CashtoCode casinos accepting Australian players in 2026

CashtoCode’s pitch to a casino is straightforward: a customer pays in cash for a 20-digit code, the casino reads it, no card details ever change hands. To a player searching from Sydney or Perth it looks like a frictionless way to fund a pokies account. The friction that does not disappear is the one that matters — the Interactive Gambling Act 2001 makes it an offence to provide online casino games to a person physically in Australia, regardless of how the deposit is made, and the Australian Communications and Media Authority has spent 2026 adding names to its formal-warning register. This page walks through what CashtoCode actually does, which offshore brands in the ACMA’s recent sights accept it, and what an Australian punter is buying into when the deposit clears.

Data current as of 29 October 2026, verified against the ACMA’s formal warning register and the Reserve Bank of Australia’s payment-system publications.

Eleven CashtoCode-accepting brands the ACMA has warned

Every brand in this list has received a formal ACMA warning under the Interactive Gambling Act 2001 for offering prohibited interactive gambling services to Australians. Listing them is not a recommendation — the warnings are the reason they appear. CashtoCode is accepted as a deposit method at the majority of these offshore sites, which is itself part of the regulatory problem: a frictionless prepaid rail into an illegal market.

The order below mirrors the ACMA’s own publication chronology, most recent first. Each card states what the warning covered, the operator name on the ACMA record and whether this page could verify CashtoCode support specifically. Where verification failed, the entry is marked plainly — the absence is not the operator’s silence, it is what this page could confirm.

A “listings only” note means a third-party payment directory names the brand beside CashtoCode or a related rail — it is not the brand’s own claim and it is not a confirmation that an Australian deposit will actually clear. “Not confirmed” means no public source this page could check ties the brand to CashtoCode at all, and the write-up below does not assert the connection either way.

The frame matters more than the list. CashtoCode entered the market in 2013, holds no Australian licence, and markets itself explicitly to gambling operators — Pragmatic Play, Evolution, NetEnt and Playtech sit in its catalogue filters. A payment rail built for offshore gambling is not an accidental fit with offshore casinos; it is the design brief.

What CashtoCode is and how it works

CashtoCode is an eVoucher system: a customer buys a 20-digit code from a reseller — convenience stores, petrol stations and online platforms are all part of the network — and enters it at the casino’s cashier. The cashier credits the account, the voucher is consumed, and no bank card, no PayID, no wallet details ever touch the casino’s payment processor. The customer pays cash in advance; the casino gets the funds as a settled voucher redemption.

Three things follow from that design, and they explain the appeal:

• No personal data is exchanged at purchase. The buyer hands over cash, takes a code, leaves. There is no name on the voucher.
• More than 25 currencies are supported, which is why an offshore brand in Curaçao or Cyprus finds the rail useful — it can serve many markets through one integration.
• CashtoCode states the voucher carries no usage fee to the customer and any unused balance retains its full value.

The constraint is equally clear: CashtoCode is deposit-only. There is no withdrawal rail. When a player wants their winnings out, the casino picks another method — a bank transfer, an e-wallet, sometimes a crypto on-ramp — and CashtoCode has no role in that step. The speed of a withdrawal therefore depends entirely on the casino’s own settlement process, not on CashtoCode, which is a point the marketing rarely surfaces.

For an Australian player specifically, the design also runs into a banking reality. Major Australian banks — NAB, Commonwealth Bank, Westpac and St George — let customers switch on a gambling transaction block through their banking app. ANZ’s block extends to digital-wallet transactions made on the blocked card, including Apple Pay. Once a gambling block is on, a card payment to a casino merchant category code is refused at authorisation. A CashtoCode deposit sidesteps that entirely, because no card is involved at the moment of purchase. That is the convenience the rail sells, and it is also the reason regulators keep an eye on it.

