Are PayID pokies actually legal in Australia?

The law that actually governs this: the IGA 2001

The Interactive Gambling Act 2001 (IGA) is the Commonwealth law at the centre of every "is this legal" question about online pokies in Australia. It makes it an offence to provide, or to advertise, a real-money interactive gambling service, which includes online pokies, roulette, blackjack and similar casino-style games, to a person physically located in Australia. The Act was written well before PayID or the New Payments Platform existed, so it says nothing about payment methods directly; it regulates the gambling service itself, not the rail used to fund it.

A narrow carve-out exists for licensed wagering, meaning sports betting and race betting offered by an Australian-licensed bookmaker, and for lottery products. Online casino games are not part of that carve-out under any circumstance, regardless of which country the operator is based in or which currency it accepts. That single distinction, wagering versus casino-style gaming, is the one most readers miss, and it is why a licensed sports betting app and an offshore pokies site can sit on completely different sides of the same law.

Why the IGA is a Commonwealth law, not a state one

Gambling regulation in Australia is normally split between the states and territories, which is why pokies venues, casinos and TAB outlets are licensed differently in each jurisdiction. Online interactive gambling aimed at a national, borderless internet audience was instead brought under a single federal law so that one set of rules would apply regardless of which state a player happened to be sitting in when they opened the site.

The 2017 amendment that closed the loopholes

The original IGA had gaps that some operators used to argue their product fell outside the definition of a prohibited service, or that offering a service to Australians from an overseas base put them beyond the Act's reach. The Interactive Gambling Amendment Act 2017 closed a number of these gaps and took effect on 13 September 2017, extending enforcement powers and tightening the definitions operators had previously leaned on.

The effect was immediate and measurable: more than 230 gambling services that had been operating in a legal grey area, or openly targeting Australian customers, withdrew from the Australian-facing market rather than risk enforcement action under the tightened rules. That single amendment did more to shrink the pool of Australian-facing offshore operators than any other regulatory step taken before or since, and it set the template ACMA still uses for enforcement today.

What changed for players in practice

For a player, the 2017 amendment did not change what they were and were not allowed to do; the prohibition was always aimed at the provider, before and after the amendment. What changed was the number of operators willing to keep marketing to Australians at all, and the number of new ACMA-driven site blocks that followed as enforcement ramped up against those who stayed.

Why there is no Australian online casino licence

A common assumption is that some offshore pokies sites must hold "a licence" of some kind, just issued somewhere less strict than Australia. That is true in a narrow sense, plenty of these operators hold a licence from a jurisdiction such as Curaçao, Malta or a similar regulator, but no such thing as an Australian online casino licence exists to compare it against. States and territories license land-based pokies inside physical venues, and the Northern Territory licenses a number of online wagering bookmakers for sports and race betting specifically. Neither licensing category covers real-money online casino games offered to Australians over the internet.

This matters because a foreign gambling licence, however legitimate in its own jurisdiction, carries no automatic recognition or standing under Australian consumer law. It does not authorise the operator to legally offer its product to Australian customers, and it does not give an Australian player any of the rights they would have with a business licensed and regulated domestically.

Wagering licences are a different category entirely

It helps to keep two categories separate in your head: licensed Australian wagering (sports and race betting through an Australian-licensed bookmaker) sits inside the law and answers to an Australian regulator, while offshore online casino-style pokies sit entirely outside any Australian licensing structure, no matter how professional the site looks or how large its foreign licence badge is displayed in the footer.

Who the law targets: the provider, not the player

Every offence provision in the IGA and its amendments is directed at the party providing or advertising the gambling service, not at the person using it. There is no clause anywhere in the Act, before or after 2017, that criminalises an Australian resident for opening an account, depositing funds, or playing pokies on an offshore site. This is a deliberate policy choice: successive Australian governments have taken the position that enforcement effort is better spent squeezing the supply side, through blocking and penalties aimed at operators, than pursuing individual players.

Even so, "not a criminal offence to play" is a narrower statement than it sounds, and it is easy to over-read. It says nothing about whether your money is safe, whether a dispute will be resolved fairly, or whether the operator will still exist next month. Those questions sit entirely outside the criminal law and are covered in the sections on unlicensed status below.

Why enforcement still matters to a player even without personal liability

Even though a player faces no legal jeopardy, enforcement action against the operator, a block, an investigation, a withdrawal from the market, can directly disrupt access to an account and any balance held on it. The legal risk sits with the business; the practical, financial risk of that business being shut down, blocked or fined still lands, indirectly, on whoever has money sitting in it.

How ACMA enforces the ban

The Australian Communications and Media Authority (ACMA) is the regulator that investigates and enforces breaches of the IGA. Its main tool is a formal request to Australian internet service providers to block a site's domain under section 313 of the Telecommunications Act 1997, which prevents the domain resolving through Australian internet connections. ACMA also refers advertising breaches, works with international counterparts on cross-border operators, and publishes a public register so anyone can check whether a specific domain has been the subject of a blocking request.

ACMA's own explainer on the Interactive Gambling Act sets out which services are prohibited outright and which fall under the narrower licensed-wagering carve-out. It is a useful starting point if you want the regulator's own wording rather than a summary.

What triggers an investigation in the first place

Investigations typically start from a public complaint, a referral from a state or territory regulator, or ACMA's own monitoring of advertising and search results. Once an investigation confirms an unlicensed service is being provided or advertised to people in Australia, a blocking request to ISPs is the usual next step, alongside any advertising takedown action where applicable.

