Payment Processing for Gibraltar-Licensed Operators

The Gambling Act 2025 came into force on 1 April 2026 and repealed the 2005 Act, except for the sections on approved persons, which start later. It provides for B2C operator licences, B2B operator licences and gambling operator support services licences. Licences are granted by the Licensing Authority, and the Gambling Commissioner supervises licensees.

Two parts of the Act matter directly for payments. Holding or managing customer funds in connection with remote gambling is itself a licensable activity unless it is done by a licensed credit institution, and an operator must show a sufficient substantive presence in Gibraltar. Expect an acquirer to ask how your licence has been carried over to the new Act and who in Gibraltar runs the business.

• Customers must be able to start a withdrawal at any time, and payouts are due within five working days of the end of any verification.
• Customers may not be given credit for gambling, apart from promotions or bonuses.
• Liabilities for customer balances, pending withdrawals and guaranteed prizes must be separately identifiable at any time and covered by sufficient liquid assets.
• Under the Act, money's worth includes crypto currencies of any kind.

Gibraltar's anti-money laundering code for remote gambling, under the Proceeds of Crime Act 2015, requires all remote gambling customers who make a deposit to go through enhanced due diligence, applied on a risk-based approach and as soon as practicable. Unlike the UK or the Isle of Man, there is no deposit threshold before this applies.

Operators must establish source of funds or source of wealth and check that a customer's losses are consistent with it. One of the listed measures is making sure payments to and from the customer go through a bank account in the customer's own name. Suspicious activity is reported to the Gibraltar Financial Intelligence Unit, and a money laundering reporting officer at senior management level is required.

Gibraltar was removed from the FATF list of jurisdictions under increased monitoring on 23 February 2024, after being added in 2022, and was later removed from the EU list of high-risk third countries in 2025. Both make banking and acquiring relationships easier than during the grey-list period, when many institutions applied extra checks to Gibraltar entities.

A Gibraltar licence does not cover customers in Great Britain: operators serving them need a UK Gambling Commission licence as well. Acquirers agree the permitted countries with you, so list every market you take players from and the licence covering each one.

• Your licence under the Gambling Act 2025, and the entity holding it.
• Substance in Gibraltar: management, staff and office.
• How customer funds are held and how liabilities are covered.
• Your enhanced due diligence process at first deposit, including source of funds checks.
• Payout times against the five-working-day standard.
• Permitted markets and any other licences you hold, such as a UKGC licence.
• Processing history with approval, refund and chargeback rates.

Ecompayer is not a payment provider. Gibraltar-licensed operators use one online application to get matched with payment providers that board gambling businesses.

• Add your licence, company, markets, volumes and payment methods in one go.
• We match your profile with a provider that accepts Gibraltar licensees.
• Your account is prepared with the provider, and you move on to going live.

• Gambling Act 2025 (Gibraltar) and notice of commencement, LN.2026/064 (1 April 2026).
• Gibraltar Remote Technical and Operating Standards (2012), section 2.5.
• Gibraltar Gambling Commissioner, AML/CFT code for remote gambling (2021 update).
• FATF, jurisdictions under increased monitoring, February 2024.
• Gambling (Licensing and Advertising) Act 2014 (UK), explanatory notes.