The law every one of these sites sits underneath

The Interactive Gambling Act 2001, as tightened by the Interactive Gambling Amendment Act 2017, makes it a civil offence to provide an online casino game, an online pokie or in-play betting to a person who is physically in Australia. The offence sits with the provider, not the player — the IGA targets the operator. The relevant point for anyone reading this page: there is no Australian licence available for an online casino product. State and territory regulators license wagering on races and sport (placed before the event), lotteries and keno, and that is the ceiling.

Enforcement runs through the ACMA. The authority investigates complaints, issues formal warnings to operators it can reach, and asks Australian internet service providers to block sites it cannot reach at all. As of the ACMA’s June 2026 round, 1,751 illegal gambling and affiliate websites had been blocked since the first blocking request in November 2019, and more than 230 unlicensed services had left the Australian market since 2017. The June 2026 round alone asked ISPs to block 12 more sites, including 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino.

The IGA’s 2023 amendments added the payment-side lever. From 11 June 2024, Australian-licensed online wagering providers cannot accept credit cards, credit-linked digital wallets or digital currencies — a rule enforced by the ACMA with penalties of up to A$247,500 per breach. The licensed bookmakers operate under it; offshore casinos operate around it. A site that asks an Australian customer for a credit card or a crypto deposit is one of two things: not Australian-licensed, or breaking the rules it is licensed under.

H2 Gambling Capital’s 2025 estimate puts Australian losses to illegal gambling at around A$3.9 billion a year. The same study traces the legal-channel share of gambling spend from 74% in 2021 to 64% — a fall of ten percentage points in four years, against a backdrop of stronger enforcement and harder deposit rails on the legal side. The unlicensed market has grown despite the blocks, not because the blocks failed but because the deposit rails the law cannot touch have multiplied.

A separate, narrower piece of the regulatory picture is worth naming: the Northern Territory Racing and Wagering Commission regulates 52 of Australia’s online bookmakers, including Sportsbet, Bet365 and Ladbrokes. It is the de facto national sports-betting regulator because of the Territory’s tax treatment, not because of a policy decision that Darwin should run Australian wagering. The commission has no full-time staff and meets once a month. Its existence explains why Australian-licensed online wagering is even possible; it does not change the fact that no equivalent licence exists for online casino.

What an ACMA formal warning actually changes

A formal warning under the IGA is a written, public document. It names the operator entity, the URL or URLs covered, the section of the Act the ACMA believes has been breached, and a deadline by which the operator is expected to demonstrate compliance. It is the step before an injunction and well before a civil penalty proceeding — but it is also a published record, and it is the record that decides whether a brand appears on a list like the one above.

What a warning does not do is shut the site down. Several of the brands in this list were warned and continued operating, sometimes under a new company name at a new URL. The Dama N.V. sequence is the clearest illustration: a single operator entity received a May 2022 warning covering six brands (Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos), a March 2025 warning over Woo Casino, and a May 2025 warning over Spirit Casino. Three warnings across four years, one parent company, no Australian licence in between. The ACMA’s reach is the Australian-facing infrastructure — ISP blocking, payment-rail pressure, removal from app stores — not the operator’s own servers.

The RocketPlay file shows the same operator name appearing under a different parent. The ACMA’s March 2026 warning names Pulsup Ltd over RocketPlay.com.au; the May 2022 warning named Dama N.V. over the same brand. A player looking at the brand today sees RocketPlay; a player looking at the ACMA’s register sees two parent companies and two warning dates. That kind of corporate reshuffle is the rule, not the exception, in this market.

Responsible play, where the help actually sits

For an Australian who has decided to keep playing on the licensed side, the relevant infrastructure is narrow and concrete. BetStop, the National Self-Exclusion Register, has been live since August 2023. It binds every Australian-licensed online and phone wagering service — meaning the bookmakers, not the offshore casinos. A punter who registers with BetStop is excluded from every Australian-licensed wagering platform simultaneously, with no opt-out period shorter than the minimum registration term. An offshore casino is not connected to BetStop, which is the gap the warnings on this page are about.

