utPay – Enabling Offshore Casino Money Laundering Through Deceptive “Crypto Purchase” Schemes

Charlene Lensburg
Thu, 09 Oct 2025 07:38:23 +0000
Crypto Payment Processor Watch, Illegal gambling, Illegal Payment Services, ticker, Aleksandr Tšhailo, Andrius Atkocaitis, Edgar Fukalov, Kingdom Casino, Quicko, UTORG, UTORG LABS HOLDING, utPay, Utrg

The UtPay scheme represents a paradigmatic case of how seemingly legitimate, EU-regulated financial service providers can be weaponized to facilitate systematic violations of gambling laws, consumer protection standards, and financial crime prevention measures. This analysis serves as a reference case

Executive Summary

Case Study: Kingdom Casino & UtPay Compliance Circumvention Analysis

This report analyzes a sophisticated money laundering and regulatory evasion scheme operated by Utrg UAB d/b/a utPay (utpay.io), a Lithuanian-regulated crypto payment processor, in partnership with Kingdom Casino (kingdomcasino.io), an offshore casino. Through FinTelegram’s direct investigation, we have documented how UtPay systematically enables illegal gambling operations by disguising casino deposits as “cryptocurrency purchases” via stealth domains, thereby circumventing anti-money laundering controls, consumer protection regulations, and payment network restrictions across multiple jurisdictions.

The scheme represents a paradigmatic case of how seemingly legitimate, EU-regulated financial service providers can be weaponized to facilitate systematic violations of gambling laws, consumer protection standards, and financial crime prevention measures. This analysis serves as a reference case for understanding sophisticated payment processing methodologies employed throughout the high-risk offshore gambling sector.

Introduction: The UtPay Deception Model

utPay, operating as UAB “Utrg” under Lithuanian cryptocurrency service provider licensing, markets itself as providing “full compliance” and “worldwide coverage” for legitimate Web3 companies. However, FinTelegram’s investigation reveals systematic facilitation of illegal gambling operations through deliberately deceptive payment flows designed to:

1. Circumvent gambling-specific payment restrictions imposed by card networks and banking regulations

2. Eliminate consumer protection mechanisms, including chargeback rights and dispute resolution procedures

3. Obscure transaction traceability for anti-money laundering and regulatory enforcement purposes

4. Enable operations in prohibited jurisdictions without direct regulatory oversight

This model exploits the regulatory arbitrage between cryptocurrency licensing (governed by Lithuanian authorities) and gambling regulation (absent for offshore operators), creating a compliance gap that facilitates large-scale financial crime.

Case Study: Kingdom Casino Payment Flow Analysis

Discovery and Investigation Methodology

During FinTelegram’s compliance review of Kingdom Casino (kingdomcasino.io), an unlicensed offshore gambling operator, our investigators documented the complete payment processing flow for EUR deposits via RAPID transfer offered by Skrill. The investigation revealed a multi-layered deception scheme involving:

Primary casino domain: kingdomcasino.io (unlicensed offshore operation)

Stealth payment domains: greenpayway.com and pay2prom.com (no corporate disclosure)

Final processing domain: app.utpay.io (utPay‘s payment interface)

Legal entity: Utrg UAB (Lithuanian-registered crypto service provider)

Deceptive Payment Flow Documentation

Step 1: Player Initiation

Player selects EUR deposit via RAPID on Kingdom Casino

System displays standard casino deposit interface with no cryptocurrency disclosure

Step 2: Domain Redirection Through Stealth Gateways

Player redirected to greenpayway.com (domain with zero corporate transparency)

Secondary redirection to pay2prom.com (equally opaque stealth domain)

Final redirection to app.utpay.io (UtPay’s actual payment processing interface)

