UIGEA: The Law That Polices Gambling Money, Not the Player
The Unlawful Internet Gambling Enforcement Act created no new gambling offense. It tells businesses that take bets, and the banks that move money for them, which payments they may not accept.
The short answer
- What it forbids: a person engaged in the business of betting or wagering knowingly accepting payment connected to unlawful internet gambling.
- Who carries the burden: operators, banks, card networks, money transmitters and payment processors. Not customers.
- Where the illegality comes from: other federal or state law. Section 5361(b) says the subchapter changes no gambling law.
- Why offshore card deposits fail: Regulation GG plus merchant category code 7995 make declining the safe choice for your issuer.
- Codified at: 31 U.S.C. 5361 to 5367, signed Oct. 13, 2006 as Public Law 109-347.
It Regulates the Money, Not the Game
Ask 10 American card players what UIGEA did and most will say it made playing online illegal. The statute says something much narrower.
The statute never uses the word blackjack, never creates an offense for depositing $200 into a casino account, and does not on its own declare a single game unlawful anywhere in the country. What it does is tell businesses that take bets, and the banks that move money for them, that certain payments may not be accepted. That distinction is why regulated legal blackjack markets were able to open in seven states with this law sitting untouched on the books, and why your offshore card deposit gets declined while your Michigan casino deposit clears in four seconds.
What follows is the statutory text, the implementing regulation and the enforcement record. For the wider federal picture, the federal gambling statutes hub covers the other laws that matter, and the pillar guide on whether online blackjack is legal in the US handles the state-by-state answer.
What the statute does
- Bars a person engaged in the business of betting or wagering from knowingly accepting payment connected to unlawful internet gambling.
- Pushes the compliance work onto banks, card systems, money transmitting businesses and payment processors.
- Borrows its definition of unlawful gambling entirely from other federal and state law.
- Carves out intrastate play a state expressly authorizes with age and location verification safeguards.
What it does not do
- It never uses the word blackjack.
- It creates no offense for depositing $200 into a casino account.
- It declares no game unlawful anywhere in the country on its own.
- It did not stop New Jersey, Delaware and Nevada from authorizing online play seven years later.
How a Port Security Bill Became a Gambling Law
The gambling title never got a standalone Senate vote. It rode into law on a cargo security package in under 24 hours.
Congress had been trying and failing to pass internet gambling legislation for most of a decade. H.R. 4411, the Goodlatte-Leach bill, cleared the House in July 2006 but stalled in the Senate. Rather than fight for a floor vote, Senate Majority Leader Bill Frist and Sen. Jon Kyl attached a modified payments title to the conference report on H.R. 4954, a cargo security bill with broad bipartisan support and no relationship to gambling.
The Senate version of that port bill, passed Sept. 14, 2006, contained no gambling language at all. The conference report, H. Rept. 109-711, was filed at 9:29 p.m. on Sept. 29, 2006 with a new Title VIII inside it. The drafters stripped out provisions that would have amended the Wire Act, leaving that older statute untouched. Fewer than 24 hours later both chambers cleared the package.
| Date | What happened |
|---|---|
| Sept. 14, 2006 | Senate passes its version of H.R. 4954. No internet gambling text anywhere in the bill. |
| Sept. 29, 2006 | Conference report H. Rept. 109-711 filed at 9:29 p.m., now carrying the gambling payments title. |
| Sept. 30, 2006 | House agrees to the conference report 409 to 2 (Roll No. 516). The Senate clears it by unanimous consent. |
| Oct. 13, 2006 | President George W. Bush signs the SAFE Port Act, Public Law 109-347. Title VIII is codified at 31 U.S.C. 5361 to 5367. |
Two points deserve stating plainly. The gambling title never received a standalone vote in the Senate, and the 409 to 2 House tally was a vote on port security rather than gambling policy. The bill history is public at Congress.gov.
Congress wrote the limit into its own opening lines
The findings at 31 U.S.C. 5361 assert that internet gambling is funded mainly through payment instruments, credit cards and wire transfers, and that traditional enforcement tools fail when wagering crosses borders. The same section carries a rule of construction that matters enormously: no provision of the subchapter alters, limits or extends any federal or state law, or any Tribal-State compact, regulating gambling.
What Section 5363 Actually Forbids
The operative prohibition is one sentence, and every load-bearing word in it points away from the player.
