If you deposited at an offshore casino using open banking, Trustly, Volt, TrueLayer, or another pay by bank service and are now asking whether you can get your money back from a casino bank transfer, this guide explains precisely why the standard chargeback route does not apply and what alternatives remain available. Players searching “Trustly casino refund,” “pay by bank casino dispute,” or “casino bank transfer withdrawal problem” are all facing the same underlying issue: an open banking casino deposit is a direct bank-to-bank transfer, not a card transaction, and that single fact changes every recovery route available.
The absence of a chargeback is not the end of your options. It is the beginning of a different set of them. Whether your dispute concerns a Trustly casino deposit you cannot recover, a Faster Payments transfer to an offshore operator that has refused your withdrawal, or a pay by bank casino transaction that your bank cannot reverse, the routes below apply to your situation.
This guide covers open banking disputes at offshore casino operators: those licensed by the Curaçao Gaming Authority (“CGA”), the Malta Gaming Authority (“MGA”), and the Gibraltar Regulatory Authority, and unlicensed operators. Curaçao-licensed operators are not subject to UKGC oversight, are not required to participate in UK ADR schemes, and operate under Curaçao law, which affects your enforcement options materially. Where the analysis differs between UK and US players, this is stated explicitly. UKGC-licensed operators are out of scope.
Key Points
- Open banking casino deposits, including Trustly, Volt, TrueLayer, and all pay by bank services, are direct bank-to-bank transfers. They do not route through Visa or Mastercard. Because no card network is involved, no card-scheme chargeback right exists. You cannot get a casino bank transfer refund through the standard chargeback process.
- The Payment Services Regulations 2017 (SI 2017/752) govern open banking payments in the UK. They provide an unauthorised payment claim where the payment was not actually consented to, but they do not provide a general refund right for a pay by bank casino deposit you deliberately authorised.
- The Authorised Push Payment (“APP”) scam reimbursement framework, which came into force on 7 October 2024, is the most important UK consumer protection for Trustly casino disputes and other open banking casino deposit disputes where you were deceived into making the payment. Eligible consumers must be reimbursed within five working days under the framework.
- ADR through the casino’s licensing regime is the primary route where the APP scam framework does not apply. Malta has the strongest offshore ADR framework. Curaçao post-LOK has structured complaint and ADR requirements. Unlicensed operators have no meaningful ADR obligation.
- A casino bank transfer dispute cannot be resolved through Visa or Mastercard dispute conditions. Civil litigation through English courts becomes more important precisely because the chargeback route is absent, not less.
- Player Protection Legal operates on a no-win, no-fee basis. You pay nothing upfront, and we are only paid if we successfully recover funds on your behalf.
How Open Banking Payments Work and Why No Chargeback Exists
The most important thing to understand about an open banking deposit at an offshore casino is what type of payment it actually is. When you deposit using Trustly, Volt, TrueLayer, or a similar pay by bank service, a Payment Initiation Service Provider (“PISP”) initiates a credit transfer instruction from your bank account to the casino operator’s merchant account. The payment travels over domestic bank-to-bank rails, typically the UK Faster Payments Service, rather than through the Visa or Mastercard card network.
This is not a card transaction. Trustly describes the product as a direct payment from the customer’s bank account. Volt markets it as real-time, irrevocable account-to-account payment. TrueLayer’s documentation describes customers connecting their bank account to pay the merchant directly. None of these architectures routes the payment through a card scheme at any point.
Visa’s published consumer materials state that its Zero Liability protection applies to transactions processed by Visa. Mastercard’s published materials describe chargebacks as protections attached to credit and debit card use. Where a payment never passes through either network, neither network’s dispute framework applies. The absence of a chargeback right is not a loophole or an oversight. It is a direct consequence of how the payment was made.
Players who deposited by credit or debit card rather than open banking have access to a different set of dispute rights. Our guide to when a UK bank can refund offshore casino transactions covers the card network deadlines and the deposit-versus-losses distinction, and if you are concerned about the downstream effects of filing any dispute, our article on gambling chargeback consequences for your bank account and credit file addresses those risks directly.
