iGaming Payment SolutionsiGaming Payments Compliance Calendar
The unit here is a date a payments team can put in a sprint plan. Regulatory mood music (consultations, ministerial hints, industry lobbying) stays off the calendar until it produces an effective date from a primary source; where a window is real but the day is not fixed, the row says TBC instead of pretending.
Read it in three passes: what is already binding and still generating operational work, what lands next quarter, and what belongs in the architecture roadmap rather than the current sprint. Filter by your regions and by the rule families that touch your stack.
- 58
- Dated entries tracked
- 7
- Regions covered
- 6
- Rule families
- 2026‑2030
- Horizon
What lands in the next 90 days
The window runs from October 5, 2026, to January 3, 2027, and the dated rows below carry the full detail.
- Oct 8: Curacao B2C licensees must have CGA-compliant player terms uploaded, with payout, refund and crypto clauses.
- Oct 13: Alberta's last transition extensions expire, and AGLC treats remaining ties to unregulated schemes as grounds for unsuitability.
- Oct 14: The banks and payment institutions holding the accounts of betting operators in Brazil must finish refunding bettors under Provisional Measure 1.394, which banned sports betting and online casino on September 25, 2026. Money they cannot return goes to Caixa Econômica Federal.
- Oct 25: All 85 federal betting authorizations in Brazil end together with state licenses, which voids any Brazilian betting license in a merchant's KYB file.
- Oct 30: Brazil adds a virtual-asset category to its fraud data-sharing system under Resolution BCB 569, so crypto rails get their own reporting lane.
- Nov 15: The SEPA structured-address mandate takes effect, and payout files with free-text beneficiary addresses start bouncing.
- Nov 23: Brazil's Congress must vote on MP 1.394, and the deadline can be extended once by 60 days. The measure has the force of law, so its bar on betting payments applies in full while the vote is pending.
- Dec 1: Fraud Marker reporting of illegal-betting indicators becomes mandatory in Brazil, New Zealand's licensed online casino market launches, and Irish retail bookmakers move onto GRAI licenses.
- Dec 24: Critical B2B suppliers to Curacao licensees must be CGA-registered, a duty that can reach payment vendors.
Upcoming deadlines
Dated obligations ahead, nearest first. Rows marked TBC cover a window whose exact day is not fixed.
- EUPayment railsdate not final
PSD3/PSR: Official Journal publication window
The April 2026 Council texts locked scope; the OJ stamp starts the clocks (PSD3 transposition 21 months from entry into force, PSR application on its own schedule). Impersonation-fraud refunds on the player's PSP and the open-banking API mandate both run off this date.
PSD3 and PSR for iGaming - EUAML & enforcement
AMLA: gambling risk-methodology consultation closes
AMLA's draft RTS under AMLD6 Article 40(2), a common risk-scoring methodology for non-financial obliged entities that names gambling expressly, closes for comment (hearing Sep 10). Direct-supervision selection is a 2027 process restricted to financial institutions: operators cannot be selected, but the cross-border PSPs and EMIs that process their payments can. An earlier version of this row ran the selection a year early with iGaming as a target; corrected Jul 24, 2026.
AMLA and iGaming payments - UKLicensing & market access
UK: RTS 12B phase 2, gross deposit limits mandatory
Only gross limits qualify from this date: withdrawals no longer reset the cap, which breaks the running-counter pattern in legacy deposit-limit subsystems. UKGC extended this from the originally planned June 30, so the migration window was a gift; the hard stop at limit is not negotiable.
RTS 12 migration playbook - Asia-PacificLicensing & market accessdate not final
Philippines: PAGCOR accreditation deadline for B2B payment channels
PAGCOR's B2B accreditation regime explicitly lists payment channels among covered providers: fee, probity check, inspection and a performance cash deposit, or no serving Philippine-licensed online operators. Providers that never applied by May 31 are already barred.
- EUPayment railsdate not final
Netherlands: Wero payments go live alongside iDEAL
Dutch buyers can start paying with Wero in Q4 2026 as EPI begins migrating iDEAL merchants, after the co-branding phase that ran January to March. The iDEAL brand is scheduled to disappear entirely by the end of 2027. iDEAL carries a large share of Dutch casino deposits, so every cashier and PSP integration built on it inherits a migration project with a hard end date.
