Executive Summary
Case Study: Kingdom Casino & UtPay Compliance Circumvention Analysis
This report analyzes a sophisticated money laundering and regulatory evasion scheme operated by Utrg UAB d/b/a utPay (utpay.io), a Lithuanian-regulated crypto payment processor, in partnership with Kingdom Casino (kingdomcasino.io), an offshore casino. Through FinTelegram’s direct investigation, we have documented how UtPay systematically enables illegal gambling operations by disguising casino deposits as “cryptocurrency purchases” via stealth domains, thereby circumventing anti-money laundering controls, consumer protection regulations, and payment network restrictions across multiple jurisdictions.
The scheme represents a paradigmatic case of how seemingly legitimate, EU-regulated financial service providers can be weaponized to facilitate systematic violations of gambling laws, consumer protection standards, and financial crime prevention measures. This analysis serves as a reference case for understanding sophisticated payment processing methodologies employed throughout the high-risk offshore gambling sector.
Introduction: The UtPay Deception Model
utPay, operating as UAB “Utrg” under Lithuanian cryptocurrency service provider licensing, markets itself as providing “full compliance” and “worldwide coverage” for legitimate Web3 companies. However, FinTelegram’s investigation reveals systematic facilitation of illegal gambling operations through deliberately deceptive payment flows designed to:
- Circumvent gambling-specific payment restrictions imposed by card networks and banking regulations
- Eliminate consumer protection mechanisms, including chargeback rights and dispute resolution procedures
- Obscure transaction traceability for anti-money laundering and regulatory enforcement purposes
- Enable operations in prohibited jurisdictions without direct regulatory oversight
This model exploits the regulatory arbitrage between cryptocurrency licensing (governed by Lithuanian authorities) and gambling regulation (absent for offshore operators), creating a compliance gap that facilitates large-scale financial crime.
Case Study: Kingdom Casino Payment Flow Analysis
Discovery and Investigation Methodology
During FinTelegram’s compliance review of Kingdom Casino (kingdomcasino.io), an unlicensed offshore gambling operator, our investigators documented the complete payment processing flow for EUR deposits via RAPID transfer offered by Skrill. The investigation revealed a multi-layered deception scheme involving:
- Primary casino domain: kingdomcasino.io (unlicensed offshore operation)
- Stealth payment domains: greenpayway.com and pay2prom.com (no corporate disclosure)
- Final processing domain: app.utpay.io (utPay‘s payment interface)
- Legal entity: Utrg UAB (Lithuanian-registered crypto service provider)
Deceptive Payment Flow Documentation
Step 1: Player Initiation
- Player selects EUR deposit via RAPID on Kingdom Casino
- System displays standard casino deposit interface with no cryptocurrency disclosure
Step 2: Domain Redirection Through Stealth Gateways
- Player redirected to greenpayway.com (domain with zero corporate transparency)
- Secondary redirection to pay2prom.com (equally opaque stealth domain)
- Final redirection to app.utpay.io (UtPay’s actual payment processing interface)
Step 3: Undisclosed Cryptocurrency Conversion
- UtPay interface presents payment form with pre-checked consent box
- Consent text: “I agree to buy crypto and send it to the specified address”
- CRITICAL DECEPTION: Player believes they are making casino deposit, not purchasing cryptocurrency
- No clear disclosure that transaction will be processed as cryptocurrency purchase rather than gambling deposit
Step 4: Legal Classification Manipulation
- Transaction processed as “cryptocurrency purchase” under Lithuanian regulation
- Funds legally classified as crypto commerce, not gambling deposit
- Consumer protection mechanisms eliminated through legal reclassification
Step 5: Crypto Transfer to Casino
- Purchased cryptocurrency automatically transferred to Kingdom Casino’s wallet
- Player account credited with “casino balance” equivalent to crypto purchase amount
- Payment processor relationship with gambling operation obscured through crypto transfer mechanism
Regulatory Evasion Mechanisms
Banking Restriction Circumvention:
The scheme enables Kingdom Casino to accept traditional banking payments (RAPID, credit cards, e-wallets) despite lacking gambling licenses that would permit direct banking relationships. By processing payments as “cryptocurrency purchases,” UtPay provides access to regulated payment methods that would otherwise be prohibited for unlicensed gambling operations.
