BPAY, the offshore casino sites that advertise it, and the Australian rules that frame both

A player typing “casino sites that accept BPAY Australia” into a search box is usually doing one of three things: chasing a familiar payment rail, checking whether a bank block will get in the way, or trying to separate the offshore brands marketing themselves as BPAY-friendly from the licensed Australian alternatives. None of those questions is straightforward, because BPAY is a bill-payment service built into Australian online banking rather than a card scheme or a wallet, and the Interactive Gambling Act 2001 makes offering online casino games to people in Australia an offence regardless of which payment rail is on the deposit page. The brands that surface in a search result are not the brands a licensed Australian operator would ever list. They are the brands the ACMA has acted against, and the page below sets out which ones, how the rail itself works, and what that means for a player choosing where to put money.

A close-up of a banking app on a smartphone showing a same-day transfer confirmation on a kitchen table.
The ACMA issued further formal warnings to Dama N.V. over Woo Casino (March 2025) and Spirit Casino (May 2025).

Data current as of 30 October 2026 and checked against the Australian Communications and Media Authority’s published formal-warning register.

What BPAY actually is, and why it shows up on casino deposit pages at all

BPAY is a bill-payment service that sits inside the online banking of more than 140 Australian banks and financial institutions, and it has run since 18 November 1997. The mechanic is plain enough: a biller (a utility, an insurer, a council) prints a Biller Code and a Customer Reference Number on the invoice; the payer logs into their own bank, picks BPAY, types in those two numbers, and the bank moves the money through the BPAY scheme. The service is owned equally by ANZ, Commonwealth Bank, National Australia Bank and Westpac through the parent company Cardlink Services Limited, and since September 2021 it has sat inside Australian Payments Plus (AP+) alongside eftpos and the New Payments Platform that runs PayID and Osko. A BPAY payment is, in operational terms, an instruction from one Australian bank to another to settle a bill — not a card transaction, not a direct debit, not a wallet tap.

A person at a laptop reading a plain-language explainer article at a home desk.
In February 2025 the ACMA issued a formal warning to EOD Code SRL over Instant Casino.

That is why offshore casino sites list it. A card deposit goes through Visa, Mastercard or American Express and is flagged at the scheme level by merchant category code; a wallet deposit goes through Apple Pay, Google Pay or Samsung Pay and is still, underneath, a card. BPAY looks different on paper: no card scheme, no chargeback right under the ePayments Code, no merchant category code for “Betting/Casino Gambling” because BPAY is not a card transaction at all. A site marketing BPAY to Australian players is marketing a payment method that, on the surface, looks harder for the bank to identify as gambling. Whether the bank does identify it anyway is a separate matter, covered below.

A second reason is settlement speed and reach. With Osko, a transfer between participating Australian banks arrives in under a minute, twenty-four hours a day, seven days a week, addressed either to a BSB and account number or to a PayID; the New Payments Platform itself went live on 13 February 2018 and now carries more than 25 million registered PayIDs. BPAY payments are slower than Osko — typically next business day rather than instant — but they reach the same network of accounts. A site that can put a BPAY instruction on its deposit page can put an Australian bank transfer or a PayID there as well, and most of the brands the ACMA has acted against list all three. The marketing claim that a brand “accepts BPAY” is, in practice, a marketing claim that the brand accepts money from an Australian bank account via a rail that the Australian bank can recognise.

Online casino games and online pokies cannot be licensed in Australia. The Interactive Gambling Act 2001, tightened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide those products to a person physically in Australia; no state or territory issues a licence for them. What Australia does licence is wagering on races and sport placed before the event, lotteries and keno, and the bulk of online wagering licences sit with the Northern Territory Racing and Wagering Commission — fifty-two online bookmakers including Sportsbet, Bet365 and Ladbrokes, regulated by a commission with no full-time staff that meets once a month in Darwin. The minimum age is 18.

A tablet screen displaying an official regulator warning notice on a desk beside a coffee cup.
In April 2026 the ACMA issued a formal warning to Ryker B.V. over Jackbit and CasinOK.

The target of the Act is the provider, not the player. An Australian who places a bet with an offshore casino is not committing an offence under the IGA. The offshore operator is. That distinction matters because it shapes every consumer protection a player at an offshore site does not have: there is no Australian complaints body, no recourse through the Australian Financial Complaints Authority if a withdrawal is refused, and no guarantee the site will still be reachable when a balance sits on it. The ACMA can, and does, direct Australian internet service providers to block illegal sites, and a player whose deposit is on a blocked site has no local mechanism for getting it back.

Two payment rules tighten this further. Since 11 June 2024, licensed Australian wagering services cannot accept payment by credit card or other credit-related products, and the same restriction pulls in linked digital wallets such as Apple Pay used to fund a credit-card-funded account. Digital currency has been banned as a deposit method for licensed wagering since the same date, with penalties up to A$247,500 for operators who breach the rule. The payment routes a licensed Australian operator can lawfully take are debit card, bank transfer, PayID/Osko and BPAY. An offshore site that asks an Australian for a credit card or a crypto deposit is operating outside the Australian rules; an offshore site that asks an Australian for BPAY is operating outside the Australian rules because the product is not licensable here at all.

The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026 and its advertising and inducement measures commence on 1 January 2027 — law with a start date, not yet in force on a page dated to the current year. It does not change the underlying prohibition on offering online casino games to people in Australia; it changes how those products may be advertised to Australians once the relevant provisions take effect.

How an Australian bank handles a BPAY payment flagged as gambling

The starting assumption an offshore casino makes — that BPAY is invisible to a bank’s gambling controls — does not survive contact with how the controls actually work. Commonwealth Bank lets a customer apply a gambling lock to eligible cards via the CommBank app; the lock automatically blocks most gambling transactions, and the bank’s own wording is that it “cannot guarantee all gambling-related purchases will be stopped”. Westpac’s block is set at the card level and refuses authorisation of transactions registered under the merchant category code “Betting/Casino Gambling” on eligible personal credit and debit cards. ANZ’s gambling transaction block, activated in the ANZ app, also blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, not just on the physical card itself; once the block is on, removing it requires a 48-hour waiting period, and ANZ warns that not all gambling transactions will be blocked and some non-gambling transactions might be blocked in error.

A BPAY payment is not a card transaction, and the merchant category code machinery built into the card networks does not apply to it. That does not make BPAY invisible. The payment instruction names a biller and a Customer Reference Number, and an Australian bank is able to refuse the instruction if the biller code or the CRN is associated with gambling, or if the customer has set a personal block. ANZ’s daily limit for BPAY payments sits at A$5,000; St.George allows a cumulative daily limit of A$100,000 with a A$15,000 maximum for certain billers. Limits are set by the financial institution and the biller rather than by BPAY itself, and the spread is wide enough that a single rule of thumb does not apply across banks.

The Reserve Bank of Australia’s July 2025 review of merchant card payment costs proposes removing surcharges only on eftpos, Mastercard and Visa card transactions, and explicitly leaves American Express outside the scope of the proposed surcharge ban — a reminder that the surcharge rules and the network rules are not the same conversation as the gambling-block rules. American Express, established in 1850 as a freight-forwarding company and issuing its first charge card on 1 October 1958, runs a three-party scheme rather than Visa and Mastercard’s four-party network. None of which changes the IGA position: it is the product being sold that is prohibited, not the rail being used to pay for it.

PayID adds a different layer of visibility that matters here. Paying to a PayID shows the name of the account holder before the transfer is sent; AP+ warns that being asked to transfer money to a PayID on an illegal gambling site almost certainly means a scam site. PayID-based instant transfers are available at over 100 Australian financial institutions. A player using PayID to fund an offshore casino is paying to a name the player can see — and seeing a name that is not an Australian-licensed wagering provider is, by AP+’s own gloss, the strongest signal that the site is one the player should not be paying.

Where player protection actually sits for an Australian who plays offshore

BetStop, the National Self-Exclusion Register, has been live since August 2023. It binds Australian-licensed online and phone wagering services, and an offshore casino is not connected to it. Registering with BetStop does not stop an offshore casino from accepting a deposit; it stops a licensed Australian wagering provider from accepting one. The same gap runs through every other consumer-protection mechanism built into the Australian framework: the ePayments Code, the Australian Financial Complaints Authority, the state-based gambling-care services — all of them reach Australian-licensed operators and do not reach offshore ones.

