Casino bonus codes in Australia, 2026: what the marketing actually says, and what the regulator keeps blocking

A casino bonus code in Australia, in 2026, almost always belongs to an offshore site that the ACMA has formally warned, blocked or both. The code itself is a string of letters and numbers that the player types into a sign-up box, a cashier field or a promotional banner, and what it does at the issuing site is mechanical: it tags the account to a particular offer. What it does for an Australian player is something else again. There is no licensed Australian online casino to attach a code to, and the Interactive Gambling Act 2001 still treats the offer of casino games to a person physically in Australia as a prohibited interactive gambling service. Every casino bonus code sold to an Australian punter, in 2026, runs on an unlicensed site that the regulator has been working through for years. Casino bonus codes in Australia, 2026 — More on this topic at casino signup .

This page addresses the topic through the regulator’s lens. The bonus-code mechanics are explained to help readers evaluate the offers they see. The ACMA record is set out to directly address the underlying question. Eleven brands named by the ACMA are compared in the block below, along with the regulator’s blocking rate since 2019.

Data current as of 20 October 2026; licence claims and ACMA actions verified against the Australian Communications and Media Authority’s published register.

How a casino bonus code actually works at the site that issues it

A casino bonus code is a short string, sometimes called a promo code, a voucher code or a “coupon”. What it does at the issuing site is unglamorous. It is a lookup key in the site’s promotional engine: when the player types it in, the engine returns the offer that the key maps to, and ties that offer to the player’s account. The same site can run a dozen different offers at once, and the code is the way it routes a given player to a given one. That is the whole job.

There are three common shapes for what the code unlocks. A match-deposit bonus pays the site a percentage of whatever the player deposits, credited as bonus funds, with the match and the cap set by the offer. A no-deposit bonus credits a small amount of bonus funds, or a handful of free spins, without a deposit at all, and is the shape most likely to be advertised behind a banner that targets new sign-ups. Free spins, often bundled into either of the above, attach to a named slot or to a short list and run at a fixed stake per spin. What the code is not is anything the player needs to win. It is a routing instruction, not a multiplier.

There is a fourth shape that sits underneath these three, and it is the one most worth understanding for an Australian reader, because it is the one the ACMA keeps naming. A “no deposit” offer, advertised as something for nothing, sits at the front of the offshore sign-up funnel for the simple reason that it costs the player nothing to start, and once the player has an account the site has a channel to keep marketing into. The bonus code is the entry point to that channel. The wagering requirements that come after it are what the channel is actually selling.

What changes between sites is the small print, not the shape. A match-deposit at one operator might credit 100% up to a cap with a 40-times wagering requirement; at another it might credit 200% up to a smaller cap with a 50-times requirement. The bonus code routes the player to whichever of these the site is currently running, and a different code on the same site might route to a different one. The terms attached to the offer are the actual product; the code is just the door.

What usually sits inside the bonus-code terms, and where the reader pays

The marketing word on the front of a casino bonus code is the part that is easy to find. The mechanics underneath it are where the reader pays, and they are roughly the same shape from site to site. There are three of them, and each one costs the player in a different way.

Wagering requirements are the multiplier applied to the bonus, or sometimes to the bonus plus the deposit, before any winnings can be withdrawn. A 40-times wagering requirement on a A$100 bonus means A$4,000 of betting before the bonus funds convert to withdrawable cash. A 40-times requirement on a A$100 bonus plus a A$100 deposit means A$8,000. The distinction is not pedantic. On most slots, where the house edge runs at a few percent, A$4,000 of wagering loses on average a few hundred dollars; A$8,000 loses on average more. The same offer, written two ways, is two different products.

Game contribution rules are how much of each bet counts toward the wagering requirement. Slots almost always count 100%. Table games, where the house edge is lower, often count 10% or are excluded entirely. A bonus unlocked by a code that the player wants to use at blackjack is a different offer from the same bonus unlocked for slots, and the reader pays the difference in time, not in dollars. The wagering meter ticks at one tenth the speed; clearing the requirement takes ten times as long.

