The PayID pokies pitch, set against the Australian rules it has to land in

Every few months a fresh wave of offshore casino brands cycles through Australian search results, each one promising instant bank transfers through PayID and a “new” site that, the ads insist, no one has yet found a problem with. The pitch sounds local because PayID itself is local, run by Australian Payments Plus and built into more than 100 Australian banking apps. The brand behind it almost never is. The legal status of online pokies in Australia has not changed since the Interactive Gambling Act 2001 was tightened in 2017: no Australian state or territory licenses them, and the Australian Communications and Media Authority has spent the years since blocking, warning and naming the operators that keep offering them.

Close-up of a smartphone banking app open beside a laptop on a home desk, mid-transfer.
PayID is already built into online banking at more than 100 Australian financial institutions.

That gap — between a payment method every Australian already has in their phone and a product the law does not allow to be sold here — is what this page is about. The numbers below come from the ACMA’s own published actions, the Reserve Bank’s payments papers and Australian Payments Plus’s own scam alerts. The offshore brands appear here because the ACMA has acted against them by name, not because they belong on any recommendation list.

Reviewed as of 30 October 2026 — verified against the ACMA’s published formal warnings register and the Australian Payments Plus PayID guidance page.

How a PayID actually moves money — and what it does not move

PayID is best understood as a label, not a product. You register an easy-to-remember identifier — usually a mobile number or an email, sometimes an ABN or Organisation Identifier — against a bank account you already hold, and your bank maps that label to the account. When someone pays to your PayID, the money rides on the New Payments Platform, which the Reserve Bank oversees and which settles transactions individually in close to real time through the Fast Settlement Service, available 24 hours a day, including weekends. Australians had registered more than 25 million PayIDs by April 2025. By the time a bank transfer arrives in under a minute, 24/7 — the Osko service that runs on the same rails — a card payment through the same banking app still goes through the older batch rails and settles the next business day.

A person sits at a kitchen table, scrolling a laptop showing a general search results page about new casino sites.
The ACMA issued fresh formal warnings over Woo Casino in March 2025 and Spirit Casino in May 2025.

The label is the part that matters for a reader weighing the offshore ads. Before a PayID payment is sent, the payer is shown the name of the account the identifier points to. That confirmation screen is the whole point of the system: it is what stops a payment going to the wrong person, and it is what Australian Payments Plus leans on when it warns directly that anyone asked to send money to a PayID on an “illegal gambling site” is “almost certainly” looking at a scambling site — AP+’s own term for an offshore gambling scam. PayID itself never contacts customers, never asks anyone to send money in order to receive money, and never asks anyone to “upgrade” an account; emails or messages claiming otherwise are a known impersonation pattern.

The implication follows directly. A PayID payment to an offshore casino is real money reaching a real bank account. The convenience of the rail does not change who receives it or what protections sit behind the receiving end. An Australian-licensed wagering service is one of the small set of destinations where a PayID transfer is a regulated deposit, because the Interactive Gambling Act and its 2023 amendments prohibit credit cards and credit-related products from being used for wagering but leave debit-linked bank transfers, including PayID and Osko, as ordinary deposit rails. An offshore pokies site accepting PayID is a deposit rail operating into an account that has no Australian licence behind it. PayID is the wrapper; what it wraps is the question.

The settlement speed claim, stripped of marketing

Two speeds get compared in this market, and they are not as close as the ads present them. A PayID or Osko transfer between participating Australian banks arrives in under a minute, at any hour, any day of the week, addressed either to a BSB and account number or to a PayID. That is the whole point of the New Payments Platform and the Osko service running on it.

A tablet on a desk displays a plain government-style warning notice page, with a coffee cup beside it.
The ACMA issued a formal warning over Instant Casino in February 2025.

