Security note: this guide explains verification and scam checks. Never send money, passwords or identity documents in response to an unsolicited message.
Verify four things before a payment
| Check | Acceptable evidence | Stop signal |
|---|---|---|
| Destination | The payee name or PayID matches the verified organisation and the details were obtained inside the official account area. | A different name, a personal account, a newly supplied QR code or instructions sent only by chat. |
| Amount | The amount, fee and currency are shown before confirmation. | An added “release”, “tax”, “unlock” or “verification” payment appears after the first transfer. |
| Account | You reached the service using a saved address or independently typed URL and used your own device. | A message pressures you to use a link, remote-access app or screen-sharing session. |
| Exit rules | Withdrawal methods, identity checks, minimums, fees and timeframes are visible before deposit. | Withdrawal conditions are hidden, change after a win or require another deposit. |
A safer transaction flow
Why identity checks may occur
Know Your Customer checks can be used to confirm identity, age and account ownership and to manage financial-crime risk. AUSTRAC states that regulated providers may need to collect and verify customer information before providing designated services. For Australian online gambling service providers, strengthened pre-verification requirements took effect on 29 September 2024.
Worked example: a fake withdrawal fee
A user requests a $750 withdrawal. A supposed support agent then asks for a $120 “AML release fee” through PayID to a personal name and says the payment must be made within 30 minutes.
Scamwatch advises acting quickly after a suspected scam, including contacting the bank or card provider and stopping further payments.
Protect the account, not only the card
- UNIQUE PASSWORDUse a password not shared with email, banking or other gambling-related accounts.
- MULTI-FACTOR AUTHENTICATIONEnable it where available, preferably through an authenticator or security key rather than reused SMS access.
- SESSION CONTROLSign out on shared devices and review logged-in devices or recent activity.
- DOCUMENT HYGIENEUse the official upload portal, watermark copies when appropriate and avoid sending more information than requested.
- RECORD KEEPINGSave terms, transaction references and support correspondence in case a dispute needs evidence.
Payment method comparison is about reversibility and control
| Method | Typical strength | Main caution |
|---|---|---|
| Card | Clear statement trail and potential dispute pathways depending on issuer rules. | Card data exposure, recurring charges and merchant descriptor confusion. |
| Bank transfer / PayID | Direct confirmation through a banking app and clear payee display. | Many payments are fast and difficult to recover once authorised. |
| Digital wallet | Can reduce direct sharing of card details. | Wallet account takeover and separate wallet/provider terms. |
| Cryptocurrency | Fast cross-border transfer. | High irreversibility, address errors, volatility and limited recovery options. |
Frequently asked questions
Should I pay a fee to release a withdrawal?
Treat an unexpected payment demand as a major warning sign. Do not transfer more money until the requirement is independently verified through official channels.
Is PayID itself unsafe?
No. The risk is paying the wrong person or following deceptive instructions. Confirm the displayed payee and purpose before authorising the transaction.
Why might a provider request identification?
Regulated providers may need identity and customer due-diligence checks. The request should be proportionate, explained and completed through a secure official process.