Maximum cashout caps and expiry windows are the third mechanism, and they are the one most often missed. A free-spin offer might cap withdrawable winnings at a small multiple of the winnings themselves, so a lucky run still converts to a fixed dollar figure rather than the full balance. Bonus funds often expire in seven to thirty days; if the wagering requirement is not cleared by then, the bonus and anything earned from it are removed. Both of these are stated in the site’s terms; neither is on the banner that carried the code.

This is what a casino bonus code actually unlocks, in the Australian-offshore context. It unlocks an offer with these terms attached, and the offer is administered by a site that has no Australian licence, no Australian complaints body and no obligation to honour any of the terms once the site is blocked or the operator changes name. The marketing word on the front and the small print on the back are, deliberately, two different products.

Paying in and getting paid out: the Australian rails and the bank-side blocks

The payments shelf sits at the centre of any honest take on offshore casino bonus codes, because the rail a reader would use is the rail the regulator and the banks have spent the last few years tightening. Australian players at offshore sites are paying and withdrawing through systems that are designed for the licensed Australian wagering market, and most of those systems have either a direct block, an indirect block or a warning sign on them by 2026.

PayID and Osko are the rails that move money fastest. An Osko transfer between participating Australian banks arrives in under a minute, twenty-four hours a day, seven days a week, and over a hundred Australian financial institutions are signed up to PayID as a way to address the transfer. The holder of the PayID sees the recipient’s name before sending the money, and AP+ itself warns that being asked to send a PayID payment to an illegal gambling site almost certainly means a scam. Both rails are the natural choice for an Australian punter at an offshore site, and that is exactly why the regulator’s warning is on them: the frictionless Australian rail is being used, in volume, to fund sites the regulator has asked to be blocked.

Direct bank transfer and debit card are the rails that the banks themselves have started to interdict. Westpac’s gambling block refuses authorisation of any transaction registered under the merchant category code for betting and casino gambling, on eligible personal credit and debit cards. ANZ runs a parallel block, switchable through the ANZ app, that also catches gambling transactions run through a linked digital wallet like Apple Pay on the same card. Removing ANZ’s block is itself delayed by 48 hours, and the bank is plain that not all gambling transactions are blocked and some non-gambling transactions can be blocked in error. Commonwealth Bank runs the same kind of lock, accessible through the CommBank app, with the same “cannot guarantee all gambling-related purchases will be stopped” caveat. Three of the four major banks, in other words, have built a switch and told customers it is not perfect.

The credit-card ban is the part that is statute rather than bank policy. Under the Interactive Gambling Act 2001 as amended in 2023, Australian-licensed online wagering services cannot accept payment by credit card or other credit-related products, with operator penalties of up to A$247,500. The restriction also constrains gambling use of digital wallets like Apple Pay that draw on a credit line. What is left, for the licensed market, is debit card, bank transfer, PayID, Osko and BPAY. An offshore casino asking for a credit card or a crypto deposit is, in addition to being unlicensed, asking through a payment channel the Australian rules explicitly close off. Crypto is not even on the licensed list at all.

AUSTRAC’s threshold-transaction-report rule applies only to physical cash, not to electronic bank transfers, so the size of a transfer by itself does not draw a report. A transfer of A$10,000 or more by PayID, Osko or BPAY moves without that reporting trigger. That is a feature of the rail, not a finding about the site; it is included here because the marketing around offshore sites sometimes gestures at “untraceable” payments, and the rail it is gesturing at is not what it sounds like.

What this means for a reader weighing a casino bonus code at an offshore site in 2026 is that the payment path itself has been narrowed. The frictionless instant transfer that makes the offer easy to claim is the same transfer the bank may decline, the wallet may decline, or the regulator may have warned is being routed to a scam. The bonus code is the door; the payment rail is the floor the door stands on, and the floor is uneven.

