PSA Rules for Pay by Mobile Deposits 2026: A Complete Guide
PSA rules set for pay by mobile deposits ensure players can make payments safely and securely online. This guide explains the Phone-paid Services Authority (PSA) Code v15, its merger with Ofcom in 2024, and the protections UK players have when using Boku, Fonix, Siru, or PayviaPhone at online casinos.
PSA Rules for Pay by Mobile Deposits in the Current Regulatory Landscape
Three regulators touch every phone-bill casino deposit: Ofcom, the PSA legacy code, and the UK Gambling Commission (UKGC).
| Regulator | Primary Remit | Key power over carrier billing |
| Ofcom (inc. PSA unit) | UK communications & premium-rate services | Enforces PSA Code v15 rules, sets £40/£240 caps |
| PSA Code v15 | Operational rule-book for Payforit & DCB providers | Requires double opt-in, age-gate, and refund path |
| UK Gambling Commission | Licences casinos & applies LCCP AML/RG rules | Casino KYC, source-of-funds checks, deposit-limit prompts |
What PSA Code v15 Demands (Quick Cheatsheet)
The current rule-set came into force on 5 April 2022 and was imported wholesale when PSA folded into Ofcom on 1 October 2023.
| Rule V15 | Headline Requirement | How Boku/ Fonix Comply |
| 3.2 “Transparency” | Must show total charge incl. VAT before purchase | Deposit screen states “£10 will be added to your mobile bill” |
| 3.9 “Double Opt-In” | Two separate confirmations for any spend | Web click plus SMS reply or PIN |
| 3.11 “Spend Limits” | Default £40/day / £240/month unless user opts for lower | Network auto-blocks above cap (Error 4) |
| 4.3 “Refund Mechanism” | Provider must offer prompt credit or charge reversal | Boku/Fonix helpline triggers a carrier refund within 7 days |
| 5.2 “Age Verification” | Services promoting gambling must block under-18s | Casino KYC + network age flag cross-checked |
PSA & UKGC Rules for Pay by Mobile Casino Deposits (2026)
In the UK, pay by mobile casino payments are now governed by two regulatory bodies: the Phone-paid Services Authority (PSA) and the UK Gambling Commission (UKGC). Together, these frameworks enforce strict consumer protections, transparency rules, responsible gambling measures, and operator accountability.
The PSA regulates how phone bill payments are processed—ensuring users consent to charges, are aware of their limits, and have access to refunds in cases of fraud. Meanwhile, from 31 October 2025, the UKGC will mandate new operator responsibilities, including mandatory prompts on deposit limits, six-month financial reminders, and clear disclosures of fund protection levels. Both frameworks aim to safeguard players using mobile billing at online casinos.
What Deposit Limits Apply to Pay by Mobile Payments?
The PSA enforces strict caps on Pay by Mobile deposits — typically £30 per transaction and around £240 per month. Mobile networks enforce these and aim to support responsible gambling and prevent overspending.
Can Players Dispute a Pay by Mobile Charge?
PSA Code v15 §4.3 gives you the right to challenge unauthorised or fraudulent Pay by Mobile charges. Start with the casino, then escalate to the payment provider, and finally to your mobile network. If unresolved, you can contact Ofcom or the Communications Ombudsman.
Key Takeaways
- SMS confirmation is required before any Pay by Mobile deposit is processed to ensure player consent.
- Deposit caps are enforced — typically £30 per transaction and approximately £240 per month across UK networks.
- From 31 October 2025, casinos must prompt all new users, including Pay by Mobile users, to set a deposit limit before their first deposit.
- Operators must remind players every six months to review deposit limits and transaction history.
- All casinos must disclose their player fund protection status at the time of the first deposit and send biannual reminders if funds are unprotected.
- Refunds for Pay by Mobile are only offered in rare cases, such as confirmed fraud or unauthorised use.
- Two-factor authentication (e.g., SMS codes) is mandatory to prevent misuse and unauthorised payments.
