iGaming payments in the Netherlands

iDEAL is the anchor here rather than one deposit option among several. It handles about 71% of Dutch e-commerce payments, roughly 250 million online purchases a year, and across all its uses, Tikkie requests and bill payments included, it processed 1.56 billion transactions worth EUR157 billion in 2025. TOTO, the lottery-owned operator, runs its entire deposit cashier on iDEAL alone. Nobody publishes iDEAL's share of licensed-gambling deposits specifically. The KSA does not break out payment methods in its monitoring, so the gambling-specific number everyone repeats is folklore, and the economy-wide 71% is the best available proxy.

Wero does not exclude gambling. Its consumer terms contain no gambling prohibition, and Mollie's merchant documentation classes gambling as an automatically high-risk business type under the scheme: stricter monitoring and possible custom pricing, but acceptance. EPI told CasinoNieuws in November 2025 that acquirers may connect only KSA-licensed casinos to Wero in the Netherlands, and promised clarity in the first quarter of 2026 on operators licensed elsewhere in Europe. As of early August 2026 that clarity has not been published, which matters because iDEAL was a purely Dutch rail that was easy to fence off, and Wero is pan-European by design.

Dutch secondary legislation welds the player account to a single bank account. Under the Besluit kansspelen op afstand, money may enter only from the player's registered counter-account, the tegenrekening, and withdrawals may go only back to it. Instruments must come from EU or EEA licensed institutions. The practical effect is that the first iDEAL deposit doubles as verification, because the IBAN and account-holder name arrive bank-verified, and many operators run iDIN, the banks' own identity service, for the rest.

1. 1

   Register the counter-account

   One account per player, held in the player's own name at an EU or EEA licensed institution. This is the loop's single gate.

2. 2

   Deposit only from it

   The first iDEAL payment verifies the IBAN and name against the account. A deposit from anyone else's account is not a flagged deposit; it is a deposit the operator may not credit.

3. 3

   Withdraw only to it

   There is no iDEAL payout leg at all, so every licensed-market withdrawal is a SEPA credit transfer to that verified IBAN. With the EU Instant Payments Regulation forcing banks to send instant transfers since October 2025, payout latency is collapsing from days toward seconds.

The loop also explains Trustly's real Dutch role, which is not deposits: TOTO processes withdrawals through Trustly, typically landing within the hour. On the deposit side the market is iDEAL's, with a thin tail. PayPal and paysafecard were flatly illegal at licensed sites for the market's first nine months, until e-money institutions were added to the permitted-issuer list on July 15, 2022. As of late July 2026 only eight KSA-licensed casinos take PayPal, and none of them pays winnings back to it.

Dutch law has no renewal in the ordinary sense. A license granted in 2021 expires after five years, on October 1, 2026, for the founding cohort, and the holder files a complete new application. Every module is reassessed under the BVRKOA 2026 policy rules: addiction-prevention policy, advertising policy, reliability screening of directors and shareholders under Bibob, a fresh money-laundering risk analysis, and a new integration test with the central control database. Two of the ten founding licensees are already gone without reaching this gate: Tombola and LiveScore Bet pulled out over the tax escalation and surrendered their licenses, which the KSA revoked at the operators' own request effective December 23, 2024.

Two features of this gate are unusual enough to plan around. First, past conduct is an explicit criterion, and the KSA counts ignored binding civil court judgments against an operator's reliability. In practice those judgments are the wave of Dutch verdicts ordering operators to refund player losses, so private litigation compliance has been folded into the public licensing test. Second, the timing is brutal. The KSA expects to announce decisions around mid-September 2026, roughly two weeks before the licenses die, and at a closed-door meeting on October 1, 2025, it reassured operators that past violations do not automatically block renewal. As of the end of July 2026, no licensee has been denied or has announced an exit.

