The Netherlands has handed down its largest ever penalty against illegal online casinos. On 22 October 2026 the Dutch regulator, the Kansspelautoriteit (Ksa), announced a 37 million euro fine against EOD Code SRL, a company it says ran around a dozen unlicensed casino sites aimed at Dutch players. For anyone who gambles online, the case is a clear reminder of what separates a licensed casino from a black-market one, and why that gap matters for your money, your data and your safety.

What has happened?

According to the Ksa announcement, reported by DutchNews and NL Times, the regulator fined EOD Code SRL 37 million euros for offering online gambling to people in the Netherlands without a Dutch licence. The investigation started with a site called Instantcasino and went on to identify a cluster of related brands run by the same operator, including names such as Skyhills. The company stated on its sites that it was registered and regulated in Costa Rica, which carries no weight for the Dutch market.

The 37 million euro figure is a record for illegal operation in the Netherlands. The Ksa says its previous high was close to 25 million euros, imposed on another operator earlier in 2026. Because standard penalties are often too small to bite against high-revenue black-market sites, the regulator is allowed to base the fine on an estimate of how much the operator earned from local players. In this case it concluded the company made far more from Dutch users than a flat penalty would reflect.

Why the regulator came down so hard

The size of the fine reflects several aggravating factors, not just the missing licence. The Ksa says the operator had no measures in place to stop people in the Netherlands from registering and playing. Inspectors were able to sign up and gamble on the sites themselves, which is often the clearest proof a regulator can gather. The company had also already received a penalty payment order and carried on regardless.

On several of the sites there was no visible age verification, and players could deposit using cryptocurrency and other anonymous methods. The Ksa flagged this as a money-laundering risk and as a sign the sites were not built with player protection in mind. Taken together, these are the hallmarks of an operation designed to take deposits quickly rather than to run a safe, accountable casino.

Why illegal online casinos put players at risk

It is easy to read a story like this as a dispute between a regulator and a company, but the real exposure sits with players. When you deposit at a licensed casino, a lot of protection is working quietly in the background. A licensed operator has to verify your identity, apply deposit and affordability checks where required, keep player funds separate from company money, honour responsible gambling tools and pay out legitimate withdrawals. An unlicensed site answers to none of that.

If an illegal casino refuses to pay a withdrawal, voids a win or simply disappears, there is usually no regulator you can escalate to and no realistic route to get your money back. That is the single biggest practical reason to stick to safe online casinos that hold a recognised licence. The gap is not cosmetic. It is the difference between having somewhere to complain and having nowhere at all.

What it tells you about payments and verification

The payment details in this case are worth dwelling on, because they are easy to mistake for convenience. Accepting crypto and anonymous payment methods with no identity checks can look like fast, frictionless banking. In practice it often signals the opposite of safety. Verification exists to confirm you are old enough to play, to protect your account from takeover and to meet anti money laundering rules. A site that skips it is not doing you a favour.

This is why “no checks” should be treated as a warning sign rather than a selling point. If you value speed, the better route is a licensed operator that runs efficient verification up front, so that payouts are quick later. It is worth understanding how legitimate fast payout casinos and regulated crypto casinos handle verification, because the good ones are fast precisely because they are compliant, not because they cut corners.

How to check a casino is licensed

You do not need to be an expert to protect yourself. Before depositing, look for a clear licence statement in the site footer that names a real regulator, such as the UK Gambling Commission, the Malta Gaming Authority or the Ksa itself, and check that licence against the regulator’s own register rather than trusting the badge on the page. Claims of being “regulated in Costa Rica” or similar offshore wording, as seen in this case, offer little meaningful protection for European players.

Be wary of sites that accept instant anonymous deposits with no verification at all, that push aggressive bonuses with unclear terms, or that have no visible responsible gambling tools. Our own casino reviews and casino licences guides exist to make these checks quicker, and the responsible gambling page covers the tools a trustworthy operator should offer as standard.

Betspin view

This case matters because the Netherlands is a mature regulated market, and the Ksa has said before that more money still flows to unlicensed sites than to licensed ones. A record fine does not fix that overnight, but it raises the cost of running a black-market casino and sends a signal to players about where the danger sits. The practical takeaway is simple and worth repeating. A licence is not red tape. It is the mechanism that gives you somewhere to turn when something goes wrong. If a casino cannot show you a real one, the safest decision is to walk away and choose a licensed online casino instead.