Is Your Crypto Casino Rigged? How to Actually Check
Provably fair only covers in-house dice and crash games. Slots run on RNG certificates from iTech Labs, GLI, or eCOGRA instead — here's how to actually check one.
Published September 13, 2026· By Evan Kowalski· Fact-checked by Abril González
Provably fair lets you personally verify a dice roll or a crash multiplier with a hash calculator and five minutes. That system doesn’t extend to the rest of the casino floor. Slots from Pragmatic Play, Hacksaw, or RTG, and most live-dealer tables, don’t publish a server seed you can check — they run on a random number generator certified by a third-party testing lab instead, and that’s a completely different verification model.
This is the gap most crypto casino guides skip over. They’ll tell you a casino is “RNG certified” and move on, as if the badge itself were the proof. It isn’t. Here’s what RNG certification actually checks, what it doesn’t, and how to tell a real one from a logo someone pasted into a footer.
What RNG Certification Actually Tests
Three labs certify the overwhelming majority of online casino RNGs: iTech Labs, Gaming Laboratories International (GLI), and eCOGRA. Despite different branding, the methodology is close to identical across all three.
The lab gets access to the game’s source code and the raw output of its random number generator — not just the finished game, the underlying number stream before it’s mapped to reels, cards, or dice faces. From there:
- Statistical testing — millions of generated numbers run through tests for uniform distribution and the absence of detectable patterns (iTech Labs and eCOGRA both cite standard statistical randomness batteries here; CryptoGames’ own certificate, for example, names Marsaglia’s diehard tests specifically).
- Seed and algorithm review — confirming the seed value feeding the generator is itself unpredictable, and that the algorithm can’t be reverse-engineered to predict future outputs from past ones.
- RTP verification — checking that the game’s actual payout math, run over enough iterations, matches the return-to-player percentage the operator claims.
- Integration check — confirming the RNG is wired into the game correctly, so what’s certified in isolation is actually what’s running in production.
GLI’s public standard for this, GLI-19, is a downloadable document covering exactly what a system has to demonstrate to pass — it’s not a black box.[3] eCOGRA and iTech Labs don’t publish their internal test suites in the same way, but the FAQ pages of both describe the same core process: statistical testing plus source-level review, not just a survey or a paid logo license.[1][2]
None of the three treat this as a one-time stamp. All three describe periodic re-certification — spot checks and re-audits at intervals after the initial pass, not a badge issued once and left unchanged for a decade.[1][2]
What It Doesn’t Check
RNG certification tells you the number generator is statistically fair. It does not tell you:
- That the operator will pay you. A certified RNG and a casino that freezes withdrawals are two unrelated questions — one is a math problem, the other is a business-conduct problem. Check licensing and payout track record separately.
- That the certificate is current. A lab can certify a game engine once and never touch it again if the operator doesn’t request a re-audit. CryptoGames’ own iTech Labs certificate, for instance, is dated 24 June 2022 — genuine, but over three years old with no newer audit on record.
- That every game on the site was tested. A casino can certify its core game engine and add dozens of newer titles from other suppliers afterward. The certificate covers what it names, not the whole current catalog by default.
- That the published RTP is what you’ll actually see. RTP is a theoretical figure calculated over millions of rounds. It says nothing about any single session, and it’s only meaningful if it traces back to an actual certified report — not just a number printed on a promo page.
How to Actually Verify a Badge
None of the three labs run a public, searchable database where you can type in a casino’s name and pull up its certificate the way you’d look up a company on a corporate registry. Verification instead works through linking, and that’s the part worth checking yourself:
- Find the actual certificate, not just the logo. A real certification comes with a document — usually a PDF hosted either on the lab’s own domain or “hot-linked” (iTech Labs’ own term) directly from the operator’s fairness page to the lab’s servers.[1] If the logo on a casino’s footer isn’t clickable, or the link goes to the lab’s homepage instead of a specific certificate, that’s a sign the badge was copied from somewhere else rather than earned.
- Check the date. A genuine certificate names the game(s) tested and a certification date. If it’s several years old, treat it the way you’d treat a stale license renewal — not necessarily fraudulent, but not current proof either.
- Check what’s actually named. A legitimate certificate specifies which games or which RNG engine was tested. A page that just says “Certified Fair” with no scope named is weaker evidence than one that names specific titles or an engine version.
- Cross-check against the license, separately. A licensed operator (Curaçao, Malta, UK) is required to use certified game suppliers as a condition of the license itself — so a valid license from a real regulator is itself a partial confirmation that RNG testing sits somewhere behind the games, even before you find the specific certificate.
None of this is exotic detective work. It’s the same instinct as checking a license number against a regulator’s own registry instead of trusting a badge image: the badge is not the proof, the document behind it is.
Casinos in Our Portfolio With Documented RNG Audits
CryptoGames’ in-house games are provably fair and separately RNG-audited: iTech Labs certified statistical randomness via Marsaglia’s diehard tests, dated 24 June 2022, with the actual certificate document linked directly from CryptoGames’ own Fairness page.[4] Best for: players who want to see both a provably fair seed system and a named, dated third-party audit for the same games.
Gamdom’s in-house Originals run on provably fair SHA256 verification, but its much larger third-party slot library (8,000+ titles from 60+ providers) runs on RNGs audited by iTech Labs instead — the two systems cover different parts of the same site. Best for: players who want to know exactly which part of a large library is player-verifiable and which part rests on lab certification.
Fairspin has no provably fair system at all, on any game — checked directly, the phrase doesn’t appear on the site and no in-game verification tool exists. Fairness instead rests entirely on its published Fairness & RNG Testing Methods policy, describing standard third-party RNG certification and theoretical/simulated RTP testing. Best for: players who understand the difference and aren’t expecting a seed/hash verifier that isn’t there.
Casino Midas runs exclusively on RealTime Gaming’s software with no proprietary “Originals” range. Its own Fairness & RNG Testing Methods page names Gaming Laboratories International (GLI), citing A2LA accreditation report 2428.05. Best for: players comfortable relying entirely on named third-party RNG certification, with no in-house provably fair option to fall back on.
Same RealTime Gaming catalog and the same GLI audit (A2LA 2428.05) as Casino Midas — both casinos share an operator group and cite the identical accreditation report on their respective fairness pages. Best for: players who want the audit scope and accreditation number named explicitly, not just a generic “certified fair” claim.
Third RealTime Gaming casino in this portfolio citing the same GLI accreditation (A2LA 2428.05) on its own Fairness & RNG Testing Methods page, with no provably fair system on-site. Best for: players evaluating an RTG-based casino where the RNG audit is the only fairness mechanism available.
The Bottom Line
A provably fair badge and an RNG certification badge answer different questions, and neither one answers “will this casino pay me.” Provably fair proves math you can personally rerun. RNG certification proves a lab looked at the math once (and, per its own stated process, periodically afterward) and confirmed it’s statistically sound — you’re trusting the lab’s report instead of your own calculator.
Both are worth more than nothing. Neither is worth more than what it actually covers. Before you deposit anywhere on the strength of a fairness badge, find the actual certificate behind the logo, check its date, and check what game or engine it names — then check the operator’s license and payout track record separately, because none of this tells you whether they’ll actually let you cash out.
For the games that are provably fair, see our full breakdown of how the system works and which casinos implement it best.