One practical complication is worth noting. The merchant descriptor on your bank statement may not show the casino’s trading name. Trustly states that a consumer may see “Trustly Group AB” rather than the casino brand, because Trustly processes payments on behalf of many merchants. This means your bank statement may not clearly identify the casino at all, which matters when you later try to evidence the dispute. Preserve the PISP confirmation email alongside the bank statement from the outset.
What the Payment Services Regulations 2017 Actually Give You
The Payment Services Regulations 2017 (SI 2017/752) are the primary UK legal framework governing open banking payments. They provide two potentially relevant protections, but both are narrower than most players assume.
Unauthorised payment claims
Regulation 75 of the Payment Services Regulations 2017 places the burden on the payment service provider to prove authentication and correct execution where the player denies having authorised the payment. Where the payment was initiated through a PISP, the PISP must prove authentication, accurate recording, and absence of technical failure. Regulation 76 requires the payer’s bank to refund an unauthorised payment transaction and restore the account to the position it would have been in had the transaction not taken place. The notification window is generally up to 13 months under regulation 74.
The critical limitation is the definition of “unauthorised.” A payment is unauthorised if the player did not consent to it, if credentials were stolen and a third party initiated the transfer, or if the payment was incorrectly executed due to a technical failure. A payment is not unauthorised merely because the player consciously approved the deposit and subsequently concluded that the casino was dishonest or refused to process a withdrawal. In plain terms: “I approved the deposit but now cannot withdraw” is almost never an unauthorised payment case. It is a contract dispute, a fraud case, or an APP scam case, depending on the specific facts.
Refund right for payee-initiated transactions
Regulation 79 provides a refund right for authorised payment transactions initiated by or through a payee where the exact amount was not specified in advance, such as a direct debit. This provision does not apply to a standard casino deposit where the player selects and approves a specific amount. It does not create a general cooling-off style refund right for open banking gambling deposits.
The APP Scam Reimbursement Framework
For many players whose open banking casino deposit cannot be recovered, the most important UK legal protection is not the unauthorised payment framework but the Authorised Push Payment (“APP”) scam reimbursement regime that came into force on 7 October 2024.
Pay.UK states that from 7 October 2024, in-scope Payment Service Providers sending or receiving payments through the Faster Payments Scheme must reimburse eligible APP scam victims within five working days, with the cost shared between the sending and receiving PSPs. The Payment Systems Regulator’s September 2024 policy statement set out the framework and expressly acknowledged the need to distinguish APP scams from civil disputes.
An APP scam claim may be available where: the casino operator made a false representation that it was licensed or regulated when it was not; the operator misrepresented its willingness or ability to process withdrawals before the deposit was made; or the payment was induced by deception about the operator’s identity or legitimacy. The strongest cases are where the operator was fabricated, used a false licence claim, or operated a deliberate withdrawal trap. The weakest cases are where the operator is a genuine but poorly run offshore casino and the dispute is about bonus terms, KYC checks, or account restrictions. The PSR’s framework treats the latter as a civil dispute, not a scam, which changes the reimbursement position entirely.
Before filing an APP scam claim, the player should complain first to the sending bank or payment service provider. If the sending PSP does not resolve the complaint within the required period, the Financial Ombudsman Service can hear the escalation. Frame the complaint precisely around the specific deception alleged, with supporting evidence. A vague complaint that the casino was a scam without specific misrepresentation evidence is unlikely to succeed.
PISP Liability
The PISP used to make the deposit is regulated by the FCA under the Payment Services Regulations 2017. All firms providing payment initiation services must meet rules on transaction information, complaint handling, security, and refund of unauthorised payments. Trustly, Volt, TrueLayer, and Token all identify themselves as regulated or as operating through regulated entities.
However, the available materials do not establish a general duty on a PISP to verify that every gambling payee is licensed before executing a deposit. PISP liability in the offshore casino context is more likely to arise from a specific failure: the PISP misdescribed the payee, the consent flow was misleading, the payment was redirected, or the PISP’s own terms were breached.
Where a complaint against the PISP has merit, it can be filed with the FOS. The FOS has jurisdiction over FCA-authorised payment service providers including PISPs and can hear complaints about how the payment was handled, whether the payment was correctly executed, and whether the PISP’s own obligations were met.
