Online Casino Payment Methods for Australians: The Law, the Loopholes, and What Your Bank Will Let You Do

Updated September 2026

Licensed

Available in US

Fast payouts

18+ Only

If you have been looking for a clean comparison of online casino payment methods, start here with the uncomfortable part: there is no Australian-licensed product to compare. The Interactive Gambling Act 2001 makes it an offence to offer online casino games to anyone in Australia, which means every site pitching itself at Australian players is operating offshore, outside the country’s consumer-protection frame. The payment methods those sites advertise are real, but the legal status of the transaction behind them is not what most marketing pages make it sound.

This page works through that gap. It covers how money moves into and out of offshore casino accounts from an Australian bank account, the protection tools Australian banks and the government have built around gambling transactions, and the legal consequences of using those methods at all. Every operator named here has been the subject of a formal ACMA warning — meaning the regulator itself has acted against them for offering prohibited services to Australians.

Current as of 23 September 2026 · Licence claims verified against the ACMA’s formal warning register.

The responsible gambling framework around casino payments

Responsible gambling in Australia runs through instruments a player can actually switch on. The most important is BetStop, the National Self-Exclusion Register, which went live in August 2023. Registering with BetStop excludes you from every Australian-licensed online and phone wagering service — the kind licensed through the Northern Territory Racing and Wagering Commission. It does not, however, bind offshore casino operators. A site licensed in Curaçao or operated through a Costa Rican company has no integration with BetStop and no obligation to honour an Australian self-exclusion request.

The card-level gambling blocks that major Australian banks now offer sit closer to the actual transaction. ANZ’s gambling transaction block, activated in the ANZ app, blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, not just the physical card. Removing the block requires a 48-hour waiting period. The bank’s own documentation warns that not all gambling transactions will be blocked and some non-gambling transactions might be blocked in error. Westpac’s gambling block works at card level: it refuses authorisation of transactions registered under the merchant category code ‘Betting/Casino Gambling’ on eligible personal credit and debit cards. Commonwealth Bank offers a gambling lock on eligible cards via the CommBank app, with the same caveat that the bank cannot guarantee every gambling-related purchase will be stopped.

These blocks catch a meaningful share of gambling traffic. They do not catch crypto on-chain transfers, peer-to-peer transfers to a personal account that then moves offshore, or prepaid voucher schemes purchased with cash. A player determined to route money past the block can usually find a way. A player who wants a friction layer between impulse and action finds it here.

The National Gambling Helpline, 1800 858 858, is free and operates 24/7, with chat available through Gambling Help Online. These are the channels that work whether the gambling in question happened through a licensed Australian wagering service or an offshore casino.

Cryptocurrency and the anonymity question

Cryptocurrency sits in a different category from card payments and bank transfers, and the reasons matter. A transfer from an Australian bank to a casino’s nominated account carries your name on both ends — the receiving bank sees the sender, and Australian reporting rules apply on the way out. A crypto transfer carries only a wallet address and an on-chain trail, which is publicly visible but not automatically linked to a real-world identity.

Whether that makes crypto “harder to trace” depends on what you mean. The blockchain ledger is permanent and inspectable by anyone; chain-analysis firms routinely flag transfers touching known gambling services. The link between the wallet address and the person controlling it is what is missing by default. A bank transfer leaves a paper trail that any Australian financial intelligence unit can reconstruct from both ends. A Bitcoin transfer leaves a trail that has to be reconstructed against exchange on-ramps, KYC records and behavioural patterns, and that reconstruction costs work.

This is not quite anonymity. It is a shift in who carries the burden of identification: the bank in one case, the chain analyst in the other. For an Australian player considering a crypto deposit to an offshore casino, the practical difference is that the transaction will not show up on an Australian bank statement under a casino’s merchant name, which means a card-level gambling block will not catch it. A bank statement that month will simply show the on-ramp purchase. Whether that is a feature or a warning sign depends on what the player is trying to do.

The legal status has not changed. Cryptocurrency is not licensed as a deposit method for Australian wagering services, and using it does not change the offshore status of the casino on the other end. The payment route is different; the illegality of the underlying offer is the same.

