Choosing a Payment Gateway for Gaming & Crypto (2026)
How to choose the right payment gateway for gaming or crypto in 2026: MCC 7995, the Visa VAMP 1.5% limit, Mastercard registration fees, reserves, cascading.
Contents
Choose a gaming payment gateway in this order: will it legally carry gambling or crypto, will it convert in your markets, and will it keep you under the card networks’ chargeback limits — only then compare fees. Choosing a payment gateway for a gaming or crypto operation is not like choosing one for a shop. The decision that looks the same on a comparison table — fees, integration, uptime — hides the things that actually decide whether you get paid: whether the provider is allowed to carry gambling at all, whether it converts in the markets you care about, and whether it holds up when one acquirer pauses you. In our practice, operators who pick a gateway on price alone stall within months; the ones who pick on approval rate and resilience keep taking deposits.
This guide is about the selection itself — the criteria that separate a PSP that will carry you from one that will drop you, the 2026 Visa and Mastercard rules most gateway comparisons leave out, and a checklist you can run before you sign. It assumes you already understand the wider stack; if you don’t, read our iGaming payment processing overview first, then come back here to choose.
- Rule out any gateway that won’t carry gambling: real-money gaming is MCC 7995, and generalist processors (Stripe, PayPal, Square) prohibit it — so high-risk approval is the first pass/fail filter, not a feature.
- Choose on approval rate and local APM coverage per target market, not headline fees — a 3% cheaper gateway that converts 8% worse costs you far more.
- Never rely on one PSP: cascade across two or three for redundancy, and compare rolling-reserve terms (commonly 5–10%, held ≈180 days) as carefully as pricing.
- Since 1 April 2026 Visa flags a merchant as Excessive at a 1.5% fraud-plus-dispute ratio (with ≥1,500 events a month) in the US, Canada, the EU and Asia-Pacific. Ask each gateway what tools it gives you to stay under it.
- Gambling acquiring now carries explicit network costs — Mastercard’s USD 1,000/yr per merchant plus 0.02 USD and 10 bps per transaction outside Europe — so ask which fees a gateway passes through.
- Confirm settlement currency and frequency land cleanly in an EMI or neobank via a Cyprus payment agent — and add a separate crypto rail rather than expecting one gateway to do both.
First filter: will it even carry gambling or crypto?
Before any other criterion matters, one question rules gateways in or out: is this provider licensed and willing to process your vertical? Real-money gambling carries the card-scheme merchant category code MCC 7995, and Visa and Mastercard run dedicated integrity programs around it. Generalist gateways — Stripe, PayPal, Square — prohibit gambling in their acceptable-use policies and will freeze balances and claw back funds if they detect it. Crypto is treated with the same suspicion by mainstream processors. So the first pass is binary: a gateway that isn’t set up for high-risk gaming or crypto is not a cheaper option, it’s a non-option.
This is also where sequencing bites. No serious acquirer or PSP underwrites an unlicensed operation, so you cannot even begin approval without a licence in hand or clearly in progress. That is why gateway selection belongs alongside your gambling licence or crypto licence application — not after it. If banking keeps failing you at this stage, our breakdown of why high-risk banking fails explains the underwriting reasons behind the rejections.
The evaluation criteria that actually decide it
Once a gateway clears the high-risk filter, judge it on the criteria below — roughly in this order of importance. Fees matter, but they sit near the bottom, because a cheap gateway that converts poorly or drops you is the most expensive choice you can make.