The blocked-site numbers, and why they keep climbing

Since the blocking program began in November 2019, ACMA has ordered more than 1,560 gambling and gambling-affiliate domains blocked, and the total has risen in every reporting period since. You can check the current, alphabetically sorted register yourself at ACMA's blocked gambling websites page, which lists every domain currently subject to a blocking request.

The number keeps rising for a structural reason rather than because enforcement is failing: a blocking request targets a specific domain, and an operator that loses one domain can register another and relaunch within weeks. In the October to December 2025 quarter alone, ACMA reported receiving 483 complaints and enquiries, found 420 of them valid enough to act on, completed 23 full investigations covering 45 separate gambling services, and found a breach in every single one of the 45. That pattern, a very high breach-confirmation rate once an investigation actually proceeds, has held steady across recent quarters.

A block is not proof a site has stopped operating

Because a block only affects domain resolution inside Australia, a blocked operator can usually still be reached through a mirror domain, a VPN, or simply by customers outside Australia, and its business can continue elsewhere even while its original Australian-facing domain sits on the register. The block is a real enforcement action with a real effect on Australian traffic, but it is not the same as the operator ceasing to exist.

The credit card and crypto wagering ban since 11 June 2024

Since 11 June 2024, under the Interactive Gambling Amendment (Credit and Other Measures) Act 2023, it has been unlawful for a wagering service to accept credit cards or digital currency (cryptocurrency) as payment for online wagering in Australia. The rule sits alongside the IGA rather than inside it, and it applies to the payment method itself rather than to any one type of gambling product; it covers licensed Australian sports and race betting as well as offshore online casino services. Penalties for a business found in breach can reach AU$234,750 per contravention.

This ban is part of why account-based, real-time payment methods have become the default option many sites point customers toward: a debit-linked bank transfer, of the kind PayID enables, is not a credit product and is not a digital currency, so it sits outside the scope of the 2024 ban even though it is fast and convenient for the operator. Using PayID does not make a site licensed; it simply reflects a payment-method rule that runs on an entirely separate legal track from the licensing question covered in the rest of this page.

What the ban does not cover

The 2024 ban addresses payment method, not licensing status, and it does not touch debit cards, PayID, PayTo, bank transfers or prepaid vouchers, none of which count as credit or digital currency. A site can comply fully with the 2024 payment-method ban while still being an entirely unlicensed offshore operator under the IGA; the two questions are legally independent of each other.

What "unlicensed" actually costs you as a player

Because no Australian regulator licenses these operators, none of the protections that come bundled with an Australian licence apply. There is no external dispute-resolution scheme equivalent to the Australian Financial Complaints Authority for a gambling dispute with an offshore casino. There is no regulator requiring segregation of player funds from operating capital, no mandated responsible-gambling code of practice with enforcement teeth, and no guaranteed payout timeframe backed by a licence condition. If an offshore site delays, disputes or simply refuses a withdrawal, an Australian player's practical options are limited to the site's own internal complaints process and whatever standing its foreign licence, if genuine, might offer through that foreign regulator.

None of this changes the payment mechanics covered elsewhere on this site; a PayID transfer clears the same way regardless of the receiving site's legal status. What changes is everything downstream of the payment: who you can complain to, what recourse exists if a balance is frozen, and whether a dispute gets resolved at all. This is the practical substance behind the word "unlicensed", and it deserves weighing before, not after, a deposit.

Chargebacks and payment disputes are limited too

A PayID transfer is a direct account-to-account bank payment, not a card transaction, so the card-scheme chargeback rights available for many card disputes generally do not apply in the same way. Combined with the absence of gambling-specific dispute resolution, this leaves an Australian player with fewer formal avenues to recover funds from an offshore operator than they would have with almost any licensed Australian financial or gambling product.

Signals that look official but aren't

Offshore pokies sites commonly display badges, seals or wording designed to read as reassurance: "licensed and regulated", a foreign gambling authority's logo, an SSL padlock, or a responsible-gambling icon copied from a template. None of these, individually or together, indicate Australian authorisation, because no such authorisation exists for this category of product. A genuine foreign licence can be real and still carry no weight under Australian consumer protection law.

The payee name shown by your banking app before you confirm a PayID transfer is often a useful reality check in the opposite direction: it typically shows the actual registered corporate or trading name behind the site, which is frequently unrelated to the consumer-facing brand name on the casino's homepage. That gap between the marketing name and the legal entity name is normal for offshore operators and is itself a small signal of how these businesses are actually structured.

Reading a site's own terms and conditions

A site's terms and conditions page will usually state its registered jurisdiction and licence number somewhere in the fine print, and that jurisdiction is worth actually reading rather than skipping past. A Curaçao, Costa Rica, or Comoros registration, common among offshore operators, tells you the operator answers to that jurisdiction's regulator, if any, and not to any Australian one.

A short timeline of the rules

Reading the timeline left to right, the pattern is consistent: each change tightens the provider side of the equation, never the player side. If you want the payment mechanics that sit alongside this legal picture, see our PayID deposits guide and fast withdrawals guide; if you want the safety and self-exclusion side, see safe and responsible play.

For how money actually moves in and out of these sites, see our guides to PayID deposits and fast withdrawals. If the legal picture on this page is making you rethink how much you play, or how often, our safe and responsible play page covers bank-level gambling blocks, BetStop's real scope, and confidential help you can call today.

Frequently asked questions