FinTelegram’s Malina Casino review exposes a geo-domain payment-rail layer targeting EU players through jurisdiction-specific deposit routes. Austrian and Italian test flows revealed Revolut Open Banking, Perspecteev SAS, RAPID, Finmesh, Skrill, MiFinity, ChainValley-style fake-FIAT crypto conversion, Zentoria, and the newly surfaced mixfind.com payee. The evidence points to a classic offshore casino rail model: the casino brand stays in the front window, while rotating payment facilitators, payees, gateways and open-banking actors move the money underneath.
2-Minute Briefing
The strongest evidence is inside the payment flow: Malina Casino deposits from EU players did not resolve to one transparent casino merchant. They surfaced different third-party payees and routing layers — including Zentoria Limited and mixfind.com in Skrill card verification screens, and Perspecteev SAS inside Revolut Open Banking.
FinTelegram tested Malina Casino via the geo-domain malinacasino-2836.com, which presented German, English and Italian user flows. The SimilarWeb screenshot reviewed by FinTelegram shows EU traffic concentration for that geo-domain, with Germany as the largest visible traffic source, followed by Czech Republic, Greece, France and Belgium.
The cashier offered the familiar offshore casino menu: PlayID, VISA/Mastercard, Pay by Card, Paysafecard, Revolut, Bank Transfer, RAPID, Jetonbank, MiFinity, Neteller/Skrill and crypto deposits. But the real story is not the menu. The real story is what happens after the player clicks.
In the Skrill Prepaid Mastercard verification flow, FinTelegram observed pending €20 transactions showing two different payees: “zentoria limited” and “mixfind.com.” Zentoria Limited has already appeared in several FinTelegram illegal casino payment-rail reviews. MixFind is new and significant. Its own website presents it as a payment lookup and statement inquiry portal designed to identify charges, merchant names, contact information and receipts attached to payments; its terms describe the portal as a billing inquiry tool for charges executed by “authorized billing partners,” while stating that MixFind is not a bank or financial institution and does not process payments through the portal.
The Revolut rail was also exposed twice. In one path, Malina routed the player through Finmesh / redirect-gate to Revolut Open Banking, where Perspecteev SAS appeared as the authorization party. Perspecteev’s Bridge legal page states that Perspecteev is a French payment institution authorized by the ACPR for payment initiation and account information services. In a second path, the RAPID rail routed Austrian users to a bank-selection page and then to Revolut Open Banking, where the player had to authorize Rapid Transfer.
Public information on Malina’s operator and licensing perimeter is inconsistent. Some review sources currently attribute Malina Casino to Stellar Ltd, registered in Anjouan and operating under an Anjouan license, while other casino-review ecosystems have associated Malina or related brands with Rabidi/Liernin or NovaForge-style offshore clusters. CasinoTest24, for example, states that Malina launched in 2024, is operated by Stellar Ltd, and is licensed by the Anjouan Gaming Authority under license number ALSI-202411077-FI2.
That does not solve the EU question. An Anjouan license is not permission to target Italy, Austria, Germany or other EU markets. The rail evidence shows EU-facing payment access; the regulatory issue is whether payment institutions, gateways, wallet providers and merchant-layer entities are enabling an offshore casino to collect EU player funds without local authorization.
Key Findings
- Malina uses a geo-domain payment layer.
EU players were routed through malinacasino-2836.com, with localized cashier flows for Austria, Italy and other EU-facing language versions. - The cashier is jurisdiction-aware.
Austrian and Italian players saw different payment availability and different backend handling. This is not a static cashier; it is adaptive payment routing. - Skrill exposed Zentoria Limited as payee.
In our Skrill Prepaid Mastercard deposit we found “zentoria limited” as the payee. Zentoria has already appeared in multiple FinTelegram casino-rail investigations. - Skrill also exposed mixfind.com as payee.
A second Skrill Prepaid Mastercard transaction showed mixfind.com as the payee. MixFind is not presented publicly as a casino merchant. Its website describes a charge-identification and billing inquiry portal, making its appearance as a payment payee a major descriptor/payee red flag. - MixFind must explain its role.
The key question is whether MixFind is a merchant descriptor, billing-support layer, payment facilitator interface, chargeback-reduction tool, merchant-of-record wrapper, or portal connected to another processor. - Revolut Open Banking appeared through multiple paths.
Malina’s direct Revolut rail and its RAPID rail both reached Revolut Open Banking screens in the tested flows. - Perspecteev SAS appeared inside the Revolut rail.