How payments actually move: from deposit method to bank settlement

A payment is a chain with several links, and the time the player cares about lives at the end of it, when the money lands in an Australian bank account. Working backwards from there gives a clearer picture than working forwards from the deposit screen.

The fastest route from an Australian bank account to a recipient is Osko by Australian Payments Plus. With Osko, a bank transfer between participating Australian banks arrives in under a minute, 24/7 including weekends, whether it is addressed to a BSB and account number or to a PayID. PayID-based instant transfers are available at over 100 Australian financial institutions. Paying to a PayID shows the name of the account holder before the transfer is sent; AP+ warns that being asked to transfer money to a PayID on an illegal gambling site almost certainly means a scam site.

Osko runs on Australia’s New Payments Platform, which became accessible to the public on 13 February 2018 and is owned by New Payments Platform Australia Ltd, a non-profit company whose 13 shareholders include the Reserve Bank of Australia and the country’s major banks. Participants must keep the platform’s monthly outages to no more than two minutes. By April 2025 more than 25 million PayID identifiers had been registered on the platform.

The other major Australian payment rail is BPAY, a bill-payment service in online banking that has operated since 1997 and is available in the online banking of over 140 banks and financial institutions. The payer enters the Biller Code and the Customer Reference Number printed on the bill. BPAY is run by Australian Payments Plus, the same operator as PayID and Osko. In September 2021 the ACCC authorised the merger of BPAY Group, eftpos and NPP Australia under Australian Payments Plus.

For an Australian player trying to deposit at an offshore casino, the practical effect is that the Australian banking system offers fast and verifiable transfers — and the offshore operator either accepts them on its own terms or routes through a payment intermediary. Payout speed from the casino’s side is then a separate variable, and it is the one most often marketed.

Cards and digital wallets

American Express was established in 1850 as a freight-forwarding company and later became a card issuer, launching its first charge card on 1 October 1958. Unlike Visa or Mastercard’s four-party network, Amex traditionally issues cards and processes transactions itself as a three-party scheme. The Reserve Bank of Australia’s July 2025 review proposes removing surcharges only on eftpos, Mastercard and Visa card transactions, explicitly leaving American Express outside the scope of the proposed surcharge ban.

By the end of 2025, Apple Pay, Google Pay and Samsung Pay transactions collectively accounted for around 45% of all card payments in Australia by number. Apple does not charge fees to consumers for using Apple Pay in stores, online or in apps; any surcharge comes from the merchant’s own card-processing fees, not from Apple. Apple states that transaction limits and PIN requirements for Apple Pay purchases are set by the card issuer or merchant, not by Apple itself.

Under the Interactive Gambling Act 2001 as amended in 2023, Australian-licensed online wagering services cannot accept payment by credit card or other credit-related products, a restriction that also constrains gambling use of linked digital wallets like Apple Pay. This applies to licensed operators. Offshore casinos accepting Australian players do not fall under this rule, which is part of why the offshore market persists: the prohibition on credit-card deposits is enforced against Australian licensees, not against unlicensed operators accepting Australians.

The reporting threshold that does not apply

AUSTRAC’s threshold-transaction-report rule, which requires reporting of transfers of A$10,000 or more, applies only to physical cash. Ordinary electronic bank transfers are not subject to that per-transaction reporting requirement, regardless of the amount sent. This is the rule a curious reader usually asks about first, and the answer is that the threshold does not catch a routine bank transfer to an offshore casino at any amount. It catches cash transactions at casinos, not electronic ones.

The 11 brands the ACMA has warned — and why the list is the list

The table below names eleven brands that have been the subject of formal ACMA warnings under the Interactive Gambling Act 2001. Each row carries the regulator’s own action and date, the operator named in that action, and whether the page’s own research could confirm a subject-support claim about that brand. A confirmation is named plainly; a listings-only finding is stated as a listings finding, never as the operator’s own claim. Where the research carries no data, the brand is presented on its ACMA record alone.

This is not a ranking. The brands are not being compared for player value — no such comparison is possible for products whose offering to Australians is itself prohibited. The list is the ACMA’s own enforcement record, in the order research presents it. The page’s job is to lay it out, name what the regulator named, and let a reader see who has been warned, when, and over what.

