How esports betting and skin gambling operators actually bank: regulated path vs grey area, crypto pivots, licensing options.
Esports betting is a ~$2B GGR market growing roughly 20% a year, and skin gambling — wagering with in-game cosmetics like CS:GO knives or Fortnite items — is larger and far murkier. Both face acute banking hostility despite being legal in many jurisdictions, because card schemes have no clean precedent and underwriters cannot categorise them confidently. This guide covers what actually works for both archetypes: the regulated esports path, the semi-legal skins path, the crypto pivot most operators have already made, and the bank-account stack each model needs.
From a card scheme perspective, gambling is gambling — MCC 7995 covers betting and lottery transactions, full stop. But classification only solves half the problem. Underwriters at acquirers and EMIs do not just look at the MCC; they look at the underlying activity, the regulator, and the chargeback profile. Esports and skin gambling sit in a category most underwriters have never personally underwritten before.
Three things make this niche hostile to standard high-risk banking. First, the player demographic skews young — much younger than poker, casino, or sports betting — which raises underage-gambling alarms at every bank. Second, the product changes faster than compliance teams can write policies: a new game launches, a new format goes viral, and yesterday's risk memo is out of date. Third, Valve Corporation — which controls the Steam ecosystem most skin gambling depends on — does not authorise commercial gambling against Steam inventory, and periodically issues cease-and-desist letters. Banks read that and reach for the rejection stamp.
The result is a market where the regulated path (esports betting under a recognised gambling licence) banks reasonably well, while the grey path (skin gambling) has largely abandoned traditional rails and run entirely on crypto. Knowing which side of that line you sit on dictates everything that follows. For the broader picture see our iGaming Banking Guide.
Pure esports betting — fixed-odds wagering on the outcome of professional Counter-Strike, League of Legends, Dota 2, Valorant, or similar competitions — is treated by every major regulator as a sub-category of sports betting. The licence framework, the card-scheme classification, and the underwriting questionnaire are functionally identical to football or tennis betting.
The MGA (Malta Gaming Authority) explicitly covers esports under its sports-betting authorisation; no separate vertical licence is required. The UKGC (UK Gambling Commission) treats esports identically — operators with a general betting (real event) operating licence can offer esports markets. Curaçao, Anjouan, Isle of Man, Kahnawake and Tobique all accept esports as an in-scope product. See our iGaming Licence Comparison for jurisdictional trade-offs.
Because esports betting maps cleanly onto sports betting from the acquirer's perspective, the same banking infrastructure applies. MCC 7995, standard 3DS2 authentication, the same rolling reserve schedule of 5–10% over 90–180 days, and the same chargeback monitoring thresholds. Specialist iGaming acquirers — Emerchantpay, Praxis, PayCly, ECommPay and similar — onboard esports operators on the same paperwork as a Premier League book. Our Sports Betting Business Bank Account guide covers the underwriting requirements.
Three product features get scrutiny on the application. Live betting velocity: esports matches are short (CS rounds last ~2 minutes; a Dota 2 game ~30–45 minutes) and live-betting prop markets are explosive. Acquirers cap per-transaction limits and live-betting turnover during onboarding.
Match-fixing exposure: lower-tier tournaments (Tier 3 and below) have a long history of fixing scandals. Operators offering markets on minor leagues attract higher reserves and tighter monitoring. The MGA's player protection directorate has specifically called this out and several MGA licences now require integrity-bond arrangements with bodies like ESIC (the Esports Integrity Commission).
Tournament organiser disputes: unlike traditional sports, esports tournaments are private commercial events. If a tournament is disqualified mid-event, settlement disputes can spike chargebacks. Underwriters want to see clear void-and-refund policies in the T&Cs.
Wrapped in a recognised licence (MGA, UKGC, Gibraltar, Isle of Man, or even Curaçao under the new CGA framework) esports betting is, in 2026, a tolerable underwrite. Not easy — but tolerable.
Skin gambling is structurally different. Players deposit in-game cosmetic items — most commonly CS2 (formerly CS:GO) weapon skins, but also Dota 2 cosmetics, Rust items, TF2 hats, and various Fortnite-adjacent inventory — into a third-party site. The site assigns a market value to each skin based on Steam Marketplace pricing, credits the player with site balance or "coins," and offers casino-style games (roulette, crash, case opening, jackpot, coin flip) or betting markets against that balance. Winnings can be withdrawn as skins, as cryptocurrency, or in some cases as fiat.
The valuations are not trivial. A CS2 Karambit Doppler knife trades for €500–€2,500 on Steam Marketplace; rare Stickered AK-47s have sold for €100,000+. The economy is real, the liquidity is real, and the regulatory taxonomy is a mess. Is a deposited skin a chip? A currency? A "thing of value" in the gambling-law sense? Different jurisdictions answer differently — and most have not answered at all.
