Home / Blog / Industry Guides
Industry Guides

iGaming Payment Processing and Licensing: Why Your License Decides Your Bank Account

8 min read·Karma Card Payments·Published ·Updated
iGaming Payment Processing and Licensing: Why Your License Decides Your Bank Account

You have a platform, a player base, and a license you paid real money for. Then an acquirer asks which jurisdiction issued it, where your players are, and what currency you want to settle in, and suddenly the conversation stalls. In iGaming payment processing, licensing is not paperwork in the background. It is the first thing a bank reads and the last thing it forgets.

This guide skips the general overview of gambling payments and focuses on two questions that decide most approvals: which license you hold, and how money moves across borders once you are live.

Why acquirers start with your license, not your volume

Most merchants assume a bank wants to see revenue first. In gaming, the bank wants to see legal authority first. An acquiring bank that processes an illegal wager carries exposure too, not just the operator.

That is why the license is the anchor of every underwriting file. It tells the bank who supervises you, which players you can legally accept, and what controls you already run for age checks, anti-money laundering, and responsible gaming. A strong license answers half the risk questionnaire before anyone opens it.

In gaming, a processor is not approving your business. It is approving your license, and then checking that your business stays inside it.

The US picture in 2026: a state-by-state patchwork

There is no federal online casino license in the United States. Authority sits with the states, and the map is narrower than many operators expect.

As of 2026, eight states have legalized real-money online casino gaming: New Jersey, Delaware, Pennsylvania, Michigan, West Virginia, Connecticut, Rhode Island, and Maine. Maine became the eighth in January 2026, with online casino rights granted to the Wabanaki Nations, though its market had no confirmed launch date at the time of writing. Bills in states such as New York, Virginia, Illinois, and Maryland have been introduced but not passed.

Sports betting is far broader. More than 35 states plus Washington, D.C. have legalized it in some form, though rules differ on whether betting can happen online, at retail locations, or both. Operators in this space can read more about accounts built for licensed sportsbooks.

The practical consequence is geofencing. A US state license only covers players physically located in that state. Your processor will expect location verification at the point of wager, and your transaction data should back it up.

UIGEA: the federal law that targets the payment, not the player

The Unlawful Internet Gambling Enforcement Act of 2006 does not make any particular game legal or illegal. It prohibits gambling businesses from knowingly accepting payments tied to unlawful internet gambling, and it relies on existing state or federal law to define "unlawful."

Its implementing rule, Regulation GG, puts the burden on the payment system. Banks and card networks must maintain policies reasonably designed to identify and block restricted transactions. That includes due diligence when they onboard a commercial customer, which is exactly why your acquirer asks for license copies, legal opinions, and a list of the jurisdictions you serve.

If you have ever wondered why a bank seems more nervous than your regulator, this is the mechanism. Under UIGEA the bank is part of the enforcement chain, and it behaves accordingly. This is general information, not legal advice, and operators should confirm their own position with gaming counsel.

MCC 7995 and the card network layer

Every card transaction carries a merchant category code. Betting, casino gaming, lottery and similar wagering activity is coded as MCC 7995, and that four-digit number changes how your transactions are treated everywhere they travel.

Visa classifies MCC 7995 merchants as Tier 1 under its Visa Integrity Risk Program, which took effect in May 2023. Acquirers that sponsor Tier 1 merchants must be registered with Visa, pass a controls assessment, and keep oversight in place to prevent illegal transactions. Mastercard also treats gambling as a restricted category that requires explicit acquirer approval.

Issuers watch the code too. Some card-issuing banks decline gambling-coded transactions by default, and others block them on certain card products. A higher decline rate on MCC 7995 is not a sign that your checkout is broken. It is the network working as designed.

Why miscoding is the fastest way to lose everything

Some providers will quietly offer to process gaming under a softer code, like digital goods or entertainment. It can look like an easy win. In practice it is transaction laundering, and when it surfaces, the account closes, funds are often held, and your business can be added to the MATCH list. Read our explainer on how the MATCH list works before anyone talks you into a shortcut.

Offshore licenses: Curaçao reform, Malta, and the Isle of Man

Many operators serve players outside the US under an offshore license. Banks do not treat these as interchangeable. They grade them on how much supervision actually happens.

Curaçao after the LOK

Curaçao rewrote its framework. The National Ordinance on Games of Chance, known locally as the LOK, took effect on December 24, 2024. The old model, where a handful of master license holders issued sublicenses to operators, has ended. Operators now apply directly to the Curaçao Gaming Authority, which replaced the former Gaming Control Board.

For payments, this cuts in two directions. Acquirers that once avoided Curaçao sublicenses are taking a fresh look at directly licensed operators. At the same time, an expired sublicense or a stalled application is now an easy reason to decline. If your paperwork still references a master license holder, expect questions.

Malta and the Isle of Man

The Malta Gaming Authority and the Isle of Man Gambling Supervision Commission are long-established regulators with detailed compliance, player-protection, and anti-money laundering requirements. Many acquirers view these licenses as stronger signals of ongoing supervision, which can widen the pool of banks willing to look at your file.

