Credit card deposits at UK-licensed casino sites in 2026: what the licence does, what it costs

Updated September 2026

Licensed

Available in GB

Fast payouts

18+ Only

A credit card deposit at a licensed British online casino is, on paper, ordinary. It moves through the same checkout, hits the same KYC checks, and lands in the same account balance as any debit card or bank transfer. The detail that turns it into something worth a separate page is what happened on 14 April 2020: the Gambling Commission’s credit card ban made this whole category a regulator-shaped object. Anyone searching for “credit card casinos” in the UK today is, whether they realise it or not, searching inside the gap that ban opened — between what their card will technically do and what a Commission-licensed cashier will allow it to do. This page walks that gap, shelf by shelf, and tells you what it costs to play on the licensed side of it.

Last verified against the Gambling Commission’s public register on 23 September 2026 — every licence cited below is taken from that register and matches its entry.

The settlement: what changed in 2020 and what still sits on top of it

The headline rule is short. The Gambling Commission banned the use of credit cards for gambling on 14 April 2020. The ban covers all forms of remote gambling — casino, sportsbook, bingo, poker, lottery played online — and non-remote betting such as betting shops. It also covers the indirect route: an e-wallet funded from a credit card cannot be used to gamble, unless the e-wallet provider can demonstrably prevent credit-card funding of gambling transactions at its end. A non-remote (face-to-face) lottery is the only carve-out.

Why it happened is the useful background. When the Commission consulted on the policy it cited research finding that 22% of online gamblers who used credit cards to gamble were classed as problem gamblers. It also cited UK Finance data showing that around 800,000 UK consumers used a UK-issued credit card to gamble in 2018. A credit card is, structurally, a small, short-term, high-interest loan. Putting it in front of a losing streak is what the rule was built to stop.

The rule itself sits inside a wider frame that does more work than people credit. To serve customers in Great Britain, an operator must hold a Gambling Commission licence issued under the Gambling Act 2005 — the Commission’s remit covers England, Scotland and Wales, not Northern Ireland. The Gambling (Licensing and Advertising) Act 2014 closed the old offshore loophole: any operator taking GB customers needs a Commission licence wherever it is based, and a Curaçao, Maltese or Gibraltar licence is not a substitute on its own. The credit card ban and the licensing regime travel together, and the rest of this page is what that combination looks like in practice.

The register, the licence number and what they actually prove

The Gambling Commission’s public register of gambling businesses is the only place a UK player needs to check. As of 18 September 2026 it listed 139 businesses holding an active remote casino operating licence, and the register itself can be searched online or downloaded in full as a CSV. That figure is the universe this page works inside. A brand that does not appear on the register — or appears only as an inactive or white-label entry tied to someone else’s licence — is not, in the legal sense the Commission recognises, a UK online casino.

The register’s domain list is the bit players actually use. Each website is recorded against the licence account that operates it, with one of three statuses: Active, Inactive or White Label. On 18 September 2026 the domain list held 1065 active entries and 361 white-label entries. A white-label site trades under another company’s licence: it does not hold its own remote operating licence, and the licence number, the complaints route and the GAMSTOP integration all belong to the host. From a player’s point of view, a white-label domain is the same cashier — same games, same deposit rules, same self-exclusion button — but the regulated entity named on the register is the host, not the skin.

The licence number itself is worth knowing how to read. It takes the form (account)-R-(number)-(suffix), where the leading six digits repeat the licence holder’s account number and the R marks a remote (online) licence. A real example: 055149-R-331499-004, the remote casino licence carried by Hillside (UK Gaming) ENC, the entity behind bet365. Anyone holding a licence number in that shape can have it confirmed on the register in a few seconds. Anyone unable or unwilling to produce one has not earned the rest of the conversation.

The register is also the place the Commission’s enforcement work shows up. The Commission can issue cease-and-desist notices, refer sites for search-engine delisting, and pass payment-blocking and hosting referrals to the relevant providers. It does not have ISP-blocking power, which is why unlicensed sites aimed at British players still appear from time to time. The distinction matters because the consequences of landing on one are entirely different: no GAMSTOP integration, no Commission complaints route, no approved alternative dispute resolution (ADR). The page on the unlicensed side is paid for in protections the player quietly loses.

What still applies to a credit card account

The credit card ban removed one payment method from the cashier. It did not, and was not designed to, remove any of the player-protection rules that sit on top of the rest of the account. A credit card account inherits them all.

Minimum age is 18. Name, address and date of birth are verified before the first deposit or any play — this has been Commission policy since 7 May 2019. Verification cannot be skipped by funding the account differently; a debit card and a bank transfer hit exactly the same KYC steps as the credit card the cashier will not accept.

