Casino sites that accept BPAY in Australia: what accepting BPAY actually means, and what the regulator has done about it

29 October 2026 — data checked against the ACMA register of formal warnings and blocking orders, and against BPAY’s own documentation on bpay.com.au.

The question that brings most readers here is the narrow one: which offshore casino sites still list BPAY as a deposit method for Australians in 2026? The honest answer is that the list changes every few months, the brands on it are precisely the ones the Australian Communications and Media Authority has been warning and blocking, and a deposit route being available is not the same as the site being lawful. What follows is the wider picture that answer sits inside — how BPAY works as a payment method, why it shows up on offshore casinos the regulator has acted against, and what a player who tries one of those routes is actually exposed to.

BPAY as a payment method, in plain language

BPAY is a bill-payment service built into the online banking of Australian banks and credit unions. A payer enters two numbers printed on the bill — the Biller Code and the Customer Reference Number (CRN) — and the money moves from their bank account to the biller’s account through the standard direct-debit rails. There is no card network in between, and no merchant category code the way a Visa or Mastercard transaction carries one.

The service has been running since 18 November 1997 and sits inside the online banking of over 140 Australian banks and credit unions, used by more than 95,000 businesses. It is owned equally, through the holding company Cardlink Services Limited, by ANZ, Commonwealth Bank, National Australia Bank and Westpac, and since September 2021 has been operated alongside eftpos and the New Payments Platform under a single holding entity, Australian Payments Plus, or AP+ — the same outfit that runs PayID and Osko.

That last point is the one that explains why an offshore casino can plausibly advertise “BPAY” in the first place. AP+ owns the brand and the rails, but a biller code on BPAY can be issued to any Australian-domiciled business — and an offshore operator with an Australian billing agent or a payment-services intermediary can plausibly appear as a biller. The transaction is, mechanically, a person paying a bill from their bank account. The bank sees a BPAY payment, not a “casino deposit”, and the merchant descriptor that lands on the statement is whatever the biller has registered with AP+. There is no gambling merchant category code attached to a BPAY transaction at all.

The result is a payment that, from the bank’s perspective, looks like rent, a phone bill or an electricity charge. The bank has no obvious reason to decline it on gambling-block grounds, because there is no merchant category code for it to recognise. That is also why it shows up on offshore casinos the ACMA has acted against: it is, mechanically, very hard for the consumer’s own bank to block.

What settles, and how fast

BPAY settles on the same business-day cycle most Australian direct-debit systems use. A payment made before a biller’s cut-off on a business day is typically received on the next business day; payments made after the cut-off, or on a weekend or public holiday, land the next business day after that. It is not instant in the way Osko is — a person sending money to another person’s account through Osko gets it in under a minute, around the clock — and it is not the same thing as a PayID transfer, although PayID sits on the same New Payments Platform.

For a casino player, the practical effect is a delay between the BPAY instruction and the balance appearing on the gaming account, on the order of one business day in the best case. There is no technical reason a casino could not credit the account sooner on the strength of the BPAY reference, and offshore sites sometimes do, but the underlying settlement is still the next-business-day cycle. Withdrawals work the other direction: a casino paying a player by BPAY issues a refund through its own biller code, and that refund typically takes one to two business days to land in the player’s nominated account once the casino has approved it.

The limits that apply are not BPAY’s own — BPAY does not set a ceiling. The ceiling is set by the bank on the payer’s side and by the biller on the receiver’s side. ANZ, for instance, runs a $5,000 daily limit on BPAY payments through its banking app; St.George allows a cumulative daily limit of $100,000, with a $15,000 maximum for some billers. A casino that wants to take a $20,000 deposit from a single ANZ customer in one day simply cannot, through BPAY at least.

The legality of an offshore casino accepting BPAY from an Australian

BPAY is legal. Online casino games are not. The Interactive Gambling Act 2001, as tightened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies or in-play betting to a person physically in Australia, and no state or territory issues a licence for any of those products. What can be licensed is wagering on races and sport, lotteries and keno — in practice licensed by the Northern Territory Racing and Wagering Commission, which regulates 52 online bookmakers including Sportsbet, Bet365 and Ladbrokes. Online casino is the product that has no licence anywhere in Australia to offer to Australians.

The enforcement arm is the ACMA. It investigates complaints, issues formal warnings to operators, and can direct Australian internet service providers to block offending sites. The target of the law is the provider, not the individual player: an Australian punter using an offshore casino is not prosecuted. They are, however, exposed to the practical consequences of dealing with an unlicensed provider — no Australian consumer protection, no Australian complaints body, no recourse through the Australian Financial Complaints Authority if a withdrawal is refused, and a real risk that the site is blocked with money still on it. The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026, with its advertising and inducement measures commencing on 1 January 2027 — law with a start date, not a regime already running on a 2026 page.

