ZKasino UAE Arrest: Extradition Remains Publicly Unconfirmed

The Dutch notice covering the July 3, 2025 arrest identifies the detainee as a 21-year-old Norwegian man wanted over alleged large-scale fraud involving ZKasino. It says the Netherlands would submit a formal extradition request, but the page available as of August 13, 2026 does not record a completed transfer, criminal trial or judgment.
The arrest itself remains verified, while two stronger claims in early coverage do not: Dutch authorities have not publicly named the detainee as Ildar Ilham or identified him as the founder of WhiteRock Finance. The most accurate current description is therefore an unnamed suspect in an unresolved cross-border investigation, not a convicted architect of the scheme.
What Dutch authorities allege
The investigation concerns ZKasino, which presented itself as a gambling platform and blockchain casino. Investors were told that cryptocurrency deposits would be returned within 30 days, but the promised repayment did not occur.
Dutch investigators cite communications between suspects and the configuration of the associated smart contract as evidence that the funds were never intended to be returned. They characterize the suspected method as a rug pull, but that remains a prosecution allegation rather than a fact established at trial.
The UAE detention followed an Interpol Red Notice issued for the Norwegian suspect on March 6, 2025. The arrest brought him within an established extradition framework: treaties on extradition and mutual legal assistance between the Netherlands and the UAE have been in force since August 1, 2023.
Those treaties provide a legal route for surrender, not an automatic outcome. An extradition request may produce further proceedings in the requested country, and an eventual transfer would determine where the suspect can be prosecuted; neither step would by itself establish guilt.
What the $30 million figure actually measures
The FIOD case record published May 3, 2024 states that victims worldwide had invested more than $30 million in cryptocurrency through ZKasino; it also documents the separate April 29, 2024 arrest of a 26-year-old man in the Netherlands and the seizure of assets valued above €11.4 million.
The investment estimate and the seizure valuation describe different parts of the case. The first is the amount victims placed through the platform, while the second covers property brought under official control, including real estate, a luxury car and cryptocurrencies.
It is therefore inaccurate to treat the headline investment figure as a court-assessed loss attributed to the man detained in the UAE. Authorities have not published a judgment assigning that entire amount to one suspect, and the existence of a seizure does not establish ownership or criminal responsibility.
Nor does securing assets mean that investors have already been repaid. Investigators must trace ownership, preserve admissible evidence and determine which property may be forfeited or returned; the eventual recoverable value can differ from an initial seizure estimate.
The identity and WhiteRock claims require qualification
The official Dutch arrest notice gives the suspect’s age and nationality but not his name. It consequently does not substantiate the widely repeated identification of the detainee as Ildar Ilham, the online user “Prometheus,” or WhiteRock Finance’s founder.
A January 5, 2026 Stavanger Aftenblad investigation linked a 21-year-old Stavanger man to the “20xBull” account, described him as involved with WhiteRock from its early stage and found a transaction connection between wallets associated with ZKasino and WhiteRock. The newspaper also noted that the owner of the destination wallet was unknown and that WhiteRock disputed the implication that the project itself was fraudulent.
That reporting adds evidence of an association, but it does not convert the “founder” label into an official finding or prove who controlled the connected wallets. A financial link between project wallets can support further investigation without establishing that one person owned both projects or directed every transaction.
The same caution applies to the “Prometheus” identity. Norwegian reporting has connected the Stavanger man to that account, yet the public Dutch document does not make the identification, and no cited court ruling has tested it. Naming a person as the detained suspect without that qualification would overstate the available record.
Extradition remains the decisive unresolved step
The public case status stops at arrest and an intended Dutch extradition request. No case-specific official notice identified by August 13, 2026 places the Norwegian suspect in Dutch custody or supplies a transfer date, formal charging decision, trial schedule or verdict.
This absence matters because “will request extradition” and “was extradited” describe different procedural stages. Reports published immediately after the arrest sometimes collapsed those stages, presenting a planned transfer as though it had already occurred.
The case nevertheless moved beyond online accusations: Dutch financial investigators opened a criminal inquiry, arrested another suspect, secured assets and obtained an international notice that preceded the UAE detention. What remains unknown is whether the second suspect has been surrendered, what charges may ultimately be brought against him and how much seized property could be returned to affected investors.
Until authorities publish one of those developments, the defensible account is narrower than the original headline circulating online. A Norwegian ZKasino suspect was arrested in the UAE, while his identity, alleged WhiteRock role, extradition status and criminal liability remain unresolved in the public official record.
Also read:
Subscribe to our newsletter
Get the latest Web3, AI, and crypto news delivered straight to your inbox.