31 U.S.C. 5363 opens: “No person engaged in the business of betting or wagering may knowingly accept, in connection with the participation of another person in unlawful Internet gambling,” followed by a list of payment types.
The regulated party is a person “engaged in the business of betting or wagering,” meaning a bookmaker, a casino operator, a card room or a payment arm of one of those. The forbidden act is to accept money, not to send it, and the required mental state is knowing acceptance. The player appears only as “another person” whose participation supplies context. A customer is the subject of the transaction, never the defendant.
The Four Payment Channels Named in the Statute
Credit and card credit
Credit, or the proceeds of credit, extended to or on behalf of the player, including credit extended by credit card.
Electronic fund transfers
An electronic fund transfer, or funds transmitted by or through a money transmitting business, or the proceeds of either.
Checks and drafts
Any check, draft or similar instrument drawn by or on behalf of the player and drawn on or payable through a financial institution.
The catch-all
The proceeds of any other form of financial transaction involving a financial institution as payor or intermediary on the player’s behalf.
Item four is a catch-all, and it is why the statute has aged well: a payment method invented in 2019 still falls inside the text if a financial institution sits anywhere in the chain. A transfer touching no financial institution sits outside it, which matters in the crypto discussion below.
Why the Statute Cannot Reach a Player
Read 5363 alongside 31 U.S.C. 5366, which supplies the penalties. That section punishes “any person who violates section 5363.” Since only a business that accepts payment can violate 5363, only such a business can be punished. No companion provision criminalizes deposit, play or withdrawal by a customer, so there is no statutory hook to charge a player.
That is not the same as no legal exposure
Roughly a dozen states have statutes reaching the bettor, and Washington state classifies internet gambling as a class C felony under its own code. Federal payments law and state criminal law are separate questions. Our page on what penalties players actually face handles the state layer.
Where the law does and does not touch you
UIGEA leaves the player alone. State codes and license status are where your actual exposure lives.
The Borrowed Illegality Problem
UIGEA never defines what gambling is unlawful. It imports that answer from whatever law already applies where you sit.
31 U.S.C. 5362(10)(A) defines “unlawful Internet gambling” as placing, receiving or knowingly transmitting a bet by means involving the internet, at least in part, “where such bet or wager is unlawful under any applicable Federal or State law in the State or Tribal lands in which the bet or wager is initiated, received, or otherwise made.”
The illegality is imported. UIGEA is a delivery mechanism bolted onto whatever prohibition already exists elsewhere. If the underlying wager is lawful where the player sits, the payment is not a restricted transaction and the statute has nothing to grip.
This is why a bill sold in 2006 as the end of internet gambling did not stop New Jersey, Delaware and Nevada from authorizing online play seven years later. The states changed the underlying law, and once they did, UIGEA had nothing to attach to. It also explains why the federal fight that mattered involved a different statute. The Justice Department’s shifting readings of the Wire Act, from the September 2011 opinion limiting it to sports wagering, to the November 2018 reversal, to the First Circuit’s Jan. 20, 2021 ruling in the New Hampshire Lottery case, moved the ground under online casino gaming far more than this payments law ever did.
The Intrastate Carve-Out That Let Regulated Markets Open
Why geolocation exists at all
Subparagraph 5362(10)(B) removes from the definition any bet initiated and received exclusively within a single state, provided the state expressly authorizes it by law or regulation and the authorizing scheme includes age and location verification safeguards and appropriate data security standards. The activity must also comply with the Interstate Horseracing Act, the Professional and Amateur Sports Protection Act as it then stood, the Gambling Devices Transportation Act and federal tribal gaming law.
Two consequences follow. The age and geolocation checks now standard at every licensed US casino app are not merely a regulator’s preference; a version of them sits in federal law as a condition of the exemption, and our explainer on how geolocation checks work covers the machinery. Separately, 5362(10)(E) provides that intermediate routing of data does not determine where a bet is initiated. Your packets can cross a Virginia data center without breaking the intrastate character of a Pennsylvania hand, a related reason playing across state lines turns on where you stand rather than where servers live.
Tribal Lands and Horse Racing
Subparagraph (C) supplies a parallel intratribal exemption for wagering conducted exclusively within the Indian lands of a single tribe, or between tribes, where a tribal ordinance or a Tribal-State compact authorizes it and comparable safeguards apply. That provision interlocks with tribal gaming law, and it is the doorway Maine’s Wabanaki Nations are walking through. Subparagraph (D) excludes activity permitted under the Interstate Horseracing Act and attaches a sense-of-Congress statement declining to resolve how that act interacts with other federal gambling statutes. Congress punted deliberately, and the punt is written into the code.
