Sweepstakes casinos in 2026: state bans, processors, and what changes

As of October 2026, at least ten states have enacted laws that make dual-currency sweepstakes casinos illegal, and Oklahoma's takes effect on November 1, 2026. Several of those laws reach past the operator to the payment processors, banks, platforms, and suppliers that support the games, so the payment stack is now named in the statute itself, not just weighed in an underwriter's risk appetite.

This guide is for sweepstakes operators, the processors and banks that serve them, and the vendors around them. It covers how the model works, which states have acted and when, why lawmakers wrote processors into the bills, what the card networks already say about coding, and what each side should be doing now.

How the dual-currency model works

A sweepstakes casino runs two currencies side by side. The first is a play currency that players buy in packages and that can never be redeemed for anything. The second is a promotional currency that comes free with those packages, through daily login bonuses, or through a mail-in request, and that can be redeemed for cash prizes once a player meets the operator's play-through rules.

The legal theory rests on the three elements of gambling: prize, chance, and consideration. Operators argue that because the redeemable currency can always be obtained for free, nobody pays for the chance to win, so the game is a promotional sweepstakes rather than gambling. The free path is usually called an alternative method of entry, or AMOE.

Most of the new state laws answer that argument by defining the model itself. Maine's law, for example, describes a dual-currency system as one that prevents a person from directly buying the redeemable coins while encouraging the purchase of non-redeemable coins in order to obtain them. Once the structure is written into the statute, a free mail-in path no longer settles the question.

The states that have acted, as of October 2026

The table below lists the laws we found that target these games. Dates matter because some laws took effect on signing, while others gave operators months to exit.

Two patterns stand out. The first laws, in Montana, Connecticut, and New Jersey, were aimed mostly at operators, while most later ones, starting with California and New York and going furthest in Louisiana, also reach the businesses around them. And penalties range from civil fines enforced by a gaming or consumer protection agency to felony exposure, so the same player footprint carries very different risk from one state to the next.

The table is not a full list of every state that considers these games illegal. Some states have long relied on general gambling statutes, cease-and-desist letters, and lawsuits rather than a dedicated sweepstakes law, and bills stalled in others during 2026, including Maryland and Minnesota. Confirm current status with counsel and the relevant regulator before you rely on any single date. For the New York text, see the Senate's bill page for S5935-A; for Oklahoma, the legislature's SB 1589 record.

Why lawmakers wrote payment processors into the bills

States have a reach problem. Many sweepstakes operators are based out of state or offshore, and a cease-and-desist letter to a company with no local presence only goes so far. The businesses that move the money, check the location, host the games, and run the ads are easier to find, and they usually care more about their own licenses and banking relationships.

Congress used the same logic in 2006. The Unlawful Internet Gambling Enforcement Act works through the payment system: Regulation GG requires non-exempt participants in designated payment systems to have written policies and procedures reasonably designed to identify and block restricted transactions. Our guide to UIGEA and Regulation GG explains that framework. Some state sweepstakes laws push the idea further by naming payment companies directly.

The wording differs from state to state, and the differences matter:

• California makes it unlawful for any entity, financial institution, payment processor, geolocation provider, gaming content supplier, platform provider, or media affiliate to "knowingly and willfully" support an online sweepstakes game in the state. That knowledge standard is the main protection for a processor that genuinely did not know.
• New York names the same categories, financial institutions and payment processors included, and bars them from supporting online sweepstakes games. It also leaves it to the State Gaming Commission to determine what counts as a dual-currency system.
• Louisiana defines "merchant payment processor" and bars processors from accepting or processing a transaction they believe is connected with gambling by computer, which now includes dual-currency games.
• Maine and Tennessee do not list processors by name. Maine reaches anyone who "supports" the operation or promotion of the games, and Tennessee reaches anyone who supports, facilitates, or assists. That language is broad enough that a processor should assume it is covered.
• Oklahoma names geolocation providers, gaming suppliers, platform providers, promoters, and media affiliates that provide support, but not payment processors or financial institutions.
• New Jersey's sweepstakes section targets the operator or sponsor and its officers, employees, and agents.