Bonus offers, free spins and the wagering math: how the same headline covers different products

The five shelves the research maps to this cluster all run into the same problem from different angles: the word “bonus” in a casino bonus code masks a small family of offers, and the family is wide enough that two offers with the same headline can be priced an order of magnitude apart.

A match-deposit bonus is the simplest of the family. The player deposits, the site credits a percentage of the deposit as bonus funds, and the player has to clear a wagering requirement before any winnings become withdrawable. What changes between offers is the percentage (commonly 50% to 200%), the cap (often a few hundred to a few thousand dollars), the wagering multiplier (commonly 30 to 50 times the bonus, sometimes the bonus plus the deposit) and the game-contribution map. Each of these is a lever, and each lever moves the price of the offer by a factor of two or more.

A no-deposit bonus is the same shape without the deposit. A small amount of bonus funds, or a handful of free spins, is credited at sign-up. The wagering requirement still applies; the cap on what can be withdrawn is usually tight, often a small multiple of the bonus itself. The cost to the player is mostly time: the no-deposit offer is the slowest to clear, because the stakes are low, the slots it covers are a short list, and the cap limits how much the wagering can grow into.

Free spins bundled into either of the above are sold as the most concrete part of the offer, because the player knows the slot and the stake per spin. A run of one hundred spins at A$0.20 each is A$20 of betting, and the winnings, if any, become bonus funds subject to the same wagering requirement as the rest of the offer. The free-spin run is rarely where the offer is won or lost. The wagering requirement on the winnings is.

What unifies the family is that the marketing line on a casino bonus code is almost always the lever the operator wants the player to notice, and the wagering requirement is the lever the operator would prefer the player not to. The same headline of “200% up to A$500”, one site with a 35-times wagering on bonus only and another with a 50-times on bonus plus deposit, are two offers whose expected cost to the player sits in a ratio of roughly 1.5 to 1, even though the headlines match. This is the comparison the bonus code obscures, and it is the one that matters.

A reader working through a casino bonus code in 2026 is therefore comparing two things at once. The first is the offer headline, which is what’s on the page. The second is the small print, which is what the headline costs. The gap between them is the operator’s margin, and the operator’s margin on the Australian-offshore segment of this market has been growing, in regulatory terms, for the entire period the ACMA has been issuing blocking requests.

How any shortlist of casino bonus codes is actually put together

The comparison shelf is where most pages on this topic earn or lose the reader’s trust, and the only honest way to build it is to set out what the criteria actually are, in the order they actually matter, before any ranking.

The first criterion is whether the site is licensed at all. In the Australian market in 2026, no online casino is. Every site that advertises a casino bonus code to a person in Australia is operating outside the Australian licensing regime, and the ACMA’s published register of formal warnings and blocked domains is the source for that fact, not for any judgement about the operator’s conduct beyond it. A shortlist that puts licensing first is not ranking sites; it is reporting the regulator’s record.

The second criterion is the ACMA’s own enforcement record against the operator. The ACMA has issued formal warnings to a long list of operators, and has asked Australian ISPs to block more than a thousand illegal gambling and affiliate marketing websites since the first blocking request in November 2019. A shortlist that names the ACMA action, the date and the operator is reporting the public record; a shortlist that ranks operators on a “trust score” or a “reputation index” is reporting something else, because the source for that score is not the regulator.

The third criterion, in descending order of importance, is the bonus terms themselves. The wagering multiplier, the game-contribution map, the maximum-cashout cap and the expiry window are all visible in the site’s terms. They vary by orders of magnitude. They are also the criteria that the marketing material around the code is least likely to surface.

The fourth criterion is the payment rail, and it cuts both ways. A site that accepts PayID or Osko is easier to fund from an Australian bank account, which is what most Australian players want, and it is also a site the regulator has been working to identify and block through the same rails. The reader pays the convenience in exposure.

