UtPay and Offshore Casino Laundering: How “Crypto Purchase” Fronts Enable Global Gambling Violations

Executive Summary

Case Study: Kingdom Casino & UtPay Compliance Circumvention Analysis

This investigation by the Scam-Or Project uncovers a coordinated laundering and regulatory-evasion system operated by Utrg UAB (d/b/a UtPay, utpay.io) — a Lithuanian-licensed crypto payment processor — working alongside the offshore gambling platform Kingdom Casino (kingdomcasino.io).
Evidence shows that UtPay disguises illegal gambling deposits as “cryptocurrency purchases” through hidden domains, effectively bypassing anti-money-laundering (AML) checks, consumer-protection rules, and banking restrictions across multiple jurisdictions.

The scheme illustrates how seemingly compliant EU-regulated fintech entities can be repurposed to enable large-scale gambling and AML violations, serving as a blueprint for understanding today’s advanced offshore payment infrastructures.

1. Introduction: The UtPay Deception Model

Operating under Lithuania’s crypto-service-provider license as UAB “Utrg”, UtPay markets itself as a “fully compliant” Web3 payment solution with global reach.
However, the Scam-Or Project found that its actual workflows deliberately facilitate unlicensed gambling by:

• Circumventing gambling-related banking restrictions

• Removing consumer protections such as chargebacks and refunds

• Concealing transaction origins from AML monitors

• Allowing casino operations in banned markets without oversight

The model exploits a regulatory gap between cryptocurrency licensing and gambling supervision — a loophole that enables large-volume criminal payment flows under the façade of lawful crypto commerce.

2. Case Study: Kingdom Casino Payment Flow Analysis

Discovery & Methodology

During the Scam-Or Project’s compliance review of Kingdom Casino, investigators reconstructed the entire RAPID-transfer deposit route via Skrill. Findings reveal a multilayered deception pattern:

Step-by-Step Flow

1. Player Initiation – User selects an EUR deposit via RAPID; crypto mention absent.

2. Redirect Chain – Sequential redirects through greenpayway.com → pay2prom.com → app.utpay.io.

3. Hidden Conversion – The UtPay page shows a pre-checked consent box:
   “I agree to buy crypto and send it to the specified address.”
   The player believes it’s a gambling deposit, not a crypto purchase.

4. Legal Reclassification – Transaction processed as a crypto purchase under Lithuanian law, removing consumer-protection rights.

5. Crypto Transfer – Tokens automatically reach the casino wallet; the player’s gaming balance updates while the processor’s role remains hidden.

3. Regulatory Evasion Mechanisms

3.1 Banking Restriction Bypass

UtPay allows Kingdom Casino to accept conventional payment rails (RAPID, cards, e-wallets) even without a gambling license by masking the flow as legitimate crypto commerce.

3.2 Consumer Protection Removal

3.3 AML Control Defeat

Multi-domain routing hides the gambling source, producing misleading AML signals and incomplete audit trails.

4. UtPay Corporate Structure & Regulatory Profile

Financial snapshot (2023):
Revenue €442 228 | Net profit €32 680 | 8 employees | avg. salary €1 987

Despite modest filings, UtPay likely processes multimillion-euro offshore flows unreflected in its accounts.

5. Related Entities and Personnel

• UTORG LABS HOLDING LTD – Abu Dhabi non-custodial-wallet provider

• Quicko Sp. z o.o. – Polish debit-card partner

• Key figures: Andrius Atkočaitis (manager), Edgar Fukalov (operations), Aleksandr Tšhailo (UBO Utorg OÜ)

6. Systemic Regulatory Violations

Lithuanian Crypto Law Breaches

• CDD failures: gambling-related transactions processed without risk assessment

• Monitoring gaps: no reporting of suspicious gaming patterns

• Misuse of license: crypto authorization exploited to service unlicensed gambling

EU PSD2 and AML Directive Breaches

• Transparency: true purpose of payments hidden from users

• Consumer rights: refund / chargeback rights suppressed

• Enhanced due diligence: inadequate for high-risk crypto-gambling clients

Gambling Law Violations

UtPay’s infrastructure enables illegal casino payments across the EU and UK while bypassing deposit limits, self-exclusion, and responsible-gaming safeguards.

7. Offshore Casino Network Analysis

The Scam-Or Project identified UtPay integrations across multiple offshore casinos exhibiting identical hallmarks:

• Curaçao / Anjouan licensing shells

• EU-facing access without national authorization

• Stealth domains masking payment processors

• “Crypto purchase” deception replicated industry-wide

Estimated scale: several million EUR monthly in disguised gambling deposits.

Stealth Domain Infrastructure

No ownership disclosure, contact data, or legal imprint — intentionally designed for regulatory invisibility.

8. UtPay Crypto-Payment Scheme – Entity Mapping

9. Consumer Harm & Financial-Crime Exposure

Loss of Protection

• Chargebacks denied – banks classify as legitimate crypto sales

• Dispute resolution void – no channel for gambling complaints

• Refunds blocked – crypto conversion deemed irreversible

Exploitation of Vulnerable Players

• Self-exclusion and deposit limits bypassed

• Gambling blocks defeated via crypto detour

• Addiction-monitoring systems rendered ineffective

Money-Laundering Stages

10. International Regulatory Implications

Lithuania

Weak oversight and scarce inter-agency coordination allow crypto firms to serve gambling clients without detection.

European Union

Cross-border enforcement remains fragmented — crypto and gambling regulators operate in silos, enabling regulatory arbitrage.

Global AML Standards

UtPay’s conduct breaches multiple FATF recommendations (1, 8, 15, 28).
The case underscores the urgent need for joint supervision of virtual-asset and gambling sectors.

11. Comparative Industry Context

UtPay epitomizes Generation 3 of offshore payment manipulation — merging crypto licensing with gambling opacity.

Legitimate processors deploy robust merchant vetting, transaction monitoring, and regulator cooperation; UtPay instead engineers systematic non-compliance.

12. Conclusion and Industry Impact

The UtPay–Kingdom Casino arrangement demonstrates how licensed EU entities can be repurposed for industrial-scale money laundering.
Key risk dimensions include:

• Consumer-protection nullification through false transaction labeling

• Money-laundering enablement via crypto layering

• Regulatory evasion using licensing arbitrage

• Cross-border opacity frustrating enforcement

The Scam-Or Project warns that unless EU and national regulators close these crypto–gambling loopholes, similar architectures will proliferate across the fintech ecosystem.

13. Call for Information

The Scam-Or Project seeks further evidence from:

• Industry insiders and compliance officers

• Current / former UtPay employees

• Affected consumers and regulators

Secure tips: [Scam-Or Project platform]

This article forms part of the Crypto Payment Processor Watch series by the Scam-Or Project, which tracks how cryptocurrency service providers are leveraged to facilitate offshore gambling and financial-crime networks.