Hundreds of polished but fraudulent online gaming platforms have emerged in recent weeks, operating through a coordinated scheme that extracts cryptocurrency from unsuspecting players. Security researchers have traced this explosion to Gambler Panel, a Russian affiliate program that markets itself as a "soulless project that is made for profit."
The scam operates through a predictable sequence. Deceptive social media advertisements falsely claim partnerships with well-known athletes or influencers, offering a $2,500 promotional credit to new players who enter a specific promo code. Once users establish an account and attempt to withdraw any winnings, the platform blocks the request and demands a cryptocurrency verification deposit—typically around $100—as a prerequisite for any payout.
Players who comply with the deposit requirement face escalating pressure to wager additional funds. Ultimately, all participants lose their entire investment on these platforms.
https://www.youtube.com/embed/lNjqXIq1s5g?si=-30qS1Bw73VdIXow
Gambler Panel operates as a franchise-style operation, compensating affiliates with up to 70 percent of profits generated. The program's website at gambler-panel[.]com hosts a detailed wiki containing comprehensive instructions for running the scam, from initial customer acquisition through maximum profit extraction.
The platform boasts of its technical infrastructure in promotional materials: "We have a completely self-written from scratch FAKE CASINO engine that has no competitors. Carefully thought-out casino design in every pixel, a lot of audits, surveys of real people and test traffic floods were conducted, which allowed us to create something that has no doubts about the legitimacy and trustworthiness even for an inveterate gambling addict with many years of experience."
The program explicitly welcomes any traffic source except from Commonwealth of Independent States countries, where scamming is typically prohibited. Gambler Panel claims to operate with more than 20,000 active affiliates, each earning a minimum of $10 per verification deposit. New participants require approval through the program's Telegram channel, which currently maintains approximately 2,500 active members.
The Telegram channel regularly showcases affiliate earnings dashboards, promotional imagery, and lifestyle photos of top earners with luxury vehicles, all purportedly purchased through their scamming activities.
The program's rapid expansion stems from its accessibility and comprehensive documentation. The wiki provides ready-made templates and step-by-step guidance for driving traffic through Instagram, TikTok, and other social platforms. A dedicated section titled "Rules for working in Live chat" instructs scammers on customer service tactics, recommending responses within 1-7 minutes and strategies for prolonging conversations and keeping victims engaged.
A 17-year-old developer operating multiple Discord servers, who requested anonymity under the handle "Thereallo," identified the connection between Gambler Panel and the proliferation of scam gambling sites. The researcher characterized the operation as a sophisticated criminal enterprise: "The wiki is kinda like a 'how to scam 101' for criminals written with the clarity you would expect from a legitimate company. It's clean, has step by step guides, and treats their scam platform like a real product."
Thereallo noted that the model mirrors legitimate business practices: "They've minimized their own risk — spreading the links on Discord / Facebook / YT Shorts, etc. — and outsourced it to a hungry affiliate network, just like a franchise."
The technical sophistication underlying the operation distinguishes it from amateur scams. "A centralized platform that can serve over 1,200 domains with a shared user base, IP tracking, and a custom API is not at all a trivial thing to build," Thereallo explained. "It's a scalable system designed to be a resilient foundation for thousands of disposable scam sites."
Security firm Silent Push has compiled a database of domains currently associated with Gambler Panel operations, available in CSV format for researchers and investigators.
Source: Krebs on Security