Posido mirror sites: what they are and how to stay safe
A "mirror" is a copy of a website on a different address. Some casino operators use alternative domains for technical reasons, such as different domains for different countries. At the same time, fraudsters create imitation sites that copy a casino's look to steal logins and payments. This page explains how to tell the two apart, why searching for "a working mirror" can be risky, and why a domain that is not covered by a licence in your country may leave you without protection.
Why alternative domains exist
Operators sometimes run separate domains per market because licences are national: a regulator may require that players in its country use a site on a local domain, and redirect them there. In that case the domain you are sent to depends on where you are. That is legitimate and is usually explained in the operator's terms.
Why searching for mirrors is risky
When a site is blocked in a country, it is often because it is not licensed there. Searching for a mirror to get around the block means looking for exactly the sites a national regulator does not supervise. If anything goes wrong — a withdrawal refused, an account closed — you may have no regulator to turn to. Blocks are also a common reason fraudsters publish lists of "working mirrors", many of which are imitations.
How to recognise an imitation
| Signal | What it may mean |
|---|---|
| Domain with small spelling changes | Typosquatting imitation |
| Link received by message or social post | Phishing attempt |
| No company name or licence in the footer | No identifiable operator |
| Licence number that is not in the regulator's register | False claim |
| Request to pay a fee to withdraw | Scam pattern |
| Unusually generous offers | Bait |
How to check a domain
- Type the address yourself or use a bookmark you created.
- Read the footer: company name, registered address, regulator, licence number.
- On the regulator's own website, look the operator up and confirm the exact domain is listed.
- Check that the browser shows a secure connection to that exact domain.
Our review page explains these checks in more detail.
If you entered details on a fake site
Change your password on the genuine site immediately, and anywhere else you used it. Enable two-factor authentication. If you entered card or bank details, contact your bank to block the card. Keep any messages or links as evidence and report them to the platform where you received them.
A note on blocked access
If a site is blocked where you live, the safest response is not to look for a way round it. Treat the block as information about the site's status in your country. If you want to gamble, use operators that appear in your national regulator's list; if you are trying to stop, a block is help, not an obstacle — see the self-exclusion page. Mobile access is covered in the mobile guide.