A card deposit at a typical online casino is, in practice, a different story. The merchant acquires the transaction through Visa, Mastercard or eftpos, the issuer authorises it on the older card rails, and the funds reach the merchant’s acquirer the next business day at the earliest, with weekends and bank holidays stretching that further. Contactless wallet transactions — Apple Pay, Google Pay, Samsung Pay — together accounted for around 45% of Australian card payments by number by the end of 2025, and they still clear as card transactions underneath: the wallet is a tokenisation layer, not a different rail. Apple Pay, Google Pay and Samsung Pay therefore inherit both the convenience and the lag.

For an Australian punter using a licensed sports or race bookmaker, both rails are in scope under the IGA: bank transfer, PayID/Osko, BPAY and debit card are the legal deposit routes, with credit cards and credit-related products and digital currency banned from licensed wagering since 11 June 2024. For an Australian punter using an offshore pokies site, neither rail is really in scope at all — both terminate at an entity the ACMA does not recognise.

What the ads sell is therefore the speed side of the comparison, with the destination quietly omitted. The instant transfer reaches an offshore operator that has no obligation to release winnings fast, no Australian dispute body behind it and a real chance of being blocked by the ACMA with money still in the balance. The slow rail deposits into a system the law has set up, with an ombudsman, a self-exclusion register, a regulator in the Northern Territory and the same protections on weekdays as on weekends. The speed is a real difference; what the speed buys is the question only a reader can answer for themselves.

Why a freshly launched offshore casino keeps adding PayID

Three motives sit underneath the pattern, and a reader looking at a new brand can read each of them off the public record.

The first motive is conversion cost. A card deposit carries a merchant fee of roughly 1 to 2 per cent that hits the operator every time, plus a chargeback risk that operators dread because each one reverses after the customer has typically already played the funds. A PayID transfer carries no acquirer fee and no chargeback right at all — once the money reaches the recipient account, the sender’s bank treats it as an authorised push payment. From the operator’s side of the ledger the saving is significant, and from the customer’s side of the ledger the speed of arrival feels like a service improvement.

The second motive is reach. More than 100 Australian financial institutions have PayID built into online banking, which means the addressable deposit population is whatever share of Australian adults already has a transaction account. For an offshore brand running paid social ads to Australian audiences, tapping into an existing banking identity removes a step that card deposit pages still have to handle. The convenience is genuine; the catchment it creates is also the one a regulator notices.

The third motive is plausible local appearance. A deposit screen showing “PayID” reads to an Australian customer as a local rail, and a one-line description that frames it as such lowers the suspicion a customer might otherwise bring to an offshore brand. The localising effect is the point of the choice — operators deploy it because it works on the page, not because they are regulated by anyone Australian.

The Interactive Gambling Act 2001, as amended in 2017 and again in 2023, makes it an offence to provide online casino games or online pokies to a person physically in Australia. No state or territory licences them. What is licensed is wagering on races and sporting events placed before the event, lotteries and keno, and most online bookmakers — including the household names Sportsbet, Bet365 and Ladbrokes — operate under Northern Territory Racing and Wagering Commission licences for tax reasons. The Northern Territory commission is a small body, without full-time staff and meeting once a month in Darwin, and it regulates 52 online bookmakers alongside its racing and venue work.

The penalties for offering prohibited services run against the provider, not the player: Australian enforcement has not, in practice, pursued individuals for using offshore sites. What the player gives up is the layer of protection that comes with a licensed operator. A licensed wagering service has to identify its customers, segregate player funds, publish self-exclusion through BetStop and answer complaints through an independent body. An offshore pokies site does none of those things for an Australian customer, and the ACMA’s blocking power can leave a balance stranded on the operator’s books with no path back to the player. The legal status and the consumer outcome are two different things, and the second one is what a player actually feels.

Enforcement has scaled up in recent years. As reported in June 2026, the ACMA had asked Australian ISPs to block 1,751 illegal gambling and affiliate marketing websites since the first blocking request in November 2019, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. The single round reported that month added 12 more: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino. Lost market share to illegal channels is part of the picture: H2 Gambling Capital’s 2025 report estimates about A$3.9 billion a year in losses to illegal gambling sites, with the legal-channel share of Australian gambling falling from 74% in 2021 to 64%.

