Illegal Casino App Guide India (2026)

In March 2026, a Bengaluru resident lost ₹4.8 lakh to “LuckyWin777,” a casino app promising daily 18% returns. His UPI trail led to shell accounts; the app vanished overnight, and police initially refused an FIR citing “civil dispute.” This guide walks you through what to do.

Citizen Crisis Response Network — If you or someone you know has been defrauded by an illegal casino app, immediate steps can preserve evidence and trigger statutory remedies. This guide equips you with FIR templates, recovery procedures under the Bharatiya Nyaya Sanhita 2023, and coordinated complaint channels across police, banking, and telecom regulators.

Illegal casino apps are platforms offering real-money wagering. Following the Promotion and Regulation of Online Gaming Act, 2025, offering any online real-money game (whether of skill, chance, or both) is now banned across India, and banks, payment intermediaries, and advertisers are barred from facilitating or promoting such games. Most such apps originate offshore. Victims should screenshot all transactions, contact their bank's cyber-fraud nodal officer immediately to attempt a freeze, file an FIR under the BNS 2023 (Section 318 cheating and, where a false identity is used, Section 319 cheating by personation), lodge a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in), consider a consumer complaint under the Consumer Protection Act 2019, and pursue civil recovery through a summary suit or a consumer forum.

• What qualifies as an illegal casino app under Indian law
• BNS 2023 offences: cheating and cheating by personation
• Filing an FIR through the cybercrime portal or local cyber cell
• Immediate freezing of the transaction trail via the bank nodal officer
• National Cyber Crime Reporting Portal—step-by-step
• Consumer complaint under the Consumer Protection Act 2019
• Recovery through civil decree and execution
• Myths vs reality: 6 dangerous misconceptions
• Sample FIR, legal notice, and RTI application
• Frequently asked questions
• Last word

The Public Gambling Act, 1867 outlaws “common gaming houses,” and most states ban real-money wagering outside licensed racecourses or lotteries. Crucially, the Promotion and Regulation of Online Gaming Act, 2025 (passed by Parliament in August 2025) now imposes a nationwide prohibition on offering, aiding, or advertising online money games—and the ban applies to games of skill, games of chance, and hybrids alike, including offshore operators that target Indian users. So apps enabling roulette, slots, poker, “crash” games, or any wagering for monetary stakes online are illegal.

Historically, courts distinguished games of skill from games of chance—see KR Lakshmanan v. State of Tamil Nadu (1996) 2 SCC 226 (horse racing held a game of skill) and State of Andhra Pradesh v. K Satyanarayana (1968) 2 SCR 387 (rummy held predominantly a game of skill). That “preponderance of skill” distinction governed whether a stake-based game was lawful. Note, however, that the 2025 Act bans real-money online games regardless of skill, so this older distinction no longer rescues a real-money app.

Markers of illegality:

• Offshore registration (Curaçao, Malta licences claimed but no Indian GSTIN).
• No KYC compliance—instant UPI onboarding without PAN/Aadhaar linkage.
• Ponzi-style bonuses—referral commissions, daily “guaranteed” profits.
• Domain hopping—frequent URL changes, APK-only distribution sidestepping Play Store/App Store policies.

The Information Technology Act 2000 (Section 69A) empowers the Government, through MeitY, to block domains. Yet apps resurface with minor rebranding, so blocking alone rarely recovers money.

Warning — Installing APKs from unknown sources bypasses Google Play Protect; malicious casino apps have harvested SMS OTPs, enabling secondary frauds like unauthorized loan applications.

The Bharatiya Nyaya Sanhita, 2023 (which replaced the IPC with effect from 1 July 2024) is the relevant penal code. The provisions that apply to casino-app fraud are:

• Section 318 (Cheating): Deceiving another and thereby fraudulently or dishonestly inducing the person to deliver any property. Where the cheating induces delivery of property, punishment can extend to 7 years imprisonment and fine.
• Section 319 (Cheating by personation): Cheating by pretending to be some other person (for example, posing as a licensed operator or a fake helpline). Punishment: imprisonment up to 5 years, or fine, or both.

Public Gambling Act Section 4 (keeping a common gaming house) and Section 5 (visiting such a house) may also apply, alongside the offences and penalties under the Promotion and Regulation of Online Gaming Act, 2025 for offering or facilitating online money games. Several states impose their own penalties—for example through amendments to gaming laws in Telangana and Andhra Pradesh.

