High-Risk Acquiring for iGaming: How to Get a Merchant Account

Getting a gambling merchant account takes 4 to 8 weeks with a specialist acquirer and 8 to 16 weeks with a tier-one processor, and the setup bill lands somewhere between €15,000 and €40,000 once integration, registration fees and legal review are counted. Those ranges haven't moved much in two years. What has moved is the scrutiny: the card schemes tightened dispute thresholds in 2025, and underwriters now ask for things they used to skip.

This guide is for operators who already hold, or are about to hold, a gaming licence and need card acquiring that doesn't disappear six months after launch. That covers a first-time founder on a Curaçao or Anjouan licence, an MGA operator adding a second acquirer, and a group entering Brazil under the federal regime. It walks through the nine steps in the order they actually happen, puts a time, cost and owner against each stage, and ends with the checklist and the mistakes that get accounts terminated.

Why banks treat gambling as high risk

From an acquirer's desk, an online casino has four traits that mainstream e-commerce doesn't. Dispute rates run around 1% to 3% of transactions against under 0.1% for retail, because players who lose sometimes claim the charge wasn't theirs. Legality changes at every border, so an acquirer accepts that some traffic may come from restricted countries, and issuers add their own blocks (the UK Gambling Commission banned credit-card gambling in April 2020, and many EU banks decline MCC 7995 by default). Reputation matters to the bank's own regulator and correspondent banks. And casinos sit in every anti-money-laundering rulebook as a classic layering channel.

The result is priced in: a higher merchant discount rate (MDR), a rolling reserve on your settlements, more reporting, and terminations that arrive with 30 days' notice or less. None of that is a reason not to launch. It's the operating reality you plan around.

The nine steps to a gambling merchant account

Each step carries a typical time and cost. Steps 3 to 5 overlap, and acquirer onboarding is the single most common reason a casino launch slips a month.

1. Get the licence and the entity in order. No serious acquirer boards a gambling merchant without a valid gaming licence, or at minimum a filed application with a written timeline from the regulator. The licence sets the merchant category: card-scheme rules put online gambling under MCC 7995, and both Visa and Mastercard require gambling merchants to be registered through the acquirer before the first transaction, with an annual registration fee that's typically in the low hundreds of dollars per scheme (approximate; the acquirer bills it). The licence also decides which acquirers will even look at you. Malta, UK, Ontario or Brazil licences open doors at tier-one banks; a Curaçao Gaming Authority licence gets you specialist acquirers in Malta, Cyprus, Lithuania and Latvia; an Anjouan licence narrows the list further. Set up the operating company, the player-funds bank account and the named compliance officer in the same window, because underwriters ask for all three. Time: runs alongside the licence, 4 to 8 weeks of your own work. Cost: registration fees plus €3,000 to €8,000 of legal review.

1. Choose the route: direct acquirer, PSP, or an orchestration layer. A direct acquirer gives the best rate and the most control, but you carry every integration, every scheme registration and every relationship yourself. A PSP such as Nuvei, Paysafe or Worldpay bundles the gateway with its own acquiring relationships and wears some of the risk as merchant of record for certain flows; onboarding is easier, the MDR is higher, and you're concentrated in one counterparty. A payment orchestration platform sits above several acquirers and PSPs, routes each transaction by country, card type and live approval rate, and lets you add or drop a provider without touching the casino front end. Most operators end up with one orchestration layer and two or three acquiring relationships behind it; payment orchestration for iGaming covers the trade-offs. Time: 2 to 3 weeks. Cost: orchestration typically runs a monthly platform fee plus a few cents per transaction (approximate); a PSP folds its margin into the MDR.

1. Assemble the underwriting pack. Every acquirer asks for roughly the same file, and operators who send it complete on day one get boarded fastest. Expect to provide: the gaming licence or application receipt; certificate of incorporation, shareholder register and passports for every director and ultimate beneficial owner; a business plan with GGR projections and expected monthly card volume by country; a near-final website with terms, privacy and responsible gambling pages visible; written AML and KYC policies; six months of bank statements (personal ones from the founders if the company's new); and processing history from any previous provider, including dispute ratios. A one-page note on which markets you'll serve and how you'll geo-block the rest saves a week of back-and-forth. Time: 1 to 2 weeks. Cost: internal, plus the lawyer's hours on the policies.

