Most operators lose more money to declined deposits than to any other line item on their books. That is the part nobody warns you about.
Online gambling payment processing looks simple from the outside. A player taps a card, money lands in a wallet, and the game starts. Behind that tap sits a chain of licensing checks, card network rules, fraud screens, and bank policies that can stop the transaction cold. When any link fails, the player leaves. Many never come back.
This guide walks through what actually matters when you shop for a payment partner in 2026. You will learn why banks treat gaming differently, which card network programs now govern your account, what to ask before you sign, and how to build a setup that holds up when volume grows.
Why Online Gambling Payment Processing Gets Treated Differently
Every gambling business that accepts cards gets a four-digit label called a Merchant Category Code, or MCC. It tells banks what you sell. Gambling operators receive MCC 7995, which covers betting, lottery tickets, casino gaming chips, off-track betting, wagers at racetracks, and games of chance.
Card networks add another layer. Visa launched the Visa Integrity Risk Program, or VIRP, on May 1, 2023, replacing the older Global Brand Protection Program. It sorts higher-risk merchants into three tiers, with Tier 1 carrying the strictest oversight. Gambling under MCC 7995 sits in Tier 1. Merchants in these categories must register through Visa’s high-integrity risk registration process, and acquirers must run their own approval steps.
None of this means you cannot get approved. It means the approval takes more work, more documentation, and a partner who has expertise to get you set up properly the first time.
The market keeps growing, and so does the scrutiny
Research firms size the global online gambling market differently depending on what they count. One 2026 estimate puts the market near $101 billion, while a broader measure of gross gaming revenue across digital formats reaches roughly $123 billion for the same year. In the United States, the American Gaming Association has been cited for figures above $20 billion in annual online gambling revenue.
Regulation has spread just as fast. By 2026, 38 states plus Washington, D.C., and Puerto Rico had legal sports betting frameworks in place. Online casino gaming moved slower, with eight states passing laws: New Jersey, Delaware, Pennsylvania, Michigan, Connecticut, West Virginia, Rhode Island, and Maine, though Maine had not launched its market.
More legal markets mean more legitimate operators competing for the same acquiring capacity. Banks pick carefully.
The Approval Rate Problem Nobody Talks About
Here is the number that decides your revenue: How many deposit attempts turn into deposits?
Gambling industry analysts who work with gaming operators report card decline rates in the range of 20 to 40 percent, against roughly 5 to 10 percent for standard online retail transactions. Treat those figures as vendor estimates rather than audited data, since they come from provider research instead of card network publications. Even at the low end, the gap is wide enough to reshape a P&L. Four things drive most of it:
| Cause of Decline | What It Looks Like | What Helps |
| Issuer policy blocks | Some banks refuse MCC 7995 outright, no matter the player or balance | Prepaid cards and vouchers |
| Cross-border routing | A European player’s card runs through a U.S. acquirer and gets flagged | Local acquiring banks in each majorjurisdiction you serve |
| Authentication friction | Extra verification steps push players to abandon checkout | 3D Secure rules and exemption handling, where allowed |
| Single-processor dependence | One account goes down and transactions stop entirely | Backup merchant accounts configured before you need them |
What to Look for in an Online Gambling Payment Processing Partner
Use this as your evaluation list. Score each item before you compare pricing, because a cheap account you cannot keep costs more than a fair one you can.
Licensing knowledge that matches your footprint
Ask which jurisdictions the partner has placed accounts in. A partner who has worked with your license type already knows what underwriting will ask for, and that shortens approval time to just a few days.
If you plan to expand, ask about the markets you want next, not just the one you are in.
Honest underwriting from the start
You’ll need the following to fast track the approval process:
- Your gaming license and the jurisdictions it covers
- Processing statements, showing your chargeback and refund ratios
- Bank Statements
- Age verification policies
- Ownership documents and beneficial owner details
- Your AML program summary
- Driver’s license or government ID for each 25% owner Redundancy built in from day one
Every gaming account carries closure risk. Accounts get closed or terminated when ratios climb too high, or a bank changes its appetite. Operators who wait until that happens spend weeks offline losing potentially millions in revenue.
Ask directly: how many gaming merchant accounts can you set up for me, and how can we properly mitigate the risk of being terminated by an acquiring bank?