| Criterion | What to check | Why it decides the launch |
|---|---|---|
| High-risk approval | Accepts MCC 7995 / crypto; licensed for your vertical | Pass/fail — everything else is moot without it |
| Local APM coverage | The wallets, bank transfers and vouchers each target market actually uses | Cards alone leave deposits on the table in most markets |
| Approval / conversion rate | Real acceptance rates by market, not a headline average | A few points of conversion dwarf any fee saving |
| Cascading support | Can route declines to a backup PSP; plays well in a multi-gateway setup | Redundancy keeps you live when one acquirer pauses |
| Rolling reserve | Percentage, hold period, release schedule | Locks working capital — terms vary widely between gateways |
| Settlement | Currency, frequency, and fit with an EMI/neobank + Cyprus agent | Determines when and where you actually see the money |
| Integration / API | Documented API, tokenisation, reporting, sandbox | A bad integration delays go-live and hides costs |
| Fees | MDR, per-transaction, chargeback and reserve costs — fully loaded | Real, but only after the criteria above are satisfied |
MCC 7995 and the network fees a gateway passes on
Visa’s rules are explicit about gambling. A merchant offering online gambling must hold a valid licence and must process under MCC 7995 — “even when gambling services are not the Merchant’s primary business”. The acquirer must be approved by Visa to carry high-integrity-risk merchants and must register each one before submitting its transactions; acquiring an unregistered high-integrity-risk merchant exposes the acquirer to penalties that Visa’s rules set at USD 2,000 per merchant per month, on top of programme-level fines. That is why a gateway that “can probably take you” under a softer code is not a shortcut — it is a gateway that will terminate you when the miscoding is found.
Registration also costs money, and in 2026 it got more expensive:
| Network charge | Amount | Scope and status |
|---|---|---|
| Mastercard specialty merchant registration | USD 1,000 per merchant, annual | From 1 May 2026 — US, Middle East & Africa, Asia-Pacific (ex. Japan, Indonesia), Latin America (ex. Brazil, Mexico, Colombia). Not Europe. |
| Mastercard specialty transaction + volume fee | USD 0.02 per transaction + 10 bps | From 3 June 2026, same regions |
| Mastercard high-risk acquirer licence | USD 50,000, annual | Charged to the acquirer — priced into your rate |
| Visa high-integrity-risk merchant registration | ≈ USD 950, annual | Reported by processors; not published by Visa |
| Visa integrity risk fee (MCC 7995) | USD 0.10 per transaction + 10 bps | Reported by processors; regional scope not confirmed |
None of this appears on a gateway’s headline pricing page, and gateways handle it differently: some bundle it into the discount rate, some itemise it, some pass it through at cost. The Mastercard figures come from the network’s own bulletin; the Visa fee figures are what processors report, so treat them as indicative. Either way, ask the question in writing before you sign — on a high-volume casino with small average deposits, a per-transaction network fee moves your unit economics more than a quarter-point on the discount rate.
The chargeback limits that end gaming merchant accounts
The most common way a gaming operator loses a gateway is not a pricing dispute. It is breaching a card-network monitoring programme, after which the acquirer faces fines and quietly offboards the merchant. Both networks publish their thresholds, and in 2026 Visa’s got tighter.
Visa — VAMP. In 2025 Visa merged its fraud and dispute monitoring programmes into the Visa Acquirer Monitoring Program. The ratio counts card-not-present fraud reports (TC40) plus disputes (TC15), divided by settled transactions. Disputes resolved through Visa’s pre-dispute tools, and fraud reports that qualify for Compelling Evidence 3.0, do not count.
| Region | Excessive merchant ratio | Minimum monthly fraud + disputes |
|---|---|---|
| US, Canada, EU, Asia-Pacific | ≥ 2.2% until 31 Mar 2026, ≥ 1.5% from 1 Apr 2026 | 1,500 |
| Latin America | ≥ 1.5% | 1,500 |
| CEMEA | ≥ 2.2% | 150, and ≥ USD 75,000 |
Processors report the enforcement fee for an Excessive merchant as USD 8 per fraud report or dispute, billed through the acquirer. Acquirers are measured too, at portfolio level — Above Standard from 0.5% and Excessive from 0.7% — which is exactly why an acquirer will cut one bad gaming merchant rather than let it drag the whole book over the line.
Mastercard — Excessive Chargeback Program. A merchant is an Excessive Chargeback Merchant at a 1.5% chargeback-to-transaction ratio with at least 100 chargebacks in a month, and High Excessive at 3% with at least 300. The ratio divides this month’s chargebacks by last month’s transactions. Fines start in the second month in the programme and escalate — to EUR/USD 25,000 a month by month seven for an Excessive merchant and 50,000 for a High Excessive one — and exiting requires three consecutive months under the threshold.