Every brand in this table shares the same legal status in Australia: offering online casino games to a person in Australia is prohibited under the Interactive Gambling Act 2001, whatever licence the site displays in its footer. The licence most often displayed is a Curaçao eGaming sub-licence, which authorises the operator to offer games internationally — it does not authorise offering them to Australians. The ACMA’s formal warnings are issued against the operator for the act of offering, not for any defect in the foreign licence itself.

What the blocking rate actually tells you

The ACMA’s blocking programme has been running since November 2019. As reported in June 2026, a total of 1,751 illegal gambling and affiliate marketing websites had been blocked since the first blocking request, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. In a single round reported on 26 June 2026 the ACMA asked Australian internet service providers to block 12 more illegal gambling websites: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino.

The blocking rate works out to roughly 175–265 new illegal gambling and affiliate sites blocked per year across the 80 months of the programme to date, with the pace rising as enforcement intensified. Stated as a band: between 175 and 265 sites per year have been blocked across the lifetime of the programme, with the upper end reflecting the 2024–2026 rounds and the lower end reflecting the 2019–2021 startup period. The condition on that band is that it covers sites the ACMA identified and ISPs acted on — a count that excludes sites the regulator investigated without reaching a blocking request, and sites that changed domain to evade an existing block.

The takeaway is not that blocking solves the problem. A blocked site is a site the regulator has already had to investigate, and the operator behind it usually has several more domains in reserve. The takeaway is that the rate of blocking has not slowed. Each round adds another dozen names; the total grows faster than the regulator’s published narrative suggests.

H2 Gambling Capital’s 2025 report estimates that Australians lose about A$3.9 billion a year to illegal gambling sites, and that the share of gambling going through legal channels fell from 74% in 2021 to 64%. The drop of ten percentage points in the legal share over four years, against a roughly flat illegal-spend total, is the kind of figure that reframes the policy debate. Blocking has not reduced the dollars leaving through illegal channels; it has prevented a larger share of legal gambling from being captured.

The legal framework behind the warnings

Online casino is prohibited in Australia. The Interactive Gambling Act 2001, strengthened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies or in-play betting to a person physically in Australia. No state or territory licenses them. What is licensable is wagering on races and sport placed before the event, lotteries and keno — in practice licensed by the Northern Territory, which regulates 52 of Australia’s online bookmakers including Sportsbet, Bet365 and Ladbrokes. The Northern Territory Racing and Wagering Commission has no full-time staff and meets once a month in Darwin, which is part of why the federal framework leaves most enforcement to the ACMA rather than the licensing territory.

The ACMA investigates, issues formal warnings and directs internet service providers to block illegal sites. The individual player is not prosecuted — the IGA targets the provider — but an offshore site gives no Australian consumer protection, no complaints body and no recourse if a withdrawal is refused. A site can also be blocked while a balance is still on it, and there is no Australian body to escalate to when that happens.

The 2026 reform landscape changed recently. The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026; its advertising and inducement measures commence 1 January 2027. This is law with a start date, not yet in force, and a 2026 page treats it as passed-but-not-yet-commenced rather than as operative.

On tax: gambling winnings of a recreational player are not assessable income under section 6-5 of the ITAA 1997, and losses are not deductible, unless the person carries on a business of gambling. The advice on this is the standard model-only caveat: check with the ATO for individual circumstances. It is not the page’s place to second-guess a reader’s tax position.

Payment methods that licensed operators do and do not accept

For the licensed wagering side — sports and racing, placed before the event — the accepted deposit methods are tightly defined. Credit cards, credit-related products and digital currency have been banned as payment for licensed online wagering since 11 June 2024, with penalties up to A$247,500 for operators who breach the rule. Legal deposit routes for licensed wagering are debit card, bank transfer, PayID and Osko, and BPAY. A site asking an Australian customer for a credit card or a crypto deposit is operating outside the Australian rules.

This ban applies to Australian licensees. Offshore casinos accepting Australians are not bound by it, which is why some offshore sites still accept credit cards while Australian-licensed ones do not. The card-level gambling blocks operated by ANZ, Westpac and Commonwealth Bank are a complementary layer: they refuse transactions at the card-issuer level regardless of where the merchant is licensed, catching both the Australian-licensed sportsbook that erroneously accepts credit and the offshore casino that does.