Payment methods your players actually use
Cards matter, but they are not the whole picture. Look for support across:
| Method | Deposit speed | Approval behavior | Best for | Watch out for |
| Debit cards | Funds show in the player wallet in seconds | Stronger than credit in gaming. Debit runs as a standard purchase, so it trips fewer gambling blocks | Core deposit method in most regulated markets | Local debit schemes differ by country, so test each market |
| Credit cards | Seconds when approved | Weakest of the card options. Issuers block the category by policy, and some treat gaming deposits as cash advances | Markets and jurisdictions where still permitted | Banned or restricted in a growing list of places, see below |
| E-wallets | Near instant both ways | Strong. The wallet sits between the player and the bank, so the transaction avoids some issuer-level category blocks | Players whose banks block gaming, and faster payouts | Regulator rules on wallet funding sources, see the UK note below |
| Mobile wallets and in-app payments | Instant | Strong, and checkout friction drops because the payment credential is already stored on the device | Mobile-first traffic, which is where most gaming volume now sits | Same underlying card rails, so an issuer block still applies |
| Bank transfers and open banking | Minutes to instant on real-time rails | Strong, since the payment bypasses card network category rules | Larger deposits, and markets with mature instant payment rails | Slower on legacy rails, and coverage varies by country |
| Prepaid cards and vouchers | Instant | Strong, because funds are already loaded | Players who want to cap spending and keep bank details off the platform | Not anonymous. Operator KYC still applies, and load limits can frustrate higher-value players |
KYC and age verification that runs at scale
KYC stands for know your customer. It means confirming a player is who they claim to be and old enough to play. AML stands for anti-money laundering, the set of controls that keeps illicit funds out of the system.
You need identity document capture, automated screening against sanctions and politically exposed person lists, ongoing monitoring, and clean audit trails. Manual review works at 500 signups a month. It breaks at 50,000.
Geolocation that matches regulator expectations
Your platform has to know where a player sits when they place a bet, not where they registered. Regulators in licensed U.S. markets treat this as a core control. Ask how the partner’s tools integrate with your geolocation vendor and what happens to a transaction that fails the check.
Dispute tools that work before the chargeback lands
More on this below, because the rules changed.
Fraud screening built for gaming patterns
Generic retail fraud models flag the wrong things in gaming. A player who deposits six times in an hour might be a bonus abuser or might be a regular on a good night. Look for risk scoring you can tune, velocity rules, device fingerprinting, and a review queue your team can operate.
Fraud costs money twice. It costs the disputed amount, and it pushes ratios toward network thresholds that put the whole account at risk.
Security that meets the current PCI standard
PCI DSS is the card industry’s data security standard. Version 4.0.1 is the active version, and the 51 future-dated requirements from version 4.0 became mandatory on March 31, 2025. Two of them matter most for online checkout: Requirement 6.4.3 covers authorizing, inventorying, and integrity-checking every script on a payment page, and Requirement 11.6.1 requires tamper detection that alerts you when payment page content or HTTP headers change.
Those rules exist because attackers inject skimming code into checkout pages. Ask your partner how they support both requirements and which validation path applies to your setup.
Reserves, settlement, and reporting you understand
If required by the acquiring bank and/or processor, the rolling reserves normally range between 5 to 10 percent of the processing volume and are usually 180 days. Your actual terms depend on your history, your jurisdiction, your volume, and the bank.
Three things to negotiate that operators often forget to ask about:
- A cap. Without one, the reserve balance grows with your volume indefinitely.
- A review date. Many acquirers will reduce reserve terms after a stretch of clean processing. Get the review scheduled in the agreement rather than hoping for it.
- Release mechanics in writing. Know exactly when funds come back and what can delay them.
A reserve does not reduce your revenue, but it does reduce your cash flow, it’s important to plan accordingly. Ask to see a sample settlement report before you sign, and check whether it reconciles cleanly against your platform data.
Chargebacks and the Visa Rules That Changed the Math
Gaming has always run higher dispute rates than retail. Players lose, then dispute. In 2025, Visa rebuilt how it measures that.
