CashtoCode casinos in Australia: the ACMA warnings, the legal position, and what an offshore deposit actually buys you

CashtoCode sits in the deposit menu of dozens of offshore pokies-style sites. None of them may lawfully serve a player sitting in Australia, and the Australian Communications and Media Authority has spent the last four years issuing formal warnings and ordering ISPs to block the URLs anyway. The point of this page is to lay out both halves of that picture at once — how the voucher works, where it works, and what happens when a regulator takes a closer look.

Data current as of 1 November 2026, cross-checked against the ACMA register of formal warnings and the public blocking list.

The short version: how eleven ACMA-warned operators line up

Eleven brands that list CashtoCode as a deposit method have come in for a formal ACMA warning at some point in the last four years. The table below groups them by what the ACMA actually said, who the regulator named, and whether anything in their public listings connects them to a CashtoCode deposit flow at all.

Nine of the eleven carry an em dash in the CashtoCode column. Two reasons. The first is that research could not find any public CashtoCode listing for those brands. The second is more important: even for the two rows that do show up in payment-side references, the connection is indirect, a name surfacing in a card-issuer’s block list or in AUSTRAC reporting metadata rather than in a casino cashier page anyone can screenshot.

What the table makes plain is that the regulator’s objection is not to CashtoCode. It is to the act of offering online casino games to Australians, full stop. CashtoCode is just one of several deposit rails these operators happened to list.

What CashtoCode actually is

The CashtoCode eVoucher is a 20-digit code sold by resellers from corner shops to online platforms. The voucher needs no personal details to buy or to redeem, which is the reason offshore casinos like it: a deposit does not pull in a card number, a bank account, or a name to match against the merchant category code that triggers Australian bank gambling blocks. The brand has been around since 2013, with the eVoucher trademark held by Eightball Marketing Services LLC.

The product description matters because it is what gives the offshore casino its pitch: no card, no bank statement, no name attached. CashtoCode’s own site lists gambling game providers — Pragmatic Play, Evolution, NetEnt, Playtech — in its catalogue filters. The voucher is built for gambling deposits, and it is sold as such.

Three hard limits come with the format and shape every offshore deposit:

1. Deposit only. CashtoCode does not run a withdrawal rail. A player who deposits with a voucher still needs a bank transfer, a card, or a wallet to get any winnings out.
2. No fee to the buyer. CashtoCode states the voucher is free of charge to the customer. Any fee on the deposit is the casino’s, not the voucher’s, and whether the casino charges one is not visible from the voucher itself.
3. Unused balance carries over. A $50 voucher used as a $30 deposit leaves $20 still valid on the same code, so the rest of the value is not lost at the deposit step.

The legal position under the Interactive Gambling Act 2001

The Interactive Gambling Act 2001, strengthened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies, or in-play betting to a person physically in Australia. No state or territory issues a licence for those products. What is licensable is wagering on races and sporting events placed before the event, lotteries, and keno, and the licensing body for the bulk of online wagering operators is the Northern Territory Racing and Wagering Commission, which regulates 52 bookmakers including Sportsbet, Bet365 and Ladbrokes and runs on a meeting-a-month cadence with no full-time staff.

The legal status of a CashtoCode deposit is the same as a Visa deposit or a Bitcoin deposit to the same offshore casino. The payment method is irrelevant. What the regulator acts on is the offer of a prohibited interactive gambling service to an Australian customer.

Two practical consequences follow from the way the Act is enforced:

• The individual player is not prosecuted. The IGA targets the provider. A punter sitting in Sydney depositing with a CashtoCode voucher is not personally exposed, but the casino operating the site is.
• The punter is also unprotected. An offshore casino sits outside every Australian consumer protection regime. No Australian complaints body has reach. A withdrawal refused is a withdrawal refused, with no second line of recourse.

The Interactive Gambling Amendment (Gambling Reform) Bill $$\mathrm{CY}$$ passed Parliament on 19 August $$\mathrm{CY}$$. Its advertising and inducement measures commence on 1 January $$\mathrm{CY}$$, so the law exists but the date has not arrived yet.

