It was a Tuesday evening in Bangalore, the sort where the traffic on Outer Ring Road finally clears and you settle onto the balcony with a cup of cutting chai. The IPL match between Royal Challengers Bangalore and Mumbai Indians was due to start in twenty minutes. I opened WhatsApp and saw a forward from a mate in Koramangala — a link claiming to be the FairPlay official site with a special match bonus. Something about the URL felt off. The domain had an extra hyphen and the spelling looked like someone typed it after three Old Monks. That moment made me realise how easy it is to land on a lookalike site when you are in a hurry.
Why Typo Domains and Forwarded Links Are Everywhere
Scammers register domains that differ by a single character — fairplayy.com, fair-play.in, fairplay-betting.net — because they know Indian users often click links shared on WhatsApp, Telegram or SMS without checking the address bar. These sites copy the colour scheme, the logo and even the login form. Once you enter your credentials, they have your username and password. Some go further and ask for a UPI PIN or an OTP, claiming it is needed to verify your account. The real FairPlay platform never asks for your UPI PIN. Any page that does is a trap.
Forwarded links are the other common vector. A well-meaning friend in Delhi or Chennai sends a message that says "official link" but the URL has been shortened through a redirect service. By the time the page loads, you are on a clone hosted on a completely different server. The redirect can also inject tracking parameters that harvest your device ID and location. I have seen this happen during big tournaments like the Asia Cup or the Pro Kabaddi League playoffs when traffic spikes and people are less careful.
The Thirty-Second Check Routine
You do not need technical skills. You need a habit that takes half a minute. First, open the link in a browser — not inside the WhatsApp or Telegram in-app viewer. Look at the address bar. The genuine FairPlay domain uses HTTPS and the exact spelling fairplay with no extra subdomains like login.fairplay.security.xyz. If you see anything before fairplay other than https:// or www., close the tab.
Second, check the padlock icon. Click it and confirm the certificate is issued to the correct organisation. A self-signed certificate or one issued to a generic hosting provider is a red flag. Third, scroll to the footer. The real site displays links to the FairPlay homepage, the FairPlay login screen, the FairPlay registration page and the FairPlay contact us section. Clone sites often miss one of these or point them to dead ends.
Fourth, try the language toggle. The authentic platform supports Hindi, English and several regional languages. A fake site usually only has English or machine-translated text that reads awkwardly. Fifth, if you have the FairPlay app installed, open it and compare the odds for a live cricket market — say the toss winner market for an IPL game. The numbers should match within a few ticks. A large discrepancy means you are looking at a fabricated feed.
What to Do If You Land on a Fake
Close the tab immediately. Do not enter any detail, not even a test username. Clear your browser cache for that domain if you accidentally typed something. If you already submitted credentials, go to the real FairPlay login page from a known bookmark and change your password. Enable two-factor authentication if you have not already. Contact FairPlay customer support through the verified channel on the genuine site — never use a support number or email found on the suspicious page.
Report the fake domain. Forward the link to FairPlay support and to the Indian Computer Emergency Response Team (CERT-In) via their incident reporting portal. If the link came via WhatsApp, use the in-app report feature. The more reports, the faster the domain gets taken down. I reported a clone last month that used a .co.in domain with a misspelled brand name; it was blocked within forty-eight hours.
Bookmark the Right Links Once and Forget the Forwards
The simplest defence is to stop relying on forwarded links altogether. Open the real FairPlay site once, verify it using the steps above, then bookmark it. Add the bookmark to your browser toolbar on your phone and desktop. When you want to place a bet on the Ranji Trophy or check the live casino tables, tap the bookmark. No WhatsApp search, no Telegram channel, no SMS shortcut.
If you prefer the app, download it only from the official FairPlay website or the official app store listing linked from that site. Avoid APK files shared in groups. The app includes certificate pinning, which makes man-in-the-middle attacks much harder. Keep the app updated; each release patches security issues and refreshes the domain allow-list.
Share the bookmark with your betting circle. When a mate in Pune or Hyderabad asks for the link, send them your saved bookmark instead of searching again. It builds a habit of verification across your network. The thirty-second check becomes a group norm rather than an individual chore.
Quick Reference Card
- Open links in a full browser, not in-app viewers
- Check spelling: fairplay with no extra characters
- Confirm HTTPS and valid certificate
- Verify footer links to login, registration, contact
- Test language toggle and live odds match
- Bookmark the verified domain and use only that
- Download the app only from the official site
- Report suspicious domains to support and CERT-In
The next time a forward lands in your WhatsApp group during a Chennai Super Kings chase, you will not panic. You will open your bookmark, place your bet, and sip your chai. The match is stressful enough without worrying whether your money is going to the right place.
More on how we approach numbers is on about FairPlay, and the tools for setting your own limits are on responsible gaming.