- EUTax & duty
Malta: gaming tax triples for Type 1, device levy goes
Legal Notice 84 of 2026 replaces the flat 5% Malta-facing gaming tax with 15% of gaming revenue for Type 1 services and 10% for Types 2-4, abolishes the gaming-device levy, and keeps the base as it was: players physically in Malta, and for distance gaming the player's establishment or residence in Malta, so the address data in the payment stack still decides what is taxable. Companion LN 86 narrows the VAT gambling exemption from the same date.
MGA-licensed payment providers - OffshoreLicensing & market access
Curacao: B2C player-terms deadline
Every B2C licensee must have CGA-compliant player-facing terms uploaded: payout processing times, refunds, crypto specifics (lost wallets, sanctioned addresses, forks), dormant accounts. These are the cashier clauses acquirer underwriters read next.
Curacao payment access map - US & CanadaLicensing & market access
Alberta: last transition extensions expire, grey processing window closes
The market went live July 13, 2026; gray-market operators had to apply, pay and cease unregulated activity by that date, with case-by-case extensions running at most three months. From October 13 no transitional relief remains: an operator not live under AGLC registration is out, and AGLC treats lingering ties to unregulated schemes as grounds for unsuitability, which makes this a de-risking date for PSPs still touching Alberta-facing grey volume. The exact date sits in AGLC transition guidance distributed to applicants rather than posted publicly.
Alberta launch payments breakdown - BrazilPayment rails
Brazil: deadline for banks and payment institutions to refund bettors (MP 1.394)
Under Provisional Measure 1.394 the banks and payment institutions that hold operators' transactional accounts must refund bettors between October 9 and 14, preferably to the account each deposit came from, working from the lists of bettors by CPF that operators send them on October 7 and 8. Money an institution cannot return goes to an account at Caixa Econômica Federal. Refunds and the payments that close an operator's book are the only betting transactions MP 1.394 still lets banks and payment institutions process.
Brazil market page - BrazilLicensing & market access
Brazil: all federal and state betting licenses end (MP 1.394)
Provisional Measure 1.394 ends every authorization granted under Law 14.790 on this date, 30 days after the measure was published, and state and Federal District fixed-odds licenses end with them. The 85 federal operators paid R$30 million each for their authorizations, R$2.55 billion in total, and get no refund and no compensation. From this date no operator holds a Brazilian fixed-odds betting license, and any Brazilian authorization in a merchant's KYB file is void.
Brazil market page - BrazilAML & enforcement
Brazil: virtual-asset reporting duty starts (BCB 569)
The virtual-asset category of the fraud data-sharing mandate goes live ahead of the December full-reporting date. Crypto rails serving Brazilian-facing books get their own reporting lane.
- US & CanadaLicensing & market accessdate not final
Oklahoma: sweepstakes veto-override vote expected
A veto-override attempt is expected in the November window. If it lands, Oklahoma joins the 2026 ban wave; watch processor exits ahead of any effective date.
Sweepstakes processor-liability breakdown - EUPayment rails
SEPA: structured-address mandate
Legacy free-text address formats in SEPA messages are rejected after this date. A payout file that still carries unstructured beneficiary addresses starts bouncing at the scheme layer, which surfaces as unexplained payout failures.
SEPA Instant payouts audit - BrazilLicensing & market access
Brazil: Congress deadline to vote on Provisional Measure 1.394
Congress has until this date to vote on MP 1.394, which banned fixed-odds betting on September 25, 2026. The deadline can be extended once by 60 days, with the count paused over the congressional recess from December 23 to February 1, and from November 9 the measure locks the agenda of the house that holds it. The measure has had the force of law since publication, so its bar on banks, payment institutions and card networks processing betting transactions applies in full while the vote is pending.
Brazil market page - BrazilAML & enforcement
Brazil: Fraud Marker reporting mandatory
Institutions in the central bank's fraud data-sharing system must have reporting in place by November 30 and report illegal-betting indicators from December 1. Flags land on player counterparty accounts and on payment intermediaries alike, so any rail that moves money for a Brazilian-facing betting book becomes visible to every participating institution.
