Payment agents can be individuals, companies, gateways, wallets or informal interÂmeÂdiÂaries that move money between gamblers and operators. Their presence does not prove illegality. A useful invesÂtiÂgation estabÂlishes the gambling market being served, the operator’s licence status and the precise role each payment particÂipant played.
Start with the relevant gambling market
Record where the customer was located, which domain and app were used, when the transÂaction occurred and what gambling product was offered. A licence from one country does not necesÂsarily authorise an operator to serve another. The UK Gambling Commission’s explaÂnation of how it tackles illegal gambling confirms that facilÂiÂtators such as payment providers may form part of enforcement work in Great Britain.
Verify the operator before tracing the agent
Search the competent regulator’s register using the exact legal entity and domain, not only the casino’s brand. Preserve the result, licence number, status, permitted activÂities and date checked. Apply the same exact-domain process described in our guide to detecting unlicensed casinos. An absent or mismatched entry is a lead for further verifiÂcation, not by itself proof that every transÂaction was unlawful.
Map the complete payment chain
Identify the customer-facing descriptor, casino entity, payment agent, gateway, payment service provider, acquirer, bank, e‑money instiÂtution, crypto exchange and final benefiÂciary. Use bank records, invoices, merchant data, wallet transÂacÂtions and corporate filings. Do not assume that the name on a statement is the casino or ultimate recipient.
Define what the agent actually did
Separate technical routing, currency conversion, account provision, merchant onboarding, collection and payout functions. Establish whether the agent controlled funds, selected benefiÂciaries, recruited customers or merely supplied infraÂstructure. Licensed gambling businesses serving Great Britain must comply with the Commission’s payment-services condition, but invesÂtiÂgators must check which rule applied to the specific transÂaction.
Test knowledge and notice
Evidence relevant to knowledge may include onboarding files, merchant-category coding, transÂaction monitoring, complaints, regulator notices, internal risk reviews and repeated attempts to disguise the same operator. High volumes or crypto use alone do not establish intent. Look for evidence that warnings were received, underÂstood and ignored, or that controls were delibÂerÂately circumÂvented.
Trace transactions and customer harm
Reconcile each deposit and withdrawal across the parties. Compare timestamps, amounts, fees, exchange rates and benefiÂciary accounts. For disputed payments, first distinÂguish unauthoÂrized use, APP fraud, account takeover and merchant disputes using our payment-fraud invesÂtiÂgation framework.
Check corporate and ownership links
Map directors, shareÂholders, beneficial owners, shared addresses, domains, support contacts and service contracts. Common infraÂstructure can reveal a relationship, but shared providers are also used by unrelated businesses. CorrobÂorate any claimed connection with filings, contracts or commuÂniÂcaÂtions.
A Malta Media analysis of payment systems in gambling regulation provides useful sector context. Treat secondary reporting as a lead and verify material claims against regulator records, company documents and transÂaction evidence.
Build a role-and-evidence table
For every particÂipant, record its legal identity, regulated status, contractual role, funds received, evidence of knowledge, contrary evidence and response. The report should separate verified facilÂiÂtation from suspicion and clearly distinÂguish regulatory non-compliance, civil disputes and alleged criminal conduct.