Online slots carry a per-game-cycle stake limit. For players aged 25 and over it is £5, in force since 9 April 2025. For players aged 18 to 24 it is £2, in force since 21 May 2025.

The limit is per spin, applied at the slot itself, and applies regardless of how the deposit was funded. Auto-play has been banned since 31 October 2021, slot spins cannot run faster than 2.5 seconds, and losses presented as wins — a celebratory sound and animation on a spin that paid out less than the stake — are also banned.

Deposit limits are partly the player’s job. The Commission does not set a state-wide ceiling, but since 31 October 2025 operators have had to prompt every new customer to set a financial limit before the first deposit is accepted. Once the account is open, daily, weekly and monthly deposit caps can be set or lowered at any time; raising them carries a cooling-off period so the change cannot be made impulsively. A credit card account cannot bypass this either.

Reality checks pop up during play and tell the customer how long they have been on the session and what the net position is. GAMSTOP, the national online self-exclusion register, has been a mandatory condition of every online licence since 31 March 2020, with exclusion periods of six months, one year or five years and no early cancellation. A self-excluded player cannot open a new account at any Commission-licensed site, and the cashier at any licensed site will refuse a deposit from them regardless of card.

Financial vulnerability checks run at £150 of net deposits in any rolling 30-day window, using public data only — this has been in force since 28 February 2025. The wider financial risk assessments the Commission has signalled are not yet live. When they are, expect credit-funded play to come under particular scrutiny, given the original policy rationale.

Where the bank sits between the cashier and the card

The Commission can stop a casino from accepting a credit card. It cannot make a bank issue one. The second lever in this picture is on the issuing side, and it is increasingly active.

HSBC, for example, declines credit card payments it identifies as gambling based on the merchant category assigned by Mastercard or Visa, and the restriction applies to every HSBC credit card with no opt-out. HSBC is candid that it cannot guarantee every gambling transaction will be caught and that the customer remains liable for any that get through. Monzo went the other way: it was the first UK bank to introduce an in-app gambling block, launched in 2018, and the block now lets a customer choose a cooldown period from two days up to one year, during which the block cannot be switched off. Over 275,000 Monzo customers have activated the feature. Other high-street banks and building societies sit at various points along this spectrum, from declining by category to offering an opt-in switch.

What this means in practice is that a credit card deposit at a UK-licensed casino now fails twice for different reasons. The cashier will refuse it because of the Commission’s 2020 ban. The issuing bank may refuse it regardless of what the cashier says, because the merchant code flags it as gambling and the bank’s own policy treats that as a hard stop. Two refusal points, neither of which can be undone at the checkout.

The payments that replaced it

The interesting question, then, is what people actually use. The licensed cashier in 2026 takes debit cards, bank transfer, the major e-wallets and a long tail of alternatives such as Apple Pay and AstroPay, all under the same KYC, the same stake caps and the same GAMSTOP integration as any other payment method. None of them turn the account into a credit account — by definition they cannot — and that is precisely the point of the 2020 rule.

Apple Pay is the mobile-wallet route most readers will already have on the phone. It is developed and operated by Apple Inc., launched on 20 October 2014 initially for US-issued cards and rolled out to UK-issued cards on 14 July 2015. Card data is protected through tokenisation: the actual card number is replaced with a device-specific tokenised Device Primary Account Number, and a dynamic security code is generated for each transaction. In-store payments use near-field communication to talk to contactless terminals. Apple states that a supported card from a participating card issuer is required and that Apple Pay is not available in every market; the list of supported UK issuers is the practical reference. On iPhones with Face ID, in-store purchases are authenticated by double-clicking the side button; on Touch ID models, by double-clicking the Home button. The card under the wallet can be a debit card; the regulation that blocks credit cards sits one layer up.

AstroPay sits at the other end of the scale. It was founded in 2009 and is headquartered in Uruguay, and it operates as a global digital wallet offering online payments, virtual and physical debit cards, and peer-to-peer transfers. Its payment-processing arm, dLocal, was spun off as a separate company in 2016. For UK-facing use the relevant entity is Larstal Limited, an electronic money institution authorised by the Financial Conduct Authority under the Electronic Money Regulations 2011. As an e-money institution it sits inside UK financial supervision, which is one of the things a player is quietly buying when they pick it over an unknown offshore alternative.

Both sit inside the same wider pattern: the Commission has reduced the payment surface area at the cashier, and the rest of the market has rearranged itself around the surviving routes. The cost of a credit card is, in this market, the cost of losing access to whichever of those routes the player would otherwise have preferred.