The BNS extends to certain offences committed outside India that target Indian victims, so cross-border apps are not automatically beyond reach; check the application provisions of the BNS with a lawyer for your specific facts.

Most citizens miss this — Cheating under BNS Section 318 (where property is delivered) is a cognizable offence, so the police can register an FIR and investigate without prior magistrate permission. Bailability depends on the gravity and the specific facts; do not assume—ask the investigating officer.

Step 1: Collect evidence

• Screenshots: App interface, transaction history, chat support conversations.
• UPI/IMPS trail: UTR numbers, beneficiary account details, IFSC codes.
• APK file (if sideloaded) or Play Store/App Store listing link.
• Promotional material: WhatsApp forwards, Telegram group invites.

Step 2: Draft the FIR

Title: “FIR Against Unknown Persons for Cheating and Illegal Online Gambling”

To,
The Station House Officer,
Cybercrime Police Station / [Local Police Station],
[City, State]

Subject: FIR Under BNS 2023 Sections 318, 319 and Public Gambling Act 1867

Sir/Madam,

I, [Full Name], S/o [Father's Name], resident of [Address], Aadhaar [XXXX-XXXX-1234], mobile [+91-XXXXXXXXXX], wish to lodge a complaint against unknown persons operating the illegal casino app "[App Name]".

On [Date], I downloaded the app from [Source: Play Store / APK link] and deposited ₹[Amount] via UPI transaction ID [UTR]. The app displayed rigged outcomes, declined withdrawals citing "system errors," and vanished on [Date].

Offences committed:
  - BNS 2023 Section 318 (cheating by inducement to deliver property)
  - BNS 2023 Section 319 (personation as a licensed operator), if applicable
  - Public Gambling Act 1867 Section 4 (facilitating a common gaming house)
  - Promotion and Regulation of Online Gaming Act, 2025 (offering an online money game)

Evidence enclosed:
  1. Screenshots (15 pages)
  2. UPI transaction receipts (UTR: [XXX])
  3. APK file hash [SHA256]
  4. Promotional WhatsApp message headers

Request:
  1. Register FIR
  2. Freeze beneficiary bank accounts (Annexure A)
  3. Issue requisition for IP/subscriber logs from the intermediaries
  4. Coordinate with the National Cyber Crime Reporting Portal (Acknowledgment ID [XXXXXX])

Yours faithfully,
[Signature]
[Date]

Step 3: Submit

• In person at the cybercrime cell (preferred; obtain a signed acknowledgment).
• Online via National Cyber Crime Reporting Portal; print the acknowledgment and present it to the local SHO to seek registration of the FIR under the duty to register a cognizable offence (BNSS 2023 Section 173).

If the SHO refuses to register the FIR, send the substance of your information in writing by post to the Superintendent of Police under BNSS 2023 Section 173(4); if that also fails, you may apply to the Magistrate.

Do this immediately — Banks act on freezing requests fastest in the first 24–48 hours. Email the bank's nodal officer (listed on the bank website under “Cyber Fraud Grievance”) with the FIR acknowledgment and the beneficiary account IFSC + number, and call the cyber-fraud helpline 1930 at once.

Banks are required, under RBI's customer-protection and cyber-fraud reporting framework and the national cybercrime/1930 helpline mechanism, to act quickly on police requisitions to freeze accounts implicated in cyber fraud. Citizens can trigger this:

Template email to bank nodal officer:

Subject: Urgent: Freeze Beneficiary Account—Cyber Fraud FIR [Your FIR No.]

To: nodalofficer.cyberfraud@[BankName].com
CC: grievance@[YourBank].com, cybercrime@[StatePolice].gov.in

Dear Sir/Madam,

I am a victim of online casino fraud. On [Date], I transferred ₹[Amount] via UPI [UTR] to:
  - Beneficiary Name: [As per transaction receipt]
  - Account No.: [XXXX1234]
  - IFSC: [ABCD0001234]
  - Bank: [Beneficiary Bank Name]

FIR No. [XXXX/2026] dated [Date] registered at [Police Station]. I request an immediate account freeze and reporting under the RBI/NPCI cyber-fraud framework.