The largest skin-adjacent and skin-native sites include Stake.com, Roobet, Rollbit, CSGO500, CSGOEmpire, Hellcase, KeyDrop, Bloodyfun, Daddyskins, Skinclub and Clash.gg. Most have already migrated their core economy to cryptocurrency, treating skins as a "deposit method" wrapper rather than the underlying asset. A handful — particularly the case-opening sites — still run skin-in, skin-out flows.
The skin gambling industry hit a regulatory wall in mid-2016. A Bloomberg investigation and a PBS Frontline segment exposed the scale of underage participation. Valve responded with cease-and-desist letters to dozens of sites including CS:GO Lounge and CS:GO Lotto, and began revoking Steam API access from operators that did not move to authorised flows. The Washington State Gambling Commission opened proceedings against Valve itself. The Belgian Gaming Commission ruled in 2018 that loot boxes — and by extension skin gambling — fell under Belgian gambling law. The UK House of Lords' 2020 Gambling Industry report recommended bringing skin gambling under UKGC jurisdiction.
The industry did not die. It pivoted.
Even where skin gambling is not explicitly illegal, four overlapping risk factors push banks and acquirers to refuse.
Visa and Mastercard both class gambling under MCC 7995, but card scheme rules require acquirers to verify that the underlying activity is legal in the cardholder's jurisdiction. With skin gambling, neither the acquirer nor the issuing bank can reliably determine legality, because the legal status often hinges on whether skins are deemed "things of value" under local law — a question even regulators have not settled. Acquirers default to refusal rather than carry that uncertainty.
Valve does not authorise commercial gambling against Steam inventory. The Steam Subscriber Agreement and API terms forbid using Steam trading for gambling purposes. Valve has the technical ability to ban a site's bot accounts overnight — and has done so. From a bank's perspective, a counterparty whose entire deposit funnel can be killed by a third-party platform decision is unbankable. No bank wants to underwrite a merchant whose revenue can go to zero in a Valve policy update.
This is the dominant political risk. Surveys consistently show skin gambling participation skews to the 13–18 demographic — players who already own Steam inventory through normal gameplay. Underage gambling is the single most politically toxic exposure a bank can take on. After the 2020 House of Lords report and similar advocacy in the EU and Australia, no Tier 1 bank will touch operators perceived as having any underage exposure.
Skins are pseudonymous. A player can acquire a knife on Steam from another player, with the original purchase having occurred years earlier under a different account. There is no clean source of funds trail. AML (anti-money-laundering) analysts cannot answer the basic question "where did this asset come from?" with any confidence. The FATF has flagged in-game items as a typology of concern. For banks, opacity on KYC and AML is disqualifying. Our AML Compliance for Online Gambling article unpacks the standards skin operators struggle to meet.
By 2020, the largest skin gambling and skin-adjacent sites had reorganised themselves around cryptocurrency. Stake, Rollbit, Roobet and most of the case-opening ecosystem now operate primarily as crypto casinos with a skin-themed front end. The pivot solved three problems simultaneously: it bypassed the card-scheme classification mess, it removed the Valve dependency from the deposit funnel, and it removed the chargeback exposure that made acquiring impossible.
Players deposit USDT, USDC, BTC, ETH or similar directly to the operator's wallet. Skins, where still offered, are a value-add display layer — a player can "trade in" a skin for site balance via an integrated trading bot, but the core economy is crypto. Withdrawals are crypto. The operator never touches a card transaction.
For the operator, this means almost no traditional acquiring relationship is needed for revenue collection. A bank account is still required for operational expenses — payroll, marketing, hosting, licensing fees, professional services — but the chunky merchant-account problem evaporates. For more on the model see our Crypto Casino Banking deep-dive.
The crypto pivot is not free. It introduces a different compliance surface:
The pattern that works in 2026: keep skin-themed deposit/withdrawal as a frontend feature for player marketing, settle every transaction in crypto in the backend, and hold a small operational fiat account at an EMI for off-platform expenses. See our Crypto Business Banking & VASP Compliance article for the CASP and VASP licensing options.
