MGA license check: verify a casino step by step
An MGA license check takes under a minute and rules out the single worst outcome in online gambling — depositing at a site that isn’t actually licensed. The Malta Gaming Authority publishes every licensee on an official register, and licensed casinos carry a clickable dynamic seal you can verify live. Here is exactly how to confirm a casino is genuinely licensed, using both the seal and the register. (Malta spells it licence; the search term is often license — both mean the same thing here.)
Where to find the licence number
Scroll to the casino’s footer: a legitimate MGA operator states its licence number and the licensed legal entity there, usually next to a seal graphic. The number follows a fixed format — if you can’t find one, treat that as a red flag in itself.
The licence-number format
MGA licence numbers look like this:
MGA/B2C/XXX/YYYY— a business-to-consumer (player-facing) licence.MGA/CRP/XXX/YYYY— a corporate/related licence.
XXX is the licence number and YYYY the year. A “licence” that doesn’t match this pattern isn’t
an MGA one.
Using the dynamic seal
- Click the MGA seal in the footer — a real seal is interactive, not a static image.
- It should open a verification page on the MGA’s authorisation domain
(
authorisation.mga.org.mt) showing the operator’s current authorisation status. - If the “seal” doesn’t click through to that domain, it’s decoration — verify on the register instead.
Cross-checking the official register
- Go to the MGA licensee register.
- Search the legal entity name or the licence number from the footer.
- Confirm the entry is active and that the brand you’re on is listed under that licence.
Doing both — seal and register — is belt-and-braces, and it’s the check we run on every operator in our casino comparison before it’s listed. One caution before you treat a pass as a green light: an active MGA licence does not mean the brand takes players residing in Malta — the licence is usually held to serve players elsewhere, and acceptance is a separate commercial decision. That paradox has its own page.
Two worked examples from our own roster
The check is easiest to learn on records we already hold, so run it on the MGA licensees we list:
- 888casino — legal entity Virtual Digital Services Limited, licence
MGA/CRP/121/2006-09. Search the entity name in the register; note that the entry also covers sister brands — a newer roster addition of ours, 777, sits under this same licence, which is exactly the “brand listed under that licence” detail step 3 exists for. The register entry we hold for 888casino is on its review. - NetBet — legal entity NetBet Enterprises Ltd, licence
MGA/CL1/272/2006. An older-format number that does not match theMGA/B2C/XXX/YYYYpattern below — legacy licences keep their original class codes, which is why the format check is a red flag, not a verdict. What that licence covers at NetBet is set out in the review’s safety section.
Red flags
- No licence number, or one that doesn’t fit
MGA/B2C/XXX/YYYY. - A seal that isn’t clickable or leads somewhere other than the MGA authorisation domain.
- A brand name that doesn’t appear under the stated entity on the register.
- Pressure to deposit before you can verify anything.
If a site fails these, don’t deposit — and if gambling itself is becoming a problem, the responsible gambling resources (rgf.org.mt, Supportline 1777) are there regardless of any licence.
Frequently asked
How do I check if a casino has an MGA license?
Four steps, in the order set out above. Find the licence number and the licensed legal entity in
the casino’s footer; confirm the number fits the MGA/B2C/XXX/YYYY pattern; click the seal and
check it opens a live authorisation page on authorisation.mga.org.mt; then search that entity on
the MGA licensee register and confirm the entry is active and lists the brand you are on. The
last step is the one people skip, and it is the one that catches a seal copied from another site.
What does an MGA licence number look like?
Player-facing licences read MGA/B2C/XXX/YYYY and corporate or related licences read
MGA/CRP/XXX/YYYY, where XXX is the licence number and YYYY the year it was issued. Anything
that does not fit one of those patterns is not an MGA licence, whatever the badge beside it says.
Older operators can also carry pre-2018 Class-format numbers such as MGA/CL1/272/2006 — NetBet
lists seven of them — so an unfamiliar shape is worth checking on the register rather than
dismissing.
Is the MGA dynamic seal reliable?
Only when it behaves like a seal rather than a picture. A genuine one is clickable and opens the operator’s live authorisation status on authorisation.mga.org.mt. A static image, or a link that lands anywhere else, tells you nothing — and copying an image is trivial. Treat the seal as a shortcut to the register, never as a substitute for it, and check the domain you are actually playing on matches the one the authorisation names.