JLBET Phishing Link Red Flags and What to Do After a Tap

A phishing link is a web address built to look like a login page you trust, so that you type your password into someone else’s form. If one has reached you, your move is simple: stop, do not type, and open the lobby from your own bookmark. For the wider picture of what a PAGCOR logo on a casino banner proves and what it cannot, see the PAGCOR logo and what it proves.

How a phishing link copies a casino login page

The lobby’s login box has four things you see: Account, Password, a Check Code and a Login button, with a Join Us link. A copycat page rebuilds those four in minutes, using screenshots and the same colours.

Here is the usual order of a copy attack.

1. A message arrives with a link and a reason to hurry.
2. The link opens a page that looks like the login box.
3. You type your Account and Password, and the page passes both to the sender.
4. The sender logs in to the real lobby and tries to change what they can, including a withdrawal.

The lobby says two different passwords guard your account, one for login and one for withdrawal. That is why a phished login password alone is not the end, and why you change both afterwards.

Red flags that give a phishing link away

Run through the list before you open anything. One flag is enough reason to stay out.

The lobby’s own ticker lists the backup domains: jlbet19.com, jlbet2.com, jlbet20.com, jlbet21.com, jlbet22.com and jlbet222.com. Anything else that claims to be the lobby deserves the full address routine in the website safety check steps for a casino address.

Smishing Philippines: phishing by SMS

Smishing is phishing by text message. In the Philippines it often borrows the name of a bank, an e-wallet or a casino, and carries a short link that hides the real address.

A text that names JLBET will ask you to confirm an account, collect a prize or verify a withdrawal. Treat every one the same way.

1. Do not tap the short link.
2. Do not reply, even to say stop.
3. Open your bookmark and look inside the lobby for the same news.
4. Forward the text to nobody; screenshot it instead, as evidence.

What to do after tapping a phishing link

Speed matters more than anything else here. Work through this list in order.

1. Close the page. If you typed nothing, you are done once you have opened the lobby from a bookmark.
2. If you typed a password, open the real lobby and change your login password.
3. Change your withdrawal password too, since the lobby uses a separate one on every withdrawal.
4. Tell the Online Service chat, which the lobby says is open 24 hours a day, 7 days a week.
5. Tell your bank or GCash if you entered anything about a card, an account or a wallet.
6. Read your transaction records for anything you did not make. The lobby says it keeps them viewable for 30 days.

Tell your bank or GCash early

If a bank account or a GCash wallet is tied to your lobby account, the account holder at that institution should hear about it from you first. Say what you typed, where, and at what time. Keep any reference number they give you.

1. Note what you typed and on which page.
2. Note the time, to the minute if you can.
3. Ask for a reference number and write it down.

Open the bank’s own app or the Help Center of GCash from the address you already trust. Do not use a number or link found in the suspicious message.

Report it

A report helps because it leaves a record of the address and the time. The agency to read about is the Philippine National Police’s cybercrime unit, covered in reporting to the PNP Anti-Cybercrime Group.

Before you report, save the message, the address, the time and any screenshots. You will need them in one place.

1. Screenshot the message and the sender’s number.
2. Copy the full address into a note.
3. Write the time you tapped and what you typed.

Keep your next login clean

Make the bookmark your only door. Save jlbet.net, and one backup from the ticker’s list, in the browser you use every day. Then you never need a search result, a text or a chat link to log in.

1. Save jlbet.net as a bookmark.
2. Save one backup domain, such as jlbet21.com, beside it.
3. Log in only from those two.