The rest of the federal statute set
UIGEA only makes sense next to the laws it borrows from and the one it deliberately left alone.
What Congress Decided Was Not a Bet at All
Before you reach the question of unlawful gambling, an activity has to clear the definition of a bet or wager.
Section 5362(1) defines a “bet or wager” as staking something of value on the outcome of a contest of others, a sporting event, or a game subject to chance. Blackjack for money sits squarely inside that. Subparagraph (E) then excludes several activities entirely: transactions governed by the securities laws; commodity exchange transactions, over-the-counter derivatives and swaps; contracts of indemnity, guarantee and insurance; bank deposit products that produce a return; and participation in a qualifying fantasy or simulation sports game.
The Fantasy Sports Conditions
The carve-out at 5362(1)(E)(ix) is narrow on its face and became one of the most consequential paragraphs in modern American gambling law. It applies only where a fantasy team is not based on the current membership of an actual real-world team, and where three conditions hold.
Prizes fixed in advance
All prizes and awards are established and made known to participants in advance, and their value is not determined by the number of participants or the fees paid.
Skill across multiple events
All winning outcomes reflect the relative knowledge and skill of the participants and are determined predominantly by accumulated statistical results of the performance of individuals in multiple real-world sporting events.
No single-team or single-performance outcome
No winning outcome is based on the score, point spread or performance of any single real-world team or combination of teams, or solely on any single performance of an individual athlete in a single real-world event.
Daily fantasy operators built an industry on the argument that their contests satisfied all three, a claim several state attorneys general contested vigorously. Note the asymmetry: Congress wrote an explicit safe harbor for one form of skill-based wagering and nothing comparable for card play, even though blackjack strategy is measurably a skill. The same asymmetry runs through current arguments over sweepstakes models, covered in the comparison of social, sweepstakes and real-money play.
Regulation GG: What Banks Were Told to Do
This is the machinery behind a declined offshore deposit. The rule is aimed at your bank, not at you.
31 U.S.C. 5364 directed the Treasury Department and the Federal Reserve Board, in consultation with the attorney general, to write implementing rules within 270 days of enactment, a deadline landing in July 2007. The joint final rule did not arrive until November 2008. Treasury codified it at 31 CFR Part 132; the Fed codified identical text at 12 CFR Part 233, where it carries the name Regulation GG.
November 2008
The joint final rule arrives, roughly 16 months after the statutory deadline of July 2007.
Jan. 19, 2009
The rule takes effect, with a compliance date set for Dec. 1, 2009.
June 1, 2010
Compliance slips six months. Banks and card networks told regulators the rule was unworkable, because no reliable method existed to separate a lawful intrastate wager from an unlawful one at the moment of authorization. The agencies moved the date without touching the obligation.
The Federal Reserve maintains a compliance guide for Regulation GG, and the FDIC circulated an overview for insured institutions.
The Five Designated Payment Systems
Section 233.3 designates five systems capable of carrying a restricted transaction.
- Automated clearing house systems.
- Card systems.
- Check collection systems.
- Money transmitting businesses where funds move and the transaction can be initiated remotely.
- Wire transfer systems.
Who Carries the Burden and Who Is Exempt
Section 233.4 exempts most participants and leaves the obligation with whichever party can actually see the counterparty.
| Payment system | Who is not exempt |
|---|---|
| Check collection | The depositary bank |
| Wire transfers | The beneficiary’s bank |
| ACH credits | The receiving institution and its processor |
| ACH debits | The originating institution and its processor |
| Inbound foreign debits | The gateway operator |
| Card systems | The operator, the issuer, the merchant acquirer and third-party processors |
Section 233.5 requires non-exempt participants to implement written policies reasonably designed to identify and block restricted transactions, and Section 233.6 gives non-exclusive examples. For most systems the expected approach is commercial due diligence at account opening: ask the business customer whether it engages in internet gambling, obtain certifications, reserve a right to terminate. Consumer accounts are not the focus. For card systems the expected approach is transaction coding.