LATAM payments map - Asia-PacificLicensing & market access
New Zealand: licensed online casino market launches
Up to 15 DIA-licensed online casinos go live under the Online Casino Gambling Act 2026, and the grey window for offshore operators starts closing. For payment providers this is the first new fully regulated English-speaking market since Alberta, with the payment stacks decided during the autumn application rounds.
- EULicensing & market access
Ireland: retail betting flips to GRAI licenses, Revenue licenses expire
Legacy Revenue bookmaker licenses and shop registrations expire end of November 30; from December 1 the GRAI register is the only source of truth for whether an Irish retail bookmaker is licensed. Remote operators already moved to GRAI licenses from July 1, 2026. For PSPs the onboarding check changes registers, and GRAI licensees carry the 2024 Act's payment-side rules, including the credit card ban on gambling funding.
- OffshoreLicensing & market access
Curacao: critical B2B suppliers must be CGA-registered
End of the two-year LOK transition: licensees cannot buy critical services from unregistered suppliers after this date, and the registration duty can reach payment vendors. Local staffing enforcement follows on April 1, 2027, with detail still unpublished.
Curacao payment access map
Already in force, 2026 year-to-date
Binding since earlier this year. Kept on the calendar because the operational tail (migrations, ratio effects, enforcement) is still live.
- US & CanadaLicensing & market access
California AB 831: sweepstakes ban in force
Dual-currency sweepstakes casinos become unlawful, and the statute reaches the money: payment processors face criminal exposure up to $25,000 per violation. The first state law to put processors, not just operators, in the liability chain.
Sweepstakes processor-liability breakdown - EUAML & enforcement
Slovakia: PSPs must block payments to blacklisted gambling merchants
Act 261/2025 rewrote the blocking regime: Slovak banks, payment institutions and e-money institutions block payments to accounts and merchant IDs on URHH's weekly prohibited-offers list directly on the basis of the list, no court order, within five days of each update. A blacklisted MID kills card deposits from Slovak payers entirely; the first lists under the new regime applied from the start of 2026.
Slovakia market page - EUTax & duty
DAC8: EU crypto rails become tax-reported
Directive 2023/2226 applies: crypto-asset service providers, MiCA-authorized or not, must collect tax self-certifications and TINs from EU-resident users and report their transactions, with calendar 2026 as the first reportable period and exchange due by September 30, 2027. Every crypto on-ramp and payout rail in an EU-facing cashier loses its quasi-anonymity; pick DAC8-ready crypto partners or inherit the gap.
Crypto gateways for iGaming - EULicensing & market access
Finland: license applications open ahead of market liberalization
The National Police Board began taking applications under the new Gambling Act on March 1; the licensed market itself opens July 1, 2027, ending Veikkaus exclusivity over online casino and betting. The runway matters for payments: pay-by-bank rails dominate Nordic cashiers, and operators applying now are assembling their Finnish stacks through 2026.
- GlobalCard networks
Visa VAMP: merchant Excessive threshold drops to 1.5%
Down from 2.2% in NA, Europe and AP (CEMEA stays at 2.2%). Fraud-coded disputes count twice (TC40 plus TC15), so a casino book where bet-regret disputes dominate reaches the line at roughly 0.75% real dispute rate.
Visa VAMP deep dive - UKTax & duty
UK: Remote Gaming Duty 21% becomes 40%
Finance Act 2026 s.86, applying to accounting periods from April 1. Remote gaming only; the remote betting rise to 25% lands April 2027 as a separate line. The duty is charged on a place-of-consumption basis, so the geolocation and KYC signals in the payment stack directly determine tax liability, and a near-doubled tax line makes processing fees one of the few compressible costs UK-facing operators have left.
UK market page - BrazilTax & duty
Brazil: government take on betting GGR rises to 13% (LC 224)
Lei Complementar 224/2025 cut the licensed operator's share of fixed-odds proceeds from 88% to 87% on April 1, 2026, and set further cuts to 86% in 2027 and 85% in 2028. Brazil banned fixed-odds betting on September 25, 2026, and every authorization ends on October 25, so the schedule has no licensed market left to apply to. Tax owed on revenue from the authorized period stays due. The same law's art. 6 survives the ban. A bank or payment provider that keeps processing for an unauthorized operator after the authorities notify it is jointly liable for that operator's tax, and from October 25 no operator holds an authorization.