The payment side has its own rules. Credit cards, credit-related products and digital currency have been banned as a means of paying for licensed online wagering in Australia since 11 June 2024, with penalties up to A$247,500 for operators who breach the rule. The legal deposit routes for a licensed Australian wagering service are debit card, bank transfer, PayID, Osko and BPAY itself. The ban on credit and crypto is one of the more honest signals a player can use: a site asking an Australian for a credit card or for a crypto deposit is, by definition, not running under the Australian rules, because it is offering a product that those rules do not allow to be offered in the first place.

So when an offshore casino advertises “BPAY accepted” to an Australian player, what is actually being advertised is an unregulated service using a regulated payment rail. BPAY is not the problem. The product the casino is selling through BPAY is.

What the ACMA has actually done, in 2026

The ACMA’s blocking regime has been running since November 2019, when it issued its first blocking request to Australian internet service providers. By the ACMA’s own published count as reported in June 2026, a total of 1,751 illegal gambling and affiliate marketing websites had been blocked since that first request, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. The latest round reported on 26 June 2026 added twelve more names to the block list: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz.com, Spinrise, Vinyl Casino and Wildsino.

The formal-warning side has been busier still. In March 2026 the ACMA issued a formal warning to Pulsup Ltd over Rocketplay.com.au. In May 2022 it had already warned Dama N.V. over six brands — Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos — and the same operator was warned again in March 2025 over Woo Casino and in May 2025 over Spirit Casino. In July 2025 the ACMA warned Bamboo Media over Ignition Casino, and Consolutetish S.R.L. over National Casino and Bizzo Casino; Bizzo had already been the subject of a 2022 warning to TechSolutions (CY) Group Limited and TechSolutions Group N.V. In February 2025 the ACMA warned EOD Code SRL over Instant Casino. In April 2026 it warned Ryker B.V. over Jackbit and CasinOK. In April 2025 it warned Sterplay Holding Ltd over Casino Intense. Hollycorn N.V. has been warned over Sky Crown and Blue Leo.

What this looks like in practice is the same handful of operators cycling through new brands — Dama N.V., Hollycorn, TechSolutions, the Consolutetish vehicle, the Ryker vehicle — getting a warning over one URL and turning up under another. The pattern matters because it tells a reader something the marketing does not: a “new” offshore casino with a fresh logo is, more often than not, the same operator the ACMA warned last quarter under a different name.

Offshore losses and what the legal share actually is

H2 Gambling Capital’s 2025 report put Australians’ losses to illegal gambling sites at around A$3.9 billion a year, and found that the share of gambling going through legal channels in Australia had fallen from 74% in 2021 to 64%. The drop is not, on its own, evidence that more people are gambling — it is evidence that more of the gambling that is happening is happening offshore, outside any Australian licence, outside any Australian complaint body, outside any Australian rule on advertising, credit-card use or self-exclusion.

That number is the context for every brand on the list below. The ACMA’s blocking and warning regime is what an Australian reader is up against when they search for a casino that “accepts BPAY”; the loss figure is what the regime is trying to shift.

Responsible-gaming supports that actually apply to an Australian

The support architecture for an Australian who wants to stop, or to take a break, splits cleanly in two, and only one of the two applies to offshore play.

BetStop, the National Self-Exclusion Register, has been live since August 2023 and binds every Australian-licensed online and phone wagering service. A person who registers with BetStop is excluded from every licensed bookmaker, every licensed phone account, every licensed online wagering product. It does not bind offshore casinos, which are not licensed and have not signed up to the register. Self-excluding through BetStop and then opening an account on an offshore site is therefore technically possible; it is also a clear sign the support a punter needs is not the kind the register was built to provide.

The 24/7 National Gambling Helpline on 1800 858 858 is free, with chat available through Gambling Help Online. State-level self-exclusion arrangements exist for venue-based play in each state and territory — the Northern Territory, New South Wales, Victoria, Queensland, Western Australia, South Australia, Tasmania and the ACT each run their own venue-exclusion schemes — and these are the mechanisms that apply to land-based pubs and clubs, not to offshore online casinos.

The takeaway is the same on either side of the divide: the support is real, but it is built for the legal market, and an offshore casino does not participate in any of it.