What the ACMA has actually done

The ACMA’s enforcement record against CashtoCode-accepting offshore operators runs longer than most readers expect. The warning list, in order of issue:

• May 2022: Dama N.V., over six brands at once — Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos.
• September 2022: Hollycorn N.V., over Sky Crown and Blue Leo.
• February 2025: EOD Code SRL, over Instant Casino.
• March 2025: Dama N.V., over Woo Casino.
• April 2025: Sterplay Holding Ltd, over Casino Intense.
• May 2025: Dama N.V., over Spirit Casino.
• July 2025: Bamboo Media, over Ignition Casino; Consolutetish S.R.L., over National Casino and Bizzo Casino, the second formal warning tied to Bizzo after TechSolutions in 2022.
• March $$\mathrm{CY}$$: Pulsup Ltd, over Rocketplay.com.au, the second Rocketplay warning after the 2022 Dama N.V. action.
• April $$\mathrm{CY}$$: Ryker B.V., over Jackbit and CasinOK.

The pattern is that operators get warned, the underlying shell company changes, and a new brand on the same platform opens the following quarter. Dama N.V. alone has been on the receiving end of warnings in 2022, 2025 and $$\mathrm{CY}$$.

The blocking count, calculated as a rate

The ACMA’s blocking machinery is the other half of enforcement. A round reported on 26 June $$\mathrm{CY}$$ asked Australian ISPs to block a further twelve illegal gambling URLs — 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz.com, Spinrise, Vinyl Casino and Wildsino. That round brought the cumulative total since the first blocking request in November 2019 to 1,751 blocked sites.

Worked as a rate across the years the scheme has been running:

• 1,751 blocked sites ÷ 80 months (November 2019 to June $$\mathrm{CY}$$) ≈ 22 blocked sites per month on average, or roughly one every 36 hours across the period.

The rate is uneven in practice. Earlier reporting rounds covered four or five sites at a time; recent rounds run to twelve or more. The arithmetic gives a baseline, not a forecast. The right read is that the scheme has been running continuously for nearly seven years and has not slowed, and that any CashtoCode-accepting site that survives a warning long enough tends to be a candidate for blocking rather than for compliance.

What the warnings cost the operator, in plain terms

A formal ACMA warning is not a fine. It is a written notice that the ACMA considers the operator to have breached the Interactive Gambling Act 2001 by offering prohibited services to Australians. The operator has an opportunity to respond and an obligation to cease. Continued offering after a warning is the trigger for an ISP blocking request, and a blocked URL is harder to reverse than a warning is to comply with.

What the warnings do not do is shut the brand down. The offshore domain stays live for players outside Australia. The Australian customer simply finds the site harder to reach.

Responsible play: what the Australian safety net actually covers

The Australian safety net is built around Australian-licensed services. It is the offshore casinos that are the target of every block on the ACMA list.

• BetStop, the National Self-Exclusion Register, has been live since August 2023. A player who registers with BetStop is excluded from every Australian-licensed online and phone wagering service. An offshore casino is not connected to BetStop and is not bound by an exclusion registered there.
• The National Gambling Helpline, 1800 858 858, is free and runs 24/7, with chat available at Gambling Help Online. The helpline is the front door for any punter who wants to talk through a problem, and it covers offshore play as well as licensed wagering.
• Major Australian banks let cardholders self-activate a gambling transaction block through their banking app. NAB, Commonwealth Bank, Westpac and St George all run the option. Once activated, a block is usually applied immediately, though lifting it again can take up to two business days. The catch is that the block runs at the merchant category code level, and it stops transactions registered under ‘Betting/Casino Gambling’. A CashtoCode deposit, because it routes through a reseller and never touches the player’s own card, sits outside that block.

The card block is the most useful tool a player has for licensed wagering. It is also the tool that an offshore CashtoCode deposit is built to bypass.

How a CashtoCode deposit and withdrawal actually moves

The mechanics at the cashier page of an offshore site follow a set pattern, even though no two sites word it the same way.

The deposit flow is short. The punter enters the cashier, selects CashtoCode, enters the amount, and gets a reseller redirect. The voucher code is bought — typically at a corner store or online — for the exact amount. The 20-digit code is then pasted back into the casino cashier. The deposit is credited in minutes.

The withdrawal flow is the part offshore marketing pages tend to skip. CashtoCode is deposit-only. A withdrawal request sits in the casino’s own pending queue, runs through the casino’s manual checks, and lands back in the punter’s Australian account by bank transfer, by card, or by a wallet. The voucher is irrelevant on the way out.

Two timeframes matter, and they sit at opposite ends of the experience:

• The deposit side: minutes. The voucher code converts to a casino balance faster than any card or bank transfer.
• The withdrawal side: longer than a deposit on a licensed wagering site. Australian licensed bookmakers settle by Osko in under a minute. An offshore casino’s manual review adds days, sometimes a working week, before the transfer is released.