A license from any jurisdiction only covers what that jurisdiction permits. An offshore license does not authorize accepting players from US states where online casino gaming is not legal, and an acquirer will check your geoblocking against your license terms.

Holding more than one license

Larger operators often hold several licenses at once, each covering a different market. That is a strength in underwriting, as long as the structure is clear. The bank will want to know which legal entity holds which license, which website or brand serves which market, and which merchant account will process each player base. A simple map of entities, licenses, and domains saves weeks of back-and-forth.

How licensing changes the underwriting file

When we assemble an application for gaming operators seeking stable card processing, the license drives nearly every other document request. Expect the bank to ask for:

A clean, consistent file matters more than a perfect one. Banks decline over contradictions: a website that accepts players from a market your license does not cover, or a terms page that names a different legal entity than the application.

Cross-border settlement: where the money actually lands

Licensing tells the bank whether it can work with you. Settlement determines how you get paid, and it is where many operators lose margin without noticing.

Domestic versus cross-border acquiring

When the acquirer and the cardholder's issuer sit in the same country, the transaction is domestic. When they do not, it is cross-border, and that usually brings additional network assessments and a higher chance of issuer declines. Gaming transactions that are both cross-border and MCC 7995 face two layers of scrutiny at once.

Operators licensed in more than one market sometimes use separate merchant accounts per region so each player base is acquired locally where possible. That structure can improve approval rates, but it also means separate reporting, separate reserves, and separate reconciliation.

Settlement currency and FX exposure

You may charge players in euros, settle in US dollars, and pay suppliers in a third currency. Each conversion is a spread someone earns. Ask any provider three questions up front: which currencies can you present to cardholders, which currencies can you settle into, and who performs the conversion at what markup.

Also look at payouts. Winnings paid back to cards, bank transfers, or alternative methods follow their own rules and timelines, and players notice slow withdrawals faster than slow deposits. A settlement design that works for deposits but stalls payouts creates complaints, and complaints become disputes.

Reserves and settlement timing

Gaming accounts commonly carry a rolling reserve, where a percentage of each settlement is held for a set period to cover future chargebacks. Settlement delays are also common in the first months. Neither is a penalty. They are how a bank prices uncertainty. Our guide to how rolling reserves work explains what to negotiate and when.

Keeping the account once you have it

Approval is the start of supervision, not the end. Acquirers monitor gaming accounts for chargeback ratios, fraud reports, sudden volume spikes, and traffic from jurisdictions your license does not cover.

Disputes in gaming often come from players who lost and regret it, or from family members who did not authorize the deposit. Strong KYC, clear descriptors, and fast responses to player complaints reduce both. Pairing your account with chargeback protection helps keep those numbers under the thresholds that trigger network monitoring.

Tell your processor before you enter a new market or add a new product, such as sports betting alongside casino. A change the bank discovers on its own looks like concealment, even when it is not. The same goes for license renewals: send the renewed certificate before the old one expires, not after the bank notices.

Bring your license file and we will map the route

The operators who get approved and stay approved treat their license as the center of their payments strategy, not an attachment. When your licenses, jurisdictions, and settlement needs are clear, the right bank conversation gets much shorter.

We help licensed operators build an application that matches their actual footprint, then position it with underwriting experienced with regulated gaming. When you are ready, start your application with Karma Card Payments and tell us which licenses you hold and where your players are.

Frequently asked questions

Which US states allow legal online casinos in 2026?

As of 2026, eight states have legalized real-money online casinos: New Jersey, Delaware, Pennsylvania, Michigan, West Virginia, Connecticut, Rhode Island, and Maine. Maine legalized in January 2026 but had no confirmed launch date at the time of writing. Players must be physically located in a legal state, so operators use geolocation to verify each wager.

Does UIGEA make online gambling illegal?

No. UIGEA does not define which games are legal. It prohibits gambling businesses from accepting payments connected to gambling that is already unlawful under state or federal law, and Regulation GG requires banks and payment systems to have policies to identify and block those restricted transactions. This is general information, not legal advice.

What is MCC 7995?

MCC 7995 is the merchant category code for betting, casino gaming, lottery and similar wagering. It flags transactions as gambling to card networks and issuers. Visa places MCC 7995 merchants in Tier 1 of its Visa Integrity Risk Program, so acquirers must be registered and maintain controls. Some issuers also decline gambling-coded transactions by default.

Is a Curaçao gaming license still accepted by payment processors?

Curaçao's new gaming law took effect December 24, 2024, replacing the old master and sublicense system with direct licensing by the Curaçao Gaming Authority. Some acquirers are more open to directly licensed operators than to the old sublicenses, but acceptance varies by bank, and expired or pending licenses are a common reason for declines.

Ready to get approved?

Most high-risk merchants are approved in 24–48 hours. No application fee, no long-term contract.