How gambling payments work: who does what in the payment chain
A deposit to a regulated gambling site passes through several firms, each with its own job and its own regulator. Knowing who does what explains where a payment can fail, who holds the money at each moment and whose rules apply.
- Coverage
- General explainer; rules cited for Great Britain, Ontario and the EU
- Sources checked
- 24 October 2026
- Next review
- 24 April 2027
Key points
- The operator runs the cashier but, for card payments, relies on an acquirer to take the payment into the card system.
- The issuer, the player's bank, approves or declines a card payment and guarantees payment to the acquirer under the scheme's rules.
- Visa classes gambling (MCC 7995) as a high integrity risk category: acquirers and merchants must be registered before transactions are sent.
- In Great Britain, operators may only take payments through regulated payment services (licence condition 5.1.2).
The main roles
| Role | What it does | Who regulates it (examples) |
|---|---|---|
| Operator and its cashier | Runs the deposit and withdrawal pages, applies limits and verification, holds player balances. | The gambling regulator: Gambling Commission, AGCO, state commissions. |
| Payment service provider (PSP) or gateway | Connects the cashier to many payment methods, routes transactions, often handles risk screening. | Payment regulator where it provides a regulated payment service, for example the FCA. |
| Acquirer | Takes card transactions from the merchant into the card scheme and pays the merchant. | Banking or payment regulator, plus card scheme rules. |
| Card scheme | Visa, Mastercard and others set the rules and run the network between acquirers and issuers. | Scheme rules; competition and payment regulators. |
| Issuer | The player's bank or card provider. Approves or declines, and bills the player. | Banking regulator. |
| Open banking provider | Payment initiation: starts a bank transfer from the player's account with their consent. | Payment regulator (a payment initiation service provider under PSD2 or the UK Regulations). |
| E-wallet or e-money issuer | Holds a stored balance the player can pay from. | E-money regulation, for example the FCA under the Electronic Money Regulations 2011. |
The European Central Bank's payments glossary describes the acquirer as the entity, usually a credit institution, to which the merchant transmits the information needed to process a card payment, and the issuer as the institution that authorises transactions and guarantees payment to the acquirer for transactions that follow the scheme's rules.
A card deposit, step by step
When a player deposits by debit card, the cashier sends the request to the PSP or acquirer, which passes it through the card scheme to the issuer. The issuer approves or declines in seconds. Money moves later, through clearing and settlement. Our guide to authorisation and settlement explains why an approved deposit is not yet money in the operator's bank.
How card schemes treat gambling
Card schemes identify gambling transactions with a merchant category code. Visa's Integrity Risk Program document (April 2023) lists gambling, MCC 7995, among its Tier 1 high integrity risk categories. It says acquirers must be registered before soliciting such merchants and that "All High Integrity Risk Merchants must be registered with Visa prior to submitting transactions." Mastercard's Security Rules and Procedures (August 2026) identify non-face-to-face gambling transactions with MCC 7995 and include a registration section for non-face-to-face gambling merchants.
Correct coding matters because issuers can then apply their own policies, such as declining gambling transactions on credit cards where the law or the cardholder requires it. Visa's acceptance risk standards, published in its Ecosystem Risk Programs Guide (October 2024), require acquirers to assign the merchant category code that most accurately describes the business.
Other payment rails
- Open banking (pay by bank). A payment initiation service starts a bank transfer at the player's request. PSD2 defines it as "a service to initiate a payment order at the request of the payment service user with respect to a payment account held at another payment service provider". In the UK, open banking followed the Competition and Markets Authority's 2016 retail banking investigation and its 2017 order, implemented by Open Banking Limited.
- E-wallets. The player loads a wallet and pays from it. In Great Britain, operators should accept e-wallet payments only where the wallet provider can assure them that a credit card cannot be used to fund gambling.
- Payouts to cards. Visa Direct sends funds to eligible debit and prepaid cards through original credit transactions; Visa's product sheet for gaming payouts notes that actual fund availability varies by financial institution and region.
Who holds the money, and when
Once a deposit settles, the operator holds the player's balance. In Great Britain, licence condition 4.1.1 requires remote operators that hold customer funds to keep them "in a separate client bank account or accounts", and condition 4.2.1 requires operators to tell customers how well those funds are protected on insolvency. Before settlement, money may sit with the acquirer or a payment firm, whose own safeguarding duties apply. In the UK those duties fall under the Payment Services Regulations 2017 and, since 7 May 2026, the FCA's CASS 15 rules.
Where the gambling rules bite
Gambling regulators shape the payment chain through the operator. British licensees may take payments only through payment services defined in the Payment Services Regulations (licence condition 5.1.2) and may not accept credit cards (condition 6.1.2). Ontario's AGCO requires deposits to be authorised by a financial services provider and bars cryptocurrency deposits. Our payment rules by market lists each jurisdiction's requirements.
Questions about gambling payment infrastructure
What is the difference between a PSP and an acquirer?
An acquirer takes card transactions into the card scheme and pays the merchant. A PSP or gateway connects the operator to many payment methods and may or may not be the acquirer itself; some PSPs hold acquiring licences, others route to partner acquirers.
What merchant category code is used for online gambling?
MCC 7995 (gambling transactions) is the code Visa's Integrity Risk Program and Mastercard's security rules refer to. Mastercard has also used US-specific codes, such as MCC 7801 for internet gambling.
Sources
- ECB, Glossary of terms related to payment, clearing and settlement systems (2008)
- Visa, Integrity Risk Program (April 2023) and Ecosystem Risk Programs Guide (October 2024), linked above
- Mastercard, Security Rules and Procedures, Merchant Edition (4 August 2026), linked above
- Gambling Commission, LCCP conditions 4.1.1, 4.2.1, 5.1.2 and 6.1.2
- All sources checked 24 October 2026.