Final month, KrebsOnSecurity tracked the sudden emergence of a whole lot of polished on-line gaming and wagering web sites that lure individuals with free credit and ultimately abscond with any cryptocurrency funds deposited by gamers. We’ve since realized that these rip-off playing websites have proliferated because of a brand new Russian associates program referred to as “Gambler Panel” that payments itself as a “soulless undertaking that’s made for revenue.”

A machine-translated model of Gambler Panel’s affiliate web site.
The rip-off begins with misleading adverts posted on social media that declare the wagering websites are working in partnership with standard athletes or social media personalities. The adverts invariably state that by utilizing a equipped “promo code,” gamers can declare a $2,500 credit score on the marketed gaming web site.
The gaming websites ask guests to create a free account to assert their $2,500 credit score, which they’ll use to play any variety of extraordinarily polished video video games that ask customers to wager on every motion. Nonetheless, when customers attempt to money out any “winnings” the gaming website will reject the request and immediate the person to make a “verification deposit” of cryptocurrency — usually round $100 — earlier than any cash may be distributed.
Those that deposit cryptocurrency funds are quickly pressed into extra wagering and making further deposits. And — shocker alert — all gamers ultimately lose every little thing they’ve invested within the platform.
The variety of rip-off playing or “scambling” websites has skyrocketed prior to now month, and now we all know why: The websites all pull their gaming content material and detailed methods for fleecing gamers straight from the playbook created by Gambler Panel, a Russian-language associates program that guarantees associates as much as 70 % of the earnings.
Gambler Panel’s web site gambler-panel[.]com hyperlinks to a useful wiki that explains the rip-off from cradle to grave, providing associates recommendation on how greatest to entice guests, maintain them playing, and extract most earnings from every sufferer.
“We have now a very self-written from scratch FAKE CASINO engine that has no opponents,” Gambler Panel’s wiki enthuses. “Rigorously thought-out on line casino design in each pixel, a variety of audits, surveys of actual individuals and check site visitors floods had been carried out, which allowed us to create one thing that has no doubts concerning the legitimacy and trustworthiness even for an inveterate playing addict with a few years of expertise.”
Gambler Panel explains that the one and solely aim of associates is to drive site visitors to those scambling websites by any and all means potential.

A machine-translated portion of Gambler Panel’s singular instruction for associates: Drive site visitors to those scambling websites by any means out there.
“In contrast to white playing associates, we settle for completely any sort of site visitors, no matter origin, the one limitation is the CIS nations,” the wiki continued, referring to a standard prohibition towards scamming individuals in Russia and former Soviet republics within the Commonwealth of Unbiased States.
This system’s web site claims it has greater than 20,000 associates, who earn a minimal of $10 for every verification deposit. new associates should first get approval from the group’s Telegram channel, which at the moment has round 2,500 energetic customers.
The Gambler Panel channel is replete with pictures of affiliate panels displaying the day by day income of high associates, scantily-clad younger ladies selling the Gambler emblem, and quick automobiles that high associates claimed they purchased with their earnings.
The obvious recognition of this scambling area of interest is a consequence of this system’s ease of use and detailed directions for efficiently reproducing just about each aspect of the rip-off. Certainly, a lot of the tutorial focuses on recommendation and ready-made templates to assist even novice associates drive site visitors through social media web sites, notably on Instagram and TikTok.
Gambler Panel additionally walks associates by means of a spread of potential responses to questions from customers who’re making an attempt to withdraw funds from the platform. This part, titled “Guidelines for working in Dwell chat,” urges scammers to reply rapidly to person requests (1-7 minutes), and contains quite a few methods for protecting the dialog skilled and the person on the platform so long as potential.

A machine-translated model of the Gambler Panel’s directions on managing chat assist conversations with customers.
The connection between Gambler Panel and the explosion within the variety of scambling web sites was made by a 17-year-old developer who operates a number of Discord servers which have been flooded these days with deceptive adverts for these websites.
The researcher, who requested to be recognized solely by the nickname “Thereallo,” mentioned Gambler Panel has constructed a scalable enterprise product for different criminals.
“The wiki is kinda like a ‘the right way to rip-off 101’ for criminals written with the readability you’d anticipate from a reputable firm,” Thereallo mentioned. “It’s clear, has step-by-step guides, and treats their rip-off platform like an actual product. You could possibly swap out the content material, and it might be any documentation for startups.”
“They’ve minimized their very own danger — spreading the hyperlinks on Discord / Fb / YT Shorts, and many others. — and outsourced it to a hungry affiliate community, similar to a franchise,” Thereallo wrote in response to questions.
“A centralized platform that may serve over 1,200 domains with a shared person base, IP monitoring, and a customized API is by no means a trivial factor to construct,” Thereallo mentioned. “It’s a scalable system designed to be a resilient basis for 1000’s of disposable rip-off websites.”
The safety agency Silent Push has compiled a listing of the newest domains related to the Gambler Panel, out there right here (.csv).