Coding, Blocking and the Declined Deposit
Card networks classify merchants with a four-digit merchant category code, and gambling merchants fall under MCC 7995. Once Regulation GG landed, issuers gained a mechanical way to comply: refuse authorization on 7995 transactions that cannot be established as lawful. Verifying lawfulness at authorization is hard, so most large US issuers decline the code outright, or decline it unless the acquirer has flagged the merchant as a licensed operator in a regulated state. That is the machinery behind a failed offshore deposit. Your card was not declined because you did something criminal, but because a rule aimed at your bank made approving that code the risky choice.
Two details that matter to players
Section 5364 contains a safe harbor: anyone who blocks a transaction that is, or is reasonably believed to be, a restricted transaction is not liable to any party for doing so, so a wrongly killed payment leaves you no cause of action against your bank. And the moment a processor answers blocking by disguising a gambling payment as something else, the conduct stops being a payments-rule violation and becomes fraud. That shift turned a regulatory problem into a criminal case.
Deposits, geolocation and the checks you meet
Everything a licensed casino app asks you to prove traces back to the carve-out and the rule described above.
Black Friday and What Was Really Charged
The folk version says UIGEA shut down online poker. The charging documents say something more specific.
On April 15, 2011, the US attorney for the Southern District of New York unsealed an indictment against 11 people connected to PokerStars, Full Tilt Poker and Absolute Poker, alongside a civil money laundering and forfeiture complaint seeking $3 billion. Five domains were seized, and the FBI’s New York office reported roughly 76 bank accounts in 14 countries restrained. PokerStars recovered its domain five days later solely to process player withdrawals.
The Justice Department’s announcement was headlined bank fraud, illegal gambling offenses and laundering billions in gambling proceeds. Prosecutors alleged the companies answered the 2010 blocking regime by disguising gambling payments as purchases of golf balls, jewelry and pet supplies through shell merchants, and by arranging an investment in a small Utah bank, SunFirst, to secure a cooperative processing channel.
The Counts in the Superseding Indictment
| Counts | Charge | Statutory maximum |
|---|---|---|
| One | Conspiracy to violate UIGEA | Five years |
| Two through four | Substantive UIGEA violations, 31 U.S.C. 5363 | Five years each |
| Five through seven | Operating an illegal gambling business, 18 U.S.C. 1955 | Five years each |
| Eight | Conspiracy to commit bank fraud and wire fraud, 18 U.S.C. 1349 | 30 years |
| Nine | Money laundering conspiracy | 20 years |
Look at where the weight sits. Gambling counts carried five-year maximums; the fraud conspiracy carried 30 years and the laundering conspiracy 20. Prosecutors’ leverage came from theories that existed only because of what defendants did to get around payment blocking, not because of the card games. The counts under 18 U.S.C. 1955 likewise depended on an underlying state law violation, the same borrowed-illegality structure UIGEA uses.
How the Cases Ended
The resolutions were far softer than the headlines suggested. A payment processing intermediary pleaded guilty in May 2011 and cooperated. Absolute Poker’s payment processing director pleaded guilty that December and received 14 months. Processor Ira Rubin drew three years. John Campos, SunFirst’s vice chairman and part owner, pleaded guilty in March 2012 and was sentenced to three months. Full Tilt chief executive Ray Bitar surrendered in July 2012 and pleaded guilty and was sentenced in April 2013.
On July 31, 2012, the government announced a $731 million settlement: PokerStars forfeited $547 million to the United States and agreed to reimburse roughly $184 million owed by Full Tilt to non-US players, acquiring Full Tilt’s assets in the process. US player balances were later returned through a claims process the Justice Department still documents publicly.
Not one customer was charged
The founder’s case is the most telling data point of all. Isai Scheinberg stayed outside the United States for nearly nine years, surrendered in January 2020, and in September 2020 was sentenced to time served and a $30,000 fine, with the bank fraud and money laundering charges dropped in the plea. The man at the center of the largest internet gambling prosecution in American history served no prison time. And across 11 defendants, five seized domains and $3 billion in claimed forfeiture, not one customer was charged with anything.
Penalties on Paper and in Practice
Three sections carry the consequences, and all three of them are pointed at businesses.
Section 5366: criminal exposure
A fine under Title 18, imprisonment of not more than five years, or both. On conviction, a court may enter a permanent injunction barring the defendant from placing, receiving or making bets, or from sending information that assists in placing bets.
