Hijacked Expired Domains in Netherlands and Europe Spread Illegal Gambling Content, Bypassing KSA Enforcement
TL;DR — BNR warns that hijacked expired domains are spreading illegal gambling content via once-trusted websites, potentially totaling 8,000 across Europe. These evade ready detection and fall outside KSA authority since they are not dedicated gambling sites. Dutch officials are now seeking Google’s help to address the enforcement gap.
SCCG Take — The KSA’s limited remit over non-gambling domains highlights a structural enforcement weakness that licensed operators must monitor as regulators seek technical partnerships to regain control.
The BNR radio station in the Netherlands has raised the alarm over expired domains being seized and repurposed to deliver illegal gambling offers. Once-trusted websites now direct users toward unlicensed operators, exploiting their established credibility with search engines.
As reported by GamblingNews, organizations including hackers take over these abandoned domains. The sites then promote gambling content that leads consumers to operators not licensed in the target jurisdictions. A Curaçao-licensed site, for example, may be pushed to Dutch customers in violation of local law.
Scale of Hijacked Authority Websites
BNR estimates there may be 1,000 legitimate Dutch and European websites affected. The true figure could be underestimated by a factor of eight, meaning 8,000 or more such domains may be propagating illegal gambling content across the European Union. These include former news sites, blogs, and hobby pages that retain high search value long after their original owners depart.
The trusted status of these domains creates added difficulty in policing. Search engines do not immediately flag the shift to gambling material, allowing the content to reach audiences without rapid intervention.
Regulatory Limits and Dutch Response
The Dutch Gaming Regulator (KSA) has called the practice a serious problem. The KSA can act against dedicated illegal gambling sites, but these hijacked domains lie outside its remit because they are not primarily gambling platforms. This leaves open questions on authority, such as how to take down a lapsed broadcaster website now pushing unlicensed offers.
Dutch lawmakers have taken note and are seeking assistance from Google to close the current loophole. The step reflects the immediate enforcement gap created when domain ownership changes hands undetected.
Reporting: GamblingNews
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Expired domains are the new black market storefront — trusted, invisible to regulators, and a compliance nightmare for licensed operators.
We're tracking this closely because it exposes a blind spot in European enforcement that licensed operators will pay for through reputational bleed and uneven playing fields. When 8,000 hijacked domains can bypass the KSA because they're not 'gambling sites,' compliance becomes a technical arms race — and operators need partners who understand both the regulatory and digital terrain.
- Up to 8,000 expired European domains may be pushing illegal gambling via trusted, established web properties
- KSA lacks authority over hijacked non-gambling domains, creating enforcement gap Dutch officials now escalate to Google
- Licensed operators face unfair competition from undetectable black market channels with inherited search credibility
SCCG angle: SCCG helps operators and regulators map these digital enforcement gaps through our network of compliance technology partners and government relations contacts across every regulated European market. We connect the dots between policy, enforcement capability, and the technical solutions needed to level the field.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →