Short answer: In 2026 a working iGaming payment stack has three layers: card acquiring under MCC 7995 through a specialist high-risk acquirer (or several, with cascading), local account-to-account and e-wallet rails for the markets where cards decline, and a crypto layer that has to be built jurisdiction-by-jurisdiction now that MiCA's transition period has ended and Curaçao has issued crypto-specific rules. You need a gambling licence before anyone serious will onboard you, expect blended card fees of 3–7% with a rolling reserve, and plan for card decline rates of 12–40% depending on market and set-up. If you'd rather have someone route you to the right acquirers and crypto PSPs for your licence and markets, tell us about your operation here and we'll come back within one working day.
I place casino, sportsbook and crypto-first operators with acquirers and PSPs through UniqPay, and I'm currently taking a casino operator through underwriting, so this is written from live experience rather than a vendor brochure.
What "high risk" means for gambling specifically
Real-money gambling carries merchant category code 7995 (US-regulated operators are usually assigned 7801, which issuers treat more kindly). Every card transaction carries that code, and the issuing bank sees it before approving. Both Visa and Mastercard run dedicated integrity programmes for it, and Stripe, Square, PayPal and every mainstream payment facilitator decline it automatically regardless of licence.
The concrete reasons acquirers charge more: elevated chargebacks (friendly fraud, where a player disputes a legitimate deposit, is 60–70% of iGaming disputes), fraud exposure on card-not-present deposits, and cross-border regulatory complexity. One thing to be very clear about: registering under a non-gambling MCC to improve approval rates is transaction laundering. Visa and Mastercard warned about it explicitly in 2025–26, and the outcome is termination, fines in the tens to hundreds of thousands, and MATCH listing. There is no legitimate way round 7995 if you process gambling transactions, and any provider offering one is offering you a time bomb.
Licence first, payments second (but plan them together)
No serious acquirer, PSP or settlement bank will onboard an unlicensed gambling operation. Malta (MGA) is the gold standard and opens the widest range of acquirers; UKGC, Gibraltar, Isle of Man and Kahnawake are all recognised; Curaçao under the reformed LOK regime works but narrows options and gets you higher pricing; Anjouan is accepted by a smaller set of PSPs still. What underwriters look for beyond the licence itself: a live, fully functional site (not "coming soon"), visible responsible-gambling tools (self-exclusion, deposit limits, reality checks), published terms, privacy and refund policies, KYC and AML procedures, and a payment agent entity in a jurisdiction acquirers recognise, which in practice is very often Cyprus for European structures.
The mistake I see most is treating "we have a licence" and "we can accept deposits" as the same milestone. They're months apart if you sequence them badly. The right approach is to design the corporate structure, settlement banking (EMI or neobank, not a retail bank) and acquiring in parallel with the licence application.
Card acquiring: what to expect in 2026
Every gambling merchant account is manually underwritten. Nobody auto-approves 7995. Once you're through, the realistic numbers look like this:
- Fees: blended 3–7%; interchange-plus 2–4.5% effective at scale in the EU and UK. Offshore acquirers and weaker profiles pay more, sometimes considerably. Some crypto-settlement providers advertise 1–3% and "zero reserve"; treat those pitches with care (more below).
- Reserves: rolling reserves of 5–15% for the first months are standard, tapering with clean history.
- Approval rates: EU domestic debit 80–88% is good, 85%+ excellent; US regulated 87–89%; cross-border credit can run at 60–75%. If cross-border is under 65%, you need local acquiring, not a new gateway.
- Declines: normal for iGaming, and mostly issuer-side: banks that block gambling spend, 3-D Secure failures, credit-card gambling bans in some markets, BIN-range cutoffs. EU domestic debit sees 12–22% declines, cross-border 25–40%.
The fixes are structural. Local acquiring in each major market so transactions aren't cross-border. 3DS2 configured for exemptions and low-friction flows. Cascading and multi-acquirer routing so a soft decline at one bank retries at another. Multi-bank redundancy so a policy change at one acquirer doesn't stop deposits. And a descriptor that's neutral but recognisable, because "CASINO" on a statement invites disputes.
Payouts matter as much as deposits. Original Credit Transactions to cards, fast bank payouts and instant e-wallet withdrawals reduce the "where's my money" support load and the chargebacks that follow it.
Local rails and e-wallets
Cards alone won't get you full coverage in 2026. The markets where iGaming actually converts are increasingly account-to-account: open banking and Pay by Bank in the UK and EU, PIX in Brazil, PayID and PayTo in Australia, Interac in Canada, and instant bank transfer schemes across LATAM and APAC. Alongside those, e-wallets with a built-in player base (Skrill and Neteller through Paysafe, plus regional wallets) still move a large share of deposits, and prepaid vouchers cover the cash-preferring segments. A good gateway sits across all of these, tokenises cards, runs fraud checks and routes each authorisation to the best rail; payment failures are estimated to cost gaming brands around a fifth of potential net gaming revenue, so the routing layer earns its keep.
