🛡️ Ten signs a mystery box site can be trusted (and five it cannot)

The difference between a legitimate platform and a bad one is rarely visible in the design. Both look polished. The difference shows up in what you can check independently. Here is the checklist.

Ten green flags

1. 1Every prize has a visible value and a visible drop chance before payment.
2. 2There is a provably fair verifier that actually runs, not just an explainer page.
3. 3The server seed hash is shown before play and revealed after rotation.
4. 4You can change your own client seed.
5. 5Withdrawal states, review times and limits are written in the terms.
6. 6Physical prizes have a stated sell-back value equal to their listed value.
7. 7Completed payouts come with an on-chain transaction hash.
8. 8Terms and privacy policy name a real operating entity and jurisdiction.
9. 9Support answers a specific question with a specific answer.
10. 10Responsible-play tools — deposit limits, cooling off — exist and work.

Five red flags

• Odds are described as 'fair' but never published as numbers.
• Withdrawals require a fresh deposit, a fee, or an unexplained 'verification payment'.
• Bonus terms include wagering requirements buried outside the bonus page.
• Terms change without a version history and without notice.
• Countdown timers and pop-ups pressure you to deposit immediately.

Why verifiability beats reputation

Reputation is a lagging indicator — it only tells you what happened before something changed. Verifiability is a live property: a seed hash you saved yourself, odds you can recompute, a hash you can look up on a chain nobody controls. Those checks work regardless of who owns the site this month.

Run the checklist on us too. The odds are on every box, the verifier is public, the terms name the operating entity, and every payout produces a hash. That is what the list is for.