The Revolut rail asked the player to authorize Perspecteev SAS. Perspecteev’s Bridge page identifies it as an ACPR-authorized payment institution for payment initiation and account information services. - RAPID behaved differently by jurisdiction.
For Austrian users, RAPID routed to bank selection and then Revolut Open Banking. For Italian users, RAPID was unavailable and the player was pushed toward Skrill Wallet, with MHSL shown as recipient. - MiFinity showed CME as recipient.
The MiFinity deposit screen displayed CME as payee. CME must explain whether it is merchant, processor, wallet recipient, or descriptor-layer entity. - Paysafecard and Neteller labels concealed alternative backend rails in Italy.
For Italian players, FinTelegram again observed the ChainValley-style fake-FIAT pattern: a familiar FIAT/wallet label at the cashier, but a backend flow that appears to involve crypto purchase and transfer to the casino environment. - Zentoria remains a recurring casino payee.
The Malina evidence reinforces Zentoria Limited as a recurring payee or merchant-layer participant in offshore casino flows. - The operator story remains fragmented.
Current public review sources point to Stellar Ltd and Anjouan licensing, while the broader Malina/Rabidi/NovaForge ecosystem remains inconsistent across casino-review databases. Fragmented operator history is a regulatory red flag, not an answer.
Key Data Table
| Entity / Domain | Role | Jurisdiction | Evidence | Red Flag |
|---|---|---|---|---|
| Malina Casino / malinacasino-2836.com | EU-facing casino geo-domain | Offshore / unclear | FinTelegram test access; screenshots; SimilarWeb screenshot | EU player acquisition through geo-domain layer |
| Stellar Ltd | Publicly cited current operator | Anjouan / Comoros | CasinoTest24 attributes Malina to Stellar Ltd and Anjouan license ALSI-202411077-FI2 | Offshore license does not equal EU market authorization |
| Zentoria Limited | Skrill/card payee; recurring casino payee | Ireland | Skrill verification screenshot: “zentoria limited: EUR 20,00” | Already observed in several illegal/offshore casino payment flows |
| mixfind.com / MixFind | Skrill/card payee or descriptor-support layer | Not clearly disclosed on site | Skrill verification screenshot: “mixfind.com: EUR 20,00”; MixFind site describes charge lookup and billing inquiry | New opaque payee; public site does not present normal casino merchant role |
| payment-gateway.io | Card gateway | Unknown | FinTelegram VISA/Mastercard test finding | Opaque payment-gateway layer |
| Finmesh.net / DirectPay | Payment-link / redirect-gateway layer | Unknown | Payment screenshot; Malina deposit flow; expired-link error page; source title “DirectPay”; production app config | Operator not disclosed; session-based routing; sits between casino cashier and bank/open-banking rails |
| redirect-gate.net | Redirect layer | Unknown | FinTelegram test finding | Obscures first-hop routing |
| Perspecteev SAS / Bridge https://www.bridgeapi.io/ | Open Banking / PISP layer | France | Revolut authorization screen; Bridge legal page confirms ACPR payment institution status | Regulated open-banking firm appears in casino funding flow |
| Revolut (Open Banking – OBA) | ASPSP/API access layer | UK/EU group | Revolut authorization screenshots | Reached via multiple Malina rails |
| RAPID Transfer / RAPID | Payment method / routing layer | Unknown | Austrian flow reaches bank selection and Revolut OBA; Italian flow falls back to Skrill | Same label produces different jurisdictional outcomes |
| Skrill / MHSL | Wallet fallback / recipient | Unknown | Italian RAPID screenshot shows MHSL as recipient | Recipient mismatch; requires merchant-role explanation |
| MiFinity / CME | E-wallet rail / recipient | Unknown | MiFinity screenshot: “Deposita su CME” | Recipient is not Malina; merchant role unclear |
| ChainValley https://app.chainvalley.pro | Crypto conversion layer | Poland | FinTelegram review finding in Italian Paysafecard/Neteller flows | Fake-FIAT deposit pattern |
| Paysafecard / Neteller labels | Front-end cashier labels | EU/UK wallet brands | Displayed in cashier; backend differs by jurisdiction | Label does not necessarily describe real backend flow |
| Jetonbank | Wallet rail | UK/other | Available in both country cashiers | High-risk casino funding rail |
Rail Map
A. Skrill / Card Verification Rail
Player → Malina Casino Cashier → Pay by Card / Card Deposit → Skrill Prepaid Mastercard verification → Payee shown as “zentoria limited” or “mixfind.com” → Casino funding layer
Assessment: This is one of the strongest evidence blocks. The player is funding Malina Casino, but the Skrill verification screen shows third-party payees. Zentoria Limited fits an already observed offshore casino payment pattern. MixFind is new and more problematic: its own website presents a payment lookup and statement support portal, while the Skrill verification screen shows it as the payee in a casino deposit transaction.
Read our reports on Zentoria here.
B. Direct Card Rail
Player → Malina Cashier → VISA/Mastercard → payment-gateway.io → Zentoria Limited / other payee layer → Casino funding layer
Assessment: The card rail exposes a payee layer separate from the casino brand. Zentoria Limited must explain whether it acts as merchant of record, payment agent, processing counterparty, descriptor holder, or settlement intermediary.
C. Revolut / Perspecteev Rail
Player → Malina Cashier → Revolut option → Finmesh / redirect-gate → Revolut Open Banking → Perspecteev SAS authorization → Payment initiation → Casino funding layer
Assessment: This is a regulated open-banking choke point. Perspecteev is not an anonymous shell; it is a French payment institution authorized for payment initiation and account information services. Its appearance in a Malina Casino deposit path creates immediate merchant-onboarding and transaction-monitoring questions.
Finmesh.net appears to operate as a production payment-link or redirect layer under the application title “DirectPay.” A tested link expired into a “Link not available” page, consistent with session-based payment routing. The source code uses Sentry monitoring, but does not disclose the legal operator, merchant, acquirer, PSP, or payment facilitator behind the gateway.
D. RAPID Rail — Austria
Player → Malina Cashier → RAPID → payment.onlinebanktransfer.com → Austrian bank selection → Revolut → Revolut Open Banking → Authorize Rapid Transfer → Payment initiation
Assessment: RAPID is not merely a brand label. It functions as a routing layer that can still reach Revolut Open Banking. The same Revolut endpoint is therefore accessible both through the cashier’s Revolut button and through the RAPID path.
E. RAPID Rail — Italy
Player → Malina Cashier → RAPID → Skrill page → “Rapid Transfer non è disponibile” → Skrill Wallet fallback → Recipient: MHSL
Assessment: When RAPID is unavailable for Italian users, the system does not stop the payment attempt. It offers an alternative wallet route and displays MHSL as recipient. That is adaptive payment routing, not transparent cashier design.
F. MiFinity Rail
Player → Malina Cashier → MiFinity → MiFinity payment screen → Recipient: CME → Casino funding layer
Assessment: MiFinity’s screen shows CME, not Malina, as the deposit recipient. CME must be identified and mapped against PSP, merchant and settlement records.
G. Fake-FIAT Crypto Rail
Italian player → Paysafecard / Neteller label → ChainValley-style crypto purchase → crypto transfer to casino environment
Assessment: This is the now-standard fake-FIAT casino deposit pattern. The player sees a familiar payment label, but the backend appears to execute a crypto conversion. The label suggests a FIAT wallet/card rail; the underlying economics point to crypto funding.
FinTelegram Assessment
Established Facts
Malina Casino was accessible through the reviewed geo-domain malinacasino-2836.com and displayed EU-facing cashier options, including PlayID, VISA/Mastercard, Pay by Card, Paysafecard, Revolut, Bank Transfer, RAPID, Jetonbank, MiFinity, Neteller/Skrill and USDT ERC20.
Austrian and Italian player flows differed. Austrian players saw Bank Transfer and RAPID routes that led into bank-selection and Revolut Open Banking flows. Italian players saw different fallback behavior, including Skrill Wallet routing and crypto-conversion patterns behind wallet labels.
The Skrill app screenshots show pending Skrill Prepaid Mastercard transactions connected to the Malina deposit review. One displays “zentoria limited: EUR 20,00.” Another displays “mixfind.com: EUR 20,00.”
MixFind’s public website states that users who do not recognize a transaction can enter details to retrieve merchant and order information attached to a payment. It also describes itself as a “Payment Support Portal.”
MixFind’s terms describe the portal as a billing inquiry tool for statement descriptors, debits and credit card charges executed by “authorized billing partners,” while stating that MixFind is not a bank, credit union or financial institution and does not process payments through the portal.
The Revolut authorization screenshots show two separate authorization parties in different paths: Perspecteev SAS and Rapid Transfer.
Perspecteev’s Bridge legal page states that Perspecteev SAS is registered in Paris and authorized by the ACPR as a payment institution for payment initiation and account information services.
The MiFinity screenshot shows a €50 transaction with CME as the recipient.
The Skrill/RAPID screenshot for Italy shows MHSL as recipient and tells the player that RAPID is unavailable, recommending payment through Skrill Wallet.