That gap is what the marketing copy does not put on the page. The deposit is built for speed. The withdrawal is built for the casino’s own risk process.

PayID and Osko, for context

PayID and Osko are the rail most Australian licensed bookmakers settle on. Osko settles a bank transfer between participating Australian banks in under a minute, 24/7 including weekends, whether addressed to a BSB and account number or to a PayID. PayID-based instant transfers are available at over 100 Australian financial institutions, and more than 25 million PayIDs had been registered on the New Payments Platform by April 2025. Paying to a PayID shows the name of the account holder before the transfer is sent, and AP+ warns that being asked to transfer to a PayID on an illegal gambling site is almost certainly a scam.

For an offshore CashtoCode casino, the absence of a PayID rail on the way out is part of the problem. A deposit is anonymous and instant. A withdrawal is a slower, named bank transfer back into an Australian account.

Payment rails an Australian punter meets at the cashier

The rail set at any offshore CashtoCode casino is wider than the voucher alone, and the surrounding rails tell the reader something about the operator’s actual posture.

Cards and the credit ban

From 11 June 2024, Australian online wagering service providers have been banned by law from accepting credit cards, credit-linked digital wallets, or digital currencies as payment. The rule is enforced by the ACMA with penalties up to $247,500 per breach. An offshore casino is not bound by the rule — it does not hold an Australian wagering licence — but the rule does mean an Australian punter trying to deposit by credit card on a licensed wagering site will be declined at the merchant category code, and the same MCC logic sits behind the gambling blocks the major banks offer.

American Express is a useful marker here. Amex is a three-party scheme that issues cards and processes transactions itself, unlike Visa and Mastercard’s four-party network. The Reserve Bank of Australia’s July 2025 review proposes removing surcharges only on eftpos, Mastercard and Visa transactions, explicitly leaving American Express outside the scope of the proposed surcharge ban. Amex sits outside the standard surcharging reform on Australian cards, and it sits outside the credit-ban logic on offshore deposits where the operator accepts it.

Apple Pay, Google Pay, Samsung Pay

By the end of 2025, Apple Pay, Google Pay and Samsung Pay transactions collectively accounted for around 45% of all card payments in Australia by number. That share is built on top of the underlying card. Apple Pay does not charge consumer fees; any surcharge comes from the merchant’s card-processing fees, not from Apple. Transaction limits and PIN requirements are set by the card issuer or merchant, not by Apple.

For gambling, the relevant fact is that the credit-ban logic catches the wallet, not just the card. ANZ’s gambling transaction block, activated in the ANZ app, blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, not just the physical card. ANZ’s block also imposes a 48-hour cooling-off period on removal, and the bank warns that not all gambling transactions will be blocked and some non-gambling transactions might be blocked in error. Westpac’s block works the same way at card level, refusing authorisation on the merchant category code ‘Betting/Casino Gambling’ on eligible personal credit and debit cards.

A CashtoCode deposit, again, sits outside both blocks because no card touches the transaction.

Bank transfer, PayID, and the AUSTRAC threshold

The AUSTRAC threshold-transaction-report rule, which requires reporting of transfers of A$10,000 or more, applies only to physical cash. Ordinary electronic bank transfers are not subject to that per-transaction reporting requirement, regardless of the amount sent. That puts a PayID or BPAY transfer outside the threshold report, but it does not put it outside the ACMA’s view — the regulator’s enforcement is at the offer side, not the transfer side.

Australia’s New Payments Platform became accessible to the public on 13 February 2018. The platform is owned by New Payments Platform Australia Ltd, a non-profit whose 13 shareholders include the Reserve Bank of Australia and the major banks. In 2021 the ACCC authorised merging NPP Australia with BPAY and eftpos into a single company, Australian Payments Plus. Participants must keep the platform’s monthly outages to no more than two minutes.

Where the money goes: the H2 Gambling Capital estimate

H2 Gambling Capital’s $$\mathrm{CY}$$ report estimates that Australians lose about A$3.9 billion a year to illegal gambling sites. The same report estimates the share of gambling going through legal channels fell from 74% in 2021 to 64%. The fall is the gap offshore casinos have been filling, and the gap is what the ACMA blocking scheme and the formal warning regime are pointed at.

The figure is a model estimate, not a regulator’s measurement. It is the best public estimate available, and it is the figure the industry itself works from.