Self-exclusion on the bank side sits with the customer, not the regulator. NAB, Commonwealth Bank, Westpac and St George let customers switch on a gambling transaction block through the banking app, and ANZ extends the block to digital-wallet transactions made on the blocked card. A block is usually applied immediately; lifting it requires a cooling-off period — ANZ specifies 48 hours. The bank also warns that not every gambling transaction will be blocked (some merchants are miscoded) and some non-gambling transactions might be blocked in error. The block is a filter at the merchant-category-code level, not a perfect perimeter.

The National Gambling Helpline is 1800 858 858, free and 24/7, with chat at Gambling Help Online. These services exist for the licensed market. For someone already playing offshore, the help is the same phone number — the regulator’s reach is not.

Payments, payout speed and where CashtoCode stops

CashtoCode is deposit-only. The official site offers no withdrawal rail, and any marketing that implies otherwise is misstating the product. The casino pays out through whatever rail the cashier section offers — typically a bank transfer, an e-wallet like ecoPayz, or a crypto on-ramp. Two consequences:

• A CashtoCode deposit can land in the casino account within minutes; the matching withdrawal, on the same site, may take several business days of manual review. The marketing-friendly image of instant prepaid play conceals a settlement step that almost always runs in the casino’s own queue.
• An Australian player withdrawing to an Australian bank account runs the transaction through the regular banking system, which means the bank’s gambling block can in principle refuse authorisation. The casino cannot detect this in advance; the customer finds out when the money does not arrive.

The licensed-side alternative is faster, not slower. Osko, the instant-transfer service on the New Payments Platform, settles between participating Australian banks in under a minute, 24/7, addressed to either a BSB and account number or a PayID. More than 25 million PayIDs had been registered on the platform by April 2025, and over 100 Australian financial institutions offer PayID-based instant transfers. Paying to a PayID also shows the recipient’s name before the transfer is sent — a small but useful guard against scams, since AP+ warns that being asked to send to a PayID on an illegal gambling site almost certainly means a scam site.

Apple Pay and Google Pay have become the dominant mobile card-payment rails in Australia — by the end of 2025, mobile wallet transactions accounted for around 45% of all card payments by number. Apple does not charge consumers a fee for using Apple Pay; any surcharge is the merchant’s card-processing cost, not Apple’s. The same transactions on a gambling-blocked card will be refused at authorisation if the wallet sits on top of that card — ANZ’s block extends to wallet payments on the underlying card, and most other banks apply the same logic. The mobile-wallet revolution makes the licensed side more usable while leaving the offshore CashtoCode rail as the path of least resistance for a blocked punter.

A last point on the cost side: the Reserve Bank of Australia’s July 2025 review proposes removing surcharges on eftpos, Mastercard and Visa card transactions, and explicitly leaves American Express outside the proposed ban. Amex’s three-party scheme — it both issues cards and processes transactions — puts it outside the four-party logic the surcharge reform targets. For an Australian punter paying a casino, the practical effect is that surcharging rules do not bind Amex the way they bind Visa or Mastercard, regardless of whether the casino is licensed. For a punter paying via CashtoCode, the question is moot — the surcharge sits at the voucher purchase, not at the casino.

The blocking rate, measured against the ACMA’s record

The ACMA’s June 2026 disclosure set out the running total of blocked illegal gambling and affiliate websites: 1,751, accumulated since the first blocking request in November 2019. The estimate that follows is a useful way to think about the pace of the ACMA’s enforcement — a band, not a single figure.

Over the 79 months between November 2019 and June 2026, the ACMA’s blocker moved at an average pace of roughly 22 sites per month across the whole enforcement window. The pace was not even: it accelerated after the 2017 amendments strengthened the regime, slowed during the early COVID period when international site operators faced different pressures, and picked up again through 2024 and 2025 as more affiliate marketing pages fell within scope. A reader who treats 22 as the steady-state rate will be roughly right on the long run, and roughly wrong on any given month.