Step 3: Undisclosed Cryptocurrency Conversion

1. UtPay interface presents payment form with pre-checked consent box

2. Consent text: “I agree to buy crypto and send it to the specified address”

3. CRITICAL DECEPTION: Player believes they are making casino deposit, not purchasing cryptocurrency

4. No clear disclosure that transaction will be processed as cryptocurrency purchase rather than gambling deposit

Step 4: Legal Classification Manipulation

Transaction processed as “cryptocurrency purchase” under Lithuanian regulation

Funds legally classified as crypto commerce, not gambling deposit

Consumer protection mechanisms eliminated through legal reclassification

Step 5: Crypto Transfer to Casino

Purchased cryptocurrency automatically transferred to Kingdom Casino’s wallet

Player account credited with “casino balance” equivalent to crypto purchase amount

Payment processor relationship with gambling operation obscured through crypto transfer mechanism

Regulatory Evasion Mechanisms

Banking Restriction Circumvention:

The scheme enables Kingdom Casino to accept traditional banking payments (RAPID, credit cards, e-wallets) despite lacking gambling licenses that would permit direct banking relationships. By processing payments as “cryptocurrency purchases,” UtPay provides access to regulated payment methods that would otherwise be prohibited for unlicensed gambling operations.

Consumer Protection Elimination:

Players lose fundamental consumer protection rights through legal reclassification:

Chargeback Rights: Credit card chargebacks unavailable for “cryptocurrency purchases”

Banking Dispute Resolution: Banks cannot reverse “legitimate” crypto transactions

Regulatory Recourse: No gambling-specific consumer protection mechanisms apply

Refund Rights: Standard gambling refund protections circumvented through crypto purchase classification

AML Control Bypassing:

The multi-layer structure systematically defeats anti-money laundering controls:

Source Identification: Payment appears as legitimate crypto purchase, not gambling deposit

Transaction Monitoring: AML systems cannot identify gambling-related transaction patterns

Regulatory Reporting: Suspicious transaction reports triggered by different criteria for crypto commerce versus gambling

Audit Trail Obscuration: Complex multi-domain structure complicates transaction tracing

UtPay Corporate Structure and Regulatory Status

Lithuanian Registration and Licensing

Primary Entity:

Legal Name: UAB “Utrg”

Registration Code: 306062887

VAT Number: LT100016489119

Address: Kareivių g. 19-149, LT-09133 Vilnius, Lithuania

Manager: Andrius Atkočaitis

Founded: April 12, 2022

Regulatory Authorization:
UtPay operates under Lithuanian cryptocurrency service provider licensing, authorized for:

Virtual currency exchange against fiat currency

Virtual currency wallet services

Virtual currency exchange against virtual currency

Depository virtual currency wallet operations

Compliance Certifications:

PCI DSS Level 2 certification for payment processing security

Partnership with Quicko Sp. z o.o. (Poland) for debit card services

Integration with MasterCard SecureCode and Visa Secure authentication systems

Financial Performance and Scale

Operational Metrics (2023):

Revenue: €442,228

Net Profit: €32,680

Employees: 8 insured individuals

Average Salary: €1,987.12 (June 2025)

Despite relatively modest reported revenues for 2023, UtPay‘s facilitation of high-volume offshore gambling transactions suggests significant unreported or misclassified business activity.

Corporate Network and Partnerships

Related Entities:

UTORG LABS HOLDING LTD: Abu Dhabi-registered entity providing non-custodial wallet services

Quicko Sp. z o.o.: Polish partnership for European debit card services

Key Personnel: Edgar Fukalov (identified as key figure)

Systemic Regulatory Violations

Lithuanian Cryptocurrency Regulation Violations

AML/KYC Compliance Failures:
While UtPay claims “full compliance” with Lithuanian regulations, facilitating disguised gambling deposits violates fundamental anti-money laundering principles:

Customer Due Diligence: Processing gambling-related transactions without proper risk assessment

Transaction Monitoring: Failure to identify and report suspicious gambling-related transaction patterns

Beneficial Ownership: Obscuring the true nature of cryptocurrency purchases for gambling purposes

Record Keeping: Inadequate documentation of cryptocurrency end-use and beneficial ownership

Service Provider Authorization Violations:
UtPay’s cryptocurrency service provider license authorizes legitimate crypto commerce, not facilitation of illegal gambling operations. Using legitimate licensing to enable prohibited activities violates Lithuanian regulatory requirements.

