AU regulatory guide
Is Online Gambling Legal in Australia
Yes for Australian players, no for the operators themselves. Here is what the Interactive Gambling Act 2001 actually says, how the 2024 credit card ban reshaped payments, why BetStop does not cover offshore casinos, and what to do when a payout goes wrong.
Written by
Joshua K.
Last updated:
The short answer for Australian players
Playing at an online casino from within Australia sits in an odd legal middle ground. Federal law makes it an offence for a casino operator, Australian or foreign, to knowingly offer online casino games to a person physically in Australia. But the same law does not create any offence for the person placing the bet. That distinction is the entire reason offshore casinos still openly service Australian players in 2026 even though the operators themselves are unlicensed under Australian law.
The practical picture below covers what is legal on your side of the screen, what is illegal on the operator’s side, and what recourse actually exists when a payout goes wrong.
Legal status at a glance
| Playing at an offshore casino | Not an offence. The Interactive Gambling Act 2001 imposes no player-side penalty. |
|---|---|
| Operating a casino for Australian players | Illegal under section 15 of the IGA. Civil penalties up to A$234,750 per breach, per day. |
| Depositing via credit card | Banned from 12 June 2024 by the 2023 Credit and Other Measures Act. Applies to offshore too. |
| Self-excluding from all licensed AU wagering | Free at BetStop.gov.au. Does not cover offshore casinos or venue gambling. |
| Winnings tax treatment | Not assessable income for casual players under ATO ruling IT 2655. |
Why the grey zone exists
Australia decided in 2001 to regulate the supply side rather than criminalise ordinary bettors. That policy choice held through the 2017 in-play sports betting amendment and the 2023 credit card measures. Offshore operators keep taking Australian sign-ups because ACMA has to identify each site, refer it to internet service providers, and coordinate a block. That process is fast but not instant, and a blocked domain often reappears at a new URL within weeks.
The Interactive Gambling Act 2001 targets operators not players
The Interactive Gambling Act 2001, administered by the Australian Communications and Media Authority (ACMA), is the federal statute that governs online gambling. Its central mechanism is section 15, which makes it an offence to provide a prohibited interactive gambling service to persons physically present in Australia. The word prohibited covers most casino-style games, online poker, and in-play sports betting.
Read the Act carefully and you will notice the wording never mentions the player. The offences are drafted against the entity offering the service. That is why searching for online casino Australia still returns results, and why placing a bet from a Sydney lounge room does not carry any Australian criminal exposure for the punter.
What the Act prohibits
Six categories of interactive gambling services fall inside the prohibition when offered to persons in Australia:
- Online casino games such as pokies, blackjack, roulette, baccarat and craps
- Online poker, cash games and tournaments alike
- In-play sports betting (bets placed after a match starts, outside a licensed telephone or in-venue channel)
- Online keno, a category added in the government’s response to the 2024 Murphy review
- Betting on the outcome of games of chance rather than sport or racing
- Betting exchanges offering the above products
Lotteries and standard fixed-odds sports and racing betting sit outside the prohibition when supplied by an operator holding a state or territory licence. That is why Sportsbet, Ladbrokes, TAB and equivalents can operate lawfully while online casinos cannot.
Where ACMA sits in the system
ACMA does three things under the Act: it investigates complaints about prohibited services, it issues formal directions to operators and to Australian financial institutions, and it maintains the register of self-excluded players (BetStop) alongside a running list of illegal offshore sites referred to internet service providers for blocking. State regulators such as the Victorian Gambling and Casino Control Commission and Liquor and Gaming NSW handle land-based venues and licensed wagering but do not touch online casino jurisdiction, which sits entirely at the federal level.
What the 2023 credit card ban changed
The Interactive Gambling Amendment (Credit and Other Measures) Act 2023 received Royal Assent on 11 December 2023 and commenced its main operative provisions on 12 June 2024. It was the first substantive change to the IGA payments framework in over two decades, and it landed on offshore casinos as squarely as on domestic wagering.
The 2023 amendment sits inside the broader IGA framework covered on the Interactive Gambling Act 2001 explainer, but its practical effect on players is worth reading on its own.
The 2024 credit card ban in one glance
| Effective date | 12 June 2024 for main provisions. Six-month soft-launch preceded strict enforcement. |
|---|---|
| What is banned | Credit cards, credit-linked digital wallets, and buying crypto with a credit card for gambling deposits. |
| Who it binds | Any operator accepting Australian players, including offshore casinos, and any financial institution processing the transaction. |
| Player-side liability | None. Penalties fall on the operator or the payment processor, not on the player attempting the transaction. |
How Australians pay for online casino now
Since the ban took hold, the payment mix at Australian-facing offshore casinos has shifted decisively toward debit-rail and non-bank options. PayID and the New Payments Platform now dominate fast deposits and withdrawals, cryptocurrency wallets that were funded outside a credit card carry a growing share of high-limit deposits, and prepaid vouchers such as Neosurf have filled a portion of the anonymity niche the credit card left behind. Australian banks have simultaneously become more willing to flag and block transactions that look like disguised gambling credit routing, which is one reason POLi Payments withdrew from the Australian market entirely in mid-2024.