The framework’s next move sits just outside the year. The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026, with its advertising and inducement measures commencing 1 January 2027 — law enacted, but not yet in force on a page read in 2026.

The payment rules the IGA also sets

The credit card ban inside the Interactive Gambling Act does more work than it gets credit for. Since the 2023 amendments came into force, licensed online wagering services cannot accept credit cards or credit-related products as payment; digital currency is also blocked from that channel, with effect from 11 June 2024. Operator penalties for breach reach $247,500. PayID, Osko and BPAY remain in scope as ordinary debit-linked transfer rails. The distinction matters because it tells an Australian customer where a PayID transfer is and is not a regulated deposit: it is on a licensed wagering service, it is not on an offshore pokies brand.

A separate layer sits at the bank side. Westpac’s gambling block works at card level — it refuses authorisation on transactions carrying the merchant category code for “Betting/Casino Gambling” on eligible cards. ANZ’s gambling transaction block, set up inside the ANZ app, also blocks Gambling Transactions attempted through a digital wallet such as Apple Pay on an eligible card, not only on the plastic. Once turned on, ANZ’s block carries a 48-hour cooling-off period before it can be removed, and the bank publishes the caveat that not all gambling transactions will be blocked and some non-gambling ones might be. Apple itself sets no transaction limits and PIN requirements for Apple Pay purchases — the issuer and the merchant do. None of these bank-side controls blocks a PayID transfer: a push payment from the customer’s banking app does not go through a card acquirer, so a card-level block never sees it. The protection that runs against card gambling does not, by design, run against direct bank transfer — and that is exactly the gap the offshore marketing exploits.

Apple Pay, Google Pay and Samsung Pay add a further wrinkle for a reader who treats wallets as a separate channel. By the end of 2025 they accounted for around 45% of Australian card payments by number. They sit on top of the existing card networks — the tokenised card, the acquirer, the issuer authorisation — and they obey the same rules. Apple does not surcharge in stores, online or in apps; any surcharge a customer sees is a merchant’s own card-processing fee, not Apple’s. The Reserve Bank’s July 2025 review proposes removing surcharges on eftpos, Mastercard and Visa transactions, leaving American Express explicitly outside the proposed scope. None of which changes the underlying question: a wallet transaction to an offshore pokies site is still a transaction to an offshore pokies site.

What the ACMA’s actions actually name

The formal warning register is the closest thing Australia has to a public list of the brands an Australian customer is most likely to be searching for. Each warning cites the Interactive Gambling Act, names the operator (which is often a parent company rather than the brand on the homepage) and the brand, and gives the ACMA the option to ask ISPs to block the site if the conduct continues. The cases below are the ones in the public register at the time of writing, and the dates are the dates the ACMA itself published. Reading them as a running catalogue is more useful than reading them as a list of complaints: a single operator can carry multiple brands, a brand can be re-warned, and the action does not require a previous warning before blocking can follow.

In March 2026 the ACMA issued a formal warning to Pulsup Ltd over Rocketplay. In May 2022 the same brand had already been the subject of a formal warning to Dama N.V., alongside Bambet, Dazard, Level Up, Wild Tornado and Cobra Casino. Dama N.V. came back into the register in March 2025 with a warning over Woo Casino and again in May 2025 with one over Spirit Casino. July 2025 added two more operators: Bamboo Media, warned over Ignition Casino, and Consolutetish S.R.L., warned over National Casino and Bizzo Casino; Bizzo had already been warned in 2022, on that occasion to TechSolutions (CY) Group Limited and TechSolutions Group N.V. February 2025 carried a formal warning to EOD Code SRL over Instant Casino. April 2026 added a warning to Ryker B.V. over Jackbit and CasinOK. April 2025 covered Sterplay Holding Ltd over Casino Intense. Hollycorn N.V. appears against Sky Crown and Blue Leo in a September 2022 formal warning that remains on the register.

