James H.

One-Liner: Suspect site which doesn't follow data protection laws and harvests user IDs.

General summary: Start-up site which went public from June 2021. Staff are based in Venezuela, but claim to operate from California. The Terms of Service also identifies headquarters as a residential address in Amsterdam. None of these locations have a published phone number.

Duelcash not comply with EU GDPR law, which they are legally bound to as they're requesting and handling EU citizens' data and identity documents. Currency is also offering in EU and GBP which shows intent to offer services to these regions.

When asked about EU GDPR, they stated "We comply with all the laws".

After playing on the site since it became public (June) and making a few small withdrawals, I was blocked, apparently for "Fraud", with a note to contact "fraud[at]duelcash.com". The e-mail address doesn't exist and bounces back. The same happens to "admin[at]duelcash.com" which is mentioned in the TOS/Privacy policy. The only valid recipient is support[at]duelcash.com which they don't respond on.

Overall, very shady business practices which is likely a cover to harvest ID documents.

Full Story:

I used the site daily and was doing well, winning some prizes and was able to make a few withdrawals via Paypal. Things seemed promising, however they asked for some ID to verify identity (A valid request under 'Know-Your-Customer' rules). I complied and passed validation. After one more withdrawal, I was asked again for ID, along with a picture of my face and a utility bill. I was hesitant about this and provided the ID aspect with watermarks to protect the document integrity.

The next day when I tried to log in, a message popped up - "User blocked for fraud. Please contact fraud[at]duelcash.com for more information". Naturally, I e-mailed this and was surprised to receive a bounceback. I checked the TOS/Privacy Policy and found another two addresses - admin[at]duelcash.com and support[at]duelcash.com - I e-mailed both of these and got a bounceback for admin.

A little digging into the mail configuration for the domain shows they have no SPF/DKIM or DMARC for
The duelcash.com domain, so no intent on ever mailing out. It seems like a scam where they go silent after blocking a user. They don't even respond on the 'Contact' form at the bottom of the homepage.

The site has a facebook page, that nobody responds to messages on.
I tried contacting the site owner, via publicly accessible information to no avail.

I spoke with a few of the other people who left reviews and it seems this is their typical tactic.

1. Steal players from other sites by claiming affiliation and a 'bonus' when signing up to Duelcash.
2. Pay a few small withdrawals to inspire legitimacy.
3. Request enough ID documentation to steal identity.
4. Once obtained, block the user and go silent, hoping they give up and vanish, while they still have the ID documents.

When the site was new, the founder tried posting some fake positive reviews on Trustpilot, however these were quickly moderated and taken down. It seems they're up to the same old tricks again with the recent surge of 'positive' reviews.