How do I protect my online casino account from being accessed by someone else?

Your casino account holds real money and verified personal identity documents — it's worth treating it with at least as much care as your online banking. Here's what actually works, layered from most to least critical.

Turn on multi-factor authentication — it's there for a reason

Ontario's AGCO Registrar's Standards require that all players be authenticated before accessing their account, that third parties are explicitly not permitted to access a player's account, and that every regulated operator must give players the option to use multi-factor authentication (MFA) when logging in. That last point matters: MFA isn't just a nice-to-have — regulated Ontario operators are required to offer it. Use it.

In practice, MFA means that even if someone gets hold of your password, they still can't get in. MFA requires you to input a one-time password (OTP) in addition to your login credentials; that OTP is generated by a third-party authenticator app or sent to your email, can only be used once, and expires quickly. An authenticator app (Google Authenticator, Authy, etc.) is generally more secure than email-based OTPs, since it doesn't depend on your email account also being secure.

Passwords, devices, and the basics that still trip people up

• Use a password that's unique to that casino account. Reusing a password from another site is the single most common way accounts get compromised — if that other site is ever breached, attackers try the same credentials everywhere.
• Check your session history. Regulated operators are required to log all player account transactions accurately and make that information readily available to you — including deposit and withdrawal history, current balance, log-in time, last log-in time, and last log-out time. If you see a login you don't recognize, contact the operator's support immediately and change your password.
• Don't share your account. Sharing isn't just a security risk — the AGCO's standards state plainly that all players must be authenticated before accessing their account and that third parties are not permitted to access a player's account. Account sharing can get your account suspended.
• Be careful on shared or public devices. Always log out fully rather than just closing the browser tab, and never save your password on a device others can access.
• Watch for phishing. Regulated Ontario operators will never ask for your password by email or text. If you receive a message asking you to "verify" credentials by clicking a link, go directly to the operator's site by typing the URL yourself.

Make sure you're on a legitimate site in the first place

Account security starts with playing somewhere that has real security infrastructure behind it. Look for the iGaming Ontario logo wherever you play — it's a sign that the site is being conducted and managed by iGaming Ontario, offers player protections, and meets Ontario's standards for game integrity and responsible gambling. Regulated Ontario sites also display the BetGuard logo. If you don't see both logos, cross-check the operator against the official list of registered sites at igamingontario.ca before depositing anything.

The AGCO's Registrar's Standards for Internet Gaming are designed to ensure that player protections, game integrity, responsible gambling safeguards, and anti-money laundering protections are in place — but those protections only apply when you're on a registered operator's platform. Offshore or unregistered sites have none of those obligations.

One more thing worth knowing: your spending limits are also a form of account protection. If someone did access your account, deposit and loss limits cap how much damage they could do. If you ever need to lock your account entirely or step away from all Ontario-regulated gambling at once, BetGuard (betguard.ca) is the province's centralized self-exclusion service — and for any personal support, ConnexOntario is available around the clock at 1-866-531-2600. Online gambling in Ontario is for adults 19 and older.