Gambling on a bank card in South Africa: merchant code 7995, fees and blocks
Every card payment to a bookie carries a merchant code that tells your bank it is gambling. Here is what that code triggers: foreign payment bans, possible cash-style…
Banking & FICA
Licensed SA bookmakers are accountable institutions under the Financial Intelligence Centre Act. They must verify who you are before dealing with you, keep checking, and stop transacting if they can't. That is why an unverified account usually cannot withdraw.

The Financial Intelligence Centre Act 38 of 2001, usually shortened to FICA, lists the businesses that must help the state detect money laundering and terrorist financing. These are called accountable institutions, and gambling is item 9 of Schedule 1. The Financial Intelligence Centre's page for the gambling sector describes item 9 as a person who carries on the business of making available a gambling activity as contemplated in section 3 of the National Gambling Act 7 of 2004, where a licence is required from the National Gambling Board or a provincial licensing authority.
In plain terms: if a bookie holds a provincial licence, it is an accountable institution. According to a National Gambling Board note on FIC Act compliance, that brings a set of duties: register with the FIC, file regulatory reports, keep records, train staff on the Act, appoint a compliance officer and run a risk management and compliance programme (RMCP). The document upload you see after registering is the customer-facing end of those duties. If you are not sure whether the operator is licensed in the first place, start with how to check a bookmaker's licence.
Section 21(1) of the Act says that when an accountable institution engages with a prospective client to enter into a single transaction or establish a business relationship, it must establish and verify the client's identity. It must do this in accordance with its own RMCP. If someone acts on the client's behalf, that person's identity and authority must be verified as well.
The phrase "in accordance with its RMCP" explains why two bookmakers ask for different things. The Act sets the duty to verify; each institution decides, on a risk-based approach, how it verifies. One operator may confirm your ID number electronically at sign-up and ask for nothing more. Another may ask for an upload of your ID, a proof of address and a bank document before the first payout.
Proof of address is a good example. A South African law firm's analysis of the FICA address rule points out that the regulation requiring a residential address to be verified was repealed on 2 October 2017, and that the familiar "not older than three months" rule came from 2005 guidance that has since been withdrawn. An address check today exists because the institution's own programme requires it, not because a regulation spells it out. If your bookmaker's RMCP asks for it, though, you still have to supply it, for the reason in the next sections.
The exact list is in each operator's help centre. The table shows the three documents most often requested and what each one does for the bookmaker's compliance file.
| Document | What it establishes | Where requests usually go wrong |
|---|---|---|
| Identity document: smart ID card, green barcoded ID book or passport | Who you are: full name, date of birth and ID number, the core of the section 21 check | Cropped corners, glare over the photo or number, an expired passport |
| Proof of residential address: municipal account, utility bill or bank statement | Where you live, if the operator's RMCP treats address as part of identity | Bill in a partner's or landlord's name, a document older than the operator accepts |
| Bank proof: statement or bank confirmation letter showing name and account number | That the account receiving your winnings is yours | Account held in someone else's name, or a name that differs from the ID |
The bank proof matters more than many punters think. The NGB note lists "transactions on casino accounts conducted by persons other than the account holder" and "the use of false and stolen identities" among the general money-laundering indicators for the sector. A payout to an account in another person's name is exactly the pattern a compliance officer is trained to stop. See our payment methods guide for how each deposit and withdrawal route ties back to your name.
Verification is not a one-off step. Section 21C requires ongoing due diligence, and section 21D deals with doubts about the accuracy of information obtained earlier. The key provision for punters is section 21E. If an institution cannot establish and verify your identity, cannot obtain the information it needs about the business relationship, or cannot conduct ongoing due diligence, it may not establish the relationship or conclude a single transaction, may not conclude transactions within an existing relationship, and may have to terminate the relationship in line with its RMCP. It must also consider filing a suspicious transaction report under section 29.
A withdrawal is a transaction. So when documents are missing, unreadable or do not match, the operator is legally blocked from paying out until the gap is closed. Other triggers you may run into:
Closing an account does not make your file disappear. Section 23 of the Act requires records of a business relationship to be kept for at least five years from the date the relationship ends, records of a transaction for at least five years from the date it was concluded, and records linked to a section 29 report for at least five years from the date of the report. If you self-exclude or close an account, the operator still holds your verification documents for that period. Our guide to self-exclusion in South Africa covers what happens to the account itself.
This page explains the general framework and is not legal advice. For a dispute about a specific account, speak to the operator's compliance team, the licensing provincial board or an attorney. If the money side of betting is becoming stressful, the South African Responsible Gambling Foundation's toll-free line is 0800 006 008, open 24/7.
Some operators verify your ID number electronically at sign-up. Where they cannot, section 21E of the FIC Act stops them from concluding transactions until verification is done, and a withdrawal is a transaction.
No regulation sets that age today. The rule requiring address verification was repealed in 2017, and the three-month figure came from withdrawn guidance. Each operator sets its own requirement in its compliance programme, so check its help page.
The account must be yours. Payments involving someone other than the account holder are a listed money-laundering indicator for the gambling sector, so operators pay out only to accounts in the verified name.
Not straight away. Section 23 of the FIC Act requires records of a business relationship to be kept for at least five years after it ends.
First ask the operator in writing what is missing. If that fails, contact the provincial gambling board that issued the operator's licence.
Prepared by the CasinoSectors editors from the sources listed above. This is general information, not legal or tax advice. Spotted a mistake? Write to [email protected]. Problem gambling helpline (SARGF): 0800 006 008, free and open 24/7.
Every card payment to a bookie carries a merchant code that tells your bank it is gambling. Here is what that code triggers: foreign payment bans, possible cash-style…
Paying a bookie with cash from the till point: what the 1Voucher, OTT and Blu Voucher rules say about limits, expiry, change, refunds and getting winnings back.
A bookie's price is fixed when you bet, while a tote dividend is set by the pool after the race. Here is how to compare the two, what starting price means and how to…
This site sets no advertising or tracking cookies. Our network provider may set a technical security cookie, and your browser remembers that you closed this note. Cookie policy