What does reach an Australian player, anywhere, is the National Gambling Helpline on 1800 858 858 — free, twenty-four hours a day — and the chat service at Gambling Help Online. The state-level services (such as the Victorian Responsible Gambling Foundation, GambleAware NSW and the Western Australian Problem Gambling Support Service) operate alongside the national line and offer counselling, financial counselling and self-exclusion from land-based venues. The Self-Exclusion Register for land-based pokies and casino products sits at the state level and is not connected to the offshore product, but the counselling services that sit behind those registers do not draw that distinction.

H2 Gambling Capital’s 2025 report estimates that Australians lose about A$3.9 billion a year to illegal gambling sites, and that the share of gambling going through legal channels fell from 74% in 2021 to 64%. The number is not a measure of how much Australians gamble; it is a measure of how much of what they gamble on does not sit inside the Australian licensing and complaints system.

What ACMA enforcement looks like for a player who has already deposited

The ACMA’s blocking power sits in the Interactive Gambling Act and is the most visible part of enforcement. According to the ACMA as reported in June 2026, a total of 1,751 illegal gambling and affiliate marketing websites had been blocked since the first blocking request in November 2019, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. The numbers are a running total; the rate of additions is what shows the system’s pace. In a single round reported on 26 June 2026 the ACMA asked Australian internet service providers to block 12 more sites: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz.com, Spinrise, Vinyl Casino and Wildsino.

For a player, the practical consequence of a block is that the site can become unreachable mid-session. A balance sitting on a blocked site is recoverable only through the site’s own customer service, and offshore sites are not subject to AFCA. The ACMA’s blocking round does not come with a refund mechanism for Australian players, and the ACMA does not arbitrate individual withdrawal disputes. A player who has deposited with an offshore casino that is later blocked has, in practice, no Australian backstop for that balance.

The blocking round is one of three ACMA actions a player will see named. Formal warnings come before blocks in most cases and are published on the ACMA’s website with the operator name, the brand name and the date. Civil penalty proceedings are rarer and target the operator rather than the player. Civil penalty proceedings against an operator can result in penalties running into millions of dollars, and a player who has been harmed by the operator’s conduct has no individual right of action under the IGA.

Settlement times: how quickly a BPAY deposit or withdrawal actually moves

BPAY payments settle next business day in the normal case, and the rail is built for bill payment rather than for instant deposit confirmation. A player making a BPAY deposit at an offshore casino on a Friday evening will, in most cases, see the deposit credited on Monday morning. That is slower than Osko (which moves in under a minute, twenty-four hours a day) and slower than PayID (which moves in seconds during operating hours). It is faster than a traditional bank transfer addressed to a BSB and account number, which can take one to two business days.

The settlement time matters because of the wagering requirement structure on most offshore welcome packages. A bonus credited on Monday and wagered over a weekend starts the clock against a timer that runs from the credit date rather than from the deposit date; a deposit made on Friday that does not credit until Monday loses the weekend against the timer’s first hours. The settlement time on the payment rail is not, by itself, a cost — but it sits inside the cost calculation once a wagering requirement is in play.

Withdrawals on the same rail run in the opposite direction. A withdrawal from an offshore casino to an Australian bank account via BPAY typically takes two to five business days, again slower than Osko or PayID. The casino’s internal processing time — the period between requesting a withdrawal and the bank instruction being issued — is added on top, and most offshore casinos quote twenty-four to seventy-two hours for that step. A player should expect a BPAY withdrawal to take a week in the normal case, and longer if the casino’s compliance check flags the request.

Enforcement actions: brands the ACMA has acted against for offering prohibited services

The eleven brands below are not a ranked list and not a recommendation. Each brand is included because the ACMA itself issued a formal warning over it for offering prohibited interactive gambling services to people in Australia. The order follows the ACMA’s most recent action against each operator; the date stamp is the date the ACMA published the formal warning, not the date the brand began operating in Australia.

The blocking rate the ACMA has run since November 2019 is itself the headline: 1,751 illegal gambling and affiliate marketing websites blocked, against a first blocking request in November 2019, taking the ACMA’s enforcement window to roughly six years and eight months. Stated as a band, the running total sits between 1,750 and 1,760 as of June 2026, and the rate of additions through 2024 and 2025 has been steady rather than accelerating — neither a single crackdown wave nor a tapering-off. The figure is best read as a maintenance rate: the ACMA catches up with the new brands as fast as the offshore market spins them up, and the running total grows in line with the size of the offshore market reaching Australian players.

