Bank Negara Malaysia did not ban gambling. It banned the payment rail. The distinction matters, because the market reaction to the credit card block reveals something regulators already suspected but are now forced to confront: the demand for illegal gambling in Malaysia is not tethered to any single payment method. Cut one rail, and the money finds another.
The Ban and How It Works
The mechanism is technical, and that technicality is precisely where the enforcement gap begins. Bank Negara Malaysia issued guidelines requiring credit card issuers to block or reject transactions used for illegal activities, including illegal online gambling. The blocking relies on merchant category codes — four-digit classifications that identify a merchant’s business type. Gambling-related MCCs include 7801 (Internet Gambling), 7995 (Betting, Lottery Tickets, Casino Gaming Chips), and 3676 (Monte Carlo Hotel & Casino).
The directive applies to conventional and Islamic credit cards. For Islamic cards, the restriction is even broader: Shariah-compliant cards cannot be used at merchants that are non-compliant with Shariah principles, which includes gambling. Major issuers like Maybank have published MCC blocking lists that explicitly include online gambling codes.
On paper, the logic is straightforward: if the card cannot be used, the gambling cannot be funded. In practice, the card was never the only funding route.
The Immediate Reaction: The Rail Switch
The first market reaction was not a reduction in gambling activity. It was a migration. Players moved to payment methods that were faster, harder to monitor, and often outside the formal banking system’s automated fraud detection.
The primary beneficiaries were e-wallets: Touch ‘n Go eWallet, GrabPay, Boost, ShopeePay, and Maybank’s MAE. E-wallets function as stored-value accounts. A user moves ringgit from a bank account into the app, then spends from that balance. The registration process is fast — sometimes requiring only two steps: creating an account and confirming identity electronically through e-KYC. Some platforms permit users as young as 12, as well as foreigners and UNHCR cardholders, subject to identity verification. A single e-wallet transaction can reach RM5,000.
The second beneficiary was instant bank transfers. FPX, operated by PayNet, is the dominant online bank-transfer standard in Malaysia. It is the core deposit rail for offshore gambling operators, who reach it through payment aggregators. FPX transactions are final: there is no chargeback mechanism, and no recall button. DuitNow, the national instant transfer scheme, is similarly irreversible and operates 24 hours a day. The combination of FPX and DuitNow effectively replaced the credit card as the primary deposit rail for the illegal market.
The third was cryptocurrency, primarily stablecoins like USDT. Crypto transfers are final, cross-border, and outside the banking system entirely. For operators targeting Malaysian players from offshore jurisdictions, crypto offers a settlement layer that does not depend on any domestic financial institution.
The Enforcement Gap: MCC Codes Were Never Built for This
The credit card ban exposes a deeper problem: the classification system that regulators rely on to detect gambling transactions was not designed to catch them.
MCC codes were created for interchange fee routing, not behavioural intelligence. Digital wallets and payment intermediaries often sit under broad financial services codes — MCC 6012, for example — which masks the fact that they are being used as intermediaries to fund betting accounts. A transaction can land in a bank’s system coded as a generic financial services payment, when what it actually is, as one industry analysis describes it, is “a wallet top-up that gets funnelled into an online casino two hours later.”
The consequence is that a bank can block a direct credit card transaction to a merchant coded 7995, but it cannot easily block the same money flowing through an e-wallet coded 6012, even when the end use is gambling. The credit card ban therefore creates a false sense of enforcement. It closes the most visible rail while leaving the most used rail — the one routed through e-wallets and instant transfers — largely unmonitored at the point of transaction.
The E-Wallet Problem
E-wallets are not designed for gambling. But their architecture makes them exceptionally well-suited for it, and the market reaction has exploited every one of those features.
Criminology and border security specialist Dr Zalmizy Hussin of Universiti Utara Malaysia explained to Utusan Malaysia that e-wallets are “safer” for gambling syndicates than bank accounts because bank systems have automated fraud detection that can send alerts or temporarily freeze accounts when suspicious transactions are detected. E-wallets allow users to top up cash at convenience stores, petrol stations, and other retail points, then make repeated purchases of gambling credits without triggering those alerts. Winnings can be loaded back into the wallet and moved in small amounts, making the financial trail harder to follow.
The “layering” method is deliberate. Cash is converted to an e-wallet balance, used to purchase gambling credits or crypto assets, and then the proceeds are loaded back and moved in fragments. Transactions can occur 24 hours a day, and high-value transfers can be broken into smaller units to evade monitoring thresholds.
The enforcement response has been reactive. In May 2024, the Royal Malaysia Police froze 150 “mule” accounts worth RM32 million linked to a large gambling syndicate. But freezing accounts after the fact is not the same as preventing the flow.