How ACMA blocks illegal casinos
The blocking mechanism is the most visible tool ACMA uses against offshore operators. Under section 313 of the Telecommunications Act 1997, the regulator can request Australian internet service providers to disable access to a specified illegal offshore gambling website. The request is not a court order and it does not stop a determined user with a VPN, but it does shut off the ordinary consumer path to the site.
The blocking process in four steps
Each block runs through a defined workflow, and each step has an average lag that adds up to the four-to-twelve week window from first complaint to ISP disablement.
-
Public complaint or ACMA-initiated review
Members of the public can lodge a report through ACMA’s illegal online gambling form, and ACMA can also open reviews internally when a brand advertising to Australians appears without licence coverage.
-
Investigation and formal finding
ACMA verifies whether the service is prohibited under the IGA, confirms it is targeting Australians, and issues a formal finding of a section 15 breach.
-
Referral to internet service providers
The finding is passed to Australian ISPs with a section 313 disruption request. Compliance is voluntary in form but universal in practice among Tier-1 providers.
-
Publication on the illegal-sites list
ACMA publishes the blocked domain in its monthly bulletin. New mirror domains often reappear inside a fortnight and cycle back into the same pipeline.
1,455 sites blocked and counting
Between the first block in November 2019 and December 2025, ACMA processed disablement requests against more than 1,455 illegal offshore gambling and affiliate websites. Recent batches have covered brands such as 7Signs, ChromaBet, Freshbet, Nova Jackpot, Vegasino and Winbay. Some of those names reappeared under new URLs within a month and had to be re-blocked. If your preferred casino disappears mid-session, an ACMA block is the most likely cause, and any pending withdrawal typically needs to be chased via a mirror URL or the operator’s licensed complaint channel.
BetStop covers wagering not offshore casinos
Launched on 21 August 2023 under Part 7B of the IGA, the BetStop National Self-Exclusion Register lets an Australian sign up once and be blocked from every licensed Australian online and phone wagering provider for a self-chosen period between three months and life. More than 45,000 people had registered by early 2026, and the process takes about five minutes with a mobile number, an email address and either a driver licence or a Medicare card.
The scheme’s blind spot is the same blind spot the IGA has always had. Register mechanics live on the BetStop register at betstop.gov.au, but the coverage limits are worth stating plainly here because they routinely surprise players.
What BetStop does and does not do
- Every licensed Australian online sports and racing bookmaker
- Every licensed Australian phone-based wagering provider
- Direct marketing from those operators to the registered player
- A one-and-done registration recognised across all licensed AU operators
- Offshore online casinos (Curaçao, Malta, Anjouan, Kahnawake licences)
- Land-based venues, pubs, clubs and casino resorts
- Lottery and scratch-card operators outside the wagering licence
- Crypto-only casinos operating without an Australian-facing licence
Cross-exclusion workarounds
A player who wants to shut off offshore casino access has to run a parallel process. Each offshore operator publishes its own self-exclusion form under its licence conditions, whether Curaçao, Malta or Anjouan. Registering with each site individually is slow but effective as long as the same email address and identity document are used. Bank-side controls are the sturdiest layer: most Australian banks now offer a gambling block that stops merchant-coded transactions at the card level, which catches the majority of offshore deposit routes even where the casino is not part of BetStop.
Player-side legal reality when things go wrong
The most important thing to understand about the legal grey zone is what recourse actually looks like when an offshore casino misbehaves. Because the operator is not licensed under Australian law, the Australian Financial Complaints Authority cannot intervene, ACMA does not adjudicate individual disputes, and BetStop has no oversight role over payouts. The dispute path runs through the operator’s licensing jurisdiction, and its reliability varies dramatically.