A more useful framing is the band. The rate has run, in different reporting rounds, between roughly 10 and 40 sites added per month, with the higher months clustering around specific enforcement waves. The June 2026 round added 12. Earlier rounds, particularly those sweeping affiliate infrastructure, added more. The honest read: the ACMA’s blocking tool is operational and incremental, not a one-off sweep, and an offshore casino facing an Australian punter today is operating inside a regime that adds new names to its blocklist every month.

The arithmetic does not tell a player whether the next site they find will be on the list. It tells them that the list has been growing, on average, since 2019 — which is what an enforcement programme in working order looks like.

Brand-by-brand: what an ACMA warning means in practice

RocketPlay

Pulsup Ltd received a formal ACMA warning in March 2026 over Rocketplay.com.au. The same brand sat under Dama N.V. on a May 2022 warning covering six casino names. The pattern — operator entity changes, warning continues — is the standard offshore reshuffle. CashtoCode support on RocketPlay is not confirmed by any source this page could check. A player drawn to the brand sees an active casino with a working cashier; the ACMA register sees a brand with two formal warnings under two different parent companies. The site offers no Australian licence and no Australian consumer protection, and a withdrawal dispute has no local complaints body to escalate to.

Level Up Casino

Dama N.V.’s May 2022 warning covered six brands, of which Level Up was one. Third-party payment directories list Level Up beside CashtoCode-adjacent rails, but the listing is not the brand’s own claim. The Dama N.V. sequence — May 2022, March 2025, May 2025 — shows one operator entity outlasting the warnings by years. A player who registered in 2022 and is still playing in 2026 has seen two further warnings issue to the same parent while their account stayed open. That is the lived experience of “still operating after a warning”.

Woo Casino

Dama N.V. received a formal warning specifically over Woo Casino in March 2025, three years after the May 2022 multi-brand warning. The 2025 warning is dated evidence that the ACMA continued to find Woo Casino in scope after the earlier action. CashtoCode support is not confirmed. Woo Casino’s pitch to a new Australian sign-up is the standard offshore one: a Curaçao-issued licence number in the footer, a long bonus ladder in the cashier, and a payments page that lists a dozen deposit methods. None of those documents make it lawful to offer online casino games to a person in Australia.

Spirit Casino

The Dama N.V. sequence closes with the May 2025 warning over Spirit Casino — the third formal warning to the same operator in three years. CashtoCode support is not confirmed. A punter comparing Spirit Casino to the rest of this list might reasonably ask why an operator entity with three warnings since 2022 is still on the ACMA’s working list rather than removed from it. The answer is the legal architecture: warnings are warnings, not injunctions, and the ACMA’s blocking tool targets infrastructure, not operator survival.

National Casino

Consolutetish S.R.L. received a formal warning in July 2025 over National Casino, alongside a warning over Bizzo Casino the same month. Third-party listings place National Casino beside payment-system directories that reference CashtoCode or related rails. Whether a deposit from an Australian buyer actually clears is a separate question the listing does not answer. The 2025 warning places National Casino inside the ACMA’s active enforcement set; a withdrawal dispute has no Australian resolution path.

Bizzo Casino

Bizzo Casino carries two warnings: the July 2025 Consolutetish S.R.L. action and an earlier 2022 warning to TechSolutions (CY) Group Limited and TechSolutions Group N.V. A single brand, two operators, two warning dates — the cleanest illustration of the corporate reshuffle on this page. CashtoCode support is not confirmed. The 2022 warning is old enough that an Australian punter who discovered Bizzo before 2022 may have no memory of it; the ACMA register has not forgotten it.

Ignition Casino

Bamboo Media received a formal warning in July 2025 over Ignition Casino. The brand is well-known in offshore marketing as a poker-and-casino hybrid; that market profile does not place it inside any Australian exception. CashtoCode support is not confirmed. An Australian punter at Ignition Casino is not protected by BetStop, not covered by an Australian banking block (because no Australian card is involved at the deposit step), and not subject to any Australian consumer law in a dispute. The regulatory gap is the product.