The Meta Dimension
The credit card ban also collided with the platform economy. Communications Minister Fahmi Fadzil has repeatedly criticised Meta for failing to block credit card accounts used to purchase illegal gambling advertisements on Facebook, even though Meta knows such content is illegal in Malaysia. “If a gambling ad is paid for using a credit card and Facebook knows this content is illegal in Malaysia, they should block the account,” Fahmi said. “But Facebook has refused to do so.”
The standoff illustrates a structural limitation of the credit card ban. The ban is enforced by Malaysian card issuers, but the platforms that host and monetise gambling advertising operate globally. Meta’s own gambling advertising policy states that advertisers authorised for a single jurisdiction may target “any jurisdiction where they are licensed or lawfully permitted, with the exception of unsupported markets” — and Malaysia is classified as an unsupported market. Yet Meta adds that it “is not responsible for how authorised ad accounts comply with local gambling laws and regulations”.
In other words, the platform polices the content, but not the payment behind the content. The credit card ban polices the payment, but not the platform. The gap between the two is where the market reaction happened.
What the Government Is Doing Next
The government’s response has moved from payment-rail enforcement to legislative expansion. Deputy Prime Minister Fadillah Yusof confirmed in February 2026 that a new bill is being drafted to strengthen enforcement against illegal online gambling. The bill would either be a standalone act or an amendment to the Common Gaming Houses Act 1953, and it would broaden police powers to freeze bank accounts associated with illegal operations.
Bank Negara Malaysia has also tightened its oversight of e-money issuers. Its updated e-money policy document introduced a four-tier classification system for issuers, with higher tiers subject to stricter oversight, and a Technology Risk Policy Document set stricter standards for payment service providers, including non-bank e-wallet issuers and merchant acquirers.
The direction is clear: the government is trying to close the gap that the credit card ban exposed. But the market reaction has already demonstrated that demand is more mobile than regulation. The credit card was cut off in the name of enforcement. The money simply moved to the next rail.
FAQ
What is Malaysia’s credit card gambling ban?
It is a Bank Negara Malaysia guideline requiring credit card issuers to block or reject transactions used for illegal activities, including online gambling, using merchant category codes (MCCs) such as 7801 and 7995.
Why did players switch to e-wallets after the credit card ban?
E-wallets offer fast registration through e-KYC, transaction limits of up to RM5,000, and less automated fraud detection than bank accounts. They can be topped up at retail outlets and used repeatedly without triggering the alerts that bank systems generate.
Can e-wallet transactions be reversed?
No. E-wallet transfers and FPX/DuitNow bank transfers are final. There is no chargeback mechanism like there is with credit cards. Once the money is transferred, recovery depends on the recipient’s cooperation.
What is the MCC code problem?
MCC codes were designed for interchange fee routing, not behavioural detection. Digital wallets often sit under broad financial services codes like 6012, which masks the fact that they are being used to fund gambling accounts. This limits the effectiveness of MCC-based blocking.
What is the government doing about the payment shift?
The government is drafting a new anti-online gambling bill to expand police powers, including the ability to freeze bank accounts linked to illegal operations. Bank Negara Malaysia has also tightened oversight of e-money issuers and payment service providers.
Has Facebook blocked credit card payments for gambling ads?
No. Communications Minister Fahmi Fadzil has said Meta has refused to block credit card accounts used to purchase illegal gambling advertisements on Facebook, despite knowing the content is illegal in Malaysia.
Sources
- Bank Negara Malaysia — Guidelines requiring credit card issuers to block illegal gambling transactions via MCC codes. Cited in Shariah Law resources and Maybank cardholder documentation.
- Maybank — Card prohibited MCC list, including codes 7800, 7801, and related gambling categories.
- Gaming Compliance News — “Malaysia to confront Meta over iGaming ads,” September 16, 2025. Fahmi Fadzil statements on Meta and credit card accounts.
- Utusan Malaysia — “E-dompet lubuk transaksi haram,” August 15, 2026. Dr Zalmizy Hussin interview on e-wallet layering and syndicate methods.
- iGaming Payment Solutions — “Malaysia iGaming Payments 2026: FPX, Rules and the PSPs That Deliver,” October 10, 2026. FPX dominance and MCMC enforcement data.
- Pokokpedia — “马来西亚线上赌场支付方式完全解析,” June 2026. FPX, DuitNow, e-wallet, and card payment mechanics.
- LinkedIn / Danny Leong — “Identifying Gambling Transactions in Digital Banking,” July 2026. MCC code limitations and digital wallet masking