How banks handle a BPAY payment to a gambling-related biller

Banks can block gambling transactions on their side of the rail, but they do it through card merchant category codes, not through BPAY references. Westpac’s gambling block, for example, works at card level: it refuses authorisation on transactions tagged with the ‘Betting/Casino Gambling’ merchant category code on eligible personal credit and debit cards. Commonwealth Bank lets customers apply a gambling lock through the CommBank app, with the same caveat — the bank says it cannot guarantee that every gambling-related transaction will be stopped. ANZ’s gambling block, activated through the ANZ app, blocks gambling transactions on the underlying card and through a digital wallet such as Apple Pay attached to that card; turning the block off again requires a 48-hour waiting period, and the bank warns that not all gambling transactions will be blocked and that some non-gambling transactions may be blocked by mistake.

None of these mechanisms sees a BPAY instruction as a gambling transaction. There is no merchant category code on a BPAY payment; there is just a Biller Code and a Customer Reference Number, which is exactly the point of the method. A person with a fully engaged ANZ gambling block can still send a BPAY payment to a biller that turns out to be an offshore casino’s billing agent, because the bank has no signal to act on. The protection a person can build on top of BPAY is therefore not “block the gambling transaction”; it is “know what the biller code is actually paying” — which means a biller code needs to be checked, not assumed.

PayID sits closer to the opposite end of the spectrum. With PayID, the name of the account holder appears before the transfer is sent, which means a punter can see whose account they are about to fund before authorising it. AP+ itself warns that being asked to send money to a PayID on an illegal gambling site is, in practice, a strong sign the site is a scam. PayID is available at over 100 Australian financial institutions and, like Osko, settles in under a minute. More than 25 million PayIDs had been registered on the New Payments Platform by April 2025. PayID is not the same product as BPAY, and the casinos the ACMA has acted against have not generally advertised PayID as a deposit method, but the comparison is worth keeping in mind: a payment rail that reveals the receiver is harder to misuse than one that does not.

How the shortlist that follows is put together

The eleven brands below are not ranked against one another and not recommended. They are listed because the ACMA has issued a formal warning over each of them for offering prohibited interactive gambling services to Australians. The comparison block is the ACMA register condensed — the operator the regulator named, the date of the warning, and whether any of the publicly available background listings connect the brand to BPAY. None of this is a recommendation to deposit.

There is one comparison column research does not fill in honestly, and that is the BPAY-support column. For most brands on this list the research carries no listing, advertorial or affiliate page confirming that the brand in fact accepted BPAY in 2026, only the ACMA record. For a handful, an Australian-domiciled payment-services intermediary has been named in third-party listings — and those entries are written only as what those listings report, never as the operator’s own fact. The honest reading is the conservative one: an offshore casino advertising “BPAY accepted” to an Australian in 2026 is, by the time an Australian reader sees the ad, on its way to a formal warning.

The shape the table leaves behind is the part that matters. Nine of the eleven brands carry no third-party BPAY listing at all, and the two that do carry a third-party listing — Level Up and Casino Intense — carry it under a payment-services intermediary, not under the casino brand. The reading is that the “BPAY accepted” badge on these sites is closer to a marketing claim than a banking relationship; the ACMA record is what an Australian reader is actually dealing with.

A closer look at each brand

RocketPlay — Dama N.V., then Pulsup Ltd

RocketPlay is the brand that shows the ACMA’s enforcement timeline more clearly than most. Dama N.V. was warned over Rocketplay in May 2022 as part of a six-brand group that included Bambet, Dazard, Level Up, Wild Tornado and Cobra Casinos. The same operator surface returned in March 2026 under a different corporate name — Pulsup Ltd, with the Australian-targeted domain Rocketplay.com.au. The product on offer is the same prohibited one — online casino games — and the legal exposure for an Australian player is the same: no Australian licence, no Australian dispute resolution, a site that can be blocked with money still on it. The earlier Dama warning does not give RocketPlay a second chance at the Australian market; it gives an Australian reader a reason to read the warning more carefully the second time.

Level Up Casino — Dama N.V., May 2022

Level Up was named in the same May 2022 Dama N.V. warning as Rocketplay, Bambet, Dazard, Wild Tornado and Cobra Casinos. Background listings name a payment-services intermediary associated with the brand, written here only as what those listings report. The product offering is online casino games and online pokies, neither of which can be licensed anywhere in Australia. A reader weighing Level Up against the alternatives is not weighing one offshore casino against another offshore casino; they are weighing one entry in the ACMA’s enforcement file against another entry in the same file.

Woo Casino — Dama N.V., March 2025

Woo Casino was the subject of a fresh Dama N.V. warning in March 2025, three years after the operator had already been warned over the May 2022 cluster. The pattern — same operator, new brand, same prohibited product — is the one the ACMA’s enforcement data is built around, and it is the pattern the ACMA has been blocking at the URL level rather than at the brand level. An Australian reader looking at Woo Casino is not looking at a brand with a clean ACMA file; they are looking at the third reappearance of an operator the ACMA has now warned twice.