The eleven operators, in detail

What follows is a brand-by-brand read of the eleven ACMA-warned CashtoCode-accepting operators. Each entry closes on what the ACMA action actually changed for an Australian punter, not on whether the brand is worth signing up with — which would be a recommendation, and recommendations are not what this page is for.

RocketPlay

Pulsup Ltd took the most recent ACMA warning over Rocketplay.com.au in March $$\mathrm{CY}$$, the second Rocketplay warning after the original 2022 Dama N.V. action that also covered five sister brands. No public CashtoCode listing for this brand appeared in our research, so the deposit rail is plausible but unconfirmed. What the ACMA action means in practice is that an Australian punter reaching the cashier is doing so on a site that has been told, in writing, that offering the product is unlawful. The brand stays live offshore. The Australian landing gets harder to reach.

Level Up Casino

The Level Up entry is one of two that show up in payment-side references rather than at the cashier. The reference is to Westpac’s gambling-block page, where the brand surfaces as a flagged entity in the bank’s merchant screening. The ACMA warning over Level Up dates to the original Dama N.V. action in May 2022. The bank’s flag is what gives Level Up its place in the payment-rail discussion: a player whose bank has a gambling block activated may see Level Up named in the merchant category code data even without having visited the site. That is a useful early-warning signal the player can act on.

Woo Casino

Dama N.V.’s March 2025 warning over Woo Casino followed the original 2022 action by three years and was issued to the same operator entity. The pattern, an operator warned, the warning ignored, a second warning issued, is the route to a blocking request. Public records show no CashtoCode listing for Woo Casino, so the deposit rail cannot be confirmed against a screenshot. The right read for an Australian punter is that a brand on its second ACMA warning has had the regulator’s patience tested once already.

Spirit Casino

Spirit Casino took a Dama N.V. warning in May 2025, two months after Woo Casino, on what reads as a rolling programme of warnings against the same operator entity. We could not confirm any public CashtoCode listing for Spirit Casino. The brand is comparatively young, and the warning is comparatively early in the brand’s life — which means a punter who finds the site today is finding it after the regulator has already opened the file.

National Casino

Consolutetish S.R.L. took a July 2025 warning over National Casino alongside the Bizzo warning, on what is plainly a coordinated action. National Casino is the second of the two brands that show up in payment-side references — here, AUSTRAC reporting metadata and a Wikipedia background reference. The presence of the brand in AUSTRAC-adjacent data is not a CashtoCode listing and is not a deposit confirmation, but it does suggest the operator has been on the AUSTRAC radar for transaction-reporting reasons at some point. The ACMA action is the headline. The AUSTRAC reference is a footnote.

Bizzo Casino

Bizzo is the brand with the longest ACMA file on this list. TechSolutions Group drew the original warning in 2022; Consolutetish S.R.L. drew the second in July 2025. Two formal warnings, three years apart, two different operator entities, same cashier — the pattern of an offshore operator being reconstituted under a new shell when the warning lands. No CashtoCode listing for Bizzo exists in public registers. The brand sits on the ACMA list twice, and that is the read.

Ignition Casino

Bamboo Media took the July 2025 warning over Ignition Casino. Research did not find any public CashtoCode listing for Ignition. The warning is the only formal ACMA action tied to the brand in the public record, and it lands as the regulator’s first word on the operator rather than a repeat.

Instant Casino

EOD Code SRL drew the February 2025 warning over Instant Casino. Instant Casino is the second brand that surfaces in payment-side references rather than at the cashier — this time via EcoPayz and PayID listings. The connection is that the operator’s payment stack runs through services that Australian players also use, and those services carry their own screening entries. The ACMA action is over the offer of prohibited services, not the payment rails. The PayID and EcoPayz references are simply the deposit-rail fingerprints the brand leaves behind.

Jackbit

Ryker B.V. drew the April $$\mathrm{CY}$$ warning over Jackbit and CasinOK. Research did not find any public CashtoCode listing for Jackbit. The warning is recent enough that the brand is unlikely to have had a blocking request issued yet, but it is on the trajectory from warning to block that the ACMA’s enforcement has followed repeatedly.

Casino Intense

Sterplay Holding Ltd drew the April 2025 warning over Casino Intense. The brand shows up in payment-side references via AUSTRAC metadata, an iTnews background reference, and a NAB card-block reference — three independent places where the name surfaces in payment-rail screening data rather than at a cashier page. That is more references than most of the brands on this list carry, and it tells a player that the brand has been visible to Australian payment-rail screening long enough to be catalogued.