The shape this draws is not a wide cross-section of the offshore market — it is a list of recurrent offenders and a handful of newer arrivals. Eleven of the brands that dominate Australian search traffic have been individually named, and several of the parent companies appear more than once.

How the blocking adds up — the running tally, and what the rhythm looks like

The arithmetic that turns the running totals into a rate is straightforward, and it gives a way to read the enforcement picture as a moving average rather than a snapshot.

The ACMA’s first blocking request went out in November 2019. As of the June 2026 reporting round, 1,751 illegal gambling and affiliate marketing websites had been blocked under the regime — a tally that includes the 12 sites added in that single round. Working from those two anchor points, the regime has run for roughly 79 months and has averaged a touch over 22 blocked sites per month across its lifetime. That figure includes both primary casino and poker sites and the affiliate marketing pages that drive traffic to them, so it sits well above any single month’s net of casino-only additions.

The lifetime average overstates the steady state. The regime has both accelerated and quietened in bursts. Each public round names 10 to 20 sites at a time, and several months in a row often go by without a new round at all, as the regulator works through warnings before the next blocking request. A reader who has only ever seen one round should not infer that a single round is what enforcement looks like; the better reading is that the regime runs in clumps, with the headline number climbing in steps and the months between steps used for warnings, complaints and investigations.

The second figure that sits in the same paragraph is harder but equally important. More than 230 unlicensed gambling services have left the Australian market since enforcement was strengthened in 2017. That count is services, not sites, and “left” covers everything from formal exit to quietly dropping Australian payment methods or customer journeys. It is the figure that captures the operators who saw what was coming and chose not to be on the next list.

Each brand the regulator has named by name

Eleven brands appear on this page because the ACMA has named them in its published actions. They are not ranked, and they are not recommended. They are described on what the register says about them, with the consistent caveat that no state or territory in Australia licenses online casino games and online pokies, whatever licence the site displays in its footer.

RocketPlay

Rocketplay was the subject of an ACMA formal warning to Pulsup Ltd in March 2026. Earlier, the brand had been caught up in the May 2022 warning to Dama N.V., which also named Bambet, Dazard, Level Up, Wild Tornado and Cobra Casino. A customer who opened the site today sees the Dama-era branding or the Pulsup rebrand depending on which domain they arrive at; the regulator has dealt with both. The interesting feature is the repeat appearance under two different corporate parents: it suggests the brand keeps returning under fresh ownership after the warning letter lands.

Level Up Casino

Level Up was named in the May 2022 warning to Dama N.V. as part of a six-brand batch, alongside Bambet, Dazard, Rocketplay, Wild Tornado and Cobra Casino. There has been no later formal warning specific to Level Up in the public register, which is not the same as clearance — the operator has spent the intervening years re-platforming and re-skinning rather than disappearing, and the brand continues to surface in Australian marketing.

Woo Casino

Woo Casino received its own formal warning to Dama N.V. in March 2025, three years after Dama had been warned over other brands including Rocketplay and Level Up. The site is a useful illustration of the pattern: a parent company that has been told more than once, and that the regulator keeps naming because the conduct has not changed.

Spirit Casino

Spirit Casino joined the register in May 2025 as another Dama N.V. brand. Spirit is the more recent of the Dama entries, sitting alongside Woo Casino in the same year. The cadence says something: two warnings in three months to the same parent company over two different brands is not a regulator sending reminders.

National Casino

Consolutetish S.R.L. was warned over National Casino in July 2025. National Casino is one of the more recognised offshore brands in Australian search, and its appearance here is the first formal warning it has carried in the public register — which makes the entry unusual rather than a repeat.

Bizzo Casino

Bizzo was named twice: under Consolutetish S.R.L. in July 2025, and earlier under TechSolutions (CY) Group Limited and TechSolutions Group N.V. in 2022. Two operators, two warnings, one brand — and the intervening years in which the brand continued to run.