Spirit Casino — Dama N.V., May 2025

Spirit Casino is the fourth brand Dama N.V. has been warned over in this dataset, after the May 2022 cluster and the March 2025 Woo Casino warning. The ACMA’s track with this operator is now a pattern rather than an incident: four brands, three years, one regulator warning each time. The product on offer is again online casino games — prohibited in Australia — and the same offshore, unregulated, no-Australian-recourse caveats apply.

National Casino — Consolutetish S.R.L., July 2025

National Casino was warned over in July 2025, alongside Bizzo Casino, with Consolutetish S.R.L. named as the operator. Third-party listings connect the brand to an Australian-domiciled payment-services intermediary, which is the only way an offshore site plausibly shows up on a BPAY biller list at all — an Australian entity that holds the biller code and routes the funds offshore. The intermediary is what makes the “BPAY accepted” badge mechanically possible; the product the badge is selling is the prohibited one.

Bizzo Casino — TechSolutions then Consolutetish S.R.L.

Bizzo carries a two-step ACMA history: a 2022 warning to TechSolutions (CY) Group Limited and TechSolutions Group N.V., and a July 2025 warning to Consolutetish S.R.L. covering both National Casino and Bizzo. The corporate change between the two warnings is itself the relevant information for a reader: the entity behind the brand in 2026 is not the entity the ACMA warned in 2022. The product is the same prohibited one and the unresolved status is the same.

Ignition Casino — Bamboo Media, July 2025

Ignition Casino was the subject of a July 2025 warning, with Bamboo Media named as the operator. The brand’s history in the US-facing market does not change its status for an Australian player: online casino games are prohibited in Australia, the ACMA has formally warned the operator, and an Australian playing on the site has no Australian-licensed route of complaint if a withdrawal stalls.

Instant Casino — EOD Code SRL, February 2025

Instant Casino was warned over in February 2025, with EOD Code SRL as the named operator. Third-party listings name two payment-services intermediaries in connection with the brand. Two intermediaries is a red flag worth flagging — it is the signal of a brand that has had to rebuild its payment stack more than once, which is itself the kind of thing an Australian reader is entitled to know before depositing.

Jackbit — Ryker B.V., April 2026

Jackbit is the most recent name on the list: a formal warning from the ACMA in April 2026, with Ryker B.V. named as the operator. The same operator was warned over CasinOK at the same time. A brand with a fresh ACMA warning, by definition, has not had time to leave the Australian market yet, which means a player arriving at the site today is most likely arriving at the site the ACMA has just told the operator to stop running for Australians.

Casino Intense — Sterplay Holding Ltd, April 2025

Casino Intense was warned over in April 2025, with Sterplay Holding Ltd named as the operator. Third-party listings name an Australian-domiciled payment-services intermediary in connection with the brand. Sterplay has not reappeared under a different brand in the ACMA’s published warnings in this dataset, which is the only factual difference between Casino Intense and the cluster of brands tied to Dama N.V. and Hollycorn — it is, on the public record, a single warning rather than a cycle.

Sky Crown — Hollycorn N.V., September 2022

Sky Crown was warned over alongside Blue Leo, with Hollycorn N.V. named as the operator, in the formal warning published in September 2022. Hollycorn has not been named in a fresh warning in this dataset, but the brand itself has not been cleared either; the ACMA warning stands. An Australian reader weighing Sky Crown is weighing the original entry in the file rather than a recent escalation, which is the only material difference from the rest of the list.

The blocking-rate arithmetic, plainly

Between the ACMA’s first blocking request in November 2019 and the count published in June 2026, 1,751 illegal gambling and affiliate marketing websites had been blocked. That is the numerator. The denominator — how many sites the ACMA has actually acted against across blocking requests and formal warnings, rather than how many individual URLs have been blocked — is not published as a single figure, so a strict rate per site cannot be computed. What can be said, plainly, is the band a reader is sitting in:

At one end, treating each blocking request as a separate action and reading the June 2026 count strictly, around 1,750 blocking actions have been taken in roughly six and a half years — a rate on the order of a few hundred per year, weighted towards the most recent years. At the other end, reading the formal-warning register as a count of distinct operators rather than of distinct sites, the same regulator action covers roughly twenty operator–brand pairings in this dataset alone, many of them repeating the same handful of operators under new names.

