Home  /  News  /  Payments & Risk
Payments & RiskJuly 13, 2025

Closed-Loop Redemption Failures: Lessons for iGaming Operators

Real operational incidents reveal how closed-loop redemption policies and card scheme rules create compliance and payment risks for iGaming operators.

Closed-Loop Redemption Failures: Lessons for iGaming Operators

Closed-loop redemption policies sit at the intersection of card scheme rules, AML obligations and player experience. When they are misunderstood or inconsistently applied, the consequences range from costly chargebacks and scheme fines to regulatory findings that can threaten a licence. Incidents logged across the industry in the past two years offer concrete lessons that every iGaming operator should embed into standard operating procedures before problems surface.

What Closed-Loop Redemption Actually Means in Practice

Closed-loop redemption is the principle that a player's winnings or refund must be returned through the same payment instrument and channel used to make the original deposit. Card schemes including Visa and Mastercard codify this in their acquiring rules. The practical implication is straightforward: if a player deposited via a Visa debit card, any refund or cashout below the deposited amount should, in the first instance, be credited back to that same card before an alternative withdrawal route is offered.

Where operators consistently get into trouble is in treating this as a suggestion rather than a contractual obligation enforced by the acquiring bank. Acquirers can and do pass scheme fines directly to operators when the rule is breached at scale.

Incident Patterns Seen Across the Industry

Incident One: The Expired Card Gap

One of the most common operational failures occurs when a player's original deposit card has expired or been replaced by the issuing bank. Without a documented policy covering this scenario, cashier teams often default to processing withdrawals via an alternative method, such as bank transfer or e-wallet, without obtaining the additional due-diligence documentation that AML frameworks require. Auditors reviewing transaction records have flagged this as a systematic gap, citing the absence of a clear decision tree for expired-card cases. The remediation required a full retrospective review of affected accounts and retraining of the payments team.

Incident Two: Bonus Balance Contamination

A mid-sized operator discovered that its platform was calculating refundable deposit amounts incorrectly when bonus funds were involved. The system was netting bonus balances against the deposit figure before determining the refundable amount, which produced a lower closed-loop return than the scheme rules required. When a player escalated a chargeback, the acquiring bank reviewed the operator's redemption logic and found it non-compliant. The resulting fine and remediation project consumed significantly more resource than the original engineering shortcut had saved.

Incident Three: Multi-Card Deposits and Proportional Splits

Players who fund accounts across multiple cards in the same session create a proportional-split problem. Operators without automated logic to track which card contributed what amount often collapse all deposits into a single cashout instruction, directed at the most recently used card. Card scheme guidelines require proportional distribution back to each card. Several operators have received compliance notices from acquirers specifically on this point, and at least one lost its preferred merchant category status as a result.

Key Policy Controls That Prevent These Failures

  • Maintain a real-time card-token register that records every deposit instrument, the amount contributed and the card status at the time of the withdrawal request.
  • Build a documented exception workflow for expired or cancelled cards that triggers enhanced due diligence before an alternative withdrawal route is approved.
  • Separate bonus balances from real-money deposit balances at the ledger level so that refund calculations are accurate and auditable.
  • Implement proportional-split logic for multi-card deposit sessions and test it regularly against scheme rule updates.
  • Schedule quarterly reviews of acquirer rule bulletins so that policy documents remain aligned with the current scheme requirements, not the version from two years ago.

The AML Dimension Operators Often Overlook

Closed-loop rules are not only a payment-scheme matter. They serve an explicit AML purpose: ensuring that funds return to a verified source and do not travel to an unconnected third party. When an operator circumvents closed-loop requirements, even for legitimate operational reasons, it may simultaneously breach its own AML policy and the requirements set by the licensing authority. MLRO sign-off on any exception to the closed-loop process is not optional; it is a governance requirement.

Closed-loop redemption is both a scheme obligation and an AML control. Treating it as only one of the two is where operational incidents begin.

What Operators Should Do This Quarter

The practical starting point is a gap analysis comparing current payment-system logic against the most recent version of the applicable scheme rules. This should include a test of the expired-card workflow, the bonus-balance calculation and the multi-card split. Findings should be reported to both the Head of Payments and the MLRO, with a remediation timeline that is realistic and documented. Acquirers are increasing the frequency of compliance audits in the iGaming vertical; operators that can demonstrate a proactive review programme are better positioned when those audits arrive.

FAQ

Frequently asked questions

What is a closed-loop redemption policy in iGaming payments?

A closed-loop redemption policy requires that any refund or withdrawal up to the value of a player's original deposit is returned to the same payment instrument used to fund the account. This rule is mandated by card schemes such as Visa and Mastercard and enforced through acquiring bank contracts. It exists to prevent funds from being redirected to unverified third-party accounts, serving both a payment compliance and an AML purpose. Operators that bypass it risk scheme fines, chargeback liability and regulatory scrutiny.

What happens when a player's deposit card has expired and a withdrawal is requested?

When a card has expired or been replaced, the closed-loop obligation does not automatically disappear. Operators must follow a documented exception process that typically requires enhanced due diligence before routing the withdrawal to an alternative method. Without such a process, the payment may breach card scheme rules and simultaneously create an AML gap because the funds are not returning to a verified source. Acquirers have issued compliance notices to operators that handle expired-card cases informally or inconsistently.

How do bonus balances affect closed-loop redemption calculations?

Bonus balances must be kept separate from real-money deposit balances at the ledger level. If a platform nets bonus funds against the deposit figure when calculating the refundable amount, the resulting closed-loop return may be lower than the scheme rules require. This miscalculation can be identified during acquirer audits and treated as a systemic compliance failure rather than a one-off error. Operators should test their bonus-balance separation logic regularly to ensure refund calculations are accurate and auditable.

What card scheme rule applies when a player has deposited using multiple cards in the same session?

Card scheme guidelines require that withdrawals be distributed proportionally back to each card that contributed funds in a session, not collapsed into a single payment directed at the most recently used card. Operators need automated logic that records the amount contributed by each card token and calculates the correct split at the point of withdrawal. Failure to implement proportional-split logic has led to compliance notices and, in documented cases, the loss of preferred merchant category status with acquiring banks.

Keep reading

Related articles

Show us one brand.
We will find the leaks.

Book a 30-minute teardown. We walk through one of your brands and show you exactly where revenue, retention or compliance is slipping, no obligation.