What a licensed cashier actually does at deposit and at withdrawal

A licensed British casino credits a deposit almost immediately, regardless of method. The verification step happens before the first deposit, not during it, so the first transaction is not held up by KYC; once verified, subsequent deposits post in seconds. The withdrawal is a different mechanism and takes longer. Most licensed sites return to the same method used to deposit, and the time-to-account ranges from minutes (for some e-wallets) up to a few working days (for bank transfers and card withdrawals, which have to clear the card network). The Commission’s rules do not set a maximum withdrawal time; what they do require is that funds be released without unreasonable delay once any internal review is complete.

What can hold a withdrawal up is the verification of source-of-funds or enhanced due-diligence checks that some sites run on larger cumulative withdrawals. This is policy, not payment infrastructure, and it applies equally to a debit card payout and an e-wallet payout. A player who has verified identity at the front door, kept their deposit and play within the operator’s own thresholds, and not flagged an automated rule will normally see a withdrawal in the timeframe the cashier advertises. A player who has not done those things will see the timeline stretch, and the cashier’s advertised speed becomes the answer to a different question.

The shape of the comparison: ten licensed UK brands

What follows is the comparison this page sets up to. Each entry is a Commission-licensed remote casino, taken from the register, with the licence number, the licensee and the domain status recorded exactly as the register shows them on the snapshot used for this page. No brand is recommended, and the list is not a ranking; it is the licensed universe a UK player is choosing inside.

A note before the table: every operator serving Great Britain has been part of GAMSTOP since 31 March 2020, accepts the £5/£2 online slot stake limit, runs reality checks, prompts for a financial limit before the first deposit, and refuses a credit card deposit by rule. Those are columns that would carry the same value down every row, and the table leaves them out on purpose. What the table compares is the registered, verifiable surface of each brand — the licence that puts it on the register, the domain status the register has on file, and whether the brand runs its own cashier or trades as a white-label skin under someone else’s licence.

Two rows sit under the same licensee by accident of corporate structure. LC International Limited, the licensee behind Gala Bingo on this list, also operates Ladbrokes and Coral under the same remote operating licence — a single regulated entity, three brands. The Commission does not list the brands as separate licensees because, in the legal sense it regulates, they are not. A player using any of the three is using the same cashier, the same GAMSTOP registration, the same ADR route and the same complaints procedure.

The white-label row is the other structural note. Virgin Games does not hold its own remote operating licence; it operates under the licence of Gamesys Operations Limited, the entity that runs Jackpotjoy and a number of other skins on the same licence. For the player the practical difference is small — the cashier, the games and the protections are the same — but the regulated name on a complaint, an ADR referral or a Commission query is the host licensee, not the skin.

What the table does not show, and what it costs

The interesting reading of the table is not the rows but the columns that are deliberately absent. There is no bonus column. There is no payout-time column. There is no RTP column or volatility column or game-count column. The reason is the same for all of them: the page is the comparison, and the comparison cannot rest on figures research did not put on the page.

The wagering requirement that does exist — a 10x cap in force since 19 December 2025 — applies to every brand in the table because every brand is Commission-licensed. That is the ceiling. A bonus at any of these brands carries a turnover requirement of at most ten times the bonus amount. The arithmetic it produces is the same regardless of brand, so it belongs to the next section, not the table.

The payment-method story is also uniform, again because of the licence. None of the ten accept a credit card deposit. None of them operate outside GAMSTOP. All of them apply the £5/£2 stake limit, all of them run reality checks, all of them must prompt for a deposit limit before the first deposit, all of them must verify identity before play. The comparison between them runs on game mix, customer support, mobile performance, withdrawal experience and the small print around bonus mechanics — none of which is in research to a level that lets this page carry a number. The honest comparison is the licensed surface, and that is what the table shows.

Reading a bonus at the 10x cap: a worked example

The 10x cap on wagering requirements came into force on 19 December 2025, and it changed the arithmetic of a bonus in a way that is worth seeing once explicitly. Suppose a brand offers a £100 welcome bonus subject to the 10x cap. The required turnover is £100 multiplied by 10, which is £1,000 of qualifying wagering. Assuming only the bonus amount is wagered, on a slot priced at the £5-per-spin ceiling for an adult player, that is 200 spins at the stake ceiling. A slot spin cannot run faster than 2.5 seconds under Commission rules, so the time it takes to clear the bonus sits in a band rather than at a single figure — call it eight to twelve minutes of continuous play under ideal conditions, with anything slower than the floor of 2.5 seconds per spin stretching it further.