No published FOS final decision specifically addressing a PISP-facilitated offshore casino open banking deposit was identified in the research for this article. Where such a decision exists, it should be cited before publication.
ADR Through the Casino’s Licensing Regime
Where the APP scam and unauthorised payment routes are unavailable, the next route is the ADR framework provided by the casino’s licensing jurisdiction. The quality of this route depends heavily on which jurisdiction licensed the operator.
Malta (MGA)
Malta has the strongest offshore ADR framework of the three jurisdictions covered here. MGA-licensed B2C operators must maintain complaint procedures in their terms, appoint a registered ADR entity before going live, and comply with binding ADR decisions within 20 days of an adverse ruling. The MGA’s ADR framework is payment-method neutral: a dispute about an open banking deposit that was not returned is a player-funds and withdrawal dispute capable of ADR treatment in the same way as a card dispute. Where the operator is genuinely MGA-licensed and the facts are documented, ADR is among the best available offshore routes.
The ADR process requires the player to exhaust the operator’s internal complaint procedure first, then escalate to the named ADR entity. ADR is free to the player under MGA Directive 5 of 2018 and produces binding outcomes in many cases.
Curaçao (CGA / LOK)
Under Article 5.3 of the LOK, which entered into force on 24 December 2024, the operator must acknowledge a complaint in writing within one week and issue a reasoned written decision within four weeks. ADR must be offered at the operator’s expense through a CGA-certified provider. The LOK’s complaint and ADR requirements apply to player disputes generally and are not limited to card payment disputes, so an open banking deposit withdrawal dispute falls within scope.
The CGA states publicly that it does not adjudicate individual player compensation disputes. A CGA supervisory complaint creates regulatory pressure and a formal compliance record; it does not by itself produce a payment. The realistic value of the CGA complaint is to establish a documented breach of licence obligations, which strengthens parallel ADR and legal proceedings.
Curaçao-licensed operators under provisional LOK licences received an extension to 24 December 2025. Operators that did not achieve full LOK compliance by that date face licence action.
Gibraltar
The Gambling Act 2025 was enacted on 23 March 2026 and commenced on 1 April 2026, replacing the Gambling Act 2005. Players dealing with Gibraltar-licensed operators should confirm the current complaint and ADR route under the Gambling Act 2025 directly with the operator’s terms and conditions and, where necessary, with the Gibraltar Regulatory Authority. The specific ADR architecture under the new Act requires verification before relying on it in a formal complaint.
Unlicensed operators
Unlicensed operators carry no regulatory complaint or ADR obligation. For open banking deposits at unlicensed casinos, the available routes are the APP scam framework where the facts support it, the unauthorised payment claim where the payment was genuinely not authorised, Action Fraud and NCA reporting, and legal action. Recovery prospects in this category are materially weaker than for licensed operators.
Legal Action Through English Courts
Because open banking removes the card chargeback route, civil litigation becomes more important, not less. The legal basis for a claim, whether breach of contract for failure to return deposited funds, unjust enrichment, or misrepresentation, is valid regardless of the payment method used to make the deposit.
In England and Wales, gambling contracts are generally enforceable, and a casino’s obligation to return a deposited balance that was not used in play constitutes a contractual debt rather than a gambling debt. HMCTS issue fees run from £35 for claims up to £300 to £455 for claims between £5,000 and £10,000, with 5% of the claim value above £10,000. Small claims are generally for amounts up to £10,000; the fast track applies from £10,000 to £25,000.
The practical benefit of open banking deposits in a court context is that they produce a cleaner payment audit trail than some card transactions. A bank-to-bank credit transfer generates a payment reference, a sending and receiving IBAN, a timestamp, and a PISP confirmation. TrueLayer’s documentation shows that refunds and payouts are tracked by payment ID, refund ID, and webhook status history. Volt documents virtual IBAN matching and real-time settlement visibility. That documentary trail, properly preserved, provides clear evidence of the deposit and the casino’s obligation to return it.
