Related Questions
.png)
A merchant applies to your platform. The application describes a "mobile game with competitive tournaments." The website shows leaderboards, prizes, and a $4.99 entry fee. There is no gambling license on file.
Is this a gaming merchant or a gambling merchant?
The answer is not determined by what the merchant calls itself. It is determined by the product mechanics: whether consideration, chance, and prize are present simultaneously. For risk and compliance teams at acquirers, PayFacs, and marketplaces, that answer determines the applicable regulatory framework, the correct Merchant Category Code (MCC) assignment, the required license verification, and the depth of due diligence required at onboarding.
Getting the classification wrong is not a minor underwriting error. A merchant that presents as a gaming company but operates as a gambling operator carries the risk profile of an unlicensed gambling operator, not a gaming merchant.
Gaming is not automatically safe. It requires the same structural question: do the mechanics satisfy the gambling triad?
The classification question has direct scheme consequences.
Mastercard and Visa apply distinct rules to MCC 7995 (gambling) versus MCC 7994 (gaming). Assigning MCC 7994 to a merchant operating prize-bearing chance mechanics is a misclassification. It means the merchant avoids scheme-level gambling controls, the acquirer processes gambling transactions without the required authorization, and the portfolio carries exposure that is invisible to scheme monitoring programs. Acquirers and MMSP-certified monitoring providers are expected to identify and correct these misclassifications.
The merchant types creating exposure are not edge cases.
Skill games, loot box mechanics, sweepstakes-based casino platforms, and social games with redeemable virtual currency appear regularly in underwriting queues. Each presents as something other than gambling. Each requires a structured mechanics review before a classification decision is made.
Regulatory frameworks are not standing still.
The Unlawful Internet Gambling Enforcement Act (UIGEA), card scheme gambling rules, the FTC's February 2026 COPPA policy statement on age verification, and evolving loot box regulation in Belgium and the Netherlands all create compliance obligations that attach to product mechanics, not merchant-provided category descriptions. The full classification framework maps each of these frameworks against the merchant types that trigger them.
The complete guide provides a six-dimension assessment framework, structured the same way we apply it in practice during underwriting and monitoring reviews.
1. Consideration: Is Payment Required to Access the Prize Mechanic?
Consideration is the first element of the gambling triad. The question is not whether the game costs money to download. It is whether real-money payment is required to access the mechanic that results in a prize. Where a genuinely free path exists and is accessible in practice, consideration may be absent. Where a free path exists in terms of service but is buried or non-functional, consideration is effectively present.
Key insight: Alternative Method of Entry (AMOE) is the legal mechanism sweepstakes platforms use to remove consideration. We test whether the AMOE is prominently accessible or deliberately obscured. Significant friction in the free path is itself a risk indicator, regardless of whether it technically exists.
2. Chance: Is Outcome Determined by Skill or by a Random Process?
The dominant factor test, applied in most US states, asks whether skill or chance is the primary determinant of outcome. A game where skilled players demonstrably outperform unskilled players over repeated play may qualify as skill-dominant. A game where a Random Number Generator (RNG) controls output, where matchmaking randomization neutralizes skill differences, or where card draws or dice rolls are central to the competitive result is likely chance-dominant under the applicable test.
Key insight: A merchant stating "our game is 100% skill-based" is making a legal claim that requires independent verification. We look for jurisdiction-specific legal opinions confirming skill-dominance under the test applicable in each market the merchant serves, not only in the merchant's home state.
3. Prize Mechanics: Does Outcome Carry Real-World Value?
Cash prizes, gift card redemptions, and merchandise clearly satisfy the prize element. The less obvious case is virtual items. Where items obtainable through paid randomized mechanics can be traded or sold on third-party marketplaces, the prize element may be present in practice even if the merchant does not facilitate the exchange. The merchant's terms of service prohibiting real-money exchange does not override the functional reality of an active secondary market.
Key insight: We search third-party marketplaces for a merchant's virtual items as part of the prize mechanics review. An active secondary market with documented real-money transactions is material to the classification, independent of the merchant's stated position.