The Visa Acquirer Monitoring Program, known as VAMP, replaced the separate Visa Dispute Monitoring Program and Visa Fraud Monitoring Program effective April 1, 2025. VAMP folds disputes, fraud chargebacks, and non-fraud chargebacks into one number. Here is what applies now:
| Metric | Threshold | Who It Applies To |
| Merchant VAMP ratio, excessive | 2.2 percent from June 2025, dropping to 1.5 percent in North America and the EU from April 2026 | Merchants |
| Acquirer VAMP ratio, above standard | 0.5 to 0.7 percent | Acquirers |
| Acquirer VAMP ratio, excessive | Above 0.7 percent | Acquirers |
| Enrollment floor | 1,500 or more applicable transactions | Merchants and acquirers |
| Enumeration ratio | 20 percent, aimed at automated card testing attacks | Merchants |
The acquirer thresholds change how you get treated. An acquirer has to hold its whole portfolio under those limits, which means it has to balance higher-risk merchants against large numbers of low-risk ones, and some merchants no longer make the cut.
Read that again, because it is the single most important shift in high-risk acquiring right now. Your ratio can sit inside the merchant limit, and your account can still come under pressure if your acquirer’s book is stressed.
Practical steps that lower your exposure:
- Turn on pre-dispute alerts. These notify you of a dispute before it becomes a chargeback so that you can refund and close it out.
- Use Rapid Dispute Resolution. RDR applies rules you set to resolve qualifying disputes automatically.
- Fix your billing descriptor. Many disputes start when a player does not recognize the name on a statement. Make it obvious.
- Improve deposit confirmations. Clear receipts and in-app transaction history cut confusion and disputes.
- Track ratios weekly, not monthly. By the time a monthly report shows a problem, you have already carried it for weeks.
- Ask your partner for acquirer-level visibility. You cannot manage what you cannot see.
A Step-by-Step Framework for Choosing Your Setup
Step 1: Map your markets. List every jurisdiction where you take deposits. Note the license covering each one.
Step 2: Set an approval rate target per market. Then measure against it. Without a baseline, you cannot tell a good route from a bad one.
Step 3: Shortlist partners with real gaming placements. Ask for the number of gaming accounts they currently support and how long the average one has stayed open.
Step 4: Run underwriting on two partners at once. Redundancy starts here, not after a problem.
Step 5: Test payouts before launch. Push real withdrawals through every method you plan to offer.
Step 6: Build your monitoring stack. Approval rate by issuer and market, dispute ratio, fraud ratio, and payout time. Review weekly.
Step 7: Schedule a quarterly review with your partner. Rules change. Your setup should change with them.
Red Flags to Walk Away From
- A partner who promises approval before seeing your documents
- No clear answer about which acquiring bank holds the account
- No plan for a second merchant account
- Vague or missing reserve terms
- No named contact after the account goes live
- Reluctance to discuss VAMP or VIRP requirements
That last one tells you the most. A partner who cannot explain the card network programs governing your account is not going to help you stay inside them.
How AllayPay Approaches Online Gambling Payment Processing
We work with gaming, lottery, sweepstakes, and other high-risk industries, and we also partner with agents and ISOs who need placement for merchants their current relationships do not support.
What that looks like in practice:
- Underwriting guidance before you submitMultiple acquiring relationships for redundancy
- Multiple payment gateway choices that support MID routing and cascading
- Chargeback management and pre-dispute alert integration
- Support that stays with you after the account goes live
Ready to talk through your setup? Contact us today to review your current processing, your approval rates by market, and what a redundant structure would look like for your platform.
Frequently Asked Questions About Online Gambling Payment Processing
What is online gambling payment processing?
Online gambling payment processing is the system that moves money between players and a gaming platform. It covers deposits, withdrawals, identity checks, fraud screening, and the compliance controls regulators and card networks require. Because gaming carries a high-risk classification, this processing runs through specialist acquiring banks rather than standard payment providers.
Why is online gambling considered high risk by payment processors?
Three reasons stack up. Gaming carries elevated chargeback rates because players dispute losses. Regulation varies by jurisdiction, which raises the chance a merchant operates outside its permitted scope. And card networks classify the category accordingly. Visa places gambling under MCC 7995 in Tier 1 of its Integrity Risk Program, the highest tier.
Can online gambling operators accept credit cards?
Yes, in most licensed markets, though restrictions apply in some jurisdictions and some issuers block the category by policy. Many issuing banks decline MCC 7995 transactions based on their own risk rules regardless of whether the platform is licensed. Operators typically combine cards with instant bank transfers, wallets, and local payment methods to cover the gap.
What is MCC 7995?