Knowledge standards vary as well. California's law turns on knowing and willful support, and Louisiana's on what a processor believes, with a public notice list to help prove knowledge. New York's and Oklahoma's laws state no knowledge standard at all, so a processor should not rely on ignorance as a defense.

Louisiana's model: public notice lists and presumed knowledge

Louisiana's Act 182 (HB 883) deserves its own section because it gives processors the most specific obligations so far. According to the legislature's resume digest, it raises the penalty for offering gambling by computer to up to a $100,000 fine and up to five years in prison. It sets a separate penalty of up to $20,000, up to five years, or both, for merchant payment processors and platform providers that support or facilitate it.

Three mechanics matter most for payments teams. The attorney general can send cease-and-desist notices to operators and to platform providers and merchant payment processors that allow the information or financial transactions to flow, and must keep a list of those notices on the attorney general's website. A notice on that list is prima facie evidence that anyone acting in support knew the activity was occurring. And the law expressly allows a processor to block a transaction on its own initiative.

In practice, that turns a public web page into a screening list. A processor or bank with exposure to the category should check merchants, along with their descriptors and domains, against that list on a schedule, and document that it did. The companion law, Act 48 (HB 53), adds certain gambling crimes as predicate offenses for racketeering, which raises the stakes for everyone in the chain. Both took effect August 1, 2026, and the bill history is on the Louisiana Legislature's HB 883 page.

What the card networks already say about sweepstakes

Card network rules got here before most legislatures did. Visa's Merchant Data Standards Manual (October 2026 edition) lists "Sweepstakes" among the businesses included in MCC 7995, the code for betting and games of chance to win prizes of monetary value. The same manual places social casinos that do not offer any prizes of monetary value under MCC 7994, video game arcades.

The line Visa draws is the prize. A social casino where nothing can be redeemed is an amusement. Once a currency can be exchanged for prizes of monetary value, the manual points to 7995, and for card-absent merchants it says online gambling transactions must use 7995 for all transactions, even when gambling is not the merchant's primary business. Card-absent 7995 is also on Visa's list of high integrity risk MCCs, which carries extra acquirer obligations.

That has two consequences. Coding a redeemable-prize sweepstakes casino as digital games or amusement is the kind of mismatch that ends acquiring relationships, as our guide to gambling merchant category codes explains. And honest coding means many issuers will decline the transaction under their gambling policies, so approval rates built on other codes may not survive correct coding. Mastercard applies its own registration and coding rules, and our post on Visa and Mastercard rules for gambling merchants covers what your acquirer has to check.

What changes for operators

If you run a sweepstakes platform, the map you can serve is shrinking. The work falls into three buckets.

Exit cleanly where the law requires it

Block new registrations, purchases, and redemptions from players located in prohibited states, using location checks at the moments that matter rather than only at sign-up. Decide with counsel how to handle existing balances held by players in exiting states, then communicate the policy clearly and apply it consistently. A messy exit generates complaints, regulator attention, and disputes all at once.

Turn off the marketing in those states

Several laws name promoters and media affiliates. Affiliate links, influencer campaigns, and paid search aimed at a prohibited state are evidence of promotion, and they put your partners at risk too. Get written confirmation that partners have stopped.

Build player protection into the purchase flow

Lawmakers framed these bans as consumer protection. New York directs its fines to problem gambling purposes, and Maine sends its fines to the Gambling Addiction Prevention and Treatment Fund. In the states where you still operate, purchase limits, cooling-off periods, self-exclusion, and age and identity checks at purchase and redemption are the controls an underwriter will look for. Our posts on KYC, age verification, and geolocation and responsible gambling payment controls go deeper.

