filing strategy current, watch the public actions of the Office of the New York State Attorney General, the Michigan Gaming Control Board, the Connecticut Department of Consumer Protection, and Maryland Lottery and Gaming. New York’s 2025 sweepstakes action, Michigan’s repeated 2024–2026 cease-and-desist campaigns against sweepstakes and offshore operators, Connecticut’s 2025 High5 enforcement and restitution settlement, and Maryland’s growing public list of illegal online-gaming cease-and-desist targets all point in the same direction: state-level action against unlicensed online gaming and sweepstakes models is becoming more visible, not less. For enforcement notices, cease-and-desist actions, and regulatory updates across all of those bodies as they are published, our gambling law and casino dispute newsroom tracks developments in real time. On the offshore side, watch the Curaçao Gaming Authority as it continues implementing the LOK framework through 2026, while remembering that even the reformed authority still does not function as an individual player redress body. On the financial side, watch the Consumer Financial Protection Bureau complaint process and guidance, because that remains the main federal route when the bank or issuer mishandles the dispute.
For readers whose main issue is a blocked payout and who think the bank route may matter, the next article to read is the Offshore Casino Chargebacks guide, because reporting and payment reversal are complementary, not mutually exclusive. If you do not yet know what kind of operator you used, the most useful companion piece is a simple guide to identifying whether the site was state-licensed, offshore Curaçao-licensed, or sweepstakes-based. A future state-by-state regulator guide would also be useful for readers inside regulated states who want filing instructions tailored to a single regulator.
Professional representation changes the odds most clearly when you are no longer dealing with a single complaint. That includes cases requiring parallel filings across a state AG, a gaming regulator, and the CFPB, cases involving more than one brand under common ownership, cases where the operator stops responding after repeated KYC submissions, and cases where the complaint needs to be framed with consumer-protection or financial-regulation citations rather than general outrage. According to Player Protection Legal’s own materials, the firm works on a no-win, no-fee or contingency basis: no upfront payment, an agreed percentage of any recovered amount if money is recovered, and no fee if it is not. In plain language, that means you are paying for a result, not for the initial attempt.
The cases most likely to be declined are the ones that do not present a legal or factual wrong the complaint system can work with. In practice, that usually means ordinary gambling losses with no non-payment, no misrepresentation, no issuer error, and no identifiable unlawful conduct; files with no preserved terms, no transaction trail, or no usable correspondence; and situations where the operator or payment chain cannot be identified well enough to support a regulator, AG, or bank case. That kind of disqualifying line is exactly what makes no-win, no-fee acceptance decisions credible.
Open questions and limits
This article is current to April 27, 2026, but two parts of the landscape move quickly: sweepstakes enforcement and state-by-state unlicensed online-gaming responses. Some states can fit more than one row in the lookup table depending on the operator type. That is why the safest method is to decide in this order: operator type, then state row, then misconduct type.