iGaming & Sportsbook
How Rainbet Took Down 430 Fake Casino Sites and Accounts in Its First 30 Days
Rainbet partnered with ChainPatrol to detect and take down cloned casino sites, lookalike domains, and fake community channels built to intercept branded search traffic and capture player deposits.
Share
Rainbet is a fast-growing crypto casino and online sportsbook serving an active global player base. Before ChainPatrol, scammers were running cloned versions of the site on lookalike domains, backed by fake support accounts and community channels across Telegram, X, Instagram, TikTok, and Discord. Players searching for the casino could land on a copy of it. Every deposit made on one of those sites was gone, and the brand had no way to find the sites or get them removed.
The Problem
The impersonation wasn’t one fake site. It was a network.
Scammers cloned Rainbet’s interface and registration flow, hosted the copies on lookalike domains, and optimized those domains to capture high-intent searches for the official site and its promotions. Around the web assets, they built a distribution layer: unauthorized affiliate domains, fake support bots on Telegram and Discord, and fake promotion and bonus accounts on X, Instagram, and TikTok — all funneling players toward the clones.
Every part of it pointed the same direction: a deposit that never reached the casino.
Before ChainPatrol, Rainbet had no dedicated threat intelligence platform or automated takedown pipeline. Internal teams had to rely on reactive player complaints or manual keyword searches to spot fake portals. Submitting abuse reports directly to disparate domain registrars, hosting providers, and social platforms created slow, manual friction with little visibility into resolution status.
The Change
A ChainPatrol threat assessment flagged the extent of the impersonation network before onboarding, uncovering dozens of active clones capturing search and social traffic.
Once protection was live, ChainPatrol deployed automated domain and brand monitoring across certificate transparency logs, new domain registrations, and platform search indices. The system caught clusters of lookalike domains (such as rainbet-world[.]com and related promo variants) offering fraudulent deposit matches and bonus codes.
As soon as a malicious asset was detected, ChainPatrol placed it on its global blocklist, cutting off user access across supported wallets and browsers (including Google Safe Browsing, MetaMask, and Phantom) in minutes. In parallel, automated legal takedown notices were dispatched to domain registrars, hosting providers, and social platforms. When scammers attempted to spin up fresh domains to replace dismantled ones, automated continuous scanning identified the replacements in the same cycle.
The impact was immediate: domain takedowns closed at a 1.3-day median, and at peak enforcement, the team took down 35 fake domains in a single day.
The Results
Key Results
430+
Takedowns Completed
1.3 days
Median Time to Takedown
35
Fake Domains Taken Down in a Single Day
310+
Fake Domains and Pages Taken Down
Roughly seven in ten takedowns were domains and web pages — the cloned casino portals and lookalike sites doing the actual damage. The rest was the distribution layer around them: fake support bots and impersonation groups on Telegram and Discord, and fake promotion accounts on X, Instagram, and TikTok, removed through platform reporting and account suspensions.
The Takeaway
A high-growth gaming brand went from no visibility into impersonation to closing domain takedowns in a 1.3-day median across six surfaces at once.
Impersonation in online gaming never stays in one channel. The clone site is the payload, but search, social, and messaging are how players get to it — and taking down one without the others just moves the traffic. The scammers keep rebuilding. Catching the whole cluster in the same detection cycle is what stops the campaign from ever finding an audience.
Want to see what’s impersonating your brand right now? Get your free brand scan. We’ll show you the fake accounts and scam sites targeting you. Results in 48 hours, no credit card required.
Want to see what’s slipping through?
Get your free brand scan. Results in 48 hours, no credit card required.