Visa & Mastercard Release Crypto Payment Guidelines for iGaming 2026

Payment Card Giants Open Crypto Gateway

Visa and Mastercard have jointly released technical and compliance guidance permitting iGaming operators to process cryptocurrency deposits and withdrawals through their networks, provided operators meet enhanced anti-money laundering and know-your-customer standards aligned with FATF Recommendation 15.

The guidance, published simultaneously by both networks on September 23, specifically permits stablecoins (USDC, USDT, BUSD) and direct self-custodied wallet transactions, while restricting volatile asset trading and peer-to-peer transfers that lack transparent transaction histories.

Compliance Framework Details

Operators wishing to offer crypto payment options must:

• Maintain transaction-level transparency with cryptographic proof of wallet ownership and beneficial ultimate ownership
• Implement blockchain monitoring via Chainalysis, Elliptic, or equivalent OFAC-sanctioned vendor integration
• Retain on-chain transaction records for minimum 10 years
• Report suspicious activity to FinCEN within 30 days of detection
• Verify customer identity against FATF blacklists and sanctions lists before confirming wallet deposit address

This last requirement is technically novel: operators must verify customer identity before generating deposit addresses, preventing the traditional crypto pattern of anonymous wallet funding followed by later KYC.

Industry Impact

The guidance effectively legalizes a payment corridor that operated in regulatory gray space for years. Operators previously offering crypto payments often did so through unregulated third-party processors operating offshore, incurring significant compliance risk and reputational liability.

Estimates suggest $4-6 billion in annual iGaming deposits currently flow through unregulated crypto channels—roughly 2-3% of global regulated market volume but concentrated in Asia-Pacific and emerging markets. Visa and Mastercard's legitimacy effectively creates a regulatory on-ramp for this volume.

Major operators including DraftKings, FanDuel, BetMGM, and Draftkings competitor operators are already evaluating implementation. Smaller operators face higher barriers: Chainalysis and Elliptic integration costs range $50,000-150,000 annually, plus engineering resources required for blockchain transaction monitoring.

Stablecoin Preference

Visa and Mastercard explicitly discourage volatile cryptocurrency. Bitcoin and Ethereum transfers are permitted only if operators demonstrate technical custody over actual blockchain assets and prove source of funds through transparent transaction history.

Stablecoins dominate the approved pathway because their 1:1 currency peg eliminates volatility-related disputes and simplifies tax reporting for both operators and players.

Regulatory Alignment

The guidance aligns with FATF's June 2026 cryptocurrency recommendations, which established international standards for Virtual Asset Service Provider (VASP) regulation. By adopting FATF standards, Visa and Mastercard effectively created a compliance floor that regulators in US states, EU jurisdictions, and Asia-Pacific markets can reference.

FinCEN has indicated it will reference the Visa/Mastercard framework in forthcoming rulemaking around cryptocurrency transaction reporting. This represents significant regulatory legitimacy for operators adopting the standard.

Geographic Rollout

The guidance applies immediately to Visa and Mastercard's direct network participants globally. However, specific jurisdictions may impose additional restrictions: the UK Gambling Commission has signaled it may require enhanced problem gambling monitoring for crypto deposit customers, citing higher velocity and deposit inconsistency patterns. The EU's Markets in Crypto-Assets Regulation (MiCA) compliance timeline may delay implementation in European Union member states until Q1 2027.

What Operators Must Do Now

Operators currently considering crypto payments should initiate blockchain monitoring vendor selection immediately—integration timelines range 6-12 weeks. Compliance teams must update AML policies to reference FATF standards and document operator commitment to source-of-funds verification.

Operators offering crypto payments without Visa/Mastercard approval face potential network suspension and fines up to $500,000 per violation—creating powerful incentive to formalize previously informal crypto payment processing.