KSA warns of fraud after forged lottery licence issued in the name of Quick Boys

The Dutch regulator revoked a lottery licence that was obtained by an unknown party using the identity of football club Quick Boys; multiple fraudulent websites were linked to the licence and the KSA has tightened ID and domain checks.

Verified facts

• The Kansspelautoriteit (KSA) revoked a lottery licence that had been issued in the name of football club Quick Boys (Katwijk).
• Quick Boys did not apply for the licence and is the victim of identity fraud; an unknown party impersonated the club chairman during the application.
• The fraudulent licence was used to set up multiple websites selling tickets: loterij.quickboys.nl, loterijenqb.com, besteloterijqb.com, nieuweqb.com, bestenl.com, topnetherlands.com, newloterij.com and topsloterij.com.
• KSA advises consumers not to enter personal data (name, address, email, phone, bank details) on these sites because the regulator does not know how those data will be used.
• KSA says this is part of a broader trend where fraudsters misuse the names and licences of legitimate associations running lawful lotteries.
• KSA director of licences Ella Seijsener confirmed the regulator is taking the incident seriously and has immediately tightened identity checks and checks on domain names that appear in the Kansspelwijzer.
• KSA has filed a police report and asks people who bought tickets to contact their bank to reverse payments, file a police report, report to the Fraudhelpdesk and report the incident via the KSA portal.

GEOs and markets

Netherlands (NL)

Brands and organisations

Kansspelautoriteit (KSA); Quick Boys football club; Kansspelwijzer; Fraudhelpdesk

Impact on media buyers

GameHub editorial analysis: This incident highlights impersonation and domain-spoofing risk affecting licensed-lottery supply chains in the Netherlands. Affiliates and media buyers running NL-targeted campaigns that reference charities, clubs or licensed lotteries must treat destination verification and identity proofing as critical compliance controls. Payment routing to foreign accounts and registration forms collecting PII represent immediate fraud and AML vulnerabilities for paid funnels aimed at Dutch consumers. The KSA tightening of identity and domain checks indicates likely increased enforcement scrutiny and faster delisting of misleading entries from the Kansspelwijzer, which may affect campaign destinations and affiliate partnerships referencing KSA licences or club-branded lotteries. Expect operators and marketplaces to require stronger proof of organisational consent and to adjust publisher onboarding checks.

GameHub comment

GameHub editorial analysis: What GameHub Partners media buyers must do (practical actions and rationale) Summary of the risk: the KSA case shows a fraudster successfully impersonated a club official, obtained a licence in the club’s name and then launched multiple ticket‑sale websites. The consequence for paid acquisition and affiliate flows is twofold: (1) destination impersonation — users thinking they are buying from a legitimate club get routed to a fraudulent site that can harvest PII and payments; (2) reputational and regulatory fallout — your campaign could be linked to a site the regulator has revoked, triggering takedowns, chargebacks and advertiser disputes. Immediate actions for media buyers and affiliate managers (prioritise within 72 hours): - Blocklist the listed domains and any close variations; add them to DSP/SSP and affiliate network suppression lists and to internal domain QA tooling. - Pause promotion of charity/club/lottery creatives that reference Dutch clubs or KSA licences until you confirm the destination is listed in the Kansspelwijzer and you have direct confirmation from the club (prefer written email from a named club contact matched to the club’s official domain). Searchable keywords: Kansspelwijzer, Quick Boys, KSA licence, fake loterij domains. - Validate destinations: check the destination’s merchant account country, bank routing details and payment beneficiary name. Avoid payments routed to foreign accounts for NL-targeted lotteries; escalate any anomalies to compliance. - Harden publisher onboarding: require operators/affiliate partners to provide a scanned licence number and a direct match in the Kansspelwijzer and to confirm a club’s authorisation by contacting the club through verified channels (phone or email listed on the club’s official site). Keep records of confirmations. - Update creatives and landing-page QA checks to detect domain spoofing (subdomain tricks, homograph characters, typosquats). Use WHOIS/registry checks and monitor new registrations that mimic known clubs. - PII handling: ensure any lead-gen flows collecting personal data are routed only to verified, licensed operators and that data processors meet GDPR and AML standards. Suspend data capture on suspicious destinations and inform client payments/finance teams to expect increased chargeback activity. Medium-term (policy and tooling): - Add automated monitoring for new domains that include club names or KSA licence references; schedule weekly Kansspelwijzer reconciliation against promoted destinations. - Contractually require affiliates to indemnify for misrepresentations of third-party licences and to provide proof of consent from named organisations. Regulatory expectation: KSA has said it tightened identity and domain checks and filed a police report — expect faster delisting and potential public warnings. Treat NL-targeted liaison with extra caution and document all due diligence for audit trails.

Editorial note: The “Verified facts” section reports the primary source. The impact and GameHub comment sections are editorial analysis, not claims made by the organiser.