The entry price moved mid-window: the application fee rose from EUR48,000 to EUR61,300 on April 1, 2026, a 28% jump landing between the earliest and latest sensible filing dates for the same renewal round, and applicants post at least EUR50,000 in financial security at grant. The market this buys into currently holds 31 license holders, 28 of them running live casinos.

The casualties are not hypothetical. Tombola and LiveScore Bet left citing the tax, LiveScore calling the market commercially unviable. State-owned Holland Casino has run two reorganizations in eighteen months, received an auditor's viability warning in April 2025 that cited the tax explicitly, and in 2026 worsened its own roulette odds with a double-zero variant to absorb the 37.8% rate. Legal online GGR ran about €100M a month through 2025, roughly 18% below 2024. Nothing is formally pending to undo the rate.

Since October 1, 2024, the cashier itself enforces friction. A ministerial regulation sets contact thresholds: before a player may set a monthly deposit limit above €350, or €150 for adults under 24, the operator must hold a personal contact moment run by addiction-prevention-trained staff, with no pre-filled amounts and no promotion. The famous €700 and €300 figures sit in a different instrument: under the KSA's responsible-play policy rule, once net deposits reach €700 in a calendar month, €300 for young adults, further deposits are blocked unless the player demonstrates sufficient disposable income. One layer is law, the other is regulator policy, and conflating them is the most common error in coverage of this market.

The measured effect was real, and the two KSA yardsticks now point in opposite directions. Per account, spend kept falling: from €116 a month before the rules to €80 by May 2025 and €73 by late 2025, with the share of young adults exceeding spending thresholds collapsing from 12% to 1.9%. Per active player, adjusted for people spreading play across multiple accounts, the spring 2026 report shows losses rising from €117 to €124 over the same year. Multi-accounting is doing exactly what the sealed loop was supposed to prevent, one operator at a time. Meanwhile Cruks, the national self-exclusion register every operator must check before each session, held 118,999 registrations on July 9, 2026, and recorded its first-ever multi-week decline during the World Cup. The next wave is drafted: a cross-operator monthly deposit limit, registered centrally with the KSA and binding across all licensed brands, with a mandatory affordability check before any increase, in the overhaul announced on June 12, 2026.

• iDEALdominant

  instant bank transfer

  iDEAL is the anchor rail: it carried 71% of Dutch e-commerce payments in 2025, and TOTO runs its whole deposit cashier on it. It is a four-corner scheme, so the operator needs an iDEAL acquirer or collecting PSP and, from October 2026, a new Wero acceptance contract through that PSP. iDEAL has no payout leg, so withdrawals go by SEPA transfer to the registered IBAN.

• Trustlymajor

  instant bank transfer

  Its real Dutch role is payouts, not deposits: TOTO processes withdrawals through Trustly, typically within the hour.

• PayPalminor

  e-wallet

  E-money was illegal at licensed sites until July 15, 2022. Only eight KSA-licensed casinos take PayPal, and none pays winnings back to it.

Internal KSA documents released in January 2026 under a freedom-of-information request show how Dutch payment enforcement actually worked: a covenant model dating to 2014 in which partner banks and PSPs received lists of sanctioned operators and quietly cut them off, plus compelled data demands to banks including ABN AMRO and ING for iDEAL transaction records, under conditions where telling anyone about the demand counted as non-compliance. The legal footing was thin for years. In December 2017 the Council of State annulled a KSA sanction against the processor CURO Payments, ruling that payment processing for illegal gambling did not itself constitute promoting gambling.

The 2021 Remote Gambling Act gave the KSA a binding-instruction power over facilitators, and in five years the regulator has never published a single sanction or binding instruction against a payment firm under it; the two headline instructions went to Cloudflare and were later withdrawn. The government has now conceded the gap: a June 2026 cabinet letter announces a bill to let the KSA block illegal gambling websites and to write statutory norms for payment processors and hosters. Note what that implies about today, and note that the Netherlands has no ISP-level DNS blocking of gambling sites at all as of mid-2026, confirmed in parliamentary answers in January. The pressure that works runs through the payment layer, informally.