Crypto: what changed in 2026
Stablecoins now account for more than half of crypto casino wagers globally, and USDT and USDC deposits have become the default for a large share of players in Europe, LatAm and Asia-Pacific because they decouple the bankroll from Bitcoin's price. That's the demand side. The compliance side changed materially this year:
MiCA. The EU regime became applicable in December 2024 and member-state transition periods ran out at the latest on 1 July 2026. Only authorised CASPs may provide crypto-asset services to EU clients, and stablecoin issuers need EU authorisation. Tether has not secured an EU e-money licence as of mid-2026, so USDT is effectively off regulated EU platforms and several exchanges have delisted it for retail. Operators serving EU players are moving to USDC or dual-rail set-ups (USDC for EU-facing, USDT elsewhere), and the EU travel rule now applies to crypto transfers with a mid-2026 reporting deadline for gambling operators.
Curaçao. The Curaçao Gaming Authority's crypto guidance, reported in June 2026 with a staged compliance timeline to June 2027, bans sanctioned wallets, mixers and tumblers, requires privacy coins and meme coins to be assessed or excluded, mandates segregation of player, operational and treasury wallets, prohibits personal or UBO-linked wallets, requires wallet screening and transaction monitoring on deposits and withdrawals, and states a preference for fiat-backed stablecoins routed through regulated VASPs. Proof-of-reserves scrutiny on stablecoin-heavy operators has been increasing since March 2026.
US. The GENIUS Act has brought stablecoin issuers and platforms under reserve-transparency and reporting rules comparable to fiat institutions. Most crypto-first operators are not licensed for US residents and geo-block at registration; if you serve US players you're in the state-regulated world with 7801, not the offshore one.
Operationally this means picking a crypto PSP that is actually authorised where you operate (of the big three iGaming crypto processors, only one had cleared MiCA authorisation by July 2026), running Layer 2 networks (Arbitrum, Base, Polygon, TRON for USDT) for cost and speed while keeping the audit trail regulators expect, and building wallet screening in from day one.
The card-to-crypto settlement pitch
You'll see providers offering "players deposit by card, you settle in USDT/USDC, 1–3% fees, no reserve, no KYC, no licence review, no MCC". The economics are real for some operators, and it can be a useful third rail, but understand what you're buying: the card side of that transaction is still running under someone's acquiring, and if it isn't coded 7995 the transaction-laundering risk sits with the whole chain, including you. Also, "no licence review" is a warning sign to any bank you later want to work with. Use it knowingly, with a licensed operation behind it, not as a substitute for proper acquiring.
Sweepstakes and social casino
US sweepstakes operators are a special case. The single largest source of decline volume is misclassification under 7995: once tagged as gambling, issuer rule engines apply gambling controls, blanket blocks and step-up authentication. The answer is a compliant dual-currency model documented properly, the right MCC for the actual product, and a stack that combines cards with Trustly-style bank rails, ACH and, where the model allows, crypto.
Chargebacks and fraud
Friendly fraud dominates. Practical controls: clear descriptors, deposit confirmation emails and receipts, velocity limits, device fingerprinting, 3DS on risky BINs, dispute alerts (Ethoca, Verifi and RDR) to refund before a chargeback posts, and a documented KYC trail you can attach to representments. Keep the ratio well under 1% and the schemes' programmes stay a theoretical concern. Our guide to chargeback alerts covers the tooling in detail.
What happens when you get in touch
Fill in the form below and you'll hear from me directly. I'll ask about your licence (or where you are in the process), your corporate and payment-agent structure, target markets, expected deposit volume, current processing history and any prior terminations. Within one working day you'll get an honest read on which acquirers, gateways and crypto PSPs fit, what fees and reserves to expect, and what needs building before an application will pass. UniqPay is an introducer, not a processor: we're paid by the acquirer or PSP when you're live, so there's no fee to talk and no fee to apply.
Get an iGaming payment quote →
FAQ
Can I get a gambling merchant account without a licence?
No. Every serious acquirer, PSP and settlement bank requires a valid gambling licence from a recognised jurisdiction before onboarding. Start the payment conversation while the licence is in progress, not after.
Which licence gets me the best processing?
Malta opens the widest range of acquirers at the best pricing. UKGC, Gibraltar and Isle of Man are strong. Curaçao under the new regime works but with fewer banks and higher rates; Anjouan fewer still.
Can I use a non-gambling MCC to reduce declines?
No. It's transaction laundering, the schemes are actively enforcing against it in 2026, and the outcome is termination, fines and MATCH listing.
Should a new casino accept USDT?
Depends entirely on your markets. USDT remains dominant in Asia and LATAM. For EU-facing operations it is effectively off the table under MiCA; use USDC via an authorised CASP, or run dual rails.
What decline rate is normal?
Domestic EU debit around 12–22%, cross-border 25–40%. If you're materially worse than that, the problem is usually acquiring location and 3DS configuration, not the gateway.