Anything that sits below those four — game library size, theme of the welcome banner, “live dealer count”, number of slots by provider — is what the marketing wants the shortlist to rank on, and is the criterion the reader is least well served by. A shortlist built on those criteria is built on the operator’s promotional material, not on the regulator’s record.

This page’s own shortlist sits below, in the ACMA warnings block, and is built on the first three criteria only. It is not a ranking and it is not a recommendation. It is the regulator’s published list, set out so that a reader can see what the ACMA has actually said and when, and draw the rest of the picture themselves.

What it costs the regulator to keep up: the rate of formal warnings and blocks

The arithmetic on this page is the rate at which the ACMA has been adding to the blocked-sites list, against the time it has been doing so. By the report of 26 June 2026, the ACMA had asked Australian ISPs to block 1,751 illegal gambling and affiliate marketing websites since the first blocking request in November 2019, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017.

The simplest read of those two figures is the blocking rate itself. Over the roughly six-and-a-half years between November 2019 and June 2026, the 1,751 blocked sites work out to an average of around 270 blocks per year, or close to one working day of new entries. That is the rate at which the regulator has been adding to the list; it is the figure that the marketing line “the regulator can’t keep up” gestures at, and it is the figure the marketing line understates. The list has not been declining. New rounds of twelve or more sites at a time have continued to appear, and the same round reported on 26 June 2026 added 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz.com, Spinrise, Vinyl Casino and Wildsino to the count.

The exit side of the same arithmetic is harder to read. More than 230 unlicensed gambling services have left the Australian market since 2017, but the ACMA does not publish a breakdown of how many of those exits followed a blocking request, a formal warning or a quiet withdrawal after either. The figure is a measure of accumulated pressure rather than of any one enforcement lever, and the published record cannot tell the reader how many of those 230 were operators behind the bonus codes that Australian players had already redeemed.

What the arithmetic does say is that the system the ACMA runs is additive rather than reductive. New names appear faster than old ones leave, and the rate of appearance has not slowed down in a way that the published record supports. For a reader weighing a casino bonus code at an offshore site, the relevant feature of that rate is that the site the code unlocks in 2026 is, on average, newer than the site the same code would have unlocked two years ago. The list is growing, and the marketing is finding new sites to put the codes on as fast as the regulator finds the old ones to block.

The analysis above shows the blocking rate. The single figure — 270 blocks a year, with the caveat that the rate is itself an average and not a forecast — captures the gap between the marketing claim that the regulator is behind, and the regulator’s own record of what it has done.

ACMA formal warnings: the public record behind the offer

The ACMA’s formal-warning register is the only public record in Australia of an operator being told, in writing, that what it is doing is a contravention of the Interactive Gambling Act 2001. A formal warning is not a fine and it is not a prosecution, but it is the ACMA’s stated step before asking an ISP to block the site, and the published register is the basis on which this page’s comparison block is built. The eleven brands below are not a ranking. They are the brands the ACMA has named, in the order the plan routes them.

The first is RocketPlay. The ACMA issued a formal warning to Pulsup Ltd over Rocketplay.com.au in March 2026; Dama N.V., the earlier operator, was warned in May 2022 over the same brand. Both names appear in the register for the same reason: the site is offering prohibited interactive gambling services to people in Australia. The brand has been re-issued under a new corporate holder; the underlying product has not changed.

Level Up Casino was named in the May 2022 warning to Dama N.V. that covered six casino brands at once: Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos. Six names on one warning tells the reader something about how the operator was structured at that point; the operator’s own corporate reshuffles since then have not changed the ACMA’s record.

Woo Casino and Spirit Casino are the two Dama N.V. brands the ACMA came back to in 2025, with formal warnings in March and May respectively. The recurrence is the point. The same operator that the ACMA warned in 2022 was warned again in 2025 under the same Act, on the same kind of conduct, under different brand names.