Section 5365: civil remedies
The attorney general, and state attorneys general where restricted transactions occur, may seek restraining orders and preliminary or permanent injunctions. Relief against interactive computer service providers is deliberately constrained: a court may order removal or disabling of access only for sites on servers the provider controls, only after notice, and only where the order names the specific site or hyperlink. Providers have no duty to monitor.
Section 5367: the closed loophole
A financial transaction provider, interactive computer service or telecommunications service may be liable if it has actual knowledge and control of bets and also operates or directs a website where unlawful bets are placed, or owns or is owned by someone who does. You cannot escape the statute by calling your casino a payment company.
The full text of Section 5365 and Section 5367 is public.
Who has actually been prosecuted
Operators, their executives and their payment processors. No bank has faced criminal charges under 5363, and no individual gambler has, in the two decades the statute has existed.
What This Means for a Blackjack Player Today
Two very different experiences, both produced by the same payments rule.
Inside a Regulated State
The exemption applies and nothing is blocked
If you are physically in New Jersey, Pennsylvania, Michigan, West Virginia, Connecticut, Delaware or Rhode Island and you play at a state-licensed casino app, the intrastate exemption applies and your deposit is simply not a restricted transaction. Nothing in Regulation GG asks your bank to block it. That is why cards, ACH transfers, PayPal and casino cage deposits function normally at licensed operators.
Maine authorized online casino gaming through its Wabanaki Nations in 2025, but as of late August 2026 rulemaking and licensing were still in progress with no launch date set, so treat Maine as authorized but not yet live. Nevada permits online poker only and has never licensed online casino blackjack. The real money blackjack guide covers how deposits and payouts work at licensed sites.
Offshore: Declines, Crypto and Friction
Outside those states the picture inverts
An offshore casino coded 7995 hit with a US-issued card is exactly the transaction Regulation GG asks issuers to catch, so declines are routine and unpredictable. A deposit that works in March may fail in June because an issuer tightened its rules. Some issuers process the attempt as a cash advance, triggering a fee and interest from day one even when the charge later reverses.
Cryptocurrency became the standard workaround for a structural reason rather than a marketing one. A wallet-to-wallet transfer touches none of the five designated payment systems, because no financial institution acts as payor or intermediary. The fiat on-ramp is a different story: the exchange where you buy the coin is a money transmitting business, sits squarely within Regulation GG, and applies its own account restrictions. Friction moves rather than disappears, and returns at withdrawal when you convert back.
Offshore players also lose recourse. In a regulated state, a disputed withdrawal goes to a licensing authority with subpoena power. Offshore, the operator is the last word. That gap, not federal payment law, is the strongest practical argument in the offshore versus licensed comparison, compounded by how little most offshore licenses require. Either way, winnings remain reportable income, as the guide to taxes on blackjack winnings explains.
What happens after the deposit clears
Payment law decides whether your money moves. These pages decide what you can do when something goes wrong.
Myths This Statute Keeps Generating
Five claims that circulate constantly, set against what the sections actually say.
| What people say | What the law says |
|---|---|
| UIGEA made online gambling illegal in the United States. | It made accepting certain payments for already-unlawful gambling illegal. Section 5361(b) says it changes no gambling law. |
| I could be prosecuted for depositing at an offshore casino. | Not under this subchapter. Section 5363 binds businesses that accept payment. State law is a separate question. |
| Black Friday was a UIGEA prosecution. | The UIGEA counts carried five-year maximums. The fraud and laundering conspiracy counts carried 30 and 20 years and drove the case. |
| My bank blocked my deposit, so I broke the law. | Your bank followed a rule aimed at it, and Section 5364 shields it from liability for blocking. |
| UIGEA stopped states from legalizing online casinos. | The intrastate exemption at 5362(10)(B) is what let regulated markets open at all. |
How This Page Was Checked
Federal law moves slowly. State law does not, so verify your own jurisdiction before you play.
Statutory citations, the Regulation GG timeline and the enforcement history above were checked against primary sources on Aug. 25, 2026. State law moves far faster than federal law, so confirm your own jurisdiction’s position on the relevant state page before you play, and treat this as background rather than counsel from an attorney.
If the money side has stopped feeling like a game
Dialing 1-800-MY-RESET reaches a confidential counselor. On a keypad that is 1-800-697-3738.
Keep reading
The rest of the legal library, plus the pages readers land on next after this one.
Reviewed and updated Aug. 25, 2026. Statutory text checked against 31 U.S.C. 5361 to 5367 and 12 CFR Part 233.
