PSA rules for pay by mobile casino deposits

Chris Vaughan
Author:
Fact Checker:
Last Updated:

PSA rules pay by mobile casino ensure players can make payments safely and securely online. This guide unpacks the Phone-paid Services Authority (PSA) Code v15, how it merged into Ofcom in 2024, and what protections UK players have when using Boku, Fonix, Siru or PayviaPhone at online casinos.

boku logo

PSA rules pay by mobile casino in the Current Regulatory Landscape

Three regulators touch every phone-bill casino deposit: Ofcom, the PSA legacy code, and the UK Gambling Commission (UKGC).

Regulator Primary Remit Key power over carrier billing
Ofcom
(inc. PSA unit)
UK communications & premium-rate services Enforces PSA Code v15 rules, sets £40/£240 caps
PSA Code v15 Operational rule-book for Payforit & DCB providers Requires double opt-in, age-gate, refund path
UK Gambling Commission Licences casinos & applies LCCP AML/RG rules Casino KYC, source-of-funds checks, deposit-limit prompts

Gambling Commission logo

What PSA Code v15 demands (quick cheatsheet)

The current rule-set came into force 5 April 2022 and was imported wholesale when PSA folded into Ofcom on 1 Oct 2023.

Rule V15 Headline Requirement Hoe Boku/ Fonix Comply
3.2 “Transparency” Must show total charge incl. VAT before purchase Deposit screen states “£10 will be added to your mobile bill”
3.9 “Double Opt-In” Two separate confirmations for any spend Web click plus SMS reply or PIN
3.11 “Spend Limits” Default £40/day  /  £240/month unless user opts lower Network auto-blocks above cap (Error 4)
4.3 “Refund Mechanism” Provider must offer prompt credit or charge reversal Boku/Fonix helpline triggers carrier refund within 7 days
5.2 “Age Verification” Services promoting gambling must block under-18s Casino KYC + network age flag cross-checked

PSA & UKGC Rules for Pay by Mobile Casino Deposits (2025)

In the UK, pay by mobile casino payments are now governed by two regulatory bodies: the Phone-paid Services Authority (PSA) and the UK Gambling Commission (UKGC). Together, these frameworks enforce strict consumer protections, transparency rules, responsible gambling measures, and operator accountability.

The PSA regulates how phone bill payments are processed—ensuring users consent to charges, know their limits, and have access to refunds in cases of fraud. Meanwhile, from 31 October 2025, the UKGC mandates new operator responsibilities such as mandatory deposit limit prompts, six-month financial reminders, and clear disclosures on fund protection levels. Both frameworks aim to safeguard players using mobile billing at online casinos.

Are Pay by Mobile casinos required to show clear pricing before charging?

Under PSA Code v15, providers must display the full cost of any Pay by Mobile transaction upfront. You must also give explicit consent via SMS or a similar method before any charge is made to your phone bill.

What deposit limits apply to Pay by Mobile casino payments?

The PSA enforces strict caps on Pay by Mobile deposits — typically £30 per transaction and around £240 per month. These are enforced by mobile networks and aim to support responsible gambling and prevent overspending.

Do Pay by Mobile casinos have to prompt players to set a deposit limit?

Yes. From 31 October 2025, all UKGC-licensed casinos must prompt players to set a deposit limit before their first deposit — including when using Pay by Mobile. This is a mandatory rule under updated UKGC regulations.

Can players dispute a Pay by Mobile casino charge if they didn’t authorise it?

PSA Code v15 §4.3 gives you the right to challenge unauthorised or fraudulent Pay by Mobile charges. Start with the casino, then escalate to the payment provider and your mobile network. If unresolved, you can contact Ofcom or the Communications Ombudsman.

Are refunds for Pay by Mobile casino payments allowed under PSA rules?

Refunds are permitted only in specific cases, such as unauthorised use or billing errors. PSA rules require providers to maintain a refund mechanism and respond within 14 days once valid evidence is presented. Refunds for normal gambling losses are not granted.

Do Pay by Mobile casinos need to inform players about player fund protection?

Yes. Under the UKGC’s October 2025 update, casinos must disclose at your first deposit how your funds are protected — especially if they’re not segregated or insured. They must also remind you every six months if your funds are at risk in case of operator insolvency.