What changes for processors, banks, and vendors

For a processor, sponsor bank, or ISO, the question has moved from "is this category within our risk appetite" to "could this merchant make us a defendant." A reasonable program now includes the following:

• A state-by-state footprint for every merchant in the category, refreshed as laws change, with contractual representations that the merchant blocks prohibited states.
• Evidence of location controls at purchase and redemption, not just a clause in the terms of service.
• Correct MCC assignment with a written basis, tied to whether the merchant offers prizes of monetary value.
• Screening against public enforcement lists, such as the Louisiana attorney general's notices, and against regulator cease-and-desist announcements.
• A documented offboarding plan, because terminating a merchant mid-flight creates refund obligations and disputes of its own.

Expect disputes to rise when players lose access. A player in an exiting state who cannot redeem may file chargebacks on earlier purchases, and a cluster of them in one month can push a merchant past Mastercard's Excessive Chargeback Merchant line (1.5% or more of the preceding month's transactions, with at least 100 chargebacks) or its High Excessive line (3% or more, with at least 300). On Visa, disputes and fraud now feed one measure under the Visa Acquirer Monitoring Program, whose thresholds have been revised, so ask your acquirer which figure applies to you. Our chargebacks guide walks through the math.

Reserves follow the same logic. When an acquirer sees regulatory exit risk, it protects itself against refunds and disputes that arrive after termination, which is why holds and reserves tend to rise in this category. See reserves and holds for how that works and what to ask.

Redemptions are payouts, and they get the same scrutiny

To a bank, the redemption side of a sweepstakes platform looks like a gambling payout. Money leaves the operator and lands in a player's bank account or on a debit card, often in amounts that grew from a small purchase. That flow draws questions about identity, location, source of funds, and whether the payout returns to the instrument that funded the account.

Push-to-card services such as Visa Direct can move funds to a debit card in seconds, but your processor and its bank partner decide program by program which kinds of payouts they allow. Ask your processor whether gaming payouts are enabled for your program before you build around them. For redemption design, KYC at cash-out, and payout fraud, see our guide to paying out winnings by push-to-card and ACH. For patterns that look like structuring or account takeover, see AML for gaming operators.

Where the fight goes next

Bills that stalled in 2026, including in Maryland and Minnesota, could return in a later session. Meanwhile, recent statutes such as Tennessee's and Louisiana's give attorneys general investigative and enforcement tools aimed at the supporting businesses, not only the operator.

Pure social casinos, where no currency can be redeemed for anything of value, sit outside most of these definitions, which turn on a currency that can be exchanged for prizes or cash. Some operators are moving toward that model, or toward licensed real-money gaming where it exists. Either path changes the payments profile. A no-prize social casino is an amusement merchant, and a licensed online casino is a regulated gambling merchant with its own coding and registration, as our complete guide to gaming and betting payment processing lays out.

A checklist for the next 90 days

1. Map every state where you or your merchants have players, purchases, or redemptions, and compare it against the table above and current regulator guidance.
2. Confirm that location checks run at purchase and at redemption, and test them from inside and outside each border.
3. Review the MCC on every sweepstakes-related merchant account against what the business actually offers.
4. Pull affiliate and advertising spend out of prohibited states and collect written confirmation from partners.
5. Set up a recurring check of public enforcement lists, starting with Louisiana's, and keep a log of each check.
6. Model the chargeback and refund impact of leaving a state before you announce it.
7. Get a written legal opinion for each state you keep, and set a date to refresh it.

This is general information about a fast-moving area, not legal advice, so confirm current status with counsel and your regulator before acting on it.

How Flux fits

Flux is a US payments company that works with high-risk verticals on purpose. Flux reviews gaming and betting businesses case by case, with people doing the underwriting rather than a category-level automated no. Approval depends on your licenses, where your players are, and your controls, and not every business qualifies. You can see how we think about the category on our gaming and betting page.

Where an account is approved, Flux's hosted payment fields keep card numbers off your servers, and its fraud detection scores each transaction in real time and flags or blocks risky ones using rules you control. Cards settle in 1-2 business days and ACH in 1-3 business days. Gaming and betting accounts are priced after underwriting.

If you want to talk through how your money moves before you apply, email sales@fluxpayments.com or start an application at /apply.html.