Yup, this has been going on since the very early days of online casinos. A buddy of mine get screwed out of a few thousand playing one of those Caribbean poker sites because the Caribbean “bank” which handles the deposits didn’t participate in the US banking system, and he’d checked a box which certified that he was a citizen of St Lucia or something. Whoops.