The enforcement challenge for Curaçao operators specifically is addressed in our analysis of whether a UK court judgment can be enforced against a Curaçao casino, which covers the treaty landscape, the post-LOK asset position, and when litigation is economically rational.
Reporting to Regulators
The following regulatory reporting routes exist alongside the primary recovery routes above. None produces individual compensation directly, but each creates a formal record and contributes to enforcement pressure.
Action Fraud and the NCA. Report the matter to Action Fraud and the National Crime Agency where the operator is unlicensed or where fraudulent conduct is suspected. These reports do not guarantee individual recovery but are the correct formal channel for unregulated operators.
Financial Conduct Authority. Report to the FCA where the PISP used to make the deposit is unlicensed or where the PISP’s conduct raises specific regulatory concerns. The FCA supervises PISPs under the Payment Services Regulations 2017.
Payment Systems Regulator. Report to the PSR where the APP scam reimbursement claim has been incorrectly handled by the sending PSP or where the sending bank failed to follow its obligations under the October 2024 framework.
Gambling Commission. Report to the Gambling Commission where an unlicensed offshore casino is known to be targeting UK players via open banking payment services. The Commission has taken enforcement action against offshore operators transacting with UK consumers and can use player reports as enforcement intelligence.
CGA or MGA. File a supervisory complaint with the relevant licensing authority where the operator is licensed and has breached its complaint, ADR, or fund-segregation obligations. These complaints are recorded as compliance signals and can trigger regulatory action against the operator’s licence.
Recovery Prospects by Licensing Jurisdiction
The realistic recovery prospect depends on which licensing jurisdiction the operator falls under and what specifically went wrong with the deposit.
MGA-licensed operators: Among the best available offshore routes. ADR is binding, the framework is payment-method neutral, and the MGA can apply regulatory pressure on operators that fail to comply with ADR decisions. Recovery is realistic where the operator is genuinely licensed, the facts are documented, and the dispute concerns a refused or unpaid withdrawal rather than gambling losses.
Curaçao-licensed operators (post-LOK): Better than the pre-LOK era, but weaker than Malta. ADR is now mandatory under the licence conditions, but the CGA cannot order individual compensation. Recovery depends on the operator’s responsiveness to formal complaint and ADR, and on whether the operator holds assets in jurisdictions accessible to a UK court.
Gibraltar-licensed operators: Potentially comparable to MGA depending on the specific ADR architecture under the Gambling Act 2025, which requires verification. Operators licensed in Gibraltar have real regulatory exposure and are generally more responsive to formal complaint than Curaçao operators.
Unlicensed operators: Worst-case category. No meaningful gambling regulatory leverage. Recovery relies on APP scam reimbursement where the facts support it, Action Fraud reporting, and legal action where the claim value justifies it.
Evidence to Preserve Immediately
Open banking deposits require a different evidence package from card deposits. Preserve the following before any account restriction occurs.
Payment records:
- PISP confirmation email showing the payment reference, sending account, receiving account, amount, and date
- Screenshot of your bank statement showing the exact transaction descriptor, amount, and date
- The end-to-end payment reference or transaction ID generated by the PISP
- Screenshot of the casino cashier page at the time of deposit showing the amount and the payment method selected
- Screenshot of your casino account balance immediately after the deposit was credited
Casino account records:
- Full casino account transaction ledger showing every deposit, bet, and withdrawal entry
- Screenshot or export of any withdrawal request, including the date, amount, and status
- Any rejection notice, delay communication, or failure to respond to a withdrawal request
PISP and bank records:
- FCA register screenshot confirming the PISP’s authorisation status at the time of the deposit
- The PISP’s published terms and conditions governing payment initiation and refunds
- Any PISP confirmation or webhook notification that the payment was successfully executed
Casino identity and licensing records:
- Screenshot of the casino’s licence page, regulatory seal, and the licensing jurisdiction stated
- The casino’s terms and conditions in force at the time of deposit, including withdrawal terms
- All emails, live-chat transcripts, and support tickets with the casino, with dates and times
For APP scam claims specifically:
- Any marketing material, promotional claim, or licence representation made by the casino before the deposit that can be shown to have been false
- Any warning displayed by your bank before the payment was authorised, and your response to it
- A written chronology of what the operator represented and when, and how that differed from what subsequently occurred
US Players
For US players, the dispute framework is governed by federal statute rather than UK consumer law, and the position is less favourable.