Consumer Protection Elimination:
Players lose fundamental consumer protection rights through legal reclassification:
- Chargeback Rights: Credit card chargebacks unavailable for “cryptocurrency purchases”
- Banking Dispute Resolution: Banks cannot reverse “legitimate” crypto transactions
- Regulatory Recourse: No gambling-specific consumer protection mechanisms apply
- Refund Rights: Standard gambling refund protections circumvented through crypto purchase classification
AML Control Bypassing:
The multi-layer structure systematically defeats anti-money laundering controls:
- Source Identification: Payment appears as legitimate crypto purchase, not gambling deposit
- Transaction Monitoring: AML systems cannot identify gambling-related transaction patterns
- Regulatory Reporting: Suspicious transaction reports triggered by different criteria for crypto commerce versus gambling
- Audit Trail Obscuration: Complex multi-domain structure complicates transaction tracing
UtPay Corporate Structure and Regulatory Status
Lithuanian Registration and Licensing
Primary Entity:
- Legal Name: UAB “Utrg”
- Registration Code: 306062887
- VAT Number: LT100016489119
- Address: Kareivių g. 19-149, LT-09133 Vilnius, Lithuania
- Manager: Andrius Atkočaitis
- Founded: April 12, 2022
Regulatory Authorization:
UtPay operates under Lithuanian cryptocurrency service provider licensing, authorized for:
- Virtual currency exchange against fiat currency
- Virtual currency wallet services
- Virtual currency exchange against virtual currency
- Depository virtual currency wallet operations
Compliance Certifications:
- PCI DSS Level 2 certification for payment processing security
- Partnership with Quicko Sp. z o.o. (Poland) for debit card services
- Integration with MasterCard SecureCode and Visa Secure authentication systems
Financial Performance and Scale
Operational Metrics (2023):
- Revenue: €442,228
- Net Profit: €32,680
- Employees: 8 insured individuals
- Average Salary: €1,987.12 (June 2025)
Despite relatively modest reported revenues for 2023, UtPay‘s facilitation of high-volume offshore gambling transactions suggests significant unreported or misclassified business activity.
Corporate Network and Partnerships
Related Entities:
- UTORG LABS HOLDING LTD: Abu Dhabi-registered entity providing non-custodial wallet services
- Quicko Sp. z o.o.: Polish partnership for European debit card services
- Key Personnel: Edgar Fukalov (identified as key figure)
Systemic Regulatory Violations
Lithuanian Cryptocurrency Regulation Violations
AML/KYC Compliance Failures:
While UtPay claims “full compliance” with Lithuanian regulations, facilitating disguised gambling deposits violates fundamental anti-money laundering principles:
- Customer Due Diligence: Processing gambling-related transactions without proper risk assessment
- Transaction Monitoring: Failure to identify and report suspicious gambling-related transaction patterns
- Beneficial Ownership: Obscuring the true nature of cryptocurrency purchases for gambling purposes
- Record Keeping: Inadequate documentation of cryptocurrency end-use and beneficial ownership
Service Provider Authorization Violations:
UtPay’s cryptocurrency service provider license authorizes legitimate crypto commerce, not facilitation of illegal gambling operations. Using legitimate licensing to enable prohibited activities violates Lithuanian regulatory requirements.
EU-Wide Payment Service Violations
Payment Services Directive (PSD2) Violations:
- Transparency Requirements: Concealing the true nature of payment transactions from consumers
- Consumer Rights: Eliminating dispute resolution and refund mechanisms through transaction misrepresentation
- Risk Management: Failing to implement appropriate risk controls for high-risk gambling payments
Anti-Money Laundering Directive Violations:
- Enhanced Due Diligence: Inadequate scrutiny of high-risk gambling-related cryptocurrency transactions
- Suspicious Transaction Reporting: Failure to identify and report patterns consistent with money laundering through gambling operations
- Record Keeping: Insufficient documentation of transaction purposes and beneficial ownership
Gambling Regulation Violations
Unlicensed Gambling Facilitation:
UtPay systematically enables unlicensed gambling operations across multiple jurisdictions where such activities are prohibited:
- European Union: Facilitating gambling deposits for operations lacking national licensing
- United Kingdom: Processing payments for unlicensed operators prohibited under UKGC regulations
- Additional Jurisdictions: Enabling deposits for casinos operating illegally across global markets
Consumer Protection Circumvention:
The scheme deliberately circumvents gambling-specific consumer protections including:
- Deposit limits and cooling-off periods
- Self-exclusion enforcement mechanisms
- Responsible gambling interventions
- Problem gambling identification and support systems
Network Analysis: UtPay’s Offshore Casino Ecosystem
Documented UtPay Integration Partners
FinTelegram’s investigation has identified UtPay payment processing integration across multiple offshore gambling operations beyond Kingdom Casino:
Confirmed Integration Partners:
Based on technical analysis and transaction flow documentation, UtPay provides payment processing services to numerous offshore gambling operators employing identical deceptive methodologies.
Common Operational Patterns:
- Curaçao or Anjouan gambling licensing (minimal regulatory oversight)
- Operations in prohibited jurisdictions without local authorization
- Use of stealth domains to obscure payment processor relationships
- Identical “crypto purchase” deception schemes to eliminate consumer protections
- Targeting of European, UK, and regulated markets without proper licensing
Scale Assessment:
Given UtPay’s reported revenue figures and the high-volume nature of offshore gambling transactions, the company likely processes millions of euros in disguised gambling deposits annually across its casino partner network.