The licence determines everything downstream — what banks will look at the file, what acquirers will quote, and what the chargeback ceiling looks like.
| Jurisdiction | Esports betting | Skin gambling | Notes |
|---|---|---|---|
| Malta (**MGA**) | Yes — under sports betting category | Specific approval required; rarely granted | Integrity bond often required; tight on underage |
| UK (**UKGC**) | Yes — general betting (real event) | No — treated as unlicensed gambling | Most major skin sites geoblock UK |
| Isle of Man GSC | Yes — explicit esports provision | Case-by-case; one of the more permissive | Crypto-friendly framework |
| Gibraltar | Yes — under remote betting | Not addressed; effectively excluded | Strict UK-equivalent player protection |
| Curaçao (CGA) | Yes — casino/sportsbook master licence | Tolerated under casino category | Cheapest entry point; banks know it |
| Anjouan | Yes — under master licence | Tolerated; lightest scrutiny | Newest budget option |
| Kahnawake | Yes | Tolerated under interactive licence | North America focus |
| Tobique | Yes | Tolerated | Emerging First Nations option |
| United States | State-by-state (NV, NJ, PA, MI yes; others vary) | Generally illegal | UIGEA bites; offshore exposure |
| Australia | Interactive Gambling Act allows pre-event esports betting; live betting on esports is prohibited online | Effectively illegal | Strict enforcement since 2017 |
| Germany | Licensable under GlüStV 2021 | Effectively excluded | Strict deposit caps |
For deep dives see Malta MGA Licence & Business Banking, UKGC Gambling Licence: Banking Guide, Curaçao Gaming Licence & Business Banking, and Anjouan Gaming Licence: Banking Guide.
The pattern is clear: serious regulators license esports betting alongside traditional sports and refuse skin gambling outright, while budget licensors tolerate both under broad casino categories. Most skin operators operate from Curaçao or Anjouan and accept the banking trade-off that comes with it. See the MATCH List and iGaming for the consequence side — Curaçao operators run higher MATCH exposure than MGA operators.
External regulator pages worth bookmarking: the MGA, the UKGC, and the FATF for the AML standards every regulator now layers on top. The Valve Corporation corporate site is the canonical reference for the Steam Subscriber Agreement that governs skin trading.
Once you have a licence in hand and a defensible compliance memo, the realistic banking stack depends on operator type. The market segments roughly into three profiles.
Standard high-risk iGaming acquirers will quote. Emerchantpay, Praxis, PayCly, ECommPay, Worldline Gaming, Nuvei, Skrill Direct and similar all onboard esports under a recognised licence on the same paperwork as traditional sports betting. Operational banking through specialist EMIs — Bilderlings, ConnectPay, OpenPayd, Currenxie — is accessible. Tier 1 banks remain unavailable in any practical sense, as for all iGaming. See Best EMIs for High-Risk Businesses.
Card acquiring is effectively unavailable; the operator does not need it. The architecture is: licensed entity in Curaçao or Anjouan, all player deposits/withdrawals via crypto wallets, fiat needs limited to operational expenses. An EMI in Latvia, Lithuania or Estonia (Genome, Bilderlings, Paysera in some cases, Wallester) covers the operational fiat account. Crypto-to-fiat off-ramps via Coinbase Commerce, BitPay, Triple-A or specialist OTC desks handle conversion of margin to working capital.
The hardest profile to bank. Operators that want both crypto and credit-card deposits accept that they will work with Tier 3 offshore acquirers, multiple MIDs to manage volume distribution, and rolling reserves of 10–15% over 180 days. The reserve schedule alone can lock up the equivalent of 30+ days of GGR. Most operators in this profile run two parallel stacks: a "main" crypto stack carrying 70–90% of volume, and a "card" stack carrying 10–30% used mainly for player acquisition cohorts who do not yet hold crypto.
| Operator profile | Card acquiring | Operational EMI | Crypto rails | Realistic rolling reserve |
|---|---|---|---|---|
| Pure esports + MGA/UKGC | Specialist iGaming acquirers (Emerchantpay, Praxis, ECommPay) | Bilderlings, ConnectPay, OpenPayd | Optional — for crypto-native cohorts | 5–10%, 90–180 days |
| Pure esports + Curaçao/Anjouan | Tier 2/3 offshore acquirers | Genome, Wallester, ConnectPay | Common — Coinbase Commerce, BitPay | 10–15%, 180 days |
| Skin gambling + crypto-first | Not needed | EMI in CIS/EU; Genome, Bilderlings | Primary rail — direct USDT/BTC/ETH wallets | n/a (no card flow) |
| Skin gambling + fiat onramp | Tier 3 offshore acquirers only | EMI in CIS/EU | Primary rail | 10–15%, 180 days minimum |
The fiat operational account is the easier piece — what kills operators is finding any card acquirer that will take a skin gambling MID under a Curaçao licence with traceable underage exposure in their analytics. Most stop trying.
Five compliance topics deserve more attention than they get in the standard iGaming playbook.
The single most important control. Aggressive age-verification on signup, behavioural age-detection on play patterns (a player betting €5 stakes at 3am on a school night gets flagged), and ID re-verification on withdrawal. The MGA's player protection directorate and the UKGC's social responsibility code both treat lapses here as licensing-existential.
