Fliff

Is Fliff safe?

Fliff works as a sportsbook in all but name. You bet on spreads, totals and parlays, play casino-style games, and can cash out real money. It does this under sweepstakes rules rather than a state gambling licence, so it is open from age 18 and without the protections licensed sportsbooks must offer. Three state regulators and New York's Attorney General have ordered it out. We score Fliff 44/100, below Underdog at 46 and Novig at 47.

The App Store listing calls Fliff a "social sportsbook" and states that "there is no real-money gaming offered in this app". The sweepstakes rules tell a fuller story. Fliff Coins are for play only, but Fliff Cash, handed out free or as a bonus when you buy certain coin packs, can be played and then redeemed "for cash and prizes".

How the sweepstakes model works

Two currencies are the core of the design. You can always claim free Fliff Coins, and when your Fliff Cash balance is empty, claiming coins also gives you one free Fliff Cash. You can also request Fliff Cash by post. In practice most players buy coin packs, and the Fliff Cash that comes with them is what can turn into money. Fliff says no purchase is necessary.

To cash out, you need at least 50 eligible Fliff Cash, which Fliff values at $50, after meeting a "play-through" requirement shown in the app. Payouts are capped at $5,000 per period and can be limited to $1,000 a week. You can request one redemption every five days, and payment can take up to 30 days. Before any prize, you must pass identity checks with a photo ID, a face scan, proof of address and your Social Security number.

Which states have acted against Fliff?

On 6 June 2025 New York's Attorney General named Fliff and Sidepot, its sweepstakes casino, among 26 platforms sent cease-and-desist letters, and said all of them were ending the sale of sweepstakes coins in New York. Louisiana's Gaming Control Board, working with the state attorney general, sent cease-and-desist letters to offshore and sweepstakes operators on 17 June 2025, and Fliff, Inc. is on the board's own list of operators that received one. On 15 August 2025, Arizona's Department of Gaming ordered Fliff to block Arizona customers, calling it an unlicensed event-wagering sportsbook. According to Sweepsy, Fliff and the three other operators named were out of Arizona within a month.

On 4 February 2026 the Illinois Gaming Board wrote to Fliff in Austin that its sports games let Illinois users win cash and gift cards "in violation of Illinois law", and demanded that it block Illinois residents or stop offering prizes. The letter warns of civil or criminal penalties. Fliff's sweepstakes rules of 30 June 2026 exclude 20 states, including Arizona, Louisiana, California, Michigan and New York, but Illinois is not on that list. We found no fine against Fliff. Under our rules, repeated state orders without a fine put the regulatory record in the 30 to 49 band; four orders put Fliff close to Pulsz, which has the same number.

What data does Fliff collect?

The App Store label is short: your device ID is used to track you, and precise location, payment details, name, address, email and phone number are linked to you. The privacy policy, effective 2 April 2026, adds a good deal the label leaves out: driver's licence and other ID documents, Social Security numbers, and face-geometry data generated by Persona from your selfie. Fliff says Persona deletes the face data once identity checks are done, or within two years. Precise location must stay on to use the app at all.

Fliff shares data with ad networks and attribution services for interest-based advertising, and receives data back from them. The terms also contain a clause that waives any past claims about tracking pixels, cookies or similar code on its website.

Tools against gambling harm

Fliff runs an hourly session reminder that pauses play and shows what you have spent. Its other tools are weaker in practice than in principle. Purchase, play and time limits, cool-offs of 1, 7 or 30 days, and self-exclusion of 1, 3 or 5 years all need a message to customer support, and only take effect once Fliff confirms them. Once in place, limits cannot be loosened until the period ends and exclusions cannot be shortened, which is better than at Novig, where limits can be removed after 24 hours. Coin purchases on the website accept credit cards, and every purchase is final.

How to use Fliff more safely

1. If you live in a state with licensed sportsbooks, compare what a regulated operator such as DraftKings must offer, including a 21+ age limit in most states and state complaint channels.
2. Do not buy coin packs to chase Fliff Cash bonuses. Set a purchase limit through support before you start.
3. Pay with a debit card, never a credit card.
4. Choose "Ask App Not to Track" on iPhone and reset your advertising ID.
5. To stop, request a self-exclusion of at least a year by email and keep the confirmation.

How we scored it

Scams and harmful content (38) is the weakest factor: real-money betting and casino games from age 18, with harm tools that need an email. Regulatory record (42) reflects orders from New York, Louisiana, Arizona and Illinois without a fine. Privacy (40) and transparency and control (45) are pulled down by ID, Social Security and face-scan checks that the store label omits. Security (50) is the strongest, with log-in codes but no bug bounty.