EU-Wide Payment Service Violations

Payment Services Directive (PSD2) Violations:

Transparency Requirements: Concealing the true nature of payment transactions from consumers

Consumer Rights: Eliminating dispute resolution and refund mechanisms through transaction misrepresentation

Risk Management: Failing to implement appropriate risk controls for high-risk gambling payments

Anti-Money Laundering Directive Violations:

Enhanced Due Diligence: Inadequate scrutiny of high-risk gambling-related cryptocurrency transactions

Suspicious Transaction Reporting: Failure to identify and report patterns consistent with money laundering through gambling operations

Record Keeping: Insufficient documentation of transaction purposes and beneficial ownership

Gambling Regulation Violations

Unlicensed Gambling Facilitation:
UtPay systematically enables unlicensed gambling operations across multiple jurisdictions where such activities are prohibited:

European Union: Facilitating gambling deposits for operations lacking national licensing

United Kingdom: Processing payments for unlicensed operators prohibited under UKGC regulations

Additional Jurisdictions: Enabling deposits for casinos operating illegally across global markets

Consumer Protection Circumvention:
The scheme deliberately circumvents gambling-specific consumer protections including:

Deposit limits and cooling-off periods

Self-exclusion enforcement mechanisms

Responsible gambling interventions

Problem gambling identification and support systems

Network Analysis: UtPay’s Offshore Casino Ecosystem

Documented UtPay Integration Partners

FinTelegram’s investigation has identified UtPay payment processing integration across multiple offshore gambling operations beyond Kingdom Casino:

Confirmed Integration Partners:
Based on technical analysis and transaction flow documentation, UtPay provides payment processing services to numerous offshore gambling operators employing identical deceptive methodologies.

Common Operational Patterns:

Curaçao or Anjouan gambling licensing (minimal regulatory oversight)

Operations in prohibited jurisdictions without local authorization

Use of stealth domains to obscure payment processor relationships

Identical “crypto purchase” deception schemes to eliminate consumer protections

Targeting of European, UK, and regulated markets without proper licensing

Scale Assessment:
Given UtPay’s reported revenue figures and the high-volume nature of offshore gambling transactions, the company likely processes millions of euros in disguised gambling deposits annually across its casino partner network.

Stealth Domain Infrastructure Analysis

greenpayway.com and pay2prom.com:
These domains serve exclusively as payment gateway redirects with zero corporate transparency:

No Corporate Information: No company registration, ownership disclosure, or contact information

No Public Website: Domains exist solely for payment processing redirects

No Consumer Recourse: Players cannot identify or contact the actual payment processor

Regulatory Evasion: Structure designed to obscure payment processing relationships from regulators and consumers

This infrastructure represents a sophisticated compliance evasion mechanism enabling offshore casinos to obscure their payment processing relationships while maintaining access to regulated payment methods.

UtPay Crypto Payment Scheme – Complete Entity Mapping
Category | Details
Primary Casino Operator | Kingdom Casino (kingdomcasino.io) – Unlicensed offshore gambling operation

Stealth Payment Domains

– greenpayway.com (no corporate disclosure)
– pay2prom.com (no corporate disclosure)
Purpose: Obscure payment processor identity from players and regulators

Crypto Payment Processor

UtPay
– Website: utpay.io
– Payment Interface: app.utpay.io
– Terms: utpay.io/terms-of-use
– FAQ/KYC Policy: utpay.io/faq

Legal Entities

UAB “Utrg” (Lithuania)
Utorg OÜ (Estonia)

Key Personnel

Andrius Atkočaitis – Registered Manager
Edgar Fukalov – Key operational figure, associated with UTORG network
Aleksandr Tšhailo, UBO of Utorg OÜ in Estonia