Brand ACMA action and date Operator named by the ACMA Subject support
RocketPlay Formal warning, March 2026 Pulsup Ltd (Rocketplay.com.au); earlier Dama N.V., May 2022 —
Level Up Casino Formal warning, May 2022 Dama N.V. Listings-only (Westpac)
Woo Casino Formal warning, March 2025 Dama N.V. —
Spirit Casino Formal warning, May 2025 Dama N.V. —
National Casino Formal warning, July 2025 Consolutetish S.R.L. Listings-only (AUSTRAC, Wikipedia)
Bizzo Casino Formal warning, July 2025; earlier 2022 Consolutetish S.R.L.; earlier TechSolutions —
Ignition Casino Formal warning, July 2025 Bamboo Media —
Instant Casino Formal warning, February 2025 EOD Code SRL Listings-only (ecoPayz, PayID)
Jackbit Formal warning, April 2026 Ryker B.V. —
Casino Intense Formal warning, April 2025 Sterplay Holding Ltd Listings-only (AUSTRAC, iTnews, NAB)
Sky Crown Formal warning, September 2022 Hollycorn N.V. —

The “Subject support” column reads “—” where research does not name the brand in any source consulted for this page; “Listings-only” where the brand appears in a source the page can name but research does not confirm a substantive claim about the brand’s own offering. Either marker is honest: the brand is named on the page because the ACMA named it, and the page does not assert a support claim that research does not back.

RocketPlay

RocketPlay sits at the top of the ACMA list by recency: a formal warning was issued to Pulsup Ltd over Rocketplay.com.au in March 2026, with an earlier warning issued to Dama N.V. in May 2022. Dama N.V. is the same operator named in the warnings over Woo Casino and Spirit Casino in March and May 2025, and the reappearance of the corporate group across three brands in four years is the pattern worth noting rather than any single warning. The brand names the ACMA has acted against in the Dama N.V. group include Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos — six brands at the May 2022 count alone.

A player looking at RocketPlay is looking at a brand the ACMA has now warned twice under different corporate names, and at an operator group that has cycled through three of those names since 2022. The legal position does not change between warnings: the Interactive Gambling Act prohibits the product, the warnings are the ACMA’s administrative step before civil penalty proceedings, and a deposit with the brand carries the same risk profile as a deposit with any other offshore casino not licensed in Australia.

Level Up Casino

Level Up Casino was named in the May 2022 ACMA warning to Dama N.V. alongside five other Dama brands, and it is the same operator group as RocketPlay above. Research notes the brand appears in listings at Westpac’s merchant-monitoring materials, but that is a listings-only finding: it says the brand is named in a financial-institution source, not that Westpac endorses the brand or that Level Up operates under an Australian licence.

The judgement that fits Level Up is the same one that fits any brand in the Dama N.V. group. The brand is one of six, the operator is one corporate group, and the ACMA has returned to the group three times in four years. A player looking for differentiation between the brands is looking for a difference that does not exist at the corporate level.

Woo Casino

Woo Casino received an ACMA formal warning directed to Dama N.V. in March 2025, and is part of the same Dama N.V. cluster as RocketPlay, Level Up and Spirit Casino. The March 2025 warning is the second ACMA action over the Dama N.V. group, and the May 2025 warning over Spirit Casino is the third. Three warnings in fourteen months is the pace the ACMA has set against this operator group, and the pace is the information a player has.

A brand in the Dama N.V. group in 2026 is a brand whose operator has been told, in writing, three times that the product is prohibited. The third warning is not a new fact about the brand; it is a confirmation of the pattern that was already visible after the first.

Spirit Casino

Spirit Casino sits in the same Dama N.V. group as Woo Casino, RocketPlay and Level Up, with a formal warning issued in May 2025. The May 2025 warning is the third time the ACMA has acted against the Dama N.V. corporate group in fourteen months. A player comparing Spirit Casino to any other brand in the group is comparing brands within a single operator’s portfolio rather than brands in different markets.

The “no-data” reading applies here as it does across the rest of the Dama cluster: the page does not have a researched claim to make about Spirit Casino’s product, its payouts or its bonus structure, and it does not invent one to fill the gap. The page has what the ACMA has published, and that is what the page reports.

National Casino

National Casino was named in the ACMA’s July 2025 formal warning to Consolutetish S.R.L., with Bizzo Casino named in the same warning. Research notes the brand appears in AUSTRAC materials and on Wikipedia, both listings-only findings that name the brand without confirming anything about its product. The Consolutetish S.R.L. warning is the second warning to the operator group; the first, over Bizzo Casino, was issued to TechSolutions (CY) Group Limited and TechSolutions Group N.V. in 2022.

A brand that has cycled through two corporate groups in three years is a brand whose operator is moving between corporate vehicles faster than the ACMA is moving through its warning process. The substance of the legal position does not change between vehicles.

Bizzo Casino

Bizzo Casino sits at the same corporate address as National Casino for the July 2025 Consolutetish S.R.L. warning, with a prior warning issued in 2022 to TechSolutions (CY) Group Limited and TechSolutions Group N.V. The brand is the more exposed of the two in the Consolutetish cluster: a 2022 warning, a 2025 warning, and two different corporate names between them. The “earlier 2022” stamp on the table above is the line that captures this, and the player’s reading of it is straightforward.

A brand with two ACMA warnings across two operators is a brand that has been the subject of an enforcement action twice under two different corporate names. The pattern is not, by itself, evidence of worse conduct than any other brand on the page — it is evidence that the enforcement framework has had to chase the brand across corporate vehicles.

Ignition Casino

Ignition Casino was named in the ACMA’s July 2025 formal warning to Bamboo Media, alongside the Consolutetish S.R.L. warning over National Casino and Bizzo Casino. The July 2025 warning round is, in effect, three separate actions bundled into a single ACMA publication date. A brand whose ACMA action shares a date with two other brands is a brand whose warning is part of a wider enforcement cycle rather than a stand-alone action.

The “no-data” finding for Ignition Casino applies here as it does across most of the table: research does not carry a substantive claim about Ignition’s product, and the page does not invent one.

Instant Casino

Instant Casino drew an ACMA formal warning directed to EOD Code SRL in February 2025. Research notes the brand appears in listings at ecoPayz and at PayID — a listings-only finding that says the brand is named in a payment-method directory, not that ecoPayz or PayID endorses the brand or that Instant Casino operates under an Australian licence.

The February 2025 warning is the earliest of the warnings in the current cluster (ahead of Woo Casino in March 2025, Casino Intense in April 2025, Spirit Casino in May 2025, National Casino and Bizzo Casino and Ignition Casino in July 2025). The cluster tightens through 2025, and a player looking at the pattern is looking at a sustained ACMA enforcement cycle rather than a one-off warning.

Jackbit

Jackbit was the subject of an ACMA formal warning to Ryker B.V. in April 2026, alongside CasinOK. The April 2026 warning is one of the most recent ACMA actions on the table, and it sits in the same enforcement window as the RocketPlay warning to Pulsup Ltd in March 2026 and the June 2026 blocking round over the twelve other brands. A brand whose ACMA warning sits inside the most recent enforcement cycle is a brand whose operator has been told, in writing, that the product is prohibited at the most recent point the ACMA has acted.

The “no-data” finding applies here as it does across the rest of the table.

Casino Intense

Casino Intense was the subject of an ACMA formal warning to Sterplay Holding Ltd in April 2025. Research notes the brand appears in AUSTRAC materials, on iTnews and on NAB’s merchant-monitoring pages — three listings-only sources that name the brand without confirming anything about its product. The April 2025 warning is mid-cycle, sitting between the Woo Casino warning in March 2025 and the Spirit Casino warning in May 2025.

A brand named across three independent listings sources is a brand whose footprint reaches Australian financial-institution monitoring materials. That does not constitute endorsement; it constitutes visibility.

Sky Crown

Sky Crown was the subject of an ACMA formal warning to Hollycorn N.V., published in September 2022, alongside Blue Leo. The Hollycorn N.V. warning is the oldest warning on the table — the ACMA published it in 2022, four years before the most recent warning on the table over Jackbit in April 2026. The age of the warning is not, by itself, a reason to treat Sky Crown differently from any other brand on the page; it is a reason to read the ACMA enforcement cycle as a sustained one rather than a recent escalation.

