iGaming payments in Sweden

The statute is short. From 1 May 2026, license holders and gambling agents may not allow or contribute to gambling financed with credit, and must take appropriate measures to counteract it. The scope is any credit from anyone: credit cards, invoice and buy-now-pay-later, overdrafts, quick loans, e-wallet balances funded on credit. Two design choices decide how it works in practice. The duty binds only the operator, not the payment provider or the card issuer, after the online-gambling association BOS argued the duty belonged with card issuers and was turned down. And the preparatory works say expressly that nobody has to investigate where a payment's money comes from.

Compliance so far has been contractual rather than punitive. Svenska Spel's terms from 1 May reserve the right to block accounts, void play and treat stakes as forfeited when credit financing is detected; ATG deleted its customers' stored credit cards outright and kept debit. Sanctions run through the ordinary regime, from a remark up to license revocation with fees between SEK 5,000 and 10% of prior-year turnover, and three months in the regulator has published no enforcement decision under the new section. One curiosity survived the drafting: charity subscription lotteries can hold a regulator-granted exemption to extend credit, capped at about SEK 1,480 of total outstanding credit per player, one fortieth of the price base amount.

Sweden's law has required registering every player since 2019; what Trustly's Pay N Play and its rivals did was compress registration, identity verification and the first deposit into one BankID flow. The account exists, the player just never saw a form. Temporary accounts are allowed, but identity must be fully established at the latest before the first withdrawal, which is why the model pairs frictionless entry with an exit gate.

1. 1

   The deposit is the registration

   A player pushes money via the bank rail; BankID authenticates; the operator registers the player and verifies identity through reliable electronic identification in the same motion.

2. 2

   Every login now checks Spelpaus

   From 1 August 2026, SIFS 2026:3 requires the self-exclusion register to be checked at registration and at every login through the regulator's dedicated API, under each licensee's own credentials even when a white-label platform runs the check.

3. 3

   The withdrawal is the final gate

   Full identity must be established before the first payout. Payouts then ride rails that settle in central-bank money: since February 2024 cross-bank Swish payments clear on the Riksbank's RIX-INST platform.

Swish itself is close to universal: 91% of Swedes used it in the past month per the Riksbank's 2026 payments report. Its gambling gatekeeping is quieter than most assume. There is no public scheme rule on gambling merchants at all, and the licensed-only restriction everyone cites is enforced bank by bank. At a licensed cashier the practical shape is ATG's: Swish deposits from SEK 50, Swish withdrawals capped at SEK 20,000 a day, bank transfer for the rest. Cash is banned online outright. And, as in the Netherlands and Germany, no official deposit-method mix exists; Spelinspektionen's statistics cover turnover, surveys and Spelpaus, never payment methods.

• Trustly (Pay N Play)dominant

  instant bank transfer

  Backbone of Pay N Play: BankID deposit, KYC and payout in one flow, which the law still counts as account registration, just compressed. Restricted to SE-licensed operators, so direct integration is decisive; Trustly itself is a Swedish-authorized payment institution.

• Swishdominant

  mobile money

  91% of Swedes used it in the past month (Riksbank, 2026); SE-only real-time rail tied to BankID, with cross-bank settlement in central-bank money on RIX-INST since Feb 2024. No public scheme rule for gambling merchants: gatekeeping happens bank by bank, so access rides on banking relationships a PSP cannot simply resell.

• Visa/Mastercard

  local cards

  Debit only in practice since 1 May 2026: the credit-funding ban killed credit cards at licensed cashiers (ATG wiped stored ones), while debit sits expressly outside it. PSPs must reject MCC 7995 card payments unless the operator is licensed or lawfully outside the Act's scope.

Sweden wrote a payment-blocking power into the 2019 Gambling Act: a court, on the regulator's application, could order providers to freeze transactions to unlicensed operators. In four and a half years Spelinspektionen never filed a single application, citing practical difficulties, and the power was repealed in July 2023. What replaced it is deliberately narrow: payment providers must reject card transactions coded to gambling, MCC 7995, unless the payee is licensed or the gambling is one Swedish law does not require a license for. The regulator itself concedes the duty is circumvented the moment an operator miscodes the merchant.

The one aggressive payments case ended badly for the regulator. In July 2023 it ordered the Swedish PSP Zimpler, under threat of a SEK 25m penalty, to stop providing BankID-based payments to unlicensed gambling companies. The courts annulled the order, final in February 2025, because under Sweden's directedness doctrine an offshore casino that avoids Swedish language, kronor and marketing is not illegal to serve at all; by the regulator's own estimate only about a third of Swedes' offshore gambling is unlawful today. The consequence is visible in traffic data: eight of the twenty highest-traffic unlicensed sites take deposits and payouts straight from Swedish bank accounts via BankID. The national identity system works inside the black market.

Licensed GGR was SEK 28.2bn in 2025, the highest on record, taxed at 22% since July 2024. How much gambling escapes the license system is the contested number, and the estimates do not overlap politely.

The tax itself is stable: every differentiated-rate motion was rejected in March 2026, and the loudest reform proposal came from ATG, which suggested raising the tax on its casino and betting competitors while cutting it for its own horse racing, drawing a joint protest from thirteen rival CEOs. Sweden also became a zero-casino country along the way: the last land-based casino closed in April 2025 and the license category was deleted from the Act on 1 January 2026.

For payments teams the limit machinery matters more than the fines. Sweden has no statutory deposit cap; players set their own, a rise takes effect at the earliest 72 hours after the request, and since an April 2025 legal position the old limit period must fully expire first. The next turn is drafted: a June 2026 consultation, closing 10 August, proposes swapping the mandatory player-set deposit limit for a loss limit, which would change the metric every Swedish cashier is built around. Spelpaus, meanwhile, holds about 138,000 self-excluded people, but new registrations have fallen 27% in two years, and a 10-day exclusion option was added in June 2026, the first change to the menu since launch.