National Casino and Bizzo Casino are both named in the July 2025 warning to Consolutetish S.R.L., and Bizzo Casino carries an earlier warning from 2022 to TechSolutions (CY) Group Limited and TechSolutions Group N.V. The corporate history of Bizzo is longer than most of the brands on this list; the ACMA’s record of warning it is correspondingly longer.

Ignition Casino was named in the same July 2025 round, with the warning issued to Bamboo Media. Instant Casino was named in a separate round, with the warning to EOD Code SRL issued in February 2025. Jackbit was named in the April 2026 warning to Ryker B.V., along with CasinOK; the operator is one of the most recently named on the register. Casino Intense was named in the April 2025 warning to Sterplay Holding Ltd. Sky Crown sits at the end of the list, named in the ACMA’s formal warning to Hollycorn N.V. that also covered Blue Leo; the date on the published record is September 2022.

What this block is for is to give the reader the ACMA’s own sequence, set out in the order the plan routes it, so the comparison above the prose is doing what comparison blocks should do: it is putting the same kind of record against the same kind of product, side by side. None of these operators is licensed to provide online casino games to a person in Australia. The warning register is what the ACMA has said about each of them, in the ACMA’s own words and on the ACMA’s own dates.

Comparison of operators the ACMA has warned

The block below sets out the brands named above against the ACMA’s record. The columns are the matters a reader weighing any of these offers would actually want set side by side: the brand, the ACMA action and date, the operator the ACMA named, and whether the research has any documented Australian-rails footprint for the subject. Cells where the research carries no record use an em dash; the gaps are the point.

What the table cannot say, and what the prose around it has to, is that none of the rows above is an endorsement. The list is the ACMA’s, not a ranking. The brands are presented in the order the plan routes, not in order of severity. The “Subject support” column carries the listings research could verify; the gaps in that column are not absences in the ACMA’s record, they are absences in the listings research could source. A reader working from this block should treat the ACMA action and date column as the primary record, and treat everything else as supporting context.

What’s licensable in Australia, and what is not

The legal frame around casino bonus codes in Australia is short enough to fit on one page, and that is part of the problem. The Interactive Gambling Act 2001, strengthened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies or in-play betting to a person in Australia. No state or territory licenses any of these. What is licensable is wagering on races and sport placed before the event, lotteries and keno; in practice, online bookmakers in this category are licensed in the Northern Territory, and 52 of them — including Sportsbet, Bet365 and Ladbrokes — sit under the Northern Territory Racing and Wagering Commission for tax reasons. The commission itself has no full-time staff and meets once a month in Darwin, a structural feature worth flagging for any reader who treats a Northern Territory licence as if it were a full regulatory regime.

The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026 and its advertising and inducement measures commence on 1 January 2027. On a page written in 2026, that is a law with a start date rather than a law in force. The casino bonus code itself, as an inducement to use a prohibited service, sits squarely in the scope of those measures once they commence; for now, the operative law is the Interactive Gambling Act 2001 as it stood before the 2026 reform.

The minimum age for any gambling product in Australia is 18. The individual player is not the target of the IGA; the Act targets the provider. That distinction is the reason an Australian reader cannot be prosecuted for using an offshore casino bonus code, and it is also the reason the offshore site can offer the code in the first place. The reader’s risk is not legal. The reader’s risk is that the offshore site, which has no Australian consumer protection, no complaints body and no obligation to honour any of the terms once the site is blocked or the operator changes name, can vanish with the balance.

The reader-side consumer protections are layered on top of the licensed market, and they do not extend to offshore. BetStop, the National Self-Exclusion Register, has been live since August 2023 and binds Australian-licensed online and phone wagering services; an offshore casino is not connected to it. The National Gambling Helpline on 1800 858 858 is free, twenty-four hours a day, and has a chat function at Gambling Help Online. Both are available to a reader regardless of which site they have been using, and both are the right place to start for any reader who is weighing an offer and finding the weighing harder than it should be.

