PSA rules for pay by mobile deposits
PSA rules set for pay by mobile deposits ensure players can make payments safely and securely online. This guide unpacks the Phone-paid Services Authority (PSA) Code v15, how it merged into Ofcom in 2024, and what protections UK players have when using Boku, Fonix, Siru or PayviaPhone at online casinos.
PSA rules pay by mobile deposits in the Current Regulatory Landscape
Three regulators touch every phone-bill casino deposit: Ofcom, the PSA legacy code, and the UK Gambling Commission (UKGC).
| Regulator | Primary Remit | Key power over carrier billing |
| Ofcom (inc. PSA unit) |
UK communications & premium-rate services | Enforces PSA Code v15 rules, sets £40/£240 caps |
| PSA Code v15 | Operational rule-book for Payforit & DCB providers | Requires double opt-in, age-gate, refund path |
| UK Gambling Commission | Licences casinos & applies LCCP AML/RG rules | Casino KYC, source-of-funds checks, deposit-limit prompts |
What PSA Code v15 demands (quick cheatsheet)
The current rule-set came into force 5 April 2022 and was imported wholesale when PSA folded into Ofcom on 1 Oct 2023.
| Rule V15 | Headline Requirement | Hoe Boku/ Fonix Comply |
| 3.2 “Transparency” | Must show total charge incl. VAT before purchase | Deposit screen states “£10 will be added to your mobile bill” |
| 3.9 “Double Opt-In” | Two separate confirmations for any spend | Web click plus SMS reply or PIN |
| 3.11 “Spend Limits” | Default £40/day / £240/month unless user opts lower | Network auto-blocks above cap (Error 4) |
| 4.3 “Refund Mechanism” | Provider must offer prompt credit or charge reversal | Boku/Fonix helpline triggers carrier refund within 7 days |
| 5.2 “Age Verification” | Services promoting gambling must block under-18s | Casino KYC + network age flag cross-checked |
PSA & UKGC Rules for Pay by Mobile Casino Deposits (2025)
In the UK, pay by mobile casino payments are now governed by two regulatory bodies: the Phone-paid Services Authority (PSA) and the UK Gambling Commission (UKGC). Together, these frameworks enforce strict consumer protections, transparency rules, responsible gambling measures, and operator accountability.
The PSA regulates how phone bill payments are processed—ensuring users consent to charges, know their limits, and have access to refunds in cases of fraud. Meanwhile, from 31 October 2025, the UKGC mandates new operator responsibilities such as mandatory deposit limit prompts, six-month financial reminders, and clear disclosures on fund protection levels. Both frameworks aim to safeguard players using mobile billing at online casinos.
What Deposit Limits Apply to Pay by Mobile Payments?
The PSA enforces strict caps on Pay by Mobile deposits — typically £30 per transaction and around £240 per month. These are enforced by mobile networks and aim to support responsible gambling and prevent overspending.
Can Players Dispute a Pay by Mobile Charge?
PSA Code v15 §4.3 gives you the right to challenge unauthorised or fraudulent Pay by Mobile charges. Start with the casino, then escalate to the payment provider and your mobile network. If unresolved, you can contact Ofcom or the Communications Ombudsman.
Key Takeaways
- SMS confirmation is required before any Pay by Mobile deposit is processed, ensuring player consent.
- Deposit caps are enforced — typically £30 per transaction and around £240 monthly across UK networks.
- From 31 October 2025, casinos must prompt all new users to set a deposit limit before their first deposit — including Pay by Mobile users.
- Operators must remind players every six months to review deposit limits and transaction history.
- All casinos must disclose player fund protection status at the first deposit — and send biannual reminders if funds are unprotected.
- Refunds for Pay by Mobile are only offered in rare cases such as confirmed fraud or unauthorised use.
- Two-factor authentication (e.g., SMS codes) is mandatory to prevent misuse and unauthorised payments.
- Operators cannot use misleading advertising or bury withdrawal restrictions in small print.
- Mobile networks must work with regulators to block rogue services and enforce player protection rules.
- All of the above requirements fall under both PSA compliance and the UKGC’s Licence Conditions and Codes of Practice (LCCP).
PSA Rules on Pay by Mobile: Security layers from SIM to casino
Every deposit passes four checkpoints—fail at any point and the charge never leaves your phone bill.
- Header enrichment (network). Your SIM silently injects the MSISDN so the payment page knows the number belongs to the
device in hand. - Double opt-in (PSA 3.9). Web click + SMS “Y” reply (or 4-digit PIN for Siru) satisfies PSD2 strong customer auth.
- Carrier risk engine. EE, O₂, Voda, Three score the transaction against fraud markers and your spend cap.
- Casino ledger + UKGC rules. Operator checks player KYC, deposit limits, and anti-money-laundering flags before final credit.
Refund & Dispute Process (Code 4.3)
If you spot an unauthorised carrier charge, here’s the legally mandated refund ladder.
| Step | Who to Contact | Time SLA | Outcome |
| 1 | Casino live-chat | 24 h response | Most billing errors fixed here |
| 2 | Payment provider (Boku, etc.) | 5 business days | Full or pro-rata refund via network credit |
| 3 | Mobile network | 10 working days | Charge reversed on next bill |
| 4 | Ofcom (PSA complaints) | ADR / ombudsman | Escalated investigation |
PSA Payforit Rules for Pay-by-Mobile Casino Deposits: Key Take-aways
- PSA Code v15 (now enforced by Ofcom) underpins every UK carrier-billed casino deposit.
- Mandatory double opt-in, age gating and a £40/£240 cap provide built-in spending control.
- Refunds follow a clear ladder: casino → provider → network → Ofcom, with a 14-day deadline once accepted.
- Combine network caps with a casino deposit limit for maximum bankroll safety.
Summary Table for Ofcom and PSA Code v15 Pay by Phone Bill Casino Rules
| Area | PSA / Ofcom Rules for Pay-by-Mobile Casino Deposits (UK) |
|---|---|
| Regulators involved |
|
| Headline caps | £30–£40 per transaction · £40 daily · £240 monthly (hard network limits). |
| Key Code v15 duties |
|
| Deposit flow checkpoints | Header-enrichment → SMS/PIN confirmation → Carrier risk engine → Casino KYC & limit check. |
| Refund ladder | Casino → Payment provider (Boku/Fonix) → Mobile network → Ofcom/Comms Ombudsman (14-day SLA after acceptance). |
| 2025 UKGC additions | First-deposit limit prompt · 6-month limit reminder · upfront disclosure of player-fund protection status. |
| Practical player protections |
|
| Key takeaway | PSA/Ofcom rules plus UKGC requirements create a triple-lock: mandatory double consent, low fixed caps, and casino-level RG prompts—making pay-by-mobile one of the safest ways to keep real-money deposits small and controlled. |
Common security FAQs
Chris Vaughan is a Senior Writer and Editor at GamblingAuthority. He has more than 18 years of experience in the iGaming industry and has great knowledge of game developers, trending games and casino research.
Read more about the author