MCC 7995 is the merchant category code for betting, lottery tickets, casino gaming chips, off-track betting, wagers at racetracks, and games of chance. It attaches to every card transaction your platform sends and signals to the issuing bank that the payment is gambling-related.
What chargeback rate is acceptable for an online gambling merchant account?
Under Visa’s VAMP program, merchants above a 2.2 percent ratio were classed as excessive from June 2025, and that threshold drops to 1.5 percent in North America and the EU from April 2026. Most acquiring banks in gaming want operators running well below the network limit, because the acquirer’s own portfolio ratio is also under review.
How long does it take to get a gambling merchant account approved?
Timelines depend on how complete your file is and which jurisdictions you serve. A prepared applicant with a valid license, clean processing history, and documented AML and responsible gaming policies moves faster than one who submits in pieces. Ask your partner for a realistic range based on your specific profile rather than a general promise.
Do I need more than one merchant account?
Most established operators run several. Redundancy protects you if one account gets closed or terminated, and it lets you route transactions by geography. Local acquiring in each major market usually lifts approval rates compared to sending everything through a single cross-border route.
What are the AML and KYC requirements for online gambling payment processing?
At a minimum, you need identity verification at signup, age verification, screening against sanctions and politically exposed person lists, ongoing transaction monitoring, and a process for reporting suspicious activity to the right authority. Specific obligations vary by jurisdiction, so confirm requirements with counsel licensed in each market you serve.
Is cryptocurrency a viable payment method for online gambling?
Some operators offer it, and some jurisdictions permit it. Card networks treat crypto as its own risk category with its own rules, and gaming regulators differ widely on whether they allow it. Check your license conditions before you add it, and expect additional AML obligations if you do.
What is VIRP and does it apply to my gambling platform?
VIRP is the Visa Integrity Risk Program, launched May 1, 2023, which sorts higher-risk merchants into three tiers. Card-not-present gambling under MCC 7995 falls into Tier 1. Merchants in high-integrity risk categories must be registered, and acquirers must complete their own approval process. If you accept payments for real-money gaming, it applies to you.
What PCI DSS requirements apply to online gambling sites in 2026?
PCI DSS version 4.0.1 is the active version, and all 51 future-dated requirements became mandatory on March 31, 2025. Requirement 6.4.3 covers authorizing and integrity-checking payment page scripts, and Requirement 11.6.1 requires tamper detection on payment pages and HTTP headers. Which validation path applies depends on how your checkout is built.
How do I improve deposit approval rates on my gaming platform?
Start by measuring approval rate by market and by issuer, so you know where the losses sit. Then add local acquiring in your largest markets, configure cascading so a declined attempt retries through a second route, tune your authentication rules to reduce unnecessary friction, and offer alternatives to cards for players whose banks block the category.
Are credit cards banned for online gambling in the UK?
Yes. The Gambling Commission banned credit card gambling on April 14th, 2020 through license condition 6.1.2 of the LCCP, which prohibits operators from accepting credit card payments for gambling. The ban also covers credit card payments made through a money service business, so operators must confirm that money arriving from an e-wallet was not loaded from a credit card. Several U.S. states have introduced similar restrictions, and some operators have removed credit card deposits on their own.
Do debit cards work better than credit cards for gambling deposits?
In most markets, yes. Debit transactions run as standard purchases, so they trip fewer issuer-level gambling blocks. Credit card gaming deposits draw extra scrutiny, and some banks code them as cash advances, which adds fees for the player and gives the issuer another reason to decline. Operators that shift their method mix toward debit, e-wallets, and bank transfers usually see approval rates improve.
What is a rolling reserve on a gambling merchant account?
A rolling reserve is a share of your settlement that the acquiring bank holds back to cover future disputes. Published industry guidance commonly describes reserves in the 5 to 10 percent range with holding periods around 90 to 180 days, though terms vary by provider, jurisdiction, and processing history. Negotiate a cap, a scheduled review date, and written release mechanics rather than accepting open-ended terms.
How do I handle deposit spikes during major sporting events?
Size your payment stack for peak, not average. Confirm the throughput your gateway supports, make sure routing failover triggers automatically rather than manually, and load-test ahead of your biggest event. Watch for issuer velocity rules, which can lower approval rates during a burst of transactions, and keep KYC and payout checks automated so manual queues do not back up when volume climbs.