Attachments:
  1. FIR copy / Acknowledgment
  2. UPI transaction screenshot

Contact: [Mobile], [Email]

Regards,
[Name]

Parallel action: Lodge a complaint on the RBI Complaint Management System against both your bank (for relaying the UPI transfer without a fraud alert) and the beneficiary bank (for KYC lapses enabling mule accounts).

Citizen tip — Where a card was used, ask your bank about the chargeback mechanism (card-network rules allow disputes for fraudulent merchants within defined timelines). For UPI, raise a dispute through your app/bank and NPCI's UPI dispute-resolution channel, and report on the 1930 helpline so the money trail can be flagged early.

The National Cyber Crime Reporting Portal, https://cybercrime.gov.in/, is operated by the Ministry of Home Affairs and is the primary channel for reporting online financial fraud.

Filing process:

1. Anonymous or registered: Register with mobile OTP for case tracking.
2. Category: Select “Online Financial Fraud” → “Illegal Betting/Gambling.”
3. Details: App name, domain/APK source, transaction amounts, dates.
4. Evidence upload: Screenshots (within the portal's size limit), PDFs.
5. Request: “Block the domain under IT Act Section 69A; share logs with the investigating officer for FIR [XXXX].”

Acknowledgment ID is generated instantly. Print it and attach it to the physical FIR at the police station.

Escalation: If there is no action within a reasonable time, file an RTI to the concerned authority:

To,
The Central Public Information Officer,
[Ministry / Department concerned — e.g. Ministry of Electronics and Information Technology,
Electronics Niketan, CGO Complex, New Delhi-110003]

Subject: RTI Application—Status of Cybercrime Complaint [ID XXXXXX]

Under RTI Act 2005 Section 6(1):

1. What action has been taken on Cybercrime Portal complaint ID [XXXXXX] filed on [Date] regarding illegal casino app "[App Name]"?
2. Has a domain blocking order been issued under IT Act Section 69A? If yes, provide a copy. If no, the reasons.
3. Have logs been shared with the investigating officer for FIR [No.], [Police Station]? If yes, the date of sharing.
4. Name and email of the nodal officer handling online gambling complaints.

Application fee: ₹10 (IPO/online)

Yours faithfully,
[Name], [Address], [Mobile]

Fee payment: Online via https://rtionline.gov.in/ or ₹10 Indian Postal Order payable to the relevant Pay and Accounts Officer.

Trust signal — Domain-blocking and complaint processing can take several weeks to months. Parallel police + bank action is critical—do not wait for the portal alone.

For help drafting the RTI, use the RTI drafter tool to auto-generate the application with the relevant sections.

The Consumer Protection Act, 2019 defines “unfair trade practice” (Section 2(47)) to include misleading advertisements and deceptive conduct. Misconduct by a paid online service can fall within it:

• False representation of legality or licensing.
• Non-delivery of service (withdrawal denials).
• Misleading guarantees (“guaranteed wins,” “RNG certified”).

Note that because the 2025 Act bans online money games outright, the cleaner route for most victims is the criminal/cyber-fraud track plus civil recovery; a consumer complaint can still be pursued where you contracted for a “service” and were deceived.

Jurisdiction:

• District Consumer Disputes Redressal Commission: Claims up to ₹50 lakh.
• State Commission: ₹50 lakh – ₹2 crore.
• National Commission: Above ₹2 crore.

Template complaint:

Before the District Consumer Disputes Redressal Commission, [District]

Complaint Under Section 35 Consumer Protection Act, 2019

[Your Name], [Address] — Complainant
  v.
1. [App Name] through its proprietor/CEO (address unknown)
2. Google India Pvt Ltd, Hyderabad (if hosted on Play Store)
3. [Payment Gateway Name], [Address]
— Opposite Parties

Subject Matter: ₹[Amount] + interest + ₹50,000 compensation for mental agony

Facts:
1. On [Date], the Complainant downloaded OP-1's app and deposited ₹[Amount].
2. The app displayed rigged outcomes violating advertised RTP (Return to Player).
3. Withdrawal requests were rejected; customer support was unresponsive.
4. OP-2 facilitated distribution despite the app violating Play Store policy.
5. OP-3 processed payments without merchant KYC verification.