The traceability problem: where did the player buy that skin? The defensible answer requires the operator to inherit Steam's KYC where possible (paid Steam accounts are credit-card verified), apply transaction-history pattern analysis on each deposited skin, and refuse deposits from very new Steam accounts or accounts with suspicious trade histories. The bar set by EDD (enhanced due diligence) standards under FATF recommendations applies even where the regulator does not enforce it directly. For underlying frameworks see our AML / KYC Compliance for High-Risk Businesses guide.
For esports betting operators, integration with the Esports Integrity Commission (ESIC) is now a quasi-standard. Real-time betting-pattern monitoring on lower-tier matches, market suspensions on integrity alerts, and reportable-incident protocols with ESIC and the licensing regulator. MGA-licensed operators are explicitly required to have these.
Several MGA licences now require operators to post an integrity bond or carry tournament-integrity insurance, typically £100k–£500k, to cover void-and-refund liability if a tournament is disqualified mid-event. Underwriters look for this in the file.
For crypto-first operators, the dependence on Tether and Circle means operator hot wallets and counterparty wallets can be frozen unilaterally by the issuer. The mitigation: split balances across multiple stablecoins, run on-chain analytics on incoming deposits, and maintain crypto-native cold reserves in BTC/ETH that the issuer cannot reach.
A compressed view of what a workable banking stack looks like for each archetype.
Five principles emerge from how successful operators in this niche actually run their stack.
1. Bias to crypto for revenue. For anything skin-related, 60–80% of revenue should run on crypto rails. The card-scheme route fights you all the way; the crypto route does not.
2. Use multi-currency EMIs for operating costs. Wise will not work — they explicitly exclude gambling. Genome, ConnectPay, Bilderlings, OpenPayd, Wallester and a handful of Latvian and Lithuanian EMIs will, with appropriate disclosure.
3. Multiple licences for jurisdictional coverage. A single Curaçao licence covers most of the world ex-EU. Adding an Isle of Man or MGA licence opens regulated markets and dramatically improves banking optionality even on the offshore stack.
4. Strict KYC, no friction compromises. Esports and skin gambling carry the highest underage exposure in the gambling industry. The operator who tries to "reduce KYC friction at signup" is the operator who loses their licence. Build KYC like the regulator is already auditing — because they probably are.
5. Plan for the Valve risk explicitly. If any part of your deposit funnel touches Steam, document the contingency. A continuity plan for a Steam API revocation is now a standard underwriting question on Tier 2 offshore acquirer applications.
For the broader requirement checklist see our iGaming Banking Requirements data reference.
In most regulated markets, yes — esports betting is treated as a sub-category of sports betting and is covered by general betting licences from the MGA, UKGC, Gibraltar, Isle of Man and similar regulators. The US is state-by-state (Nevada, New Jersey, Pennsylvania and Michigan permit it; many others do not). Australia allows pre-event esports betting but bans live betting online under the Interactive Gambling Act.
It depends on jurisdiction and on whether the local law treats in-game items as "things of value." The UKGC treats skin gambling as unlicensed gambling and therefore illegal in the UK. Belgium and the Netherlands have ruled against it. Curaçao, Anjouan and Isle of Man tolerate it under broader casino frameworks. Most operators geoblock the strictest markets and operate from offshore licences.
Valve's Steam Subscriber Agreement and API terms forbid using Steam trading for commercial gambling. Valve has issued C&Ds to dozens of skin gambling sites — most famously the 2016 wave that included CS:GO Lounge and CS:GO Lotto. Valve does not want regulatory exposure or association with underage gambling, both of which threaten the Steam platform itself.
In practice, no — not from any mainstream acquirer. A small number of Tier 3 offshore acquirers will quote, with rolling reserves of 10–15% over 180 days and tight volume caps. Most skin gambling operators do not pursue card acquiring at all and operate as crypto-only.
For most operators starting today, yes. Crypto-only avoids the card-scheme classification problem, the Valve dependency in the deposit funnel, and the chargeback exposure. The trade-off is MiCA and CASP compliance in the EU, FATF Travel Rule obligations, and on-chain analytics scrutiny. Most successful skin-adjacent operators in 2026 (Stake, Rollbit, Roobet) run primarily on crypto.
Any general sports betting or remote betting licence. The MGA covers it explicitly under its sports betting authorisation. The UKGC covers it under a general betting (real event) operating licence. Curaçao and Anjouan cover it under their master licences. There is no separate "esports licence" — it is sports betting from a regulatory taxonomy perspective.
There is no clean answer. The Isle of Man and MGA have the framework to license skin gambling case-by-case but rarely grant it. Curaçao and Anjouan tolerate it under their casino categories. Operators usually frame it as "casino with skin-themed deposit method" in their licence application rather than "skin gambling" outright.
Submit a free pre-approval in 2 minutes. We respond within 24 hours.
Get Free Pre-ApprovalSubmit a free pre-approval in 2 minutes. We respond within 24 hours with a realistic outcome.
Get Free Pre-Approval