4. Age Targeting: Are Chance Mechanics Accessible to Minors?
Gambling regulation sets minimum age thresholds across all jurisdictions. A gaming-adjacent product that combines paid chance mechanics with access by minors creates exposure across multiple regulatory frameworks simultaneously: gambling classification (if the triad is satisfied), COPPA in the US, and equivalent child protection frameworks internationally. Age targeting is an independent escalation trigger in our assessments, regardless of how the underlying mechanic resolves.
Key insight: Self-certified age gates (a checkbox stating "I am 18 or older") are not equivalent to verified age controls. For products accessible to users under 18 that also include paid chance mechanics, we require document-based or third-party verified age controls, not self-certification. Our merchant underwriting platform includes trained high-risk expert agents that evaluate age-gating controls as part of the gaming vertical review.
5. Geo Restrictions: Do Technical Controls Match Jurisdictional Claims?
Regulatory status for gaming-adjacent products varies by jurisdiction. A skill game legal in most US states may be unlicensed in others. A loot box mechanic legal in the US may be illegal in Belgium. A sweepstakes structure valid under US law may not be recognized in certain European markets. The relevant question is not what the merchant's terms of service say about restricted markets. It is whether technical controls implement those restrictions in practice.
Key insight: A merchant that claims to restrict a jurisdiction but whose platform is accessible via standard VPN has not demonstrated geo-compliance. We test geo-restriction from claimed-restricted markets as part of the standard review, and we request geo-restriction logs showing blocked access attempts alongside the policy documentation. Ongoing merchant monitoring is necessary to catch jurisdiction expansions and product changes that occur after onboarding.
6. Monetization Model: Does Revenue Structure Confirm the Classification?
A gaming merchant whose revenue comes primarily from advertising, flat-rate cosmetic purchases, or subscriptions that do not unlock prize-bearing mechanics presents a different risk profile from one whose primary revenue comes from paid randomized loot box openings, entry fees to prize-bearing tournaments, or sweepstakes coin sales. Where the stated classification and the revenue structure are inconsistent, the revenue structure is the more reliable indicator.
Key insight: If loot boxes are the most prominently marketed feature on the platform but the merchant claims only a minor share of revenue from loot box sales, that inconsistency requires investigation. We request itemized revenue breakdowns by source and compare them against observable product mechanics and marketing emphasis.
The full guide provides detailed compliant profiles for each of the four merchant types covered. Across all types, the compliant profile shares these observable characteristics:
This profile does not guarantee a low-risk classification. It represents the minimum evidence base required to make a defensible classification decision.
The full guide covers six classification errors that appear with regularity in underwriting and monitoring reviews. The most consequential:
Accepting the merchant's framing. A merchant describing its product as a "competitive gaming platform" is making a marketing statement. The applicable regulatory frameworks evaluate mechanics, not labels. Any gaming merchant involving paid entry to compete for prizes, randomized purchase mechanics, or prize redeemability requires a mechanics-first review.
Treating the legal opinion as permanent clearance. A legal opinion on skill-dominance or sweepstakes structure covers the mechanics as described at the time of the opinion. If the merchant updates its game, adds a monetization layer, or expands into new markets after the opinion was issued, the opinion may no longer cover the current product.
Missing the secondary market. For gaming merchants with tradeable virtual items, an active secondary market changes the risk profile. Risk teams that do not check whether secondary markets exist for a merchant's virtual items may be missing the evidence that the prize element is present in practice.
Under-monitoring post-onboarding. A merchant onboarded as a cosmetic-only free-to-play game may introduce loot boxes six months later. A sweepstakes platform may reduce the accessibility of its AMOE over time. In our experience, gaming-adjacent merchants are among the categories where post-onboarding product drift most frequently changes the applicable compliance profile. Automated merchant monitoring with triggers for product changes, marketing updates, and mechanic evolution is the appropriate control for this risk.
The full classification guide enables risk teams to:
The guide includes merchant assessment checklists with severity-rated red flag thresholds, a practical underwriting checklist across six steps, compliant merchant profiles for each type, a jurisdiction snapshot covering the US, Belgium, the Netherlands, the UK, and the EU, and the six common classification errors with recommended corrections.
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.png)
edited%205.webp)