Brazil market page - GlobalCard networks
Visa CE 3.0 expands to non-disputed fraud reports
Qualified Compelling Evidence 3.0 remediation now also reaches TC40 fraud reports that never became chargebacks, taking them out of the VAMP ratio. Casinos hold the evidence CE 3.0 wants: login IDs, device IDs, deposit history.
Full CE 3.0 breakdown - Asia-PacificLicensing & market access
India: PROG Rules in force, OGAI payment gate live
Real-money online gaming is federally banned, and Rule 19 makes banks and payment intermediaries verify a game's Certificate of Registration before processing, then block flagged transactions on OGAI direction. Repeat violations carry up to 2 crore rupees and 3-5 years.
Asia payments map - EULicensing & market access
Sweden: total credit-funded gambling ban
Credit cards, overdrafts, personal loans and BNPL are all barred at licensed operators; only own-funds debit survives. The start moved from the proposed April 1 to May 1. First EU state to go this far, with fines up to 10% of revenue.
Credit-ban tracker - BrazilPayment rails
Brazil: Pix Credito banned for betting deposits (MP 1.355, lapsed August 31)
Under art. 16 of Provisional Measure 1.355, financial institutions could not extend credit tied directly to betting transfers. That closed Pix Credito, a Pix payment funded from a bank credit line, which had let bettors keep depositing on credit after licensed books stopped taking credit cards. Congress never voted on the measure, and it lost effect on August 31, 2026. None of it matters to a betting cashier after September 25, 2026, when Provisional Measure 1.394 barred every payment to betting in Brazil, credit-funded or not.
Brazil market brief - BrazilAML & enforcement
Brazil: illegal-betting indicators join BCB fraud data-sharing (Resolucao 569)
The central bank's fraud-marker system now covers signs of unlicensed betting operation, including financial and payment services rendered to unauthorized operators. Phased duties follow: virtual-asset category by October 30, mandatory reporting from December 1.
LATAM payments map - GlobalCard networks
Mastercard specialty-merchant registration fees overhauled
A separate program from the scam-monitoring SMMP despite the similar acronym: the Specialty Merchant Registration Program, the high-risk registration umbrella that covers MCC 7995, moved to a $1,000 annual per-merchant registration fee, a new $50,000-per-year High-Risk Acquirer License Fee, and new per-transaction specialty fees. Acquirers pass these through, so gambling merchants should expect the new line items in 2026-27 pricing reviews.
Acquirer underwriting breakdown - BrazilAML & enforcement
Brazil: 24-hour blocking orders and joint tax liability (Decreto 13.033 + Portaria 1.766)
Decreto 13.033 created the notice-and-block framework, and the 24-hour blocking duty it points to took effect on August 28, 2026, under CMN Resolution 5.320. Joint tax liability for institutions that keep serving a notified operator comes from LC 224/2025 (December 2025), and the June 17 Portaria MF 1.766 sets the joint SPA/Receita notification procedure. The PSP carries the illegal book's tax risk once notified.
LATAM payments map - UKLicensing & market access
UK: RTS 12 phase 1, new deposit-limit definition live
The Annex 2 definitional change lands: deposit limits move to the gross model in regulation, ahead of the phase 2 systems mandate. Cashier and PSP webhook contracts feel this before players do.
RTS 12 migration playbook - EUCrypto
MiCA transitional cliff: unauthorized CASPs out of EU crypto
The eighteen-month grandfathering window closed with no extension. A crypto processor without a CASP authorization (or an Article 60 bank notification) can no longer lawfully serve EU clients, and pending applicants can onboard nobody new. Check the register by legal entity, not brand. CoinGate, Nuvei via Simplex and BVNK held their own CASP authorization at the cliff, and BitPay joined them on July 15. Banking Circle runs on the Article 60 bank route, and CoinsPaid's application is pending, which is not authorization.
MiCA register audit - US & CanadaLicensing & market access
Indiana: sweepstakes ban in force
Third state wave of 2026 after California and the late-2025 signings. The pattern that matters for payments: each new statute names the money chain, and processors keep exiting the vertical ahead of effective dates.