Regulatory Status

Lithuanian Cryptocurrency Service Provider License

Related Corporate Network

UTORG LABS HOLDING LTD (Abu Dhabi),
Quicko Sp. z o.o. (Poland) – European debit card services
UTORG (utorg.pro) – Related crypto service provider

Deception Mechanism

– Pre-checked consent: “I agree to buy crypto and send it to specified address”
– Hidden conversion: EUR deposit becomes crypto purchase
– Consumer protection elimination: No chargeback/refund rights for “crypto purchase”
– AML evasion: Gambling deposit disguised as legitimate crypto commerce

Regulatory Violations

– Lithuanian AML/KYC compliance failures
– EU Payment Services Directive (PSD2) violations
– Unlicensed gambling facilitation across multiple jurisdictions
– Consumer protection circumvention
– FATF anti-money laundering standard violations

Risk Assessment

EXTREMELY HIGH
– Systematic money laundering facilitation
– Consumer protection elimination
– Regulatory evasion across multiple jurisdictions
– No consumer recourse mechanisms

Investigation Status

FinTelegram Active Investigation
– Part of Crypto Payment Processor Watch series
– Evidence documented from Kingdom Casino review
– Screenshots obtained of deceptive payment flow
– Whistleblower intelligence sought via Whistle42

This sophisticated scheme exploits the regulatory gap between Lithuanian cryptocurrency licensing and gambling regulation, using Skrill+RAPID as the final payment method while disguising EUR casino deposits as “cryptocurrency purchases” to eliminate consumer protections and enable money laundering for offshore gambling operations.

Consumer Harm and Financial Crime Risks

Systematic Consumer Protection Elimination

Chargeback and Dispute Resolution Denial:
The “crypto purchase” deception eliminates fundamental consumer protection mechanisms:

Credit Card Chargebacks: Banks refuse chargebacks for “legitimate” cryptocurrency purchases

Banking Dispute Resolution: Standard banking dispute procedures inapplicable to crypto commerce

Regulatory Complaints: No gambling-specific complaint mechanisms available for “crypto purchases”

Legal Recourse: Civil litigation complicated by transaction mischaracterization

Vulnerable Player Exploitation:
The scheme systematically exploits gambling addiction vulnerabilities:

Self-Exclusion Circumvention: Gambling blocks defeated through “crypto purchase” processing

Deposit Limit Evasion: Banking-based gambling controls bypassed through crypto conversion

Addiction Intervention Prevention: Payment patterns hidden from gambling addiction support systems

Money Laundering Facilitation

Layering and Integration Services:
UtPay’s model provides sophisticated money laundering capabilities:

Stage 1 – Placement:

Illicit funds deposited as “legitimate” cryptocurrency purchases

Transaction appears as standard crypto commerce in banking records

Source identification obscured through legal classification manipulation

Stage 2 – Layering:

Funds converted through multiple cryptocurrency transitions

Complex multi-domain payment flows obscure transaction tracing

Gambling activity provides legitimate-appearing fund mixing mechanism

Stage 3 – Integration:

“Winnings” withdrawn as apparently legitimate gambling proceeds

Clean cryptocurrency or fiat withdrawals complete money laundering cycle

Regulatory oversight defeated through transaction mischaracterization

Criminal Organization Applications:
The scheme enables systematic money laundering for organized crime, terrorism financing, tax evasion, and corruption proceeds through offshore gambling operations.

International Regulatory Implications

Lithuanian Regulatory Failures

Insufficient Oversight:
Lithuania’s cryptocurrency regulation framework lacks adequate controls for preventing gambling-related abuse:

Limited Transaction Monitoring: No specific controls for identifying gambling-related cryptocurrency transactions

Inadequate Due Diligence: Customer due diligence standards insufficient for high-risk gambling applications

Enforcement Gaps: Regulatory enforcement mechanisms inadequate for complex international schemes

Cross-Border Coordination: Limited coordination with gambling regulators in destination markets

Regulatory Arbitrage Exploitation:
UtPay exploits regulatory gaps between cryptocurrency oversight (Lithuanian authorities) and gambling regulation (absent for offshore operators) to facilitate systematic law violations.