1. Apply to five to seven providers in parallel. Rejection is normal and rarely personal; it's the acquirer's own risk appetite, and it shifts quarter to quarter. Applying serially wastes months, so send the pack to five to seven candidates in the same week: two tier-one PSPs, three specialist gambling acquirers, and one or two local players for your first market. Underwriting takes 4 to 8 weeks at a specialist and 8 to 16 at a tier-one processor, and usually includes a compliance call, a staging login and questions about self-exclusion and affiliate traffic. Time: 4 to 16 weeks by tier. Cost: application fees are usually zero; some acquirers charge a €500 to €2,000 onboarding fee (approximate).

1. Negotiate the MDR, the rolling reserve and settlement terms. The first offer is never the final one. For EU-issued cards, a gambling MDR of 3.5% to 6% is typical in 2026; non-EU cards run 5% to 8%; e-wallets 1.5% to 3%; crypto rails 0.5% to 1.5%; bank transfers and open banking 0.5% to 1.5%. Ask for volume tiers that step the rate down as monthly volume grows, and separate pricing for deposits and payouts. The rolling reserve is the term that matters most for cash flow: acquirers commonly hold 10% of settled volume for 180 days as a buffer against disputes. Negotiate a review after 90 days of clean history with a step down to 5% to 7%, and get the release schedule in writing. Also pin down settlement frequency (weekly is standard, daily costs extra), settlement currency, the chargeback fee per case (€15 to €50 is normal) and the termination notice period. Time: 1 to 2 weeks. Cost: none directly, but 3 points of reserve on €1 million of monthly volume is €30,000 locked for six months.

1. Build chargeback controls before the first deposit. The card schemes measure a merchant's dispute ratio monthly, and a gambling merchant that trips the thresholds gets fined, then terminated. Mastercard's Excessive Chargeback Merchant programme starts at 100 chargebacks and a 1.5% ratio in a month, with a higher tier at 300 and 3%. Visa folded its dispute and fraud monitoring into the Visa Acquirer Monitoring Programme in 2025, which counts fraud reports and non-fraud disputes together against settled transactions; the merchant threshold tightened to 1.5% from January 2026 (check the current schedule with your acquirer, as the numbers have changed more than once). Practical controls: 3-D Secure on every card deposit, a descriptor players recognise, KYC at first withdrawal rather than after the tenth, same-day refunds for disputed deposits that haven't been wagered, and a chargeback alert service so you can refund before a case is filed. Set your internal alarm at 0.6% and treat 0.8% as an incident. Time: 2 to 3 weeks. Cost: alert services charge per alert, typically €20 to €40 (approximate); 3-D Secure is usually bundled by the gateway.

1. Add local methods and e-wallets for each market. Cards are rarely the top deposit method outside the UK and parts of Western Europe. In Brazil, PIX is mandatory under the federal betting rules and carries most of the volume; in India it's UPI; in the Netherlands, iDEAL; in Canada, Interac; in Austria and Germany, EPS and bank transfer. Open banking account-to-account payments are cheaper than cards and can't be charged back, which is why acquirers like them too. Add Skrill, Neteller and MiFinity where VIPs use them, and a crypto rail (USDT on Tron is the default deposit coin in unregulated markets) if your licence allows it. Every method needs its own KYC mapping and payout path. Time: 1 to 3 weeks per method, in parallel through the platform or orchestration layer. Cost: integration is usually bundled; MDR follows step 5.

1. Line up backup acquirers and routing rules. A single acquirer will, at some point, cut your volume, raise your reserve or close the account with a month's notice. Go live with a minimum of two boarded card acquirers and keep a third in underwriting. Split traffic roughly 40% to 50% on the primary, 30% to 40% on the secondary, the rest on the tertiary, and write routing rules that shift traffic automatically when a provider's acceptance rate drops below your floor (75% for cards is a reasonable starting point). Route by issuing country and BIN, not only by provider; a Cypriot acquirer may clear German cards well and Brazilian cards badly. Time: the same 4 to 16 weeks as the primary, so start them together. Cost: a second set of registration fees.