Some gateway comparisons still describe a 2–3% chargeback rate as typical for gambling. Under VAMP, from April 2026, a merchant at that ratio with 1,500 or more fraud reports and disputes a month is Excessive in the US, Canada, the EU and Asia-Pacific. So the selection question is not just “will you board us?” but “what alerts, pre-dispute tools and 3-D Secure set-up will you give us to stay under 1.5%?” A gateway without a credible answer is pricing you for a short relationship.
Local payment methods and approval rates
The single biggest difference between gateways is not the card fee — it’s whether they convert in your markets. Cards are only part of how players deposit. In most target markets, local alternative payment methods (APMs) — bank-transfer schemes, e-wallets, vouchers, instant-payment rails — carry a large share of volume, and each market’s mix is different. A gateway that is excellent for card processing in one region can be almost useless in another because it lacks the APMs players there expect.
So evaluate coverage market by market, then evaluate approval rate the same way. Ask for real acceptance rates by country and payment method, not a global average that flatters the weak markets. The maths is unforgiving: a gateway that charges a slightly higher merchant discount rate but approves eight percent more transactions will out-earn a “cheaper” gateway many times over. Conversion is the metric that pays your bills, and it is the one operators most often fail to ask about before signing.
Cascading, rolling reserves and settlement
Three operational realities separate a durable payment setup from a fragile one, and each is a selection criterion in its own right.
- Cascading and redundancy. Never build on a single gateway. Mature operators run two or three PSPs in parallel and cascade transactions across them — when one declines or pauses, the next picks up the volume. This lifts blended approval rates and, more importantly, means no single provider can take you offline. When you evaluate a gateway, ask how it behaves inside a multi-PSP cascade, not just on its own.
- Rolling reserves. High-risk acquirers hold back a slice of turnover — commonly 5–10% for around 180 days — against chargebacks and refunds. Our iGaming payment solutions page sets out the full cost stack, including the 2026 VAMP chargeback thresholds. This is normal, but the terms vary, so compare them like-for-like: the percentage, the hold period, and how the reserve is released. A gateway with a lower headline fee but a heavier reserve can tie up more cash than a pricier competitor.
- Settlement currency and frequency. Confirm which currencies the gateway settles in and how often, because that money has to land somewhere workable. It will not be a retail high-street bank — those decline gambling and crypto settlement — but an EMI (electronic money institution) or neobank account set up for the structure. Match the settlement currency to that account to avoid needless conversion, and check the settlement frequency fits your cash-flow.
How much cash a reserve actually locks is easy to underestimate, because it builds up before it starts releasing. Take a casino processing €100,000 a month in card deposits on a 7% reserve held for 180 days: the gateway keeps €7,000 each month, and nothing comes back until month seven. By the end of month six, €42,000 of your revenue sits with the acquirer — and it stays at roughly that level for as long as volume holds, releasing the oldest month as each new one is withheld. Double the volume and the locked balance doubles. The reserve and processing figures quoted across the market (commonly 5–10% for 90–180 days) are published by processors rather than by the networks, so the only numbers that matter are the ones in your own contract.
Two gateways quoting the same merchant discount rate can differ wildly once you factor in the rolling reserve and chargeback fees. Always model the fully-loaded cost — reserve included — before you choose. Our high-risk merchant account guide walks through how those terms are negotiated and what “good” looks like.
Payouts in euros: instant transfers and name checks
Withdrawal speed is now a conversion factor in its own right, and EU rules changed what a bank-based payout can do. Under the Instant Payments Regulation, payment service providers in the euro area have had to send SEPA Instant transfers since 9 October 2025, at no higher price than a standard transfer, and must offer Verification of Payee — a check of the beneficiary’s name against the IBAN — on both instant and standard transfers. Providers in EU states outside the euro area follow by 9 July 2027, and euro-area payment and e-money institutions by 9 April 2027.
Two practical consequences for gateway selection. First, ask whether the provider’s payout rail uses SEPA Instant for euro withdrawals; players increasingly compare how fast they get paid. Second, Verification of Payee will surface a mismatch between the account name and your KYC record at the moment of payout — useful as a fraud control, but only if your payout flow handles a “no match” response rather than silently failing.