What this means for a casino bonus code in Australia, in 2026, is that the legal answer and the consumer-protection answer are not the same. The legal answer is that the offer is prohibited at the supplier side and is not prosecuted at the player side. The consumer-protection answer is that there is no Australian consumer protection covering the offer at all. The reader pays the gap.

The payment picture behind the bonus code, set out end to end

The payment shelf is the one that most directly decides whether the reader can fund an offshore offer in the first place. Set out in one place, the Australian rails look like this.

PayID is the addressing layer on the New Payments Platform, the public-facing piece of which went live on 13 February 2018 and which over a hundred Australian financial institutions now participate in. Over 25 million PayID identifiers had been registered on the platform as of April 2025. A PayID payment shows the recipient’s name before the transfer is sent, and AP+ itself warns that being asked to transfer money to a PayID on an illegal gambling site almost certainly means a scam site.

Osko is the fast-transfer product on top of the same platform. An Osko transfer between participating Australian banks arrives in under a minute, twenty-four hours a day, including weekends, addressed either to a BSB and account number or to a PayID. The NPP’s service-level requirement is that monthly outages stay under two minutes; the platform’s owner, Australian Payments Plus, was formed in 2021 by merging NPP Australia with BPAY and eftpos under ACCC authorisation.

BPAY is the bill-payment service that has run in Australian online banking since 18 November 1997 and is available at over 140 banks and financial institutions and offered by over 95,000 businesses. The payer enters a Biller Code and a Customer Reference Number from the bill; the payment moves through the user’s own bank. BPAY is owned, via parent company Cardlink Services Limited, by Australia’s four major banks in equal shares, and is run by Australian Payments Plus.

Card payments are the rail the banks have started to interdict. Westpac’s gambling block refuses authorisation on the merchant category code for betting and casino gambling, on eligible personal credit and debit cards. ANZ’s block, activated in the ANZ app, covers gambling transactions on a linked digital wallet like Apple Pay on the same card, and removing the block has a 48-hour waiting period; the bank warns that not all gambling transactions are blocked and that some non-gambling transactions may be blocked in error. Commonwealth Bank runs a parallel lock, accessible through the CommBank app, with the same caveat. American Express sits outside the Reserve Bank’s July 2025 surcharge-ban proposal, which covers only eftpos, Mastercard and Visa, and Amex’s three-party network model is the structural reason.

Digital wallets run on top of these rails. Apple Pay, Google Pay and Samsung Pay accounted for around 45% of all card payments in Australia by number by the end of 2025. Apple does not charge consumer fees for using Apple Pay; any surcharge comes from the merchant’s own card-processing fees. Apple also states that limits and PIN requirements on Apple Pay purchases are set by the card issuer or merchant, not by Apple. The wallet is a routing layer, not a payment system, and the bank-side block on the underlying card still applies.

AUSTRAC’s threshold-transaction-report rule applies only to physical cash; ordinary electronic bank transfers are not subject to per-transaction reporting, regardless of amount. Crypto sits outside the licensed payment list altogether and is the channel the regulator’s enforcement has been narrowing through the bank and wallet side rather than through the asset side.

A reader weighing a casino bonus code at an offshore site is therefore working through a rail that the Australian banks have built switches to refuse, that the regulator has warned is being used to fund illegal sites, and that the IGA has closed off at the credit-card and crypto end. The bonus code is the offer; the rail is what the offer stands on.

The marketing claim and the small-print claim: what the reader is actually comparing

A casino bonus code, in the marketing on the front of the page, looks like an opportunity. The headline carries the match, the cap or the free-spin count, and a wagering requirement is named if it is named at all. What the marketing does not carry, and what the small print does, is the second half of the comparison: the wagering requirement on bonus only versus bonus plus deposit, the game-contribution map, the maximum-cashout cap and the expiry window.