The SimilarWeb screenshot reviewed by FinTelegram shows EU traffic to the geo-domain, including Germany, Czech Republic, Greece, France and Belgium.
Strong Inferences
The evidence points to jurisdiction-aware payment routing. Malina’s cashier is not a neutral list of payment options. It adapts the available rail and backend payment counterparty depending on where the player is located.
The evidence points to merchant/payee opacity. The player-facing casino brand is Malina, but the payment verification layers show Zentoria Limited, mixfind.com, MHSL and CME.
The evidence points to regulated infrastructure being used as access rails into offshore casino funding flows. Perspecteev and Revolut are not the casino operator, but their infrastructure appears in tested funding chains.
The evidence points to Zentoria Limited as a recurring casino payment participant. Its appearance in Malina is not isolated; it fits a broader FinTelegram evidence pattern across illegal/offshore casino schemes.
The appearance of mixfind.com as a payee is a high-value red flag. MixFind’s public-facing function is charge identification and billing inquiry, yet it appears as the named payee in a Skrill Prepaid Mastercard verification screen connected to a casino deposit.
Working Hypotheses
Working Hypothesis 1: Malina Casino is part of a broader offshore casino operator/payment ecosystem where the public operator name, payee layer, merchant descriptor and settlement path can differ from one another.
Working Hypothesis 2: Zentoria Limited functions as a recurring merchant-layer or payee-layer participant in multiple offshore casino flows, including Malina.
Working Hypothesis 3: MixFind is connected to a billing partner or descriptor-management layer used to reduce chargeback friction, identify card charges, or route payment-support inquiries for high-risk merchants.
Working Hypothesis 4: ChainValley-style crypto conversion is being used when certain named payment rails are unavailable, blocked, risky or unsuitable in specific EU jurisdictions.
Working Hypothesis 5: Finmesh, redirect-gate and payment.onlinebanktransfer.com function as routing layers that allow Malina’s cashier to access regulated endpoints without presenting the full chain to the player.
Open Questions
Who is the current legal operator of Malina Casino for EU-facing players?
Which entity owns or controls malinacasino-2836.com?
What is the contractual relationship between Malina Casino, Stellar Ltd, Zentoria Limited, MixFind, Finmesh, RAPID, Perspecteev, ChainValley, MiFinity, Skrill, payment-gateway.io and redirect-gate?
Why does mixfind.com appear as a payee in a Skrill Prepaid Mastercard verification screen for a Malina Casino deposit?
What is MixFind’s legal entity, jurisdiction, ownership and acquiring/PSP relationship?
Which “authorized billing partner” is connected to the MixFind transaction shown in the Skrill app?
Is MixFind a merchant descriptor, billing-support portal, payment facilitator interface, chargeback-reduction tool, merchant-of-record wrapper, or front-end for another payment processor?
Did Skrill classify the zentoria limited and mixfind.com transactions as gambling, gaming, digital services, payment support, crypto purchase or generic e-commerce?
What MCC was assigned to the Skrill Prepaid Mastercard transactions?
Did Perspecteev onboard a direct merchant, payment facilitator, technical gateway or another intermediary that ultimately served the Malina flow?
Did Revolut classify these flows as gambling, wallet funding, payment initiation, crypto purchase or generic transfer?
What exactly are MHSL and CME in these flows?
Were Italian and Austrian players properly informed that certain “FIAT” deposit labels may execute crypto purchases or route funds through third-party payees unrelated to Malina Casino?
Conclusion
Malina Casino is not just an offshore casino brand. It is a payment-rail case.
The screenshots show the model in action: the casino sits in front, the geo-domain adapts the flow, and the player is pushed through whichever payment rail still works in that jurisdiction.
The new Skrill evidence makes the case sharper. Zentoria Limited appears again as a casino payment payee. mixfind.com appears as a new payee, despite presenting itself publicly as a payment lookup and billing inquiry portal. Add Revolut Open Banking, Perspecteev SAS, RAPID, Finmesh, MiFinity/CME, Skrill/MHSL and ChainValley-style fake-FIAT conversion, and the picture is clear.
Malina Casino shows the offshore casino payment model: offshore license on the front, EU payment infrastructure underneath, rotating payees in the middle, and the player left guessing who actually took the money.
8. Whistleblower Call
FinTelegram is seeking documents from players, insiders, PSP staff, open-banking providers, wallet operators, acquirers, compliance officers and former employees with knowledge of Malina Casino and its payment rails. Victims and insiders can contact FinTelegram securely through Whistle42.