The Cyprus payment agent behind the gateway
There is a structural reason a gateway that looks perfect on paper still won’t onboard you: acquirers don’t like plugging a raw offshore operating company straight into their processing. Serious gaming structures route the flow of funds through a dedicated payment agent — a separate company that holds the acquirer and PSP contracts and settles on the operator’s behalf.
In our structures that payment agent is always incorporated in Cyprus. It’s an EU jurisdiction acquirers recognise and trust, with the corporate substance and EU banking access to hold the payment-agent role for a gaming group — a far stronger counterparty than an anonymous offshore shell. This matters for gateway selection because the same PSP will approve a Cyprus-agent structure that it would reject as a bare offshore entity. When you shortlist gateways, you are really shortlisting gateways that fit this structure: agent, acquirer, and EMI/neobank set up together. A fast, low-cost licence such as an Anjouan or Curaçao permit paired with a Cyprus agent is a common, bankable base for the whole payment layer.
Crypto rails: a separate choice
If you take crypto, treat it as its own selection, not a checkbox on a card gateway. Crypto deposits and withdrawals run through dedicated crypto payment rails, and the good news is they cut chargeback exposure to near zero — there is no card issuer to reverse a settled transaction. The trade-off is a different compliance burden: the FATF Travel Rule, on-chain monitoring, and sanctions screening apply to crypto flows in a way they don’t to cards. Offshore regimes like Anjouan are widely used by crypto casinos, which is one reason operators pair crypto rails with fiat there — with the crypto AML programme as the operator’s own.
Most serious operators therefore run a hybrid: high-risk card PSPs plus APMs for reach, and a crypto processor for resilience and cost — all settling into the same EMI/neobank structure. Choose the crypto rail on its own AML posture, coin support and settlement terms; don’t assume your card gateway’s crypto add-on is competitive. For the banking side of crypto specifically, see our guide to crypto-friendly banking and how a gaming company bank account is actually opened.
Your selection checklist
Before you sign with any gateway, run it against every line below. If it fails the first, stop — nothing else can rescue it.
- High-risk approval: confirmed to carry your vertical (MCC 7995 gambling and/or crypto), licensed accordingly.
- Local APMs: covers the specific payment methods your target markets actually use, market by market.
- Approval rates: real acceptance figures by country and method — not a global average.
- Cascading: works cleanly as one of two or three PSPs, so you are never single-threaded.
- Rolling reserve: percentage, hold period and release schedule understood and budgeted — including the balance it locks by month six.
- Network rules: correct MCC 7995 coding and registration confirmed; which Visa and Mastercard high-risk fees are passed through, and at what rate.
- Chargeback defences: fraud alerts, pre-dispute tools and 3-D Secure set-up that keep you under Visa’s 1.5% VAMP ratio and Mastercard’s 1.5% ECM line.
- Settlement and payouts: currency and frequency confirmed, landing in an EMI or neobank via a Cyprus agent; SEPA Instant and Verification of Payee handled on euro withdrawals.
- Integration: documented API, tokenisation, reporting and a sandbox you have actually tested.
- Fully-loaded fees: MDR plus per-transaction, chargeback and reserve costs modelled together.
Choosing a payment gateway well is really choosing a payment structure — the right PSP mix, sitting behind a Cyprus agent, settling into an EMI or neobank, with crypto rails for resilience. Get the criteria right in the order above and you build something that keeps taking deposits when a single provider wobbles; get them wrong and you learn the hard way, live, with players’ funds in the balance. We build this layer alongside the licence and the high-risk banking & payments desk on the same file, modelling the fully-loaded cost before you commit. When you’re ready to map gateways to your product and markets, book a free consultation and we’ll design the whole stack with you.
Frequently asked questions
What makes a payment gateway suitable for a gaming operation?
It has to be licensed and configured to carry gambling — meaning it accepts the card-scheme code MCC 7995 and holds acquirer relationships that allow real-money gaming. Generalist gateways like Stripe, PayPal and Square prohibit it outright. A suitable PSP also supports the local alternative payment methods your target markets actually use, publishes realistic approval rates, and can be cascaded alongside other providers for redundancy.