Deficiency in Service:
- CPA 2019 Section 2(47): Unfair trade practice (false licensing claims).
- Non-delivery of service (denial of legitimate withdrawals).

Relief Sought:
a) Refund ₹[Amount] with 9% interest from [Date].
b) ₹50,000 compensation for mental agony.
c) Cost of the complaint.

Evidence:
- Annexure A: Screenshots (15 pages)
- Annexure B: UPI receipts
- Annexure C: FIR copy

Verification: I, [Name], verify that the contents are true to my knowledge.

Place: [City]
Date: [DD/MM/YYYY]
Signature

Filing fee: A nominal fee scaled to claim value applies at the District level. File online via e-Daakhil portal.

Most citizens miss this — Consumer complaints are generally faster and cheaper than a regular civil suit, and can be filed on plain paper or online without stamp-paper formalities.

If the criminal trial is slow, or the app operators cannot be identified, a civil suit for recovery under the Code of Civil Procedure, 1908 (Section 9 — jurisdiction of civil courts) is an option:

Summary Suit (CPC Order XXXVII):

• Available when the claim is for a liquidated sum (an exact ₹ amount).
• The defendant must obtain leave to defend (show a prima facie defence).
• Can be decreed relatively quickly if no leave to defend is granted.

Attachment of assets:

• Ask the court to attach the defendant's Indian assets (such as Indian bank accounts held via payment gateways) under the CPC's attachment and execution provisions.

Third-party discovery:

• Compel payment gateways/banks to disclose beneficiary details.
• This is effective against domestic intermediaries even if the app operator is offshore.

Execution via reciprocal arrangements:

• Section 44A CPC allows execution of Indian decrees in reciprocating territories where notified.
• In practice this is limited; focus on attaching Indian-held payment-processor accounts.

Do this immediately — Bring your claim within the limitation period (broadly three years for money-recovery claims under the Limitation Act 1963). Treat the date of loss as the date the withdrawal was first denied or the app vanished, and consult a lawyer on the exact article that applies.

1. Legal Notice (demand for refund before suit):

LEGAL NOTICE

To,
[App Name / Operator / Registered Agent]
[Address if known, else "Through State Cyber Cell"]

Date: [DD/MM/YYYY]

My Client: [Your Name], [Address]

Subject: Demand for Refund of ₹[Amount] + Compensation

Sir/Madam,

My client deposited ₹[Amount] in your app "[App Name]" between [Dates]. Your app:
  - Operated an online money game banned under the Promotion and Regulation of Online Gaming Act, 2025.
  - Operated without any Public Gambling Act exemption or state licence.
  - Displayed rigged outcomes violating advertised RTP/RNG certification.
  - Denied legitimate withdrawal requests from [Date].
  - Violated the IT Rules 2021 (intermediary due diligence).

This constitutes:
  - BNS 2023 Sections 318, 319 (cheating, personation)
  - CPA 2019 Section 2(47) (unfair trade practice)

NOTICE:
Within 15 days from receipt, pay:
  a) ₹[Principal]
  b) 9% annual interest from [Date]
  c) ₹25,000 legal costs

Failing which, my client will initiate:
  - Criminal prosecution under the BNS / Public Gambling Act / Online Gaming Act 2025
  - Civil suit for recovery + damages
  - Consumer complaint before the District Commission
  - Complaint to the regulators for intermediary liability

Yours,
[Advocate Name]
[Enrolment No.]
[Address]

Send via registered post + email to every known contact (app support email, payment gateway merchant desk, Play Store developer address).

2. RTI to local police for FIR status:

To,
The Public Information Officer,
Office of the Commissioner of Police,
[City, State]

Subject: RTI Application—Status of FIR [No.]/2026

Under RTI Act 2005 Section 6(1):

1. Current status of investigation in FIR [No.] dated [Date] registered at [Police Station]?
2. Has a charge-sheet (final report) been filed? If yes, provide a copy. If no, the reasons for delay.
3. Have the beneficiary bank accounts [list IFSC+Acc] been frozen? If yes, date and amount frozen. If no, the reasons.
4. Has the final report been submitted to the Magistrate? If yes, the court details.
5. Name, designation, and contact of the investigating officer.