Sweepstakes processor-liability breakdown - EULicensing & market access
Ireland: first GRAI remote betting licenses in force
The Gambling Regulatory Authority of Ireland issued its inaugural remote betting licenses on July 1 after a February-June application window. Online casino sits in a later phase: remote gaming licensing waits on a separate commencement order, and B2B licenses are not expected before 2027. Processing for Irish-facing books moves onto a licensed footing in stages.
- US & CanadaLicensing & market access
Alberta opened to private operators
Canada's second open market launched at midnight with 15+ brands live (50 registered with AGLC) and centralized self-exclusion in place from day one. The published standards regulate KYC, single accounts and the exclusion API but prescribe no payment methods; credit cards survived in the day-one cashiers.
Alberta launch: the payments read - Asia-PacificLicensing & market access
New Zealand: online casino license race opens (EOI window)
The expression-of-interest window for up to 15 online casino licenses runs July 17 to August 14, with the auction expected in September and full applications in October. A regulated market is being built from scratch on a December 1 launch schedule, and the cashier and processing contracts are being decided in exactly this window.
- US & CanadaCrypto
GENIUS Act: rulemaking deadline passed, zero final rules
The statutory 12-month deadline for six agencies' implementing regulations came and went with every rule still a proposal, and the pipeline widening (FinCEN's CIP NPRM runs to Aug 21). The Act has no fallback for the miss: the effective date now runs off the January 18, 2027 statutory floor, and the July 18, 2028 non-PPSI prohibition stands unmoved.
GENIUS Act for US cashiers - GlobalCard networks
Mastercard SMMP in force: scam flags on a 72-hour clock
The Scam Merchant Monitoring Program took effect on schedule: acquirers and payment facilitators must open and complete a scam investigation within 72 hours of a trigger, and a confirmed scam means immediate Mastercard and Maestro termination, no fine tier, no remediation window (the deliberate contrast with ECM and EFM). Refund-plus-chargeback ratios above 5% and issuer scam reports coded 56 sit among the vendor-published triggers, and the first true acquirer bulletin (PAYSTRAX) tells merchants to notify their acquirer of new markets, traffic sources and affiliates.
Mastercard EFM and ECP breakdown - US & CanadaLicensing & market access
Maine: sweepstakes ban and online credit-card ban in force
Two laws landed together, both non-emergency statutes from the session that adjourned sine die on April 29 and therefore effective ninety days later. LD 2007 outlaws dual-currency sweeps with $10,000-$100,000 civil penalties, and LD 2080 bars credit cards for licensed online sports betting and iGaming. Trade press dated both to July 14; the legislature's own effective-date rule puts them at July 29.
Sweepstakes processor-liability breakdown - EUAML & enforcement
Sweden: Spelpaus verification rules tighten (SIFS 2026:3)
The decided text mandates register checks at three moments only: direct marketing, player registration, and every login, split across a marketing API and a login API under the licensee's own Actor ID. No deposit-time or in-session trigger exists; trade reports describing both did not survive the published regulation. Entered into force August 1 as scheduled, no postponement.
Pay N Play architecture - BrazilAML & enforcement
Brazil: 24-hour blocking duty takes effect (CMN Resolution 5.320)
From August 28, 2026, a bank or payment institution notified by the SPA must freeze an unlicensed betting operator's accounts within 24 hours, reject payments routed to it directly or indirectly, and report back to the SPA within 48 hours. Payment schemes carry the same duty to reject betting payments. Brazil banned fixed-odds betting on September 25, 2026, and with no operator allowed to take bets, the duty now reaches every betting operator. Provisional Measure 1.394 adds a duty to report the operator's transactions to COAF and lets the frozen money be forfeited to the federal government by administrative process.
Brazil market brief - BrazilLicensing & market access
Brazil: sports betting and online casino banned (Provisional Measure 1.394)
Provisional Measure 1.394 bans fixed-odds betting on sports and online casino games across Brazil, including bets an operator based abroad offers to people in Brazil. Deposits stopped the same day, because no new money may enter an operator's transactional accounts. Sites and apps go offline on October 6, and open bets are void and refunded in full. Operators send the banks and payment institutions holding those accounts a list of bettors with their CPF numbers by October 8, and those institutions refund bettors by October 14. All 85 federal authorizations end on October 25, together with state licenses, and the R$30 million fee each operator paid is not refunded. Under art. 14, banks, payment institutions, payment schemes and their participants, Pix included, may not process, settle or enable a betting transaction other than one that closes an operator's book or refunds bettors.