How many payment gateways should a gaming operator use?
More than one. Mature operators run several PSPs in parallel and cascade transactions across them — routing a declined attempt to the next provider to lift the overall approval rate and survive any single acquirer pausing them. A single gateway is a single point of failure. Two or three, chosen for complementary market coverage and card/APM support, is the practical baseline for a serious launch.
What is a rolling reserve on a gaming payment gateway?
A rolling reserve is a percentage of turnover (commonly 5–10%) that the acquirer holds back for a fixed period (often 180 days) to cover potential chargebacks and refunds. It is standard in high-risk processing, not a red flag. When you compare gateways, compare the reserve terms — the percentage, the hold period and the release schedule — and budget the amount as working capital that is temporarily locked, not lost.
What chargeback rate will get a gaming merchant flagged by Visa?
Under the Visa Acquirer Monitoring Program (VAMP), a merchant in the US, Canada, the EU or Asia-Pacific is Excessive from 1 April 2026 when its ratio of card-not-present fraud reports plus disputes to settled transactions reaches 1.5% (150 basis points) and it logs at least 1,500 such events in the month. Before April 2026 the line was 2.2%. The iGaming chargeback rates of 2–3% that some providers call normal would be Excessive at that volume. Mastercard runs a separate programme: Excessive at 1.5% with at least 100 chargebacks, High Excessive at 3% with at least 300.
What does it cost a gateway to carry gambling, and do I pay it?
The card networks charge for high-risk gambling acquiring, and acquirers pass it on. From 1 May 2026 Mastercard charges USD 1,000 a year per specialty merchant in the US, Middle East & Africa, most of Asia-Pacific and most of Latin America, plus USD 0.02 per transaction and 10 basis points of volume from 3 June 2026 (Europe is outside that bulletin). Processors report Visa's high-integrity-risk registration at about USD 950 a year. Ask every gateway which of these it passes through and how.
Can one gateway cover both card payments and crypto?
Rarely well. Cards and alternative payment methods run through high-risk acquirers, while crypto deposits and withdrawals run through separate crypto payment rails with their own AML obligations (the Travel Rule, on-chain monitoring). Most operators run a hybrid: high-risk card PSPs plus a crypto processor, settling both into an EMI or neobank account. Choose each rail on its own merits rather than expecting one provider to do everything.
Does the payment gateway settle money directly to my company?
Usually not directly. In a gaming structure the acquirer settles to a dedicated payment agent — in our structures always incorporated in Cyprus — which then settles into an EMI or neobank account for the operating structure, not a retail high-street bank. When you evaluate a gateway, confirm the settlement currency, the settlement frequency, and that its flow of funds fits an EMI/neobank plus a Cyprus agent.
Do I need a licence before a payment gateway will approve me?
Yes. No serious acquirer or PSP will underwrite an unlicensed gambling or crypto operation — the licence is the precondition for the whole approval process. That is why gateway selection should run alongside the licence application, not after it: you scope the PSPs, APMs and settlement while the licence is in progress, so you can integrate and go live the moment it is granted.
Sources
- Visa — Acquirer Monitoring Program (VAMP) fact sheet
- Visa Core Rules and Visa Product and Service Rules (18 April 2026) — MCC 7995, high-integrity-risk merchants
- Mastercard bulletin 12568.1 (28 Oct 2025) — specialty merchant registration and fees, via PaymentCloud
- J.P. Morgan Merchant Services — Mastercard Excessive Chargeback Program guide
- European Central Bank — Instant Payments Regulation (EU) 2024/886
- FATF — International AML/CFT standards (the 40 Recommendations)
- European Banking Authority — Payment Services Directive (PSD2)
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
Get the cheatsheet
Stay ahead of the rules.
Licensing regimes shift fast. Get Vantegris updates and our 2026 licence cost & comparison cheatsheet — straight to your inbox, no noise.
Licence, done right.
300+ licences obtained across 40+ jurisdictions. Book a free consultation.
Book a free consultation