1. Keep the account: the monthly hygiene. Boarding is the beginning. Every month, send the acquirer its numbers before it asks: dispute ratio by scheme, fraud rate, volume by country, new markets or licences. Re-check geo-blocking against the acquirer's restricted list whenever you add a market. Keep withdrawals inside 24 hours; slow payouts are the biggest driver of "I didn't authorise this" disputes. And plan for annual re-underwriting: most acquirers repeat the full KYB check every 12 months, and the rest do it the moment your volume doubles. Time: a few hours a month. Cost: the compliance officer's time.

What platforms bring to the table

Most turnkey and white-label platforms arrive with pre-integrated payment providers and a routing engine, which shortens step 7 and sometimes step 4, since a platform's introduction to an acquirer carries weight. iGamingHub tracks payment coverage across the platform catalog, and three vendors stand out on breadth. BetConstruct lists around 500 payment methods, with iDeal among the named integrations, and licences covering MGA, UKGC, Portugal and Brazil. Uplatform lists about 250 methods, Interac among them, across a licence list that runs from MGA and Curaçao to Denmark, the Netherlands, Colombia and Brazil. Soft2Bet lists around 220, EPS among the named providers, with Curaçao, Anjouan and a spread of European and LatAm licences. For comparison, Softswiss lists about 200 methods and names Visa, iDeal, EPS, PIX and Interac directly, with crypto support switched on.

Two cautions. Check whether the merchant account is in your name or the platform's, because a platform-held account leaves with the platform. And check the markup; a bundled 6.5% MDR may sit on top of a 4.5% wholesale rate.

Stages, time, cost and who does it

All in, the current market range is €15,000 to €40,000 of setup and 5% to 8% of GGR in ongoing payment costs once reserves, MDR and chargeback fees are combined.

Checklist before you apply

• Gaming licence issued, or application filed with a regulator-confirmed timeline.
• Operating company, player-funds bank account and named compliance officer in place.
• Website at near-final state with terms, privacy, responsible gambling and geo-blocking live.
• AML and KYC policies written and signed off by a lawyer.
• Underwriting pack complete: corporate documents, UBO passports, GGR projections, six months of statements, processing history.
• Five to seven applications sent in the same week across tier-one, specialist and local providers.
• Term sheet checked for MDR tiers, rolling reserve percentage and release schedule, settlement frequency, chargeback fee, termination notice.
• 3-D Secure, recognisable descriptor, chargeback alerts and a 0.6% internal alarm configured before the first deposit.
• Local methods and e-wallets for the first market connected and tested with real money.
• Second acquirer boarded and a third in underwriting, with routing rules that fail over on acceptance rate.
• Monthly reporting pack to the acquirer scheduled, and annual re-underwriting in the calendar.

Common mistakes

One acquirer at launch. The most expensive mistake in the sector. A termination notice with one provider means no deposits for the weeks it takes to board another. Two boarded accounts is the floor, three is normal.

Applying serially. Waiting eight weeks for one answer, then starting the next application, turns a two-month process into six. Send the same pack to five to seven providers at once.

Treating the reserve as a fee. A 10% rolling reserve on €500,000 of monthly volume is €300,000 out of reach for six months. Model it in working capital, and negotiate the step-down date into the contract.

Ignoring the dispute ratio until the scheme letter arrives. Fines start at the first threshold breach and terminations follow. Alerts, 3-D Secure and a 0.6% internal alarm cost far less than a lost account.

Slow withdrawals. A player who waits 72 hours for a payout is a player who files a dispute or never returns. Twenty-four hours is the target, and the acquirer watches it too.

Assuming the platform's acquirer is yours. If the merchant account sits in the platform's name, it leaves with the platform. Ask before signing, and use how to open an online casino as the wider sequence for licence, platform and payments.