Brazil market brief - BrazilPayment rails
Brazil: central bank orders a block on all betting payments (Resolution BCB 590)
The central bank ordered banks, payment institutions and payment-scheme participants to block every transaction to fixed-odds betting from September 25 under Resolution BCB 590, without waiting for scheme rules to change. Payments that wind an operator down or refund bettors are the only exception. On September 30, 2026, the central bank wrote the same ban into the rules for TED, boleto and Pix (Resolutions BCB 595, 596 and 597). Card schemes, as scheme owners under art. 14 of Provisional Measure 1.394, must write the ban into their own rules and expel participants who break it. With cards shut alongside Pix, TED and boleto, every Brazilian payment rail is closed to betting.
Brazil market brief
2027 and beyond
The build-planning horizon: far enough out to architect for, dated enough to put in a roadmap.
- EULicensing & market accessdate not final
Ireland: remote gaming (online casino) licensing phase
GRAI's remote betting licenses came first; online casino licensing needs its own commencement order, expected as the next phase, with B2B licenses slated for 2027-2028. Until then Irish online casino keeps operating on the legacy footing while betting already runs GRAI-licensed.
- US & CanadaCryptodate not final
US: PPSI AML program requirements take effect
Under the April 2026 FinCEN/OFAC proposed rules, stablecoin-issuer AML and sanctions program duties take effect in January 2027. The rules are still proposals, so January 2027 is a planning date until final rules land.
GENIUS Act for US cashiers - EUPayment rails
SEPA Instant: non-euro EU must receive
PSPs in Sweden, Denmark, Poland and the rest of the non-eurozone EU group must be reachable for SEPA Instant, with equality of charges applying in non-euro currencies. Reachability gaps in those corridors stop being an excuse.
SEPA Instant payouts audit - US & CanadaCrypto
GENIUS Act: effective-date floor
Section 20 makes the Act effective at the earlier of 18 months after enactment (this date) or 120 days after final rules. If rulemaking slips past mid-2026, this floor is what operators plan against.
GENIUS Act for US cashiers - OffshoreLicensing & market accessdate not final
Curacao: local key-person enforcement begins
The delayed local-substance mandate starts, with the detailed requirements still unpublished as of mid-2026. Watch CGA guidance through late 2026 before committing to a staffing structure.
Curacao payment access map - UKTax & duty
UK: remote betting duty rises to 25%
Enacted alongside the Remote Gaming Duty rise, Finance Act 2026 s.87: General Betting Duty on remote bets goes to 25%, while remote bets on UK horse racing and bets placed on self-service terminals in licensed premises stay at 15%. The online-versus-retail split becomes a tax line, which omnichannel bookmakers will want reflected in how their payment stack routes and reports channel data.
UK market page - EULicensing & market access
Finland: licensed market opens
The Veikkaus monopoly ends for online casino and betting; applications have been open since March 2026 at a 22% GGR tax. A new regulated cashier perimeter in a Pay N Play heartland.
Europe payments map - EUPayment rails
SEPA Instant: non-euro EU must send
The sending mandate completes the non-eurozone rollout. Until then, instant-payout claims from Stockholm or Warsaw banks are voluntary products with patchy reachability.
SEPA Instant payouts audit - EUAML & enforcement
EU AML Regulation: anonymous prepaid squeeze
Acquirers are barred from accepting anonymous prepaid cards issued in third countries, and anonymous instruments generally tighten. Account-based voucher flows survive this world; purely anonymous ones do not.
Voucher payments hub - EUAML & enforcement
AMLR applies: the single EU AML rulebook reaches gambling
Regulation 2024/1624 becomes directly applicable: gambling providers are obliged entities EU-wide, CDD triggers at EUR 2,000 on stakes or winnings including linked transactions, and no member state can exempt casinos, online gambling or betting. AMLA's published list of ~40 directly supervised financial institutions lands around end-2027, with Frankfurt supervision of the payment layer from 2028.