Instant Casino

EOD Code SRL received a formal warning in February 2025 over Instant Casino. Third-party listings tie Instant Casino to ecoPayz and to PayID — the PayID link is a useful marker, since AP+ warns that a PayID on an illegal gambling site is almost certainly a scam site. A punter seeing a PayID deposit option on an offshore casino is looking at a deposit rail that has been warned about at the network-operator level. CashtoCode support is listings only.

Jackbit

Ryker B.V. received a formal warning in April 2026 over Jackbit and CasinOK — two brands on one warning. CashtoCode support is not confirmed. Jackbit’s appeal, where it has one, is the cryptocurrency-heavy cashier. A cryptocurrency deposit is, on the licensed Australian side, banned by the ACMA’s 2024 rules; on the offshore side, it is the rail of choice for an operator that cannot accept a card through the Australian banking system. Jackbit sits inside that gap.

Casino Intense

Sterplay Holding Ltd received a formal warning in April 2025 over Casino Intense. Third-party listings tie the brand to AUSTRAC threshold-report references, mainstream news coverage and NAB-side payment context — a useful sign that the brand is visible enough to clear mention in non-gambling press. CashtoCode support is listings only. A punter comparing Casino Intense to other entries on this list should not infer from the listings that an Australian deposit will clear; the ACMA warning is the binding fact.

Sky Crown

Hollycorn N.V. received a formal warning over Sky Crown and Blue Leo casino services, with the ACMA publication in September 2022. The 2022 date is older than most entries on this list, but the ACMA’s register is not a popularity chart — an old warning sits on the record until the underlying conduct changes. CashtoCode support is not confirmed. Sky Crown is the entry that reminds a reader the ACMA’s enforcement window reaches back four years and still applies to brands a punter may have last visited in 2023.

Frequently asked questions

Is it legal for an online casino to accept CashtoCode from a player in Australia?

No. Under the Interactive Gambling Act 2001, no operator may lawfully provide online casino games or online pokies to a person in Australia, regardless of the deposit method. The law targets the provider, not the player. CashtoCode is a deposit rail into offshore casinos; the offshore casino is the prohibited service.

What is the smallest deposit a CashtoCode casino usually asks for?

CashtoCode eVouchers are sold in fixed denominations through resellers, typically starting at small cash amounts. The minimum a casino accepts at the cashier is set by the casino itself and varies by brand. Third-party payment directories sometimes list the operator’s stated minimum; that figure is the operator’s own claim, not an Australian-licence verification.

Does a CashtoCode withdrawal clear faster than a card withdrawal at these sites?

CashtoCode is deposit-only — there is no CashtoCode withdrawal. A punter’s winnings come out through whatever rail the casino’s cashier offers, which is usually a bank transfer or e-wallet, and the speed is set by the casino’s manual review, not by CashtoCode. The deposit step may be near-instant; the matching withdrawal is not.

Can CashtoCode be used at every offshore pokies-style site, or only some of them?

Only at the brands that have integrated it into their cashier. CashtoCode’s own site lists gambling game providers in its catalogue, so the rail is marketed broadly to the offshore sector, but each casino decides which methods it accepts. This page’s table marks CashtoCode as either confirmed through listings or unconfirmed — the absence of a listing is not the same as a refusal.

Does depositing with CashtoCode add an extra fee at these casino sites?

CashtoCode states the eVoucher is free of charge to the customer and carries no usage fee, with unused balance retaining its full value. The casino may apply its own deposit-side fees, which would appear in the cashier. The cost worth measuring is not the voucher purchase — it is the wagering requirement on any bonus attached to the deposit, which is the operator’s own decision and not CashtoCode’s.

What should a player do if a CashtoCode deposit does not appear in a casino account?

The first step is the casino’s own support, because the voucher has been redeemed on CashtoCode’s side and cannot be undone. If the casino does not respond or refuses to credit the account, the punter has no Australian complaints body to escalate to, since the site is not Australian-licensed. The bank is not in the loop, because no card was used. The realistic options are the casino’s internal dispute process or walking away from the balance.