Two offers with the same headline can sit on either side of a factor of two in expected cost. The same “200% up to A$500” with a 35-times wagering on bonus only and a 50-times wagering on bonus plus deposit is, on most slots with a house edge of a few percent, two offers whose expected cost differs by roughly a factor of 1.5. The reader is comparing the headline, not the small print. The operator is selling the headline.

What the ACMA record adds to the comparison is a different kind of clause entirely. The wagering requirement, the cap and the expiry are the operator’s terms. The blocking request, the formal warning and the corporate reshuffle are the regulator’s record. A reader weighing a casino bonus code in 2026 is weighing four things at once: the headline, the small print, the regulator’s record on the operator, and the rail the offer sits on. The page is for readers who want to weigh all four.

Responsible-gambling supports available in Australia

The responsible-gambling supports that are available to an Australian reader in 2026 are independent of which site the reader has been using. They are the supports the regulator and the licensed market put in place for any reader who needs them.

BetStop, the National Self-Exclusion Register, has been live since August 2023 and binds Australian-licensed online and phone wagering services. A reader can register for a set period or for life. The exclusion covers the licensed market; an offshore casino is not connected to BetStop, and the exclusion does not extend to those sites. A reader who has registered with BetStop and is still being marketed to by an offshore site is being marketed to outside the Australian regime, and the marketing itself is the conduct the ACMA acts against.

The National Gambling Helpline on 1800 858 858 is free, twenty-four hours a day, with a chat function at Gambling Help Online. Both are available to any reader, regardless of which site they have been using, and both are the right place to start for any reader who is weighing an offer and finding the weighing harder than it should be. State and territory self-exclusion registers sit alongside BetStop for land-based gambling.

The bank-side gambling blocks are a parallel layer of support. Westpac’s, ANZ’s and Commonwealth Bank’s gambling blocks, run through each bank’s app, are the reader’s switch for declining transactions on the gambling MCC at the card or wallet level. They are not perfect: the banks themselves warn that not all gambling transactions will be blocked and some non-gambling transactions may be blocked in error. They are also the lever the reader can pull without telling the bank why, and that is the lever’s value.

For an Australian reader in 2026 who has been approached with a casino bonus code at an offshore site, the supports are not a substitute for the IGA. They are the layer underneath it: the lever to refuse the next deposit, the line to call if the lever is not enough, and the register that the licensed market honours. The marketing around the code will not mention any of them. The reader’s decision is whether to use them before or after the offer.

H2 Gambling Capital’s 2026 estimate: how much the illegal segment costs

H2 Gambling Capital’s 2025 report puts Australians’ losses to illegal gambling sites at about A$3.9 billion a year, and puts the share of gambling going through legal channels at 64%, down from 74% in 2021. Both figures are estimates rather than audited totals, and both come from a single source.

What the figures carry for a reader weighing a casino bonus code in 2026 is the size of the segment the ACMA is enforcing against. A$3.9 billion is roughly A$150 per adult per year, on a population basis; the share going through legal channels falling from 74% to 64% over four years is a one-percentage-point-per-year drift toward the offshore segment. Neither figure is a forecast and neither is a guarantee of what the next year will look like.

What the figures do not carry is the reader’s own position. The estimate is a population figure; it averages over the people who lose nothing and the people who lose a lot. A reader who has been approached with a casino bonus code is not the average; the reader is the segment the average is built from. The marketing around the code treats the reader as the kind of person who redeems. The estimate does the same, on a larger scale. Neither is a substitute for the reader’s own decision.

The estimate is reported here because it is what the research carries. The reader’s own position is not something this page can report. The two are different quantities, and a reader who is weighing an offer is weighing the second, not the first.

Reading the ACMA’s record against an offer, in practice

A reader who has been approached with a casino bonus code and who wants to weigh the offer against the regulator’s record can do so without any further tools. The ACMA publishes its formal-warning register on its own site, with the operator, the date and the brand. The same register is the source for this page’s comparison block. A reader cross-checking any offer against it is checking the same source.