AMLA and iGaming payments - EUPayment rails
Netherlands: iDEAL decommissioned, Wero takes over
The rail carrying 50%+ of Dutch deposits changes name, not necessity: mandatory iDEAL-Wero co-branding since Q1 2026, consumer migration from Q4 2026, and the old scheme switches off end-2027. Cashier logos, statement descriptors and PSP contracts all touch this.
Europe payments map - US & CanadaCrypto
GENIUS Act: non-PPSI stablecoin prohibition (the USDT cliff)
Digital asset service providers can no longer offer or sell a stablecoin to US persons unless the issuer is a Permitted Payment Stablecoin Issuer. Unless Tether clears the foreign-issuer path, USDT drops off US-facing rails; treat USDT lines in any US integration as a dated feature.
GENIUS Act for US cashiers - GlobalAML & enforcement
FATF Recommendation 16: payment-transparency compliance deadline
The June 2025 update extends the Travel Rule's scope to fraud prevention and proliferation financing, with financial institutions required to comply by 2030. Expect PSPs to push for richer originator data fields from 2027-2029 as the deadline approaches.
FATF Travel Rule audit
Watch list: no date yet, real consequences
Items that will earn a dated row the moment a primary source fixes one.
Brazil: Supreme Court challenges to the betting ban (ADI 8024, 8027, 8028)
ANSEJA (ADI 8024), ANJL (ADI 8027) and the national association of mayors (ADI 8028) challenge Provisional Measure 1.394 at the Supreme Court (STF), and all three cases sit with Justice Luiz Fux. No injunction has been granted, so the ban is in force. Unless a ruling suspends the measure, its art. 14 bars banks, payment institutions and every payment arrangement, card networks and Pix included, from processing any betting transaction except refunds to bettors and the payments that close an operator's book.
Brazil market pageBrazil: PL 5.477/2026, the betting crimes bill
Sent to Congress with Provisional Measure 1.394, the bill would make running fixed-odds betting a crime carrying 4 to 6 years in prison. Advertising or recruiting bettors, using personal data to recruit them, financially facilitating betting and supplying betting apps would each carry 2 to 4 years. The bill is not law. For a payment provider the facilitation offense is the one that counts, because MP 1.394 already bars banks and payment institutions from processing betting transactions and the bill would make financially facilitating betting a crime on top of that bar.
Brazil market pageMalta Article 56A / CJEU C-683/24
The Commission's infringement procedure over Bill 55 (June 2025 formal notice) is paused in practice while the Court decides C-683/24; the Advocate General opined in April 2026 and a ruling is expected late 2026 to early 2027. If Article 56A falls, refund-claim exposure for MGA books on German and Austrian players lands back in chargeback and acquirer-risk territory.
Visa VAMP: next threshold move
No further threshold change is announced after April 2026. The ratio to actually watch is your own: fraud-coded double counting means the effective tolerance for a casino book is roughly half the printed line.
Visa VAMP deep diveUS sweepstakes wave, next states
Bills naming payment processors keep moving (New York's signed processor-liability statute, Tennessee, Louisiana, Minnesota). Effective dates get added here once they are verifiable from the legislatures rather than trade press.
How we maintain this
Dates come from primary sources: regulator publications, legislature records, card-network and acquirer bulletins, the Federal Register and the EU Official Journal. Trade-press dates drift, so none earns a row without a primary source behind it. The industry ran wrong dates for two entries on this page (the start of the Swedish credit ban and the effective date of the Maine laws), and the right ones come from the records of each legislature.
A row leaves the upcoming list only when a primary source records the outcome. The date passing is not enough, because effective dates slip and get extended. A TBC row keeps its window until the exact day is set.
Spot a payments deadline we are missing? Tell us and include the primary source; that is the fastest way onto the page. And treat all of this as research rather than legal advice: confirm anything load-bearing with counsel before you commit a build or a contract to it.
Payment Compliance News
All 5 updates- Market rules
Brazil's central bank shuts Pix, TED, boleto and card payments to betting
In Resolution BCB 590 of September 28, 2026, Brazil's central bank made banks, payment institutions and all other payment-scheme participants block sports betting and online casino transactions with effect from September 25, without waiting for scheme rule changes. On September 30, 2026, the central bank wrote the same ban into the TED, boleto and Pix rules in Resolutions BCB 595, 596 and 597, which leave room only for transactions that close an operator's book or refund bettors. Card schemes count as arrangement owners under art. 14 of Provisional Measure 1.394, so they must write the ban into rules that bind every participant, including those that need no central bank authorization, and act against any that break it, expulsion included.
