The ‘unlock fee’ that no rule actually requires
The pattern rarely changes. You have requested a withdrawal, the money is not there yet, and an email, chat or Telegram message arrives from the ‘Dukat.bet finance department’: your payout is frozen until you first transfer a tax, a security deposit or a verification fee.
Dukat.bet’s own texts say otherwise. Section 12 of the T&C does allow deductions – intermediary bank charges (up to roughly EUR 16) and a 10% commission on an unwagered deposit – but they come off the payout, not via a separate transfer. The Banking page adds that the cashier must show any casino fee before you confirm.
No clause we found requires a separate upfront payment to release a withdrawal.
That is not proof, only that nothing of the kind appears in the documents as of 14 October 2026. So your first move is a question to the official address, not a transfer.
Fees, email addresses, phone calls: interface and rules side by side
| Question | Banking page / interface | Rules (clause) | Do they match? |
|---|---|---|---|
| Does a withdrawal cost money? | ‘Fee Free’ for every method; the cashier shows the casino’s fee before confirmation | T&C 10: right to charge a fee; T&C 12: intermediary banks approx. EUR 16, 10% withheld from the payout | no – see below |
| Do you have to pay upfront to get a withdrawal released? | no such wording | we found no fee payable in advance | the rules are silent |
| Which email address is official? | the email button on the ‘Kapcsolat’ (Contact) page opens a third address | T&C and AML policy, section 7: support@dukat.bet; privacy policy: dpo@dukat.bet | no – see below |
| Can Dukat.bet phone you? | no phone support, only email and live chat | T&C 9: a phone call may be part of KYC | no – see below |
| Can they ask for your password or full card number? | FAQ 17: passwords, full card numbers and codes are not to be sent | T&C 9: you must not disclose your password to third parties | yes |
| Is there a dedicated phishing warning? | FAQ 16: check the web address before logging in | we found no separate clause | the rules are silent |
The phone row is the trickiest: there is no support line, yet the casino may ring you as part of a verification. A call alone is not suspicious; a request for a code, password or transfer is.
On email addresses, the documents even contradict one another, so we only treat the two addresses named in the policies as reference points: support@dukat.bet (support, payments) and dpo@dukat.bet (data protection). A money request from any other sender should be checked with one of these first.
Lookalike web addresses and fake cashier windows
The second common trap is a near-identical web address: one swapped letter or a different ending, and the page looks just like the real cashier. Card and login details end up there, or a ‘deposit’ that never reaches your account.
Dukat.bet FAQ 16 only asks you to check the web address before entering account details; the Banking page asks you to review amount, currency and destination before confirming. We found no dedicated phishing warning, and without logging in we could not see which window asks for card details.
General warning signs anywhere:
- the link came from an advert or a message, not typed by you;
- the page hurries you: ‘today only’, ‘or we will freeze your account’;
- the cashier offers a method that is not among the five rows of the Banking page (bank card, Revolut, bank transfer, USDT, USDC).
The habits that keep you safe are gathered on our transaction security page.
The crypto address swapped on your clipboard
With stablecoins a fraudster needs no fake page. Some malware watches the clipboard and swaps a copied crypto address for the attacker’s own when you paste it. The transfer still goes through. Just somewhere else.
The Banking page lists USDT and USDC in both directions, from roughly HUF 18,000 up to HUF 3,660,000. Neither the public pages nor the T&C describe the network or address format, so always compare the address with the logged-in cashier, never with one sent in a message.
After pasting, check the first and last five or six characters, and before a larger amount send a test close to the minimum. Tokens sent on a blockchain usually cannot be recalled by anyone, the casino included.
Deducted from the payout or paid upfront: the difference in forints
Worked example with unreal amounts – not Dukat.bet data:
A HUF 300,000 withdrawal is requested by bank transfer while the deposit behind it has not yet been wagered. Under section 12 of the T&C, the casino may then cancel the request or withhold 10%, i.e. HUF 30,000. If it withholds, at most HUF 270,000 leaves for your bank, possibly minus intermediary bank charges.
The scammer’s version of the same case: ‘transfer HUF 30,000 and you will receive the full HUF 300,000’. The figures look familiar, but the mechanism is reversed: your money goes first, and nothing comes back.
In the first case, HUF 270,000 can reach you. In the second, the HUF 30,000 is very probably lost for good.
Four questions for support after a suspicious payment message
Before transferring anything, ask support@dukat.bet or the live chat – never by replying to the suspicious message:
- Did Dukat.bet send a message today to the email address linked to my account, and from which address?
- What is the status of my open withdrawal request, and is anything expected from me?
- Is there any fee I would have to transfer separately before the payout, or is every deduction taken from the payout itself?
- Does Dukat.bet ever contact players via Telegram or another messaging app?
If any answer contradicts the message, do not pay.
Already paid? Bank, police, Dukat.bet – in that order
Speed matters. If you paid the scammer by card, ring your bank at once or block the card in the app and ask about a chargeback. A bank transfer can sometimes still be recalled if reported quickly. (A chargeback on a genuine Dukat.bet deposit is another matter: under section 10 of the T&C, the casino may then close the account and confiscate winnings.)
Next, report it to the police: screenshots, the sender’s address, the date and amount of the transaction, and for crypto the transaction hash. Delete nothing, however embarrassing.
Finally, write to support@dukat.bet. If someone has also got into your account, section 14 of the T&C says the refund request must be submitted within 30 calendar days. Verification and account locks are covered on the security page, the written-down fees on the fees and processing times page, and the own-card rule on the payment ownership page.