What the brand warnings reveal in practice is the pattern. RocketPlay was warned in March 2026 against Pulsup Ltd, having already been warned in May 2022 against Dama N.V. — the same brand name, two different operators, five years apart. Dama N.V. is the operator that draws the most names on this list: Level Up Casino, Woo Casino and Spirit Casino were all warned under the Dama N.V. umbrella, in May 2022, March 2025 and May 2025 respectively. Three warnings, three brands, one operator. Consolutetish S.R.L. appears twice, over National Casino and Bizzo Casino, both warned in July 2025.

Reading the dates shows the rhythm. The ACMA’s warnings have come in clusters: a burst in 2022 against the Dama N.V. set, a quieter period, then a 2025 sweep that picked up Bamboo Media, Consolutetish S.R.L., EOD Code SRL and Sterplay Holding Ltd in the space of months, and a 2026 round against Ryker B.V. and Pulsup Ltd. Holly Springs Holdings; acting in clusters is how the regulator catches up with operators who have been spinning up new brands while the existing ones run.

The ACMA’s enforcement tool is the formal warning, but blocking is the heavier instrument. A blocking request asks Australian ISPs to make the site’s domain unreachable from Australian IP addresses, which is why the table does not list blocking requests per brand — those come in batches, across unrelated operators, rather than brand by brand. The formal warning is the precursor: it tells the operator to stop, and if the operator rebrands or persists, blocking is the next step.

Frequently asked questions

What payment methods are commonly advertised by online casinos targeting Australians?

Offshore casinos marketing to Australian players typically advertise Visa and Mastercard debit (not credit, in most cases), bank transfer, e-wallets like Skrill and Neteller, prepaid vouchers, and increasingly cryptocurrency. Each carries a different balance of speed, traceability and acceptance by Australian-licensed intermediaries. None changes the legal status of the transaction itself.

How does an Osko transfer compare with a card payment for speed?

Osko settles in under a minute between participating Australian banks, 24/7. Card payments authorise within seconds but settlement — the actual movement of funds — follows the card network’s clearing cycle, typically one to three business days. For sending money to an Australian account, Osko is faster. For spending at a merchant, the card authorisation speed is what matters and Osko is not in that flow.

Is it legal for an online casino to process payments from players in Australia?

The Interactive Gambling Act 2001 prohibits offering online casino games to anyone in Australia. The offence targets the provider, not the player. Processing the payment is part of offering the service, so a payment processor facilitating an Australian player’s deposit at an offshore casino is exposed to the same regulatory action as the casino itself. The player does not face prosecution, but has no Australian recourse if a withdrawal is refused or the site is blocked.

Are cryptocurrency payments harder to trace than a bank transfer?

The blockchain ledger is permanent and publicly visible, which means the transaction itself is more traceable than a bank transfer in one sense. The link between the wallet and the person controlling it is what is missing by default, and reconstructing that link is the work chain-analysis firms do. A bank transfer carries identity on both ends automatically; a crypto transfer does not. Whether that makes crypto “harder to trace” depends on whose perspective is being described.

What makes a casino payment method secure rather than just fast?

Speed is how quickly the funds move; security is what happens when something goes wrong. A payment method that flows through an Australian bank, addresses A$ via A$ to a PayID with the recipient’s name displayed before confirmation, or moves through a licensed Australian wagering service with a dispute pathway — those carry security in the sense of recourse. A crypto transfer to a wallet address controlled by an offshore operator carries speed and pseudonymity but no dispute path. The faster method is not automatically the more secure one.

Does PayID offer any extra protection compared with a BSB and account number?

PayID shows the name of the account holder before the transfer is sent, which a BSB-and-account-number transfer does not. That name check is the practical protection: it lets the sender confirm they are paying the entity they intend to pay before authorising the transfer. AP+ warns that being asked to transfer to a PayID on an illegal gambling site is a strong signal of a scam. For licensed contexts the name check catches mistaken payments; for illegal contexts it surfaces the illegality before the money leaves.

Published by the Casino Deposit Info team.