Banco Central do Brasil, Resolução BCB 590 · Banco Central do Brasil, Resolução BCB 595 · Banco Central do Brasil, Resolução BCB 596 · Banco Central do Brasil, Resolução BCB 597
- Market rules
Brazil bans sports betting and online casino, closing its payment rails to bets
Brazil banned sports betting and online casino on September 25, 2026, under Provisional Measure 1.394, which covers offshore and licensed operators alike and bars new deposits to licensed operators from that day. Their sites and apps go offline on October 6, the banks and payment institutions holding their accounts refund bettors by October 14, and all 85 federal authorizations end on October 25 with none of the R$30 million authorization fees returned. Every bank, payment institution and payment scheme in Brazil, Pix included, may now process betting transactions only to close an operator's book and pay bettors back, so no Brazilian payment rail may carry a betting deposit.
Presidência da República, Medida Provisória 1.394 · Congresso Nacional, MPV 1394/2026 · Agência Brasil
- Market rules
Pix clawback contestation window stretches from 30 to 80 days
Instrução Normativa BCB 766 updated the DICT operational manual on September 1, 2026. A receiver whose funds were pulled back under the special return mechanism now has 80 days to contest instead of 30, which extends clawback exposure on every Pix deposit an operator takes in Brazil.
FAQ
Brazil banned sports betting and online casino on September 25, 2026, under Provisional Measure 1.394. Since that day every Brazilian payment rail, cards and Pix included, has been closed to betting except for refunds to bettors and the payments that close an operator's book. The banks and payment institutions holding operators' transactional accounts must finish refunding bettors by October 14, every federal and state betting license ends on October 25, and Congress must vote on the measure by November 23. Under Resolution BCB 569, the virtual-asset category of Brazil's fraud data-sharing system goes live on October 30, and reporting of illegal-betting indicators becomes mandatory on December 1. Elsewhere, Curacao's B2C player-terms deadline falls on October 8 and its B2B supplier registration deadline on December 24. Alberta's last transition extensions expire on October 13, the SEPA structured-address mandate takes effect on November 15, and on December 1 New Zealand's licensed online casino market launches while Irish retail bookmakers move onto GRAI licenses.
Visa VAMP's merchant threshold fell to 1.5% on April 1, 2026, and fraud-coded disputes count twice, so a casino book whose disputes are fraud-coded hits the line at a 0.75% dispute rate. Qualified Compelling Evidence 3.0 takes disputes out of that ratio, and since April 18, 2026, undisputed TC40 fraud reports too. Casinos already hold the evidence it asks for: login IDs, device IDs and deposit history. Under Mastercard's Scam Merchant Monitoring Program (SMMP), in force since July 24, 2026, the acquirer or payment facilitator has 72 hours after a trigger to open and complete a scam investigation, and a confirmed scam ends Mastercard and Maestro acceptance with no fine tier and no remediation window.
EU and US clocks run separately. MiCA's transitional period ended July 1, 2026: a crypto processor without CASP authorization can no longer lawfully serve EU clients. The US GENIUS Act cascade runs longer: final agency rules were due July 18, 2026 and were missed; the Act takes effect on the earlier of January 18, 2027 or 120 days after final rules, so that date is the latest start rather than a floor, and the prohibition on non-PPSI stablecoins (the USDT cliff for US-facing rails) lands July 18, 2028.
Dates come from primary sources: regulator publications, legislature records, card-network bulletins, the Federal Register and the EU Official Journal. Most rows link to the full breakdown. A deadline moves from upcoming to in force only once a primary source records the outcome, so a date that slipped never shows as passed. A window whose exact day is not fixed carries a TBC flag instead of a guessed date.
No. It is independent research built for payments and compliance teams to plan against, with sources one click away. Effective dates change, transitional guidance gets issued, and jurisdictions differ in how they enforce, so confirm anything load-bearing with counsel and the primary source before you commit a build or a contract to it.
The rules behind the dates
The calendar tells you when. The compliance guide and the network-program deep dives tell you what to build.