Cosmos Mirrors in India: Blocking, Phishing and Why a New Address Changes Nothing

"Cosmos mirror", "working link" and "new domain" are among the most searched phrases around blocked gambling brands in India. This page explains what a mirror is, how blocking works, and why reaching a site through another address does not change the law. Since 1 May 2026, the Promotion and Regulation of Online Gaming Act 2025 prohibits online money games in India and applies to services operated from abroad but accessible here. We do not publish mirror addresses. For the wider context, see the India home page.

What a mirror actually is

A mirror is a second domain that shows the same site as the main one: same lobby, same login, same account. Brands set them up when the main address is hard to reach, whether because of blocking, network problems or a domain dispute. Technically, nothing about the service changes; only the address in the browser bar does. That is why "mirror" is an accurate word — and why a mirror cannot make anything lawful that is unlawful on the main domain.

How blocking works in India

Under the 2025 Act, blocking of online money game services is handled by MeitY, while investigations sit with state and union territory cyber cells. A blocking order targets a specific address, so a service can reappear on a fresh domain within days, and promoters circulate the new address in chats and comment sections. The Act was written with that in mind: it applies to services run from outside India that Indian users can reach, regardless of the domain used. Using a VPN or a different app source only changes the route, not the activity. Constitutional challenges to the Act are pending before the Supreme Court, and it remains in force meanwhile.

Phishing copies hide among mirror lists

Wherever genuine alternative addresses circulate, fake ones follow. A phishing copy is a page made to look like the real site on a domain that differs in a small way: a swapped letter, an extra hyphen, a word such as "login" or "official" added to the name, or a different ending after the dot. It exists to collect what you type — phone number, password, one-time codes, identity documents, card details. Because people expect blocked brands to move around, they are less suspicious of an unfamiliar address, which is exactly what makes mirror lists a convenient hiding place.

Signs that a page is not genuine

Any one of these is reason enough to close the tab. Our page on app files explains why an install request is especially risky.

If you entered details on a copy

Start with the email account linked to anything you used there, because whoever controls the inbox can reset other passwords. Change that password first, then every site where you reused it, and turn on extra login protection where it is offered. If you entered card or bank details, call your bank using the number printed on your card and ask it to block what is needed. If you uploaded identity documents, keep screenshots of the page and its address. Report the fraud to your state or union territory cyber cell. Ignore anyone who then contacts you offering to "recover" your data or money for a fee; that is a common follow-up scam.

What this means for an old account

If you hold a Cosmos account from before May 2026, the safest path is to log in only through an address you saved yourself, remove any stored payment details, and ask the operator's support in writing to close the account. Our support guide explains how to write that request and how to recognise fake support contacts. The terms of use of this site explain what we can and cannot do for you.

Questions about mirrors

What is a Cosmos mirror?
An alternative domain that serves the same site as the main address. Brands publish mirrors when the main domain is hard to reach, for example because it is blocked.
Does using a mirror make money play lawful in India?
No. A mirror only changes the route to the same service. Online money games are prohibited in India since 1 May 2026 under the Promotion and Regulation of Online Gaming Act 2025, whatever address or VPN is used.
How can I tell a phishing copy from the real site?
Copies often differ by one letter, a hyphen or an added word, arrive through unsolicited links, and ask for passwords together with one-time codes or for banking details. A bookmark you saved yourself is safer than any link in a list.
I entered my password on a page I now think was fake. What now?
Change that password and every other place you used it, starting with your email. If you entered card or bank details, call your bank on the number printed on your card, and report fraud to your state or UT cyber cell.

Related guides: Cosmos overview for India · responsible gambling · home. If you keep searching for new links and want to stop, Tele MANAS answers free and 24/7 at 14416.

Visit the website