The first check is whether the brand is on the register. If it is, the offer is being made by a site the ACMA has formally warned, and the warning is the ACMA’s stated step before asking ISPs to block the site. If it is not, the offer is being made by a site the ACMA has not yet named; that is a description, not an endorsement.

The second check is the date. A formal warning in 2026 is a more recent signal than a formal warning in 2022, both because the ACMA has had more time to act since and because the operator has had more time to reshape the site. The site the reader sees in 2026 is not necessarily the site the ACMA warned in 2022.

The third check is the operator. A formal warning to one operator does not bind a different operator; the ACMA names the corporate holder in each warning. Two brands on the same operator’s register are two warnings, not one; two brands on different operators’ registers are the same kind of warning, with the corporate holder being the only thing that changes.

The fourth check is the rail. An offer funded through PayID, Osko, BPAY or a debit card is being funded through a rail that the bank may decline or that the regulator has warned about. An offer funded through credit card or crypto is being funded through a rail the IGA has closed off for the licensed market; an offshore site asking for either is asking outside the Australian rules on top of being unlicensed.

A reader running those four checks against a casino bonus code in 2026 has run the same checks this page’s comparison block is built on. The block is a faster way of doing the same thing; the check is the slower way of doing the same thing, and both reach the same record.

Frequently asked questions about casino bonus codes in Australia

What does a casino bonus code technically unlock at the site that issues it?

A casino bonus code is a lookup key in the issuing site’s promotional engine. When the player types it in, the engine returns the offer that the key maps to and ties that offer to the player’s account. The code itself does not change the odds, the house edge or the slot return; it routes the player to whichever of the site’s current offers the code is attached to, and the offer’s terms are what determine what the player actually gets.

Is it legal for an offshore casino site to advertise bonus codes to visitors in Australia?

No. Under the Interactive Gambling Act 2001 as strengthened in 2017, it is an offence to provide online casino games, online pokies or in-play betting to a person physically in Australia, and no state or territory licenses any of those products. The Act targets the provider, not the player, which is why an Australian reader cannot be prosecuted for using an offshore site. The site offering the code is operating outside the Australian licensing regime.

Do bonus codes typically expire, and how is that usually disclosed?

Yes, bonus codes and the offers attached to them almost always carry an expiry window. The window is usually stated in the offer’s terms rather than on the banner that carries the code, and it commonly runs from a few days to a month. The bonus funds, the wagering requirement and any winnings earned from the offer are typically forfeited at the end of the window, which is why the terms are the part of the offer the reader needs to read before claiming.

What wagering requirements are commonly attached to a bonus-code offer?

Wagering multipliers of 30 to 50 times the bonus, or sometimes the bonus plus the deposit, are the most common range across the offshore segment the ACMA has been acting against. The wagering requirement applies to the bonus funds and to any winnings earned from them, and only bets on slots (which usually count 100%) tick the meter at the stated rate. Table games often count 10% or are excluded, which makes clearing the requirement on those games considerably slower.

Can entering a bonus code change the minimum deposit an offshore site requires?

Sometimes. Some offers are gated behind a minimum deposit that differs from the site’s default, and a code attached to that offer will route the player to the higher or lower threshold. The minimum deposit for the offer is in the terms, not on the banner, and it is one of the clauses that is most often overlooked because the marketing line carries the match or the free-spin count rather than the floor. See also Casino promo codes in Australia in 2026 .

Why does the ACMA warn about offshore sites regardless of what bonus codes they advertise?

Because the ACMA acts on the conduct, not the marketing. Offering online casino games to a person in Australia is the conduct the Interactive Gambling Act 2001 prohibits, and the bonus code is the inducement into that conduct. The warning the ACMA issues names the operator and the brand, and the substance of the warning is that the conduct is a contravention of the Act. The advertising around the code is what brought the reader to the site; the warning is about the site itself.