Locked out of your casino account: what is still possible

If you are locked out of your casino account, go only through the casino's own password-reset page and the support channel inside its official site or app. Access is normally restored after the operator confirms who you are; no outside agent, "recovery service" or social media account can do it for you. Before you contact anyone, work out which of four situations you are in, because each has a different route back and a different answer about your balance.

Which kind of lockout is this?

KYC means "know your customer": the identity, age and address checks a licensed operator must run. 2FA (two-factor authentication) is the second code or prompt, usually sent to your phone, needed after your password.

If it is a login or 2FA problem

Start from the casino's own website, typed in yourself or from a bookmark, not from a link in an email or a search advert. Use the "forgotten password" link and check your spam folder for the reset email.

If you have lost the phone that receives your 2FA codes, contact support through the help page of the official site. Expect to prove you own the account. In New Jersey, for example, the internet gaming rules (current through June 2025) require operators to describe a secure method for resetting a password, using proof of identity in person, correct answers to two or more challenge questions, or strong authentication, and to notify you after any change. Other regulators have their own rules, but the principle is the same: the operator will check it is really you.

Support may ask for a photo ID, your registered email and date of birth, or details of your last deposit. It should not ask for your full card number, your online banking password or a 2FA code you did not request.

If it is a verification (KYC) or source-of-funds hold

This is the most common "locked" state, and usually the most fixable. Licensed operators must know who you are and, in some cases, where your money comes from.

Great Britain (Gambling Commission, as of October 2026):

• All online gambling businesses must ask you to prove your age and identity before you gamble, and you cannot place a bet until you have been verified.
• They may ask for documents such as a passport, driving licence or household bill, and for a selfie if they suspect fraud.
• They may also check that your source of funds is legitimate, for example by looking at bank statements or income.
• A business cannot make proving your age and identity a condition of withdrawing your money if it could have asked earlier, unless it needs to in order to meet legal obligations.

That last point matters if your account was opened years ago and the checks only appear when you try to withdraw. If you think a request is a delay tactic, our guide on what to do when a casino won't pay out covers withdrawal holds in detail.

To clear a verification hold, upload what is asked for through the account's own verification page, make sure every corner of each document is visible, and keep a note of the date you uploaded. Ask support for a specific list and an estimated review time.

If the account is closed or self-excluded

Self-exclusion is a request you make to be blocked from gambling for a set period. It is designed to be hard to undo, and that is the point.

In Great Britain (Gambling Commission LCCP, as of October 2026), the social responsibility code says an operator must close any accounts of a customer who self-excludes, return any funds held in them, and take all reasonable steps to refuse service during the exclusion. The Commission's ordinary code of practice adds that the minimum period offered should be between 6 and 12 months, and that after the period ends the exclusion should stay in place for at least seven years unless you take positive action to gamble again. If you do, you contact the operator by phone or in person and get a one-day cooling-off period first. Re-registering online is not enough.

If you self-excluded and now want back in, that pause is deliberate. The safer gambling page lists free, confidential support if the urge to play is strong.

If the operator closed the account itself, ask in writing for the reason and the term it relied on, and what will happen to your balance. Its terms usually say how balances are handled on closure. If you disagree, use its formal complaints process.

If someone else accessed your account

Treat this as a security emergency, not a support ticket. These steps are based on the UK National Cyber Security Centre's advice for any hacked account:

1. Contact the casino through its official help page. Ask it to freeze withdrawals and tell you what changed: email, password, payment methods, bets.
2. Check your email account for forwarding rules you did not set up. Criminals use them to receive password resets.
3. Change passwords on the casino account and on any other account that used the same password.
4. Log out other devices and turn on 2FA wherever it is offered.
5. Tell your bank if a card or bank account linked to the casino may have been used, and check your statements.
6. Report it. In England, Wales and Northern Ireland the national reporting service is now Report Fraud (reportfraud.police.uk, 0300 123 2040), which replaced Action Fraud from 4 December 2025. In Scotland, call Police Scotland on 101. In the US, the FTC takes reports at ReportFraud.ftc.gov.

Scams that target locked-out players

People who cannot get into an account are easy targets. Expect these:

• Fake support on Telegram, WhatsApp or social media that replies to your public complaint within minutes. Real support works inside the official site or app.
• "Account recovery" agents who promise to restore access or release a balance for a fee. No outside person can do this.
• Remote-access requests. Anyone who asks you to install screen-sharing software "to fix the account" can see your banking too.
• Look-alike sites that copy a casino's login page to capture your password. See our guide to fake casino and sportsbook clone sites.

What to do next

1. Identify which of the four situations you are in, using the table above.
2. Contact support only through the official site or app. Ask for a ticket or reference number.
3. Save screenshots of the lockout message, your last visible balance and every reply. Our gambling complaint evidence checklist lists what else to keep.
4. If the hold drags on or you disagree with a closure, make a formal complaint and then use the dispute route for the operator's licence, listed on our complaints hub.
5. If the account was accessed by someone else, follow the security steps above first and the complaint second.

Hub of Luck cannot restore access to accounts or contact operators for you.

Safer account habits

• Use a unique password for each gambling account, stored in a password manager.
• Turn on 2FA wherever the operator offers it, and keep backup codes somewhere safe.
• Complete identity verification when you open the account, not when you first want to withdraw.
• Keep your registered email and phone number up to date.
• Bookmark the official site and log in only from that bookmark.