A brand whose ACMA warning dates to 2022 is a brand the ACMA named early in the current enforcement window. The product the brand sells has not become licensable in the interval.

The verdict on each brand, in plain terms

A reader who has read this far already knows the answer to “which offshore casino site should I play at” — there is no offshore casino site the page recommends, and the brands named above are named because the ACMA has acted against them, not because the page has judged them suitable. The verdict that fits each is the same: an Australian player looking for legal protection, a complaints body and a connection to BetStop will not find any of those at any of the eleven brands on the table. A player looking for the product those brands offer — online casino games, online pokies — is looking for a product the Interactive Gambling Act 2001 prohibits, and the ACMA’s enforcement record over the last six years is what that prohibition looks like in practice.

For an Australian player who wants to wager online within the Australian framework, the licensable product is wagering on races and sport before the event, lotteries and keno, through operators licensed in the Northern Territory or in another Australian state or territory that issues wagering licences. The deposit routes for those operators are debit card, bank transfer, PayID/Osko and BPAY. The product the offshore brands listed above sell is not a licensable product, and a BPAY deposit to one of them does not change the legal position.

What the page does not cover, and why

The page does not list bonus terms, wagering multiples or payout times for any of the eleven brands. The reason is in the research: the only sources for those specifications were affiliate marketing pages, and the page does not pass affiliate marketing pages off as research. A reader who wants a wagering multiple for any brand on the table can find one on an affiliate page; the page does not carry it because the page does not vouch for the source.

The page also does not list working bonus codes, promotional codes or voucher codes. The reason is the same: those codes are a marketing artefact rather than a research fact, and the page’s job is to describe what an offer is worth rather than how it is claimed.

Frequently asked questions

Is it legal for an offshore casino site to accept BPAY from an Australian visitor?

No — not because of BPAY, but because of the product. The Interactive Gambling Act 2001 prohibits offering online casino games or online pokies to a person in Australia, and no state or territory issues a licence for those products. A BPAY deposit to an offshore casino is an unlawful transaction on the operator’s side, and the player is not the target of the Act. The rail used to move the money does not change the legal position of the product being bought.

How quickly does a BPAY transaction typically settle?

BPAY payments settle next business day in the normal case, against the Australian banks that participate in the scheme. That is slower than Osko, which moves between participating Australian banks in under a minute twenty-four hours a day, and slower than PayID, which settles in seconds during operating hours. A withdrawal on the BPAY rail typically takes two to five business days on top of the casino’s internal processing time.

Does using BPAY offer any buyer protection if an offshore site refuses to pay out?

No. BPAY is a bill-payment service rather than a card transaction, and the chargeback mechanism built into the card networks does not apply to it. The ePayments Code covers electronic payments, but its remedies run through the player’s Australian bank rather than through the offshore casino. An offshore casino is not subject to the Australian Financial Complaints Authority, and a withdrawal dispute has no Australian backstop.

Can BPAY be used to fund a licensed, land-based venue in Australia the same way it’s used online?

BPAY is widely used to pay bills in Australia — utilities, insurers, councils — and licensed Australian wagering operators can take BPAY deposits. The product those operators offer is wagering on races and sport placed before the event, lotteries and keno, not online casino games or online pokies. The payment rail is the same; the product is not.

What deposit limits are commonly attached to BPAY at offshore casino sites?

BPAY payment limits are set by each Australian financial institution and biller rather than by BPAY itself, and the spread across banks is wide. ANZ’s daily limit for BPAY payments sits at A$5,000; St.George allows a cumulative daily limit of A$100,000 with a A$15,000 maximum for certain billers. The offshore casino’s own deposit limits are a separate layer, and the lower of the two is the one that binds.

Why might a bank block a BPAY transaction flagged as gambling-related?

An Australian bank is able to refuse a BPAY instruction if the biller code or the Customer Reference Number is associated with gambling, or if the customer has set a personal gambling block. Commonwealth Bank, Westpac and ANZ all offer gambling blocks at the card level, and ANZ’s block also covers gambling transactions made through Apple Pay on an eligible card. The card-network merchant category code machinery does not apply to BPAY because BPAY is not a card transaction, but the bank’s own monitoring of biller codes and CRNs is a separate layer of visibility.