iGaming payments in Germany

Payment blocking is the GGL's sharpest enforcement instrument, and in 2025 the regulator changed how it uses the weapon. Blocking measures jumped from 58 in 2024 to 1,907 in 2025, while the number of operators whose payment routes were actually cut fell from 53 to 5. Those five ran 178 sites between them, up from 165 the year before, so this is not a smaller campaign. The GGL does not explain the drop. The cut-offs landed on a handful of large multi-site networks rather than a broad field of small operators, severing each new mirror and payment route as it appeared. Along the way, 38 payment providers ceased participation.

Two quieter 2025 moves complete the picture. The GGL sent German banks and account-holding institutions a targeted advisory letter with concrete details on the payment flows of one specific unlicensed operator, the first bank-directed letter to appear anywhere in its annual reporting; the regulator could not quantify the blocked volume but says the banks' feedback points to high effectiveness. And on the licensed side, payment products themselves are under scrutiny: the e-wallet MuchBetter says the regulator has sent formal hearing letters to payment providers that let users transact without complete upfront identity verification, and that it moved pre-emptively itself, requiring full verification on every gambling transaction from the first euro. The regulator polices the payment layer on both sides of the license line.

The legal spine is Section 4(1) sentence 2 of the 2021 treaty, which bans participation in payments for unlicensed gambling, enforceable against payment providers with fines up to EUR500,000. The landmark is the Swiss case. On October 2, 2024, the Halle administrative court upheld a GGL order against a Switzerland-based payment initiation service, and the order had two parts: a conventional clause covering specific sites the GGL had named to the provider in advance, and a novel second clause extending the ban to all unauthorized gambling in Germany without naming a single site. The general clause survived because, the court reasoned, the GGL's whitelist of licensed operators tells a provider exactly what is legal. The appeal was dismissed that December, confirming the order reaches a foreign provider with no German seat.

The same sentence of the treaty cuts differently in civil court. Germany's Federal Court of Justice has held that banks executing authorized card payments owe customers no general gambling-screening duty, and appellate courts have refused player claims against payment providers for processed losses: the participation ban is an administrative weapon for the regulator, not a civil invalidity rule for players. And since the European Court of Justice ruled in April 2026 that German courts may void contracts with unlicensed operators, the recovery exposure has landed where it belongs, on the operators themselves: every euro deposited with an unlicensed site is a potentially recoverable claim.

No regulator killed Germany's domestic payment rails for gambling; they died or opted out by themselves. giropay, the banks' own online scheme, shut down entirely on December 31, 2024. girocard, the dominant domestic debit scheme with 8.3 billion transactions in 2025, has no native e-commerce capability at all, so it was never in the online cashier to begin with. Sofortüberweisung switched off on March 31, 2025, surviving only as Klarna Pay Now, which quietly requires a Klarna account. And Wero, the designated successor to giropay, launched German e-commerce in November 2025 with no gambling path: no gambling merchants, no gambling acquiring route, no published merchant-category policy.

The German licensed market has no published deposit-method mix. The GGL counts blocking proceedings and channelization, not payment methods, so any confident percentage split is folklore. Payouts are a two-rail world regardless of how many deposit buttons a cashier shows: SEPA credit transfer in one to three business days, or PayPal, usually within hours of approval though operator processing can stretch it to a day or two, with everything else deposit-only.

Germany taxes virtual slots and online poker at 5.3% of stakes, not of GGR. At international-standard payout ratios that is arithmetic with a sting: the industry-commissioned DICE Consult report, paid for by the sports betting and online casino associations and cited at the June 2021 Bundestag finance committee hearing, put the levy at roughly 125% of gross gaming revenue at typical RTPs, which is why German-licensed slots run compressed payout ratios and why the big international rooms never came. The licensed slots segment is shrinking, not growing: 35 permits covering 102 platforms in early 2026, down from 37 and 106 a quarter earlier, and online poker musters five licensed operators in the whole country.

How much of the market the licensed segment actually holds is genuinely contested, and the range is not a rounding dispute. The GGL's commissioned study of March 2026 puts channelization at 77% of online spend; the industry-commissioned Leipzig study, using a 25,000-person online-meter panel, puts it near 50%; and a Hessian fiscal court has assumed more than 80% of slots play is black-market. The 2026 treaty evaluation, due by the end of the year, will pick its number from that spread, and the stakes-tax reform fight has been folded into the same process. Nothing is enacted as of August 2026.

Germany runs player limits centrally. The LUGAS supervision system, covering more than 60 licensed operators and roughly 5.3 million player accounts, enforces a cross-operator deposit ceiling of EUR1,000 per calendar month through a central limit file and blocks simultaneous play across operators through an activity file. Raising the ceiling to EUR10,000 requires documentary proof of economic capacity; self-declarations are explicitly insufficient. The paperwork shortcut operators leaned on, a Schufa-G credit check alone, is under judicial attack, and the GGL's own FAQ has flagged the practice as legally contested since late July 2026. The regulator has never published how many players actually hit the cap.

• Trustlydominant

  instant bank transfer

  Trustly runs at German licensed cashiers for deposits and payouts.

• Klarna Pay Nowmajor

  instant bank transfer

  Klarna Pay Now replaced the Sofort button when Sofortüberweisung was switched off on March 31, 2025, and it carries deposits only. Klarna serves only licensed gambling merchants, runs their payments as Pay by Bank and requires the player to hold a Klarna account.

• PayPalmajor

  e-wallet

  PayPal left the gray market in 2019, returned with the 2021 treaty and serves only whitelist operators, so its presence at a cashier works as a de facto license check. Payouts land in 2 to 24 hours.

• Visa/Mastercardmajor

  local cards

  No German card ban exists, and licensed cashiers offer cards openly; the market's debit reputation comes from girocard's absence online, not from a rule.

Network blocking is the enforcement tool Germany has pursued longest and held least. The Federal Administrative Court ruled in March 2025 that the 2021 treaty gave no basis for blocking orders against access providers, confirming what a lower court had called obviously unlawful two years earlier. The fix, a second amendment treaty that would oblige ISPs and registrars to block on GGL order, was approved by the interior ministers in June 2025 and notified to the European Commission, with entry into force targeted for May 2026. The target slipped: ratification by all sixteen states was still incomplete this summer, and as of August 1, 2026, no blocking order under the new basis has been or could have been issued. The widely repeated claim that German DNS blocking took effect in May 2026 is wrong.

Meanwhile the enforcement that actually works kept scaling without touching ISPs: 1,843 illegal sites made unreachable from Germany during 2025 through host-provider orders and Digital Services Act geo-blocking, out of 2,662 reviewed, alongside the payment campaign. Germany's practical lesson runs opposite to its legislative energy: the payment layer and the hosting layer deliver, and the ISP layer has yet to block a single site lawfully.