Sky Crown

Hollycorn N.V. drew the September 2022 warning over Sky Crown and Blue Leo. The warning is the earliest on the list, and the operator has had the longest exposure to ACMA scrutiny. Research did not find any public CashtoCode listing for Sky Crown. The brand is the test case for what an ACMA warning looks like after three years on the regulator’s file — the casino remains live offshore, and the Australian landing is the part the regulator can affect.

What the eleven operators look like as a group

A few patterns sit across the whole list once the eleven warnings are read together:

• The same shell companies reappear. Dama N.V. drew warnings in May 2022, March 2025 and May 2025. Consolutetish S.R.L. drew a single July 2025 warning covering two brands. Hollycorn N.V. drew the September 2022 warning. A punter reading the operator name on the casino’s terms page can cross-check it against the ACMA’s named-operator list in two minutes.
• Two of the eleven warnings are second warnings on the same brand. Rocketplay and Bizzo both have two formal warnings. The pattern is the regulator’s patience being tested.
• Eight of the eleven warnings cite a Curaçao, Cyprus or Eastern European corporate vehicle. None of the operator entities on the warning list is an Australian company, and none holds an Australian wagering licence.

The CashtoCode rail, where it appears at all, is one of several deposit methods listed. The page is built to be useful to a punter who has decided to use the voucher anyway. The legal position is that the offer itself is unlawful.

Why a CashtoCode deposit exists in the first place

The reason offshore casinos list CashtoCode is not that the voucher is cheaper or faster than a card. It is that the voucher is harder for an Australian bank’s gambling block to catch.

A Westpac or ANZ gambling block refuses authorisation on the merchant category code ‘Betting/Casino Gambling’ at the card level. A CashtoCode deposit has no card. The punter buys a voucher at a reseller, pastes the 20-digit code into the cashier, and the casino credits the balance. The block never engages.

The trade-off is at the withdrawal end. CashtoCode does not settle withdrawals. A punter who deposits by voucher and tries to withdraw by voucher is told, plainly, that no withdrawal rail exists. The punter then has to provide a bank account or a wallet to receive winnings, and that bank account or wallet is the part the casino’s own compliance team screens.

The deposit side is built to bypass a block. The withdrawal side is built to confirm a customer’s identity. The two halves work in opposite directions, and a punter who finds that out at the withdrawal stage has already committed the deposit.

Frequently asked questions

Is it legal for an online casino to accept CashtoCode from a player in Australia?

No. The Interactive Gambling Act 2001 makes it an offence to provide online casino games, online pokies or in-play betting to a person in Australia, regardless of the payment method. The ACMA enforces the rule against the provider, not the player. The fact that a casino lists CashtoCode does not change the legal status of the offer.

What is the smallest deposit a CashtoCode casino site usually asks for?

CashtoCode vouchers are sold at fixed denominations by resellers, and offshore casinos set a minimum deposit at the cashier that usually sits around the lowest voucher denomination available in the local currency. Research did not settle on a single minimum across the eleven ACMA-warned brands, because the deposit minimums vary by operator and are not published in a comparable form.

Does a CashtoCode withdrawal clear any faster than a card withdrawal at these sites?

CashtoCode is deposit-only. There is no CashtoCode withdrawal rail. A withdrawal from an offshore CashtoCode casino is processed through the casino’s own pending queue and lands back in an Australian account by bank transfer or card, which is typically slower than the Osko instant transfer an Australian licensed bookmaker would use.

Can CashtoCode be used at every offshore pokies-style site, or only some of them?

Only some of them. CashtoCode is one of several payment rails at offshore casinos and is not universal across the eleven ACMA-warned brands on this list. Two of the eleven show up in payment-side references rather than at the cashier, and nine do not surface in any public CashtoCode listing research could find.

Does depositing with CashtoCode add an extra fee at these casino sites?

CashtoCode states the voucher is free of charge to the customer. Whether the casino adds its own fee on a CashtoCode deposit is the casino’s choice and is not visible from the voucher itself. The terms page at the specific cashier is where any deposit fee would appear.

What should a player do if a CashtoCode deposit does not appear in a casino account?

The first step is to check the voucher code was entered correctly and that the voucher’s value matches the deposit amount. The second step is to contact the casino’s support with the transaction reference. The third step, if the casino does not respond, is to recognise that an offshore casino sits outside Australian consumer protection and that BetStop does not bind it and the ACMA’s enforcement is at the provider rather than the player.