Fee: ₹10 (IPO enclosed)

Yours faithfully,
[Name], [Address], [Mobile]

Use the PIO Reply Checker to verify whether the police response is evasive or incomplete, then file a First Appeal under RTI Act Section 19(1).

Key Judgments:

• KR Lakshmanan v. State of Tamil Nadu (1996) 2 SCC 226: the “preponderance of skill” test distinguishing a game of skill from gambling.
• State of Andhra Pradesh v. K Satyanarayana (1968) 2 SCR 387: rummy held to be predominantly a game of skill.
• Shreya Singhal v. Union of India (2015) 5 SCC 1: an intermediary's safe harbour under IT Act Section 79 turns on “actual knowledge” through a court order or an appropriate government notification.

Note: after the Promotion and Regulation of Online Gaming Act, 2025, the older skill-vs-chance distinction no longer makes a real-money online game lawful—the Act bans all online money games.

Statutes:

• Promotion and Regulation of Online Gaming Act, 2025 (ban on online money games; bar on related payments and advertising)
• Bharatiya Nyaya Sanhita, 2023 (Section 318 — cheating; Section 319 — cheating by personation)
• Bharatiya Nagarik Suraksha Sanhita, 2023 (Section 173 — registration of FIR for cognizable offences; Section 173(4) — remedy on refusal)
• Public Gambling Act, 1867 (Sections 4, 5)
• Consumer Protection Act, 2019 (Sections 2(42), 2(47), 35 — definitions and complaint filing)
• Information Technology Act, 2000 (Sections 69A, 79 — domain blocking, intermediary liability)
• Payment and Settlement Systems Act, 2007 (Section 4 — only RBI-authorised entities may operate a payment system)

Warning — State gaming laws vary, and several states have their own restrictions on online gaming. The 2025 central Act applies nationwide; check both before assuming anything is legal.

Ministry of Electronics and Information Technology (MeitY):

• URL: https://www.meity.gov.in/
• Role: IT Act enforcement, domain blocking (Section 69A), intermediary grievance oversight (IT Rules 2021).
• Complaint portal (cybercrime): https://cybercrime.gov.in/

Reserve Bank of India (RBI):

• Nodal officer: Banks publish a cyber-fraud nodal officer contact; check your bank's website.
• Complaint portal: https://cms.rbi.org.in/
• Ombudsman: If the nodal officer does not respond within 30 days, escalate to the RBI Ombudsman (ground: deficiency in service—delay in freezing mule accounts).

Telecom Regulatory Authority of India (TRAI) / Department of Telecommunications (DoT):

• Apps promoting gambling often use bulk SMS/WhatsApp spam. Report unwanted commercial communication via TRAI / your operator's DND facility.
• DoT's Sanchar Saathi portal (https://sancharsaathi.gov.in/) lets you report suspicious connections used for fraud calls.

Coordination template (multi-agency complaint):

Subject: Consolidated Complaint—Illegal Casino App [App Name]

To:
  - [MeitY / cybercrime portal grievance]
  - nodalofficer.cyberfraud@[YourBank].com
  - [RBI CMS portal]
  - [State Cyber Cell email]

CC:
  - [Local Police Station SHO email]
  - [State Consumer Commission, if a complaint is filed]

Sirs/Madams,

I am a victim of fraud by "[App Name]" (APK hash [SHA256]). Total loss: ₹[Amount].

Actions Requested:
  1. MeitY: Block domains [list URLs] under IT Act Section 69A.
  2. RBI: Freeze beneficiary accounts [IFSC+Acc] and examine KYC violations by [Bank Name].
  3. Police: Expedite FIR [No.] investigation; requisition logs from the intermediaries.
  4. Consumer Commission: [If filed, mention the complaint number].

Evidence attached:
  - FIR acknowledgment
  - UPI receipts
  - App screenshots (15 pp)

Contact: [Mobile], [Email]

Regards,
[Name]

Citizen tip — Keep one consolidated, dated complaint and copy the relevant agencies, so each can see the others are informed and act in coordination.

Technical indicators:

• APK sideload only: Legitimate apps are on the Play Store/App Store with developer verification.
• No SSL certificate / HTTP (not HTTPS): Data unencrypted, payments insecure.
• Frequent version changes: Daily/weekly updates to evade detection.
• Permissions overkill: Requests SMS, contacts, location for a casino game.