Ignition Casino

Bamboo Media received a formal warning over Ignition Casino in July 2025. Ignition is one of the older offshore brands aimed at the Australian market and predates several of the more recent entries, which makes the late-warning timing worth noting: the conduct continued for a long time before it crossed whatever threshold the regulator used in 2025.

Instant Casino

EOD Code SRL was warned over Instant Casino in February 2025. The brand is one of a small number that combines a PayID-friendly deposit page with social-media-led acquisition; the warning is the ACMA’s response to that combination.

Jackbit

Ryker B.V. was warned over Jackbit in April 2026, alongside CasinOK. April 2026 is recent enough that Jackbit’s deposit page may still reference PayID; the warning does not address payment rails specifically, but the conduct finding applies to the entire offering.

Casino Intense

Sterplay Holding Ltd was warned over Casino Intense in April 2025. Casino Intense is the smaller brand on this list by search traffic, and the warning came with no earlier entry against the same brand — which is a useful reminder that the register is not just about the largest names.

Sky Crown

Hollycorn N.V. carries a September 2022 formal warning over Sky Crown and Blue Leo. Both brands remain active at the brand level; the 2022 warning is the only formal action on the public record against this entry. Hollycorn is one of the more prolific offshore groups in the market, and a reader who has seen its other brands will recognise the corporate signature.

The responsible gambling side of the picture

The Australian framework puts the player’s protection before the player’s money, and the offshore side leaves that protection behind. The starting point is the National Self-Exclusion Register, BetStop, which has been live since August 2023 and which binds every Australian-licensed online and phone wagering service. An Australian customer who registers with BetStop is unable to open new accounts, deposit or place bets with any licensed bookmaker or wagering service for the period they choose. The catch is the word “licensed”: an offshore casino is not connected to BetStop, so the same customer can self-exclude from every Australian bookmaker and still place a deposit the next day with an offshore brand.

Help is not gated the same way. Gambling Help Online and the National Gambling Helpline — 1800 858 858, free, 24/7, with a chat option — are available whether or not the customer’s gambling is happening through a licensed channel. Counselling, financial counselling and referral to face-to-face services are part of what the line provides, and the help line does not require the customer to report the operator they used. For anyone who has begun to wonder whether what started as a quick PayID deposit has become a habit, the helpline is the place that does not ask them to defend it first.

Under-18s are out of bounds. The minimum age for any form of wagering in Australia is 18. Offshore sites do not enforce Australian age rules any more than they enforce the IGA itself.

A player sitting with a balance on a blocked site has no Australian recourse. The IGA targets the provider, and a refund claim has to be made against that provider — usually through a chargeback, where the operator’s bank and the customer’s bank disagree about who owns the funds, and often through a regulatory complaint in the operator’s home jurisdiction. The easy recovery route is the licensed route: BetStop, the bookmaker’s own responsible gambling tools, the dispute resolution body. The hard recovery route is every other route, and that is the one an offshore pokies deposit will eventually require.

How to weigh the four or five things a reader actually has

A reader comes to a page like this with one of three starting positions, and the same set of facts lands differently in each.

A reader who has not yet deposited, and is comparing a few brands, is reading the ACMA register as a filter. Eleven brands on this page are filtered out by name, and the remaining offshore market is no less filtered in practice — just without a regulator’s name attached. The legal position does not depend on the brand; the brand is the variable the regulator can act on.

A reader who has already deposited, and is wondering whether the brand is one the regulator is watching, will recognise at least one of the eleven names above. The practical consequence of being on this list is the blocking risk: the operator can be ordered blocked at Australian ISPs, and the player’s balance can be stranded at the moment the block takes effect. Some operators pre-empt the block by quietly returning balances; others do not.

A reader who has been moved to play by the speed of the PayID deposit, and is reading the back end of the same flow for the first time, is the reader this page is written for. The settlement time is real. The destination it settles into is the question. PayID and Osko arrive in under a minute because the rail was built to be fast, not because the receiving end is regulated.