European Union Regulatory Challenges

Cross-Border Enforcement Difficulties:
The scheme exposes systematic weaknesses in EU cross-border financial crime enforcement:

Jurisdictional Complexity: Multiple EU member states lack coordination for complex cross-border schemes

Regulatory Specialization: Cryptocurrency regulators lack gambling industry expertise and vice versa

Enforcement Resources: Limited resources for investigating sophisticated multi-jurisdictional schemes

Legal Framework Gaps: Existing regulations inadequate for hybrid crypto-gambling operations

Payment Network Vulnerability:
The scheme demonstrates how legitimate EU payment infrastructure can be weaponized for financial crime through regulatory arbitrage.

Global Anti-Money Laundering Implications

FATF Standards Violations:
UtPay’s operations violate multiple Financial Action Task Force recommendations:

Recommendation 1: Risk assessment failures for gambling-related cryptocurrency services

Recommendation 8: Non-profit organization abuse through gambling charity schemes

Recommendation 15: Virtual asset service provider compliance failures

Recommendation 28: Beneficial ownership transparency violations

International Cooperation Requirements:
The case demonstrates urgent need for enhanced international cooperation between cryptocurrency regulators and gambling authorities to prevent similar schemes.

Comparative Analysis: Industry Context

Offshore Gambling Payment Processing Evolution

Historical Context:
The UtPay model represents evolution in offshore gambling payment processing methodologies:

Generation 1 (2000-2010): Direct credit card processing through high-risk merchants
Generation 2 (2010-2020): Third-party payment processors and e-wallet systems
Generation 3 (2020-Present): Cryptocurrency conversion schemes and regulatory arbitrage

Sophistication Advancement:
Current schemes demonstrate significantly increased sophistication in regulatory evasion, consumer deception, and law enforcement avoidance compared to historical methods.

Payment Processor Compliance Standards

Legitimate Industry Standards:
Regulated payment processors implement comprehensive compliance controls:

Transaction Monitoring: Real-time identification of gambling-related transactions

Merchant Due Diligence: Extensive vetting of gambling merchant licensing and regulatory status

Consumer Protection: Maintenance of chargeback, dispute resolution, and refund mechanisms

Regulatory Cooperation: Active coordination with gambling regulators and law enforcement

UtPay Comparative Failures:
UtPay’s operations systematically violate industry best practices and regulatory requirements, demonstrating deliberate compliance evasion rather than oversight failures.

Conclusion and Industry Impact

Systemic Risk Assessment

The UtPay-Kingdom Casino scheme represents a significant evolution in offshore gambling regulatory evasion, demonstrating how legitimate EU financial infrastructure can be systematically weaponized for large-scale financial crime. The sophistication of the deception mechanism, combined with the regulatory arbitrage exploitation, poses fundamental challenges to consumer protection, anti-money laundering enforcement, and gambling regulation effectiveness.

Critical Risk Factors:

1. Consumer Protection Elimination: Systematic removal of fundamental consumer protection mechanisms through transaction mischaracterization

2. Money Laundering Facilitation: Sophisticated money laundering capabilities through crypto conversion schemes

3. Regulatory Evasion: Successful circumvention of gambling regulations through cryptocurrency licensing arbitrage

4. International Scope: Cross-border operations defeating national regulatory enforcement mechanisms

Call for Information

FinTelegram urgently seeks additional intelligence from industry insiders, current and former employees, affected consumers, and regulatory personnel regarding:

Share Information via Whistle42

This report is part of FinTelegram’s Crypto Payment Processor Watch series, investigating the role of cryptocurrency service providers in facilitating offshore gambling operations and financial crime. For previous reports and ongoing investigations, visit FinTelegram.com.