The UK-style PISP framework does not map directly onto the United States. US “pay by bank” and account-to-account models are governed through a combination of EFT, ACH, RTP, and contractual bank-law rules rather than a PSD2-style right for PISPs to initiate payments from customer accounts.
For EFT and ACH transfers, Regulation E, 12 C.F.R. § 1005.11, provides error resolution rights for unauthorised electronic fund transfers. The bank must investigate promptly, generally within 10 business days, with provisional credit available and an extension to 45 days for most disputes. These protections apply where the transfer was genuinely unauthorised. They do not create a refund right for a deliberate deposit to an offshore casino.
There is no federal equivalent to the UK Faster Payments APP scam reimbursement regime. A US player who made a deliberate bank transfer to an offshore casino and was then unable to withdraw has no mandatory reimbursement framework to rely on. The available routes are: an unauthorised EFT claim where the transfer was genuinely unauthorised; ordinary fraud and contract remedies through US civil courts; regulator reporting to the CFPB, FTC, or state attorney general; and, where applicable, a CFPB complaint against the US bank for failing to follow its error resolution obligations.
For credit card transactions made through a bank, the FCBA, implemented by Regulation Z, 12 C.F.R. § 1026.13, provides billing error rights. These apply only where a credit card was used, not where the payment was a direct bank transfer.
When Recovery Is Not Realistic
Not every open banking casino dispute has a viable recovery route. We advise clients directly when the facts do not support a claim.
- The deposit reached the casino account and you used the funds to place bets. The APP scam framework distinguishes scam cases from civil disputes. Where you knowingly gambled and lost, the absence of a chargeback is not replaced by an equivalent route.
- The operator is unlicensed and no APP scam evidence exists. Where the operator holds no licence and the payment cannot be framed as a deception-induced transfer, the realistic recovery routes are limited to legal action and regulator reporting.
- All relevant time limits have expired. The unauthorised payment notification window under regulation 74 of the Payment Services Regulations 2017 is generally 13 months. APP scam complaints should be filed promptly with the sending bank. FOS referral must follow within six months of the bank’s final response.
- The claim value does not justify legal action. For lower-value disputes, ADR and regulatory reporting are the proportionate routes. We will advise you directly if the economics of litigation do not make sense for your specific claim.
Where your situation falls outside these categories, contact us for a free initial consultation.
Our offshore casino dispute services cover every stage of the process from formal complaint through to legal action, and we publish ongoing analysis of open banking dispute developments, APP scam reimbursement cases, and ADR outcomes in our gambling law news and case updates.
What to Monitor Going Forward
- APP scam reimbursement framework development: The PSR’s October 2024 framework is subject to ongoing review, including the consumer standard of care requirement and the maximum reimbursement amount. Monitor PSR publications for any 2026 amendments that affect the scope of reimbursement for gambling-related payments.
- FCA guidance on open banking consumer rights: The FCA has not published a definitive statement on consumer dispute rights for open banking gambling payments specifically. Monitor FCA publications on payment services, PISPs, and consumer protection for any guidance addressing this scenario.
- FOS decisions on open banking gambling disputes: No published FOS final decision specifically addressing a PISP-facilitated offshore casino deposit was identified in the research for this article. Monitor the FOS published decisions database for any decision that addresses the authorised payment, APP scam, or PISP liability position in this context.
- Curaçao LOK compliance: Operators that did not achieve full LOK compliance by 24 December 2025 face licence action. Monitor the CGA portal for enforcement decisions and licence status updates.
- Gibraltar Gambling Act 2025: The specific complaint and ADR architecture under the Gambling Act 2025, which commenced on 1 April 2026, requires verification for Gibraltar-licensed operators. Monitor Gibraltar Regulatory Authority publications for player-facing ADR guidance under the new Act.
- Player Protection Legal: We publish ongoing analysis of open banking dispute developments, APP scam reimbursement cases, ADR outcomes, and offshore casino regulatory updates in our online casino legal news and case updates.