On 15 October 2026, iGaming Business published Richard Mulligan’s look inside RedCore, a group that spent more than ten years in a high-volume, heavily regulated corner of the digital economy and then turned its internal tools into products other companies can buy. The report is the fullest public account so far of machinery the company had already described to Focus Gaming News on 6 July. For a player, the useful part is narrow. It is what happens to a deposit, a coin transfer or a login code when one outside company in that chain fails.
A deposit is a chain, not a button
RedCore tells both newsrooms the same story. Behind one payment are card issuers, crypto processors, identity services and exchange rates, and each has its own idea of what a status means. Focus Gaming News, passing on the company’s account, uses a plain example: one card issuer may run a payment through ten statuses, another through three. Most teams pick a single provider and build the product around it. RedCore says it refused that shortcut, because the resilience of the system is decided there.
The payment tools sit on three engines. Card Engine talks to any card issuer through one interface. Crypto Engine handles cryptocurrency transfers, risk scoring and exchange. Balance Engine keeps the internal record of balances and movements. A new provider is one connection layer. The rules of the product do not have to be rewritten. If a provider drops out, RedCore says the traffic is sent on without a loss of funds or of time, and the player still sees a single screen. A site-reliability specialist watches the outside links as a dedicated job. The company told Focus Gaming News that an incident is usually cleared before the player opens a support chat. That is the standard RedCore sets for itself. Cheetah Bonus has not timed it.
Those engines are already reused across more than three products inside the group, the July piece says. The same goes for the anti-money-laundering work, the way failures are absorbed, and who is allowed to touch the system. The player is not meant to see which provider actually moved the money.
Why a coin transfer gets held
Every transaction entering or leaving is risk-scored as it happens. Incoming cryptocurrency is given a score. If the history points at sanctioned addresses, a fraud scheme or other suspicious activity, the transfer is blocked or set aside until the transaction and the documents have been reviewed. An outside provider does that screening. RedCore says an internal anti-money-laundering function, with its own compliance specialist, sits next to it. The reason they give is that taking in money of unclear origin can cost more than refusing it.
A hold is not a vanished balance, and it is not an instant credit. The score follows the wallet. A Bitcoin transfer is the obvious case, and the same logic applies to the other coins an operator accepts. Rooms that take those deposits are listed under crypto casinos.
Fraud scoring that starts from innocence
The fraud product in this stack is Frogo. iGaming Business says it starts from a presumption that the user is innocent, rather than from a rule that blocks first and asks later. Behaviour is scored live at each step. The triggers are supposed to change when a new attack appears, without a rise in false blocks. Device Fingerprint reads signals from a computer or a phone. A scoring engine applies policies an operator can set by market. A graph view draws links between accounts, devices and cards, so multi-accounting and fraud rings are meant to show up as one cluster.
True anti-fraud isn’t about blindly blocking users or chasing artificial metrics. It’s about protecting your bottom line.
Volodymyr Todurov, chief executive of Frogo, to iGaming Business
The first half is what a player feels. A blunt block saves the operator a review and costs the player the session. Frogo’s claim is that the decision is made in the moment and that ordinary play is left alone. That claim is the company’s. This desk has not sent a deposit through the tool.
The missing login code
A one-time code is another outside dependency. If the only message vendor fails, or if the route is blocked in a country, the code never arrives and the account looks closed. CommsHub, RedCore’s messaging product, puts SMS, messengers and flash calls in one system and spreads them across more than one sender. If a route fails, the message goes another way. Numbers are verified as they are sent.
The ideology behind CommsHub is to make the complexity of communication infrastructure invisible to businesses.
Viktoriia Yefimenko, chief product officer of CommsHub, to iGaming Business
A campaign can leave the web screen immediately. Connecting it through a full API takes up to 10 days. That deadline belongs to the operator doing the installation, not to the player waiting on a text.
Traffic tools are not a safety system
The same iGaming Business piece spends as much time on advertising as on payments. PIN-UP Partners, the affiliate programme inside the group, uses its own model to judge whether a traffic test is worth scaling. It is also preparing dynamic postbacks for web campaigns, which RedCore ties to Facebook handing more of the targeting to its own automation. The events sent back after a signup are what that automation trains on. mr.Booster, the group’s marketing agency, tries to bring non-depositing visitors back through a platform it calls Retarg, and it watches branded search with a tool called BrandDuck. BrandDuck is limited to exclusive partners for now. Wider access is planned for the second quarter of 2027.
None of that guards a balance. It is how the group buys traffic and tries to stop someone else bidding on its names. A player who never asked to be followed still meets it as a repeated ad. It should not be read as part of the payment engines or of Frogo.
What a player can take from it
If a deposit stalls, RedCore’s own description splits the causes. A dead provider is supposed to be rerouted, with the funds intact. A crypto transfer with a bad history is supposed to be blocked or held for documents. A login code that never comes can be a blocked message route rather than a closed account. A second account on the same device is the pattern the graph is built to see.
A reroute is also not a fast payout. One claim is about the withdrawal clock. The other is about the payment still existing when a supplier goes down. Only the second is what these engines are for, and only in the form RedCore, iGaming Business and Focus Gaming News have described.
Published: 15. October 2026
Anything incorrect or missing?