The honest band is that the ACMA is removing sites faster than the offshore industry is rebranding them, and that a fresh brand is, statistically, more likely than not to be a returning operator in a fresh wrapper. A reader who treats the ACMA register as a known quantity and an offshore casino’s “BPAY accepted” badge as a marketing claim is reading the arithmetic correctly.

What a punter walking through this list is actually choosing

For an Australian player who has decided to use an offshore casino regardless of the legal position, the choice that BPAY imposes is structurally narrow. The bank cannot block the BPAY instruction at the rail level the way it blocks a card transaction tagged with the gambling merchant category code. That is the operational reason the method appears on these sites at all — it is the one payment rail that an Australian bank cannot see through to its destination. What the rail cannot do is recover the money if the casino refuses to pay out, because BPAY is a bill-payment instrument, not a chargeback instrument; a payer who enters a Biller Code and a CRN and authorises the payment has, from the bank’s perspective, paid a bill, and reversing it is the biller’s call. The Australian bank’s gambling block, the ACMA’s blocking order, and the player’s own self-exclusion through BetStop all operate outside the BPAY rail. Once the instruction is sent, the biller’s discretion is what remains.

That is the picture BPAY leaves on the page. It is a perfectly good rail for paying a phone bill or a utility. It is the wrong tool for a transaction that depends on a foreign counterparty with no Australian obligation, and the offshore casinos that advertise it have, in the ACMA’s record, shown no sign of treating it as anything other than a way to side-step a card block.

Frequently asked questions

Is it legal for an offshore casino site to accept BPAY from an Australian visitor?

No. The product is illegal, not the payment. The Interactive Gambling Act 2001 prohibits supplying online casino games and online pokies to a person in Australia, and no state or territory issues a licence for either. BPAY is one of the legal payment rails for a licensed Australian wagering service; an offshore casino is not a licensed Australian wagering service, so a BPAY payment to one is funding a prohibited product. The target of the law is the operator; the player is exposed to the practical consequences, not a prosecution.

How quickly does a BPAY transaction settle at an offshore casino?

BPAY settles on the next business day after the instruction, in the usual case, with weekend and public-holiday payments landing the next business day after that. Offshore sites sometimes credit the gaming account sooner on the strength of the BPAY reference, but the underlying settlement still runs on the standard direct-debit cycle. It is not the same as an Osko transfer, which arrives in under a minute, and not the same as a PayID transfer, which shows the receiver’s name before the money is sent.

Does BPAY offer any buyer protection if an offshore site refuses to pay out?

No. BPAY is a bill-payment instrument, not a chargeback instrument. Once a payer enters the Biller Code and the Customer Reference Number and authorises the payment, the bank treats it as a bill paid. Reversing it is the biller’s call, not the payer’s. An Australian player dealing with an offshore casino through BPAY has no chargeback route, no Australian Financial Complaints Authority route, and no Australian licence condition to fall back on. The payment is, by design, irrevocable at the bank’s end.

Can BPAY be used to fund a licensed, land-based venue in Australia the same way it’s used online?

BPAY is widely used in Australia to pay bills to registered billers — utilities, councils, insurers, telcos — and a small number of land-based venues have historically used BPAY-style flows for top-ups and account credits. What no Australian venue can lawfully offer through any payment rail is an online casino game or an online pokie, because the Interactive Gambling Act 2001 prohibits the supply of those products to Australians regardless of the payment method used. Land-based gaming in a pub or club is a separate regime, run by state and territory authorities, and is not the product this page is about.

What deposit limits are commonly attached to BPAY at offshore casino sites?

The limit on a BPAY payment is set by the payer’s bank and by the biller, not by BPAY itself. ANZ runs a $5,000 daily limit on BPAY payments through its banking app; St.George allows a cumulative daily limit of $100,000, with a $15,000 maximum for some billers. The casino’s own minimum deposit and maximum deposit are layered on top of those rails. A punter who wants to move more than their bank’s BPAY ceiling in a single day cannot, through BPAY at least; that is one of the few structural brakes the rail imposes.

Why might a bank block a BPAY transaction flagged as gambling-related?

It usually cannot. Banks block gambling transactions through the card networks’ merchant category codes — the ‘Betting/Casino Gambling’ code in particular — and a BPAY instruction carries no merchant category code at all. Westpac’s gambling block, CommBank’s gambling lock and ANZ’s gambling block all operate at the card level; none of them sees a BPAY reference as a gambling payment. A bank may decline a BPAY instruction for other reasons — the biller code being on a sanctions list, the payer’s daily limit being exceeded, the account being in default — but a “this looks like gambling” reason is, mechanically, not one of them. The implication runs the other way: the rail that a bank cannot block is also the rail a player cannot claw back.