The honest framing of this is that the bonus carries a fixed turnover figure and the time cost is a function of stake size and spin speed, both of which the Commission has now bounded. A player who plays a £2-stake slot — the 18-to-24 limit — needs twice the spins for the same turnover, and a player at any age who plays a 10p line on a smaller game needs the spin count to climb into the thousands. The brand is the same on both sides of the line; what changes is the time the player is sitting at the cashier.

A wagering requirement has another property worth keeping in mind. The 10x cap is on the multiplier, not on the bonus value. A brand can still offer a small bonus with a large percentage match, and it can still run free-spins bundles and reload offers with their own wagering terms attached. What it cannot do is ask a player to turn a £100 bonus into £4,000 of qualifying play, which is the kind of multiple that used to be common at offshore brands. The Commission has shrunk the worst-case grind, and a player who reads the bonus terms will find a smaller number waiting at the bottom of the page.

The cost-of-play calculation that older guides built around wagering requirements — deposit multiplied by the multiple, minus the bonus, divided by RTP — still works in shape, but the input is now much smaller. On the numbers above, £1,000 of qualifying play at a typical online slot RTP of around 96% carries an expected loss in the order of £40 before any single spin has been pulled. That is the realistic ceiling on the offer’s cost to the player, not the headline figure the cashier leads with.

Reading the rest of the operator landscape

What this page has not listed matters as much as what it has. The register held 139 active remote casino operating licences on the snapshot date, and this list uses ten of them. The other 129 carry brands a reader of this page will encounter in ads, on comparison sites and in football-shirt sponsorships — Sky Bet, William Hill, Betway, LeoVegas, Casumo, PlayOJO, BetMGM, TalkSPORT Bet, and so on, each with its own licence number and its own licensee on the register. The reason for not routing every one onto the page is not that they are excluded from the licensed universe; it is that the comparison does not change by listing more of them.

A useful test for any brand a reader meets outside this page: can the brand produce a remote operating licence number in the (account)-R-(number)-(suffix) form, with the licensee name matching a Commission register entry? If yes, the brand sits in the same regulatory box as the ten above, and the rest of the comparison runs on game mix, support and small print. If no — and a brand cannot produce a licence, or the licence it produces is from Curaçao, Malta or Gibraltar — the brand is operating outside the regime this page describes, and the protections this page has walked through do not apply.

Two things follow. First, the choice inside the licensed set is largely a choice about taste — game mix, mobile experience, support hours — rather than a choice about safety, because safety is a regulatory floor. Second, the choice outside the licensed set is not a choice at all; it is the player voluntarily stepping off the GAMSTOP register, out of the ADR route and away from the Commission’s complaints procedure, and accepting whatever protection the operator’s own terms happen to offer.

The £5 and £2 stake limit: what it actually means per session

The £5 stake ceiling for adults and £2 ceiling for 18-to-24-year-olds is the rule most players meet first and argue with most. It applies per game cycle — a single spin on a slot — and is enforced at the game itself, not at the cashier. A player cannot get around it by splitting a £20 bet across four paylines: the rule looks at stake-per-cycle, not total handle. A player who tries will be told the stake is over the limit and the spin will be refused.

What this does to the time cost of a session is worth seeing. A player at the £5 ceiling, spinning once every 2.5 seconds, plays at the rate of £7,200 per hour of nominal stake — a figure that sounds alarming until it is set against the underlying math. At a 96% RTP, that hour’s expected loss is in the order of £288. The point of the rule is not to stop a player spending; it is to keep a single bad decision from costing more than a player can absorb in the moment. A player who sets a deposit limit at £200 for the day is, at the £5 ceiling, looking at roughly fifteen minutes of full-tilt play before the cashier shuts them off; the rest of the day is the cashier saying no.

For the 18-to-24 group the same numbers look different. A £2 stake ceiling, at the same spin speed, allows £2,880 per hour of nominal stake. The lower limit is the Commission recognising that problem-gambling rates in this age band run several times higher than in older players; it is one of the few rules in the regime that is explicitly calibrated to a demographic effect rather than to a behavioural one. A player in this band who runs into a problem will find the cashier does less to enable it.

A note on the operators that share a parent

A reader looking at the table will notice the same licensee appearing on more than one row, or will meet the same situation outside the table. LC International Limited is the licensee behind Gala Bingo, Ladbrokes and Coral — three brands on the same remote operating licence. Gamesys Operations Limited hosts Virgin Games, Jackpotjoy and a long list of other skins on its licence. PPB Games Limited is the licensee behind Betfair and Paddy Power on the same licence. Each cluster is one regulated entity, and a player using any brand in the cluster is using that entity’s cashier.