Business-model red flags:

• Instant UPI onboarding without PAN/Aadhaar: Inconsistent with KYC norms.
• Referral pyramids: “Earn ₹500 per friend”—classic Ponzi structure.
• Guaranteed returns: “Deposit ₹10,000, get ₹500 daily”—mathematically unsustainable.
• Withdrawal “processing fees”: Legitimate platforms deduct from winnings, not demand upfront payment.

Legal/licensing checks:

• Remember that, post the 2025 Act, no real-money online game is lawful in India—so any “licence” claim for a real-money app is a red flag in itself.
• Check the MCA (Ministry of Corporate Affairs) register for an Indian entity: https://www.mca.gov.in/. No GSTIN/CIN usually means an offshore/shell operator.
• Domain WHOIS (use who.is): privacy-protected or Curaçao-based registrant is a red flag.

Social-proof fabrication:

• Fake reviews: Generic praise (“Best app ever!”), 5-star clusters posted the same day.
• Telegram “proof” groups: Screenshots of “₹lakhs withdrawn”—reverse image search often reveals stock photos or recycled screenshots.

Do this immediately — Before depositing, search “[App Name] + scam” or “[App Name] + fraud.” Consumer forums and community threads often carry early warnings.

For related fraud tactics, see Binary Trading Scam India and Crypto Scam Recovery India.

IT Rules 2021 (Intermediary Guidelines):

• Rule 3(1)(b): Intermediaries must exercise due diligence and act on unlawful content as required.
• Loss of safe harbour: The Section 79 exemption is lost where the intermediary fails to act on lawful notice/court order.

Payment gateways (such as Razorpay, Paytm, PhonePe) are intermediaries. If they process transactions for an app offering a banned online money game, they risk loss of safe-harbour protection under Section 79 of the IT Act and exposure under the 2025 Online Gaming Act for facilitating banned services.

Victim's leverage:

• Send a notice to the payment gateway's grievance officer (contact published per IT Rules 2021).
• Flag the matter to the RBI/NPCI, since only RBI-authorised entities may operate a payment system (Section 4, Payment and Settlement Systems Act 2007).
• As Shreya Singhal v. Union of India (2015) 5 SCC 1 explains, intermediary liability turns on “actual knowledge”—a court order or government notification. Your formal complaint to the police/regulator is what builds that record.

Template notice to payment gateway:

To,
Grievance Officer
[Payment Gateway Name]
[Address from website]

Subject: Notice—Cease Processing for Merchant "[App Name]"

Sir/Madam,

I am a victim of fraud via your merchant "[App Name]" (Merchant ID [if visible in UPI]).

The app violates:
  - Promotion and Regulation of Online Gaming Act, 2025 (banned online money game)
  - Public Gambling Act 1867
  - BNS 2023 Section 318 (cheating)

FIR [No.] lodged on [Date].

I request that you cease processing payments for this merchant and preserve all related records.

I reserve the right to:
  - Implead you as a co-defendant in a civil suit.
  - Complain to the RBI for KYC/due-diligence failure.

Please confirm the action taken.

Yours,
[Name], [Mobile], [Email]

Send via registered post + email. Attach screenshots showing the gateway logo/UPI handle on the app.

Trust signal — Following enforcement of the 2025 Online Gaming Act, banks and payment intermediaries are barred from facilitating online money-gaming transactions—so a documented complaint puts the intermediary on notice.

The Citizen Crisis Response Network (see Citizen Crisis Response Network) offers:

• Rapid response: Evidence-preservation checklists, bank-freezing templates, FIR drafting.
• Legal-aid pointers: Help finding first-level legal consultation.
• Aggregated complaints: Where many victims report the same app, a coordinated, collective complaint to police/regulators (and, where warranted, a writ petition) carries more weight.
• Support: Pointers to counselling—gambling-fraud victims often face stress and family conflict.

How to engage:

1. Visit the Citizen Crisis Response Network page and follow the incident-reporting steps there.
2. Use the national cyber-fraud helpline 1930 for immediate money-trail flagging.

For related fraud types, also see:

• Cyber Crime Complaint India
• Bank Freeze for Cyber Fraud India
• Cyber Fraud Chargeback (Visa/Mastercard/RuPay) India