Key Takeaways

  1. SMS confirmation is required before any Pay by Mobile deposit is processed, ensuring player consent.
  2. Deposit caps are enforced — typically £30 per transaction and around £240 monthly across UK networks.
  3. From 31 October 2025, casinos must prompt all new users to set a deposit limit before their first deposit — including Pay by Mobile users.
  4. Operators must remind players every six months to review deposit limits and transaction history.
  5. All casinos must disclose player fund protection status at the first deposit — and send biannual reminders if funds are unprotected.
  6. Refunds for Pay by Mobile are only offered in rare cases such as confirmed fraud or unauthorised use.
  7. Two-factor authentication (e.g., SMS codes) is mandatory to prevent misuse and unauthorised payments.
  8. Operators cannot use misleading advertising or bury withdrawal restrictions in small print.
  9. Mobile networks must work with regulators to block rogue services and enforce player protection rules.
  10. All of the above requirements fall under both PSA compliance and the UKGC’s Licence Conditions and Codes of Practice (LCCP).

PSA rules pay by mobile casino: Security layers from SIM to casino

Every deposit passes four checkpoints—fail at any point and the charge never leaves your phone bill.

  1. Header enrichment (network). Your SIM silently injects the MSISDN so the payment page knows the number belongs to the
    device in hand.
  2. Double opt-in (PSA 3.9). Web click + SMS “Y” reply (or 4-digit PIN for Siru) satisfies PSD2 strong customer auth.
  3. Carrier risk engine. EE, O₂, Voda, Three score the transaction against fraud markers and your spend cap.
  4. Casino ledger + UKGC rules. Operator checks player KYC, deposit limits, and anti-money-laundering flags before final credit.

Refund & dispute process (Code 4.3)

If you spot an unauthorised carrier charge, here’s the legally mandated refund ladder.

Step Who to Contact Time SLA Outcome
1 Casino live-chat 24 h response Most billing errors fixed here
2 Payment provider (Boku, etc.) 5 business days Full or pro-rata refund via network credit
3 Mobile network 10 working days Charge reversed on next bill
4 Ofcom (PSA complaints) ADR / ombudsman Escalated investigation

PSA Payforit Rules for Pay-by-Mobile Casino Deposits: Key Take-aways

Summary table for Ofcom and PSA Code v15 pay by phone bill casino rules

Area PSA / Ofcom Rules for Pay-by-Mobile Casino Deposits (UK)
Regulators involved
  • Ofcom (inc. PSA unit) – enforces PSA Code v15, sets £40 daily / £240 monthly caps.
  • PSA Code v15 – operational rule-book (double opt-in, age-gate, refunds).
  • UKGC – casino licensing, KYC/AML checks, mandatory deposit-limit prompts.
Headline caps £30–£40 per transaction · £40 daily · £240 monthly (hard network limits).
Key Code v15 duties
  • Transparent pricing before purchase (Rule 3.2).
  • Double opt-in (web click + SMS “YES”/PIN) for every charge (Rule 3.9).
  • Refund mechanism for unauthorised billing (Rule 4.3).
  • Age verification for gambling content (Rule 5.2).
Deposit flow checkpoints Header-enrichment → SMS/PIN confirmation → Carrier risk engine → Casino KYC & limit check.
Refund ladder Casino → Payment provider (Boku/Fonix) → Mobile network → Ofcom/Comms Ombudsman (14-day SLA after acceptance).
2025 UKGC additions First-deposit limit prompt · 6-month limit reminder · upfront disclosure of player-fund protection status.
Practical player protections
  • SMS 2FA prevents unauthorised use.
  • Network caps enforce cooling-off breaks.
  • Itemised phone-bill entries aid spend tracking.
  • Casino tools (loss/session limits, self-exclusion) layer on top of carrier caps.
Key takeaway PSA/Ofcom rules plus UKGC requirements create a triple-lock: mandatory double consent, low fixed caps, and casino-level RG prompts—making pay-by-mobile one of the safest ways to keep real-money deposits small and controlled.

Common security FAQs

No—header-enriched MSISDN and SMS confirmation both require the physical SIM in network coverage.

Because carrier billing is classified as a telecom service, not a financial service; PSA chose a refund model instead.

Yes—PSA 3.9 demands two separate confirmations for every premium-rate charge, including repeat deposits.

Networks mark under-18 accounts; Payforit refuses gambling transactions if age flag fails and the casino must run KYC/age-check anyway.

Unlikely. Ofcom’s 2025 consultation suggested keeping the ceiling or lowering it, citing affordability data.

Chris Vaughan
Chris Vaughan Senior Writer & Editor
45 Articles 0 Reviews

Chris Vaughan is a Senior Writer and Editor at GamblingAuthority. He has more than 18 years of experience in the iGaming industry and has great knowledge of game developers, trending games and casino research.

Read more about the author
Last Updated: 11 June 2025