MalwareTips: fake crypto casino rivowex.com asks for deposit to unlock withdrawals
MalwareTips says rivowex.com, registered on 2 November 2026, is a fake crypto casino that demands a deposit to unlock withdrawals. It says the site uses the same kit as civopex.com, gydrawin.com, ladopex.com and mezawin.com.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips published an investigation on 3 November 2026 describing Rivowex.com as a fake crypto casino. It says the site poses as a decentralised, âprovably fairâ crypto gaming platform with a polished lobby, games such as Crash, Plinko, Mines and slots, an oversized promo-code bonus at signup and endlessly scrolling ârecent winsâ and âwithdrawalsâ feeds. According to MalwareTips, Rivowex.com was registered on 2 November 2026, less than a day before it published.
How the scam works
MalwareTips says Rivowex.com is built from the same site kit as civopex.com, gydrawin.com, ladopex.com and mezawin.com, which it has already exposed as scams. The report describes how the funnel works. A promo code or a screenshot of a large payout reaches people through short videos, social media posts or Discord and Telegram groups. An account is opened in seconds without identity checks and a bonus of often $2,000 to $10,000 gives a playable balance. Early rounds of Crash, Plinko, Mines, dice or slots run smoothly and winnings grow.
The first withdrawal then meets a wall, according to MalwareTips. The messages include âWithdrawals are locked until verification is completeâ and âMinimum deposit required to withdrawâ. The site or its support chat asks for a fresh crypto deposit, often $100 to $500, and each payment is followed by another demand, such as a higher verification tier or a tax on winnings. Support, the report says, may tell users to try again later or that they chose the wrong network, and stops replying once users refuse to pay more.
MalwareTips lists red flags it associates with the kit, including a payment to free your own balance, a bonus with no stated wagering terms, feeds that repeat the same names and amounts, no traceable operator or licence, and crypto-only payments. It offers a two-minute test of asking to withdraw $10 of the bonus before depositing anything. The report says not to deposit and not to pay a fee to unlock a withdrawal. These are MalwareTips' findings and have not been verified by scammers.com.
Source
MalwareTips, âRivowex.com Exposed: Casino or Deposit Trap? How It Worksâ, 3 November 2026. Not independently verified by scammers.com.
Red flags
- A crypto casino with a polished lobby and âprovably fairâ claims, and no traceable operator or licence, according to MalwareTips.
- A promo code that gives a large bonus balance with no stated wagering terms.
- A first withdrawal blocked by a âverificationâ, âminimum depositâ or ânetwork feeâ demand.
- Feeds of wins and withdrawals that MalwareTips says repeat the same names and amounts.
- A domain registered on 2 November 2026 on the same kit as other flagged casino sites.
If you were targeted
- 1Do not deposit into rivowex.com or pay any fee to unlock a withdrawal.
- 2Never connect a crypto wallet or approve a transaction for a casino you found through an ad or chat group.
- 3Check celebrity endorsements on the person's official accounts, not on the casino's page.
- 4If you already deposited, stop paying, keep screenshots and chat logs, and tell your exchange or wallet provider.
- 5Report the site to your national fraud reporting service.