Offshore licensing regimes and player recourse
| Curaçao (LOK regime, 2023 onwards) | Mandatory ADR referral, 6-month complaint window, 4-week response. Operator pays ADR fees. Enforcement moderate. |
|---|---|
| Malta (MGA) | MGA player-hub complaint portal. Stronger regulator teeth. Slower processing, typical 4 to 12 week resolution. |
| Anjouan (Comoros) | Formal complaint route exists but enforcement is thin. Depends heavily on operator’s voluntary engagement. |
| Kahnawake (Mohawk Council) | Historic licence, low volume today. Complaint route dormant for most brands. Not a reliable recourse layer. |
Payout disputes and licensing recourse
Curaçao operators licensed under the LOK regime introduced in 2023 must accept complaints within six months of the disputed transaction and route them through an approved alternative dispute resolution provider, at the operator’s cost, with a four-week response window. Malta Gaming Authority licensees run through the MGA player-hub complaint portal, which has stronger teeth but is slower. Anjouan and Kahnawake are the weakest routes and often depend on the operator’s willingness to engage voluntarily. A verified Curaçao or Malta licence is genuinely more valuable than a self-declared certificate for exactly this reason.
Chargeback and bank reversal
The 2024 credit card ban closed off the most common chargeback route, but debit-card chargebacks and bank-initiated reversals remain possible in narrow circumstances. The strongest ground is documented fraud, such as an unauthorised card use, followed by a documented service-not-rendered claim where a deposit cleared but was never credited to the account. Ordinary gambling losses are not chargeback grounds under any Australian bank’s dispute policy, and framing a lost session as fraud will be rejected and can attract a permanent card-scheme flag.
How to check a casino is safe to use
Because the grey-zone reality places the burden of due diligence on the player, a short verification habit before every deposit is the single most useful defence. The following sequence takes under two minutes and catches most of the operators ACMA is about to add to its blocklist.
The five-step pre-deposit habit
The checklist below walks each red flag in depth. The five verification steps below cover the everyday checks worth doing before you deposit.
-
Verify the licence number on the regulator's own register
Every legitimate offshore licence carries a registration number that appears on the licensing authority’s public register. Curaçao licences resolve at licensing.gaminglicence.info, Malta at authorisations.mga.org.mt. If the number does not resolve, the licence is fake.
-
Cross-check the domain against the ACMA blocklist
ACMA publishes a running list of blocked illegal offshore sites at acma.gov.au. If the operator is already on the list, a mirror domain will not shield you from an ISP-level block during a withdrawal.
-
Read the withdrawal terms before you deposit, not after
Pay attention to the maximum single-withdrawal limit, the daily and weekly caps, the KYC threshold, and whether the operator reserves the right to cancel bonuses retroactively. Any clause allowing retrospective bonus voiding is a serious red flag.
-
Check independent complaint volume, not the operator's own testimonials
AskGamblers, Casino Guru and CasinoMeister track player complaints publicly. A high complaint count is less useful than the resolution rate. Operators refusing to engage with independent complaint boards are the ones most likely to withhold a payout.
-
Test the deposit rail with the smallest amount the site allows
A minimum-value first deposit, ideally via PayID for the fastest reversibility trail, tells you whether the payment gateway is genuine, how quickly the operator credits, and whether the KYC process activates before or after the first withdrawal.
When in doubt, use the shortlist
The manual verification steps above are the right habit even when a casino appears on a curated shortlist. The AussieOnlineCasinos comparison handles the licence, complaint volume and payout-rail checks up front for the operators listed, but a personal verification pass before every deposit is still the sharpest defence any Australian player has against the recurring pattern of blocked and rebranded sites.
Frequently asked questions
No. The Interactive Gambling Act 2001 creates offences against operators offering prohibited services to Australians, not against players placing bets. No Australian resident has ever been prosecuted for the mere act of gambling at an offshore online casino.
Using a VPN is lawful in Australia and there is no separate offence attached to reaching an ACMA-blocked site through one. The risk with a blocked site sits elsewhere: any pending withdrawal becomes harder to chase, and any dispute must be resolved through the operator’s licensing jurisdiction alone.
Not for casual players. Australian Taxation Office ruling IT 2655 treats gambling winnings as the product of luck rather than income for the ordinary punter, which means they fall outside assessable income. The narrow exception is a professional gambler carrying on a business of betting, a status the Commissioner regards as rare and one that requires systematic, businesslike conduct rather than a run of good sessions.
The block affects domain access, not the operator’s obligation to pay. Contact the operator through a mirror URL or an alternative channel such as email or its Curaçao or Malta licensed complaint route. If the operator refuses, escalate to the licensing authority directly with your deposit and withdrawal records.
No. BetStop’s scope is limited to licensed Australian wagering providers. Self-exclusion from offshore casinos must be requested from each operator’s own responsible-gambling form. Bank-side gambling blocks are the sturdier fall-back.
There is no single-step register for offshore casinos, but two mechanisms come close. First, most Australian banks now offer a merchant-code gambling block that stops transactions at the payment layer regardless of the operator. Second, some Curaçao and Malta licensees participate in cross-operator exclusion pools maintained by the licensing authority. Combining a bank-side block with individual operator forms is currently the most effective offshore self-exclusion approach.