The practical consequences are small but worth knowing. A self-exclusion via one brand on a shared licence excludes the player across the whole cluster — the GAMSTOP registration that follows is identical. A complaint about one brand in the cluster is adjudicated against the licensee, not the brand. A bonus restriction on the cluster applies to all of it. And a withdrawal request routed through one cashier is governed by the same internal procedures as the other.

On checking a brand a reader meets elsewhere

The safest use of this page is to retire it. The register is the source of truth and is updated continuously. The licence number form — (account)-R-(number)-(suffix) — and the licensee name together identify a regulated operator uniquely. A reader who has the form can confirm it on the register in a few seconds; a reader who cannot get the form from the brand’s own site should treat that absence as the answer.

Three checks are worth running before depositing anywhere. The first is the licence: does the brand produce a Commission remote casino operating licence number in the right form, and does the licensee name match a register entry? The second is the domain status: is the domain the player is about to use listed on the register, and is it Active rather than Inactive or White Label under a host that has not been disclosed? The third is the GAMSTOP check: a player who has self-excluded should not be able to deposit at all, and a brand that lets them is the brand the player needs to be talking to the Commission about.

The cost of going outside the licensed set

The unlicensed route is the part of the market that makes this page worth reading carefully, and it is worth describing once and then leaving alone. Providing gambling to people in Great Britain without a Commission licence is an offence under section 33 of the Gambling Act 2005. The Commission can issue cease-and-desist notices, get sites delisted from search engines, and refer payment and hosting arrangements to the relevant providers. It cannot block at the ISP level, which is why unlicensed sites aimed at British players persist. No penalty is aimed at the player; what the player loses is protection.

The protections, listed together for one final time: no GAMSTOP integration, so a self-excluded player is not blocked from signing up; no Commission complaints route, so a dispute that the operator’s own support will not resolve has nowhere to escalate inside the UK; no ADR, so an independent adjudicator is not available; no source-of-funds or vulnerability-check regime, so the cashier is not looking for the warning signs the licensed cashier is trained to look for; and no approved dispute settlement timeline, so a withdrawal that is delayed has no defined escalation path. The licensed brand a player walks away from is not perfect — no cashier is — but the unlicensed brand a player walks towards is not subject to any of the rules this page has been describing.

A useful framing is to read the licence as part of the product. A bonus, a game library, a payout time and a customer-support line are what the marketing talks about. The licence is what determines whether the cashier will ask the player to set a deposit limit, whether the cashier will run a reality check at the 30-minute mark, whether the cashier will refuse a deposit from a self-excluded player, whether a disputed withdrawal will be escalated to an ADR within a defined window, and whether the cashier will block at £5 a spin rather than let the player chase a loss. The Commission’s job is to make the second set of decisions for the player, whether the player notices or not.

Frequently asked questions

Is it legal for a licensed UK casino to accept credit card?

No. The Gambling Commission’s ban on credit cards for gambling came into force on 14 April 2020 and applies to all Commission-licensed operators taking customers in Great Britain, covering remote gambling and non-remote betting. A non-remote (face-to-face) lottery is the only carve-out.

Is there a minimum deposit when paying with credit card?

The cashier will refuse a credit card deposit by rule, so the question of a minimum does not arise. At a Commission-licensed cashier the minimum deposit for any other method is set by the operator, usually between £5 and £20, and is displayed on the deposit page before the player commits.

How long does a credit card deposit take to show up in my account?

A licensed cashier cannot take a credit card deposit at all. Any deposit method the cashier does accept posts almost immediately once verification is complete, with bank transfers occasionally taking longer to clear the Faster Payments or BACS rails.

Do I need to verify my identity before depositing with credit card?

Yes on the verification, no on the credit card. Name, address and date of birth are verified before the first deposit or any play at a Commission-licensed site, in force since 7 May 2019, and the rule applies regardless of payment method. The card under that identity check, however, will be a debit card or bank transfer rather than a credit card.

Does GAMSTOP self-exclusion cover an account funded with credit card?

Yes. GAMSTOP has been a mandatory condition of every Commission online licence since 31 March 2020, and self-exclusion runs across every licensed cashier a player tries to use, regardless of how the account is funded. Exclusion periods are six months, one year or five years and cannot be cancelled early.

Are there any fees for depositing with credit card?

A Commission-licensed cashier does not charge deposit fees for any payment method; the fee, where one exists, sits with the card issuer. The practical fee at the cashier end is that the credit card deposit will be refused, leaving the player to choose a debit card, bank transfer or e-wallet for the same account.

Written by the editors at trustedcasinocheck.