Choosing what to do next

The four actions that sit behind any reading of this page are different in cost and in difficulty. Choose one rather than drift between them.

Where the funds are still in a licensed account, switch on BetStop and BetStop’s deposit limits together. The 48-hour cooling-off period at ANZ is the kind of friction that is the point: it is what stops a moment of temptation becoming the next transfer.

Where the funds are sitting on an offshore brand, ask the brand’s own payments team for the withdrawal route before any further deposit. A withdrawal test of A$100 is cheaper than a balance stranded by a blocking order. Where the brand refuses to name a route, that refusal is the answer to the question that the deposit page did not ask.

Where the habit has already formed, call the National Gambling Helpline on 1800 858 858, or open the chat at Gambling Help Online. The line is free, it is 24/7, and it is the part of the framework that does not need the brand to be licensed for it to work.

Where the only practical step is to keep the funds in a regulated channel, that step is the one that closes the loop. The fastest deposit in the country was built by the Reserve Bank, owned by Australian Payments Plus and signed off by an Australian bank. The slowest part of that flow is the part that decides whether the next transfer happens at all.

Frequently asked questions

What is PayID, and why do new pokies sites keep advertising it as a deposit method?

PayID is a label — usually a mobile number or an email — linked to an Australian bank account through the New Payments Platform. It is offered by more than 100 Australian financial institutions, and Osko payments using PayID settle in under a minute at any hour of any day. New pokies sites advertise it because it removes card acquirer fees and chargeback risk, and because a “PayID” button makes an offshore deposit page feel like a local one — it is a marketing choice, not a regulatory one.

Does using PayID make a new offshore pokies site any safer or more legitimate for an Australian player?

No. PayID is a payment rail; it does not license the destination. The Interactive Gambling Act 2001 prohibits providing online casino games to a person in Australia, no state or territory licences them, and the ACMA has warned or blocked most of the brands operating offshore for Australians. The deposit’s safety is the bank’s; the destination’s legitimacy is the regulator’s, and the regulator’s verdict is the public formal warning register.

How quickly does an Osko transfer through PayID actually settle compared with a card deposit?

Osko via PayID settles in under a minute, 24/7, between participating Australian banks. A card deposit to the same kind of merchant clears through the older card rails and settles the next business day at the earliest, with weekends stretching that further. Wallet payments — Apple Pay, Google Pay, Samsung Pay — together account for around 45% of Australian card payments by number, but they are tokenised card transactions underneath and clear on the same slower rail.

Why would a brand-new pokies site suddenly add PayID support?

Because the deposit fee on a card payment is the operator’s biggest line cost and a chargeback can reverse a customer who has already played the funds. A PayID transfer carries no acquirer fee and no chargeback right, and it reaches any Australian adult with a transaction account. The marketing value — a “PayID” button — is a side effect of a payment decision the operator has made for its own ledger.

Is it legal for an Australian to send money via PayID to an offshore pokies operator?

The IGA targets the offshore provider, not the Australian player, so there is no criminal liability attached to the transfer itself. What the player gives up is the entire Australian protection layer: BetStop does not extend to offshore sites, no Australian dispute body can order a refund, and the ACMA can block the site with the balance still on it. Sending the money is not the offence; receiving it is, and receiving it is what makes the destination what it is.

What should someone check about a bank’s own PayID limits before assuming a new pokies site’s claims are accurate?

The deposit limit on a PayID transfer is set by the customer’s own bank, not by the pokies site, and many banks set per-transaction and daily ceilings well below what the marketing copy implies. Customer-chosen gambling blocks from Westpac and ANZ work at the card level and do not cover a direct bank transfer at all — Apple Pay on an eligible blocked card is covered at ANZ, a PayID push is not. The right check is the bank’s own PayID limit in the banking app, not the deposit page on the casino site.