Stealth Domain Infrastructure Analysis
greenpayway.com and pay2prom.com:
These domains serve exclusively as payment gateway redirects with zero corporate transparency:
- No Corporate Information: No company registration, ownership disclosure, or contact information
- No Public Website: Domains exist solely for payment processing redirects
- No Consumer Recourse: Players cannot identify or contact the actual payment processor
- Regulatory Evasion: Structure designed to obscure payment processing relationships from regulators and consumers
This infrastructure represents a sophisticated compliance evasion mechanism enabling offshore casinos to obscure their payment processing relationships while maintaining access to regulated payment methods.
| UtPay Crypto Payment Scheme – Complete Entity Mapping | |
|---|---|
| Category | Details |
| Primary Casino Operator | Kingdom Casino (kingdomcasino.io) – Unlicensed offshore gambling operation |
| Stealth Payment Domains | – greenpayway.com (no corporate disclosure) – pay2prom.com (no corporate disclosure) Purpose: Obscure payment processor identity from players and regulators |
| Crypto Payment Processor | UtPay – Website: utpay.io – Payment Interface: app.utpay.io – Terms: utpay.io/terms-of-use – FAQ/KYC Policy: utpay.io/faq |
| Legal Entities | UAB “Utrg” (Lithuania) Utorg OÜ (Estonia) |
| Key Personnel | Andrius Atkočaitis – Registered Manager Edgar Fukalov – Key operational figure, associated with UTORG network Aleksandr Tšhailo, UBO of Utorg OÜ in Estonia |
| Regulatory Status | Lithuanian Cryptocurrency Service Provider License |
| Related Corporate Network | UTORG LABS HOLDING LTD (Abu Dhabi), Quicko Sp. z o.o. (Poland) – European debit card services UTORG (utorg.pro) – Related crypto service provider |
| Deception Mechanism | – Pre-checked consent: “I agree to buy crypto and send it to specified address” – Hidden conversion: EUR deposit becomes crypto purchase – Consumer protection elimination: No chargeback/refund rights for “crypto purchase” – AML evasion: Gambling deposit disguised as legitimate crypto commerce |
| Regulatory Violations | – Lithuanian AML/KYC compliance failures – EU Payment Services Directive (PSD2) violations – Unlicensed gambling facilitation across multiple jurisdictions – Consumer protection circumvention – FATF anti-money laundering standard violations |
| Risk Assessment | EXTREMELY HIGH – Systematic money laundering facilitation – Consumer protection elimination – Regulatory evasion across multiple jurisdictions – No consumer recourse mechanisms |
| Investigation Status | FinTelegram Active Investigation – Part of Crypto Payment Processor Watch series – Evidence documented from Kingdom Casino review – Screenshots obtained of deceptive payment flow – Whistleblower intelligence sought via Whistle42 |
This sophisticated scheme exploits the regulatory gap between Lithuanian cryptocurrency licensing and gambling regulation, using Skrill+RAPID as the final payment method while disguising EUR casino deposits as “cryptocurrency purchases” to eliminate consumer protections and enable money laundering for offshore gambling operations.
Consumer Harm and Financial Crime Risks
Systematic Consumer Protection Elimination
Chargeback and Dispute Resolution Denial:
The “crypto purchase” deception eliminates fundamental consumer protection mechanisms:
- Credit Card Chargebacks: Banks refuse chargebacks for “legitimate” cryptocurrency purchases
- Banking Dispute Resolution: Standard banking dispute procedures inapplicable to crypto commerce
- Regulatory Complaints: No gambling-specific complaint mechanisms available for “crypto purchases”
- Legal Recourse: Civil litigation complicated by transaction mischaracterization
Vulnerable Player Exploitation:
The scheme systematically exploits gambling addiction vulnerabilities:
- Self-Exclusion Circumvention: Gambling blocks defeated through “crypto purchase” processing
- Deposit Limit Evasion: Banking-based gambling controls bypassed through crypto conversion
- Addiction Intervention Prevention: Payment patterns hidden from gambling addiction support systems
Money Laundering Facilitation
Layering and Integration Services:
UtPay’s model provides sophisticated money laundering capabilities:
Stage 1 – Placement:
- Illicit funds deposited as “legitimate” cryptocurrency purchases
- Transaction appears as standard crypto commerce in banking records
- Source identification obscured through legal classification manipulation
Stage 2 – Layering:
- Funds converted through multiple cryptocurrency transitions
- Complex multi-domain payment flows obscure transaction tracing
- Gambling activity provides legitimate-appearing fund mixing mechanism
Stage 3 – Integration:
- “Winnings” withdrawn as apparently legitimate gambling proceeds
- Clean cryptocurrency or fiat withdrawals complete money laundering cycle
- Regulatory oversight defeated through transaction mischaracterization
Criminal Organization Applications:
The scheme enables systematic money laundering for organized crime, terrorism financing, tax evasion, and corruption proceeds through offshore gambling operations.
International Regulatory Implications
Lithuanian Regulatory Failures
Insufficient Oversight:
Lithuania’s cryptocurrency regulation framework lacks adequate controls for preventing gambling-related abuse:
- Limited Transaction Monitoring: No specific controls for identifying gambling-related cryptocurrency transactions
- Inadequate Due Diligence: Customer due diligence standards insufficient for high-risk gambling applications
- Enforcement Gaps: Regulatory enforcement mechanisms inadequate for complex international schemes
- Cross-Border Coordination: Limited coordination with gambling regulators in destination markets
Regulatory Arbitrage Exploitation:
UtPay exploits regulatory gaps between cryptocurrency oversight (Lithuanian authorities) and gambling regulation (absent for offshore operators) to facilitate systematic law violations.
European Union Regulatory Challenges
Cross-Border Enforcement Difficulties:
The scheme exposes systematic weaknesses in EU cross-border financial crime enforcement:
- Jurisdictional Complexity: Multiple EU member states lack coordination for complex cross-border schemes
- Regulatory Specialization: Cryptocurrency regulators lack gambling industry expertise and vice versa
- Enforcement Resources: Limited resources for investigating sophisticated multi-jurisdictional schemes
- Legal Framework Gaps: Existing regulations inadequate for hybrid crypto-gambling operations
Payment Network Vulnerability:
The scheme demonstrates how legitimate EU payment infrastructure can be weaponized for financial crime through regulatory arbitrage.
Global Anti-Money Laundering Implications
FATF Standards Violations:
UtPay’s operations violate multiple Financial Action Task Force recommendations:
- Recommendation 1: Risk assessment failures for gambling-related cryptocurrency services
- Recommendation 8: Non-profit organization abuse through gambling charity schemes
- Recommendation 15: Virtual asset service provider compliance failures
- Recommendation 28: Beneficial ownership transparency violations
International Cooperation Requirements:
The case demonstrates urgent need for enhanced international cooperation between cryptocurrency regulators and gambling authorities to prevent similar schemes.
Comparative Analysis: Industry Context
Offshore Gambling Payment Processing Evolution
Historical Context:
The UtPay model represents evolution in offshore gambling payment processing methodologies:
Generation 1 (2000-2010): Direct credit card processing through high-risk merchants
Generation 2 (2010-2020): Third-party payment processors and e-wallet systems
Generation 3 (2020-Present): Cryptocurrency conversion schemes and regulatory arbitrage
Sophistication Advancement:
Current schemes demonstrate significantly increased sophistication in regulatory evasion, consumer deception, and law enforcement avoidance compared to historical methods.
Payment Processor Compliance Standards
Legitimate Industry Standards:
Regulated payment processors implement comprehensive compliance controls:
- Transaction Monitoring: Real-time identification of gambling-related transactions
- Merchant Due Diligence: Extensive vetting of gambling merchant licensing and regulatory status
- Consumer Protection: Maintenance of chargeback, dispute resolution, and refund mechanisms
- Regulatory Cooperation: Active coordination with gambling regulators and law enforcement
UtPay Comparative Failures:
UtPay’s operations systematically violate industry best practices and regulatory requirements, demonstrating deliberate compliance evasion rather than oversight failures.
Conclusion and Industry Impact
Systemic Risk Assessment
The UtPay-Kingdom Casino scheme represents a significant evolution in offshore gambling regulatory evasion, demonstrating how legitimate EU financial infrastructure can be systematically weaponized for large-scale financial crime. The sophistication of the deception mechanism, combined with the regulatory arbitrage exploitation, poses fundamental challenges to consumer protection, anti-money laundering enforcement, and gambling regulation effectiveness.
Critical Risk Factors:
- Consumer Protection Elimination: Systematic removal of fundamental consumer protection mechanisms through transaction mischaracterization
- Money Laundering Facilitation: Sophisticated money laundering capabilities through crypto conversion schemes
- Regulatory Evasion: Successful circumvention of gambling regulations through cryptocurrency licensing arbitrage
- International Scope: Cross-border operations defeating national regulatory enforcement mechanisms
Call for Information
FinTelegram urgently seeks additional intelligence from industry insiders, current and former employees, affected consumers, and regulatory personnel regarding:
This report is part of FinTelegram’s Crypto Payment Processor Watch series, investigating the role of cryptocurrency service providers in facilitating offshore gambling operations and financial crime. For previous reports and ongoing investigations, visit FinTelegram.com.