- Operators cannot use misleading advertising or bury withdrawal restrictions in small print.
- Mobile networks must work with regulators to block rogue services and enforce player protection rules.
- All of the above requirements fall under both PSA compliance and the UKGC’s Licence Conditions and Codes of Practice (LCCP).
PSA Rules on Pay by Mobile: Security Layers from SIM to Casino
Every deposit passes through four checkpoints—fail at any point, and the charge will never appear on your phone bill.
- Header enrichment (network). Your SIM silently injects the MSISDN, so the payment page knows the number belongs to the device in hand.
- Double opt-in (PSA 3.9). A web click + an SMS “Y” reply (or a 4-digit PIN for Siru) satisfies PSD2 strong customer auth.
- Carrier risk engine. EE, O₂, Vodafone, and Three flag the transaction as fraudulent and against your spend cap.
- Casino ledger + UKGC rules. The operator checks the player's KYC status, deposit limits, and anti-money-laundering flags before finalising the credit.
Refund & Dispute Process (Code 4.3)
If you spot an unauthorised carrier charge, here’s the legally mandated refund ladder.
| Step | Who to Contact | Time SLA | Outcome |
| 1 | Casino live-chat | 24 h response | Most billing errors have been fixed here |
| 2 | Payment provider (Boku, etc.) | 5 business days | Full or pro-rata refund via network credit |
| 3 | Mobile network | 10 working days | Charge reversed on next bill |
| 4 | Ofcom (PSA complaints) | ADR / ombudsman | Escalated investigation |
PSA Payforit Rules for Pay-by-Mobile Casino Deposits
- PSA Code v15 (now enforced by Ofcom) underpins every UK carrier-billed casino deposit.
- Mandatory double opt-in, age gating and a £40/£240 cap provide built-in spending control.
- Refunds follow a clear ladder: casino → provider → network → Ofcom, with a 14-day deadline once accepted.
- Combine network caps with a casino deposit limit for maximum bankroll safety.
Summary Table for Ofcom and PSA Code v15 Pay by Phone Bill Casino Rules
| Area | PSA / Ofcom Rules for Pay-by-Mobile Casino Deposits (UK) |
|---|---|
| Regulators involved |
|
| Headline caps | £30–£40 per transaction · £40 daily · £240 monthly (hard network limits). |
| Key Code v15 duties |
|
| Deposit flow checkpoints | Header-enrichment → SMS/PIN confirmation → Carrier risk engine → Casino KYC & limit check. |
| Refund ladder | Casino → Payment provider (Boku/Fonix) → Mobile network → Ofcom/Comms Ombudsman (14-day SLA after acceptance). |
| 2025 UKGC additions | First-deposit limit prompt · 6-month limit reminder · upfront disclosure of player-fund protection status. |
| Practical player protections |
|
| Key takeaway | PSA/Ofcom rules plus UKGC requirements create a triple-lock: mandatory double consent, low fixed caps, and casino-level RG prompts—making pay-by-mobile one of the safest ways to keep real-money deposits small and controlled. |
Common security FAQs
No—header-enriched MSISDN and SMS confirmation both require the physical SIM in network coverage.
Because carrier billing is classified as a telecom service, not a financial service; PSA chose a refund model instead.
Yes—PSA 3.9 demands two separate confirmations for every premium-rate charge, including repeat deposits.
Networks mark under-18 accounts; Payforit refuses gambling transactions if age flag fails and the casino must run KYC/age-check anyway.
Unlikely. Ofcom’s 2025 consultation suggested keeping the ceiling or lowering it, citing affordability data.
Chris Vaughan is a Senior Writer and Editor at GamblingAuthority. He has more than 18 years of experience in the iGaming industry and has great knowledge of game developers, trending games and casino research.
Read more about the author
Craig Hitchings is a Senior Writer and Editor at GamblingAuthority. He has more than 15 years of experience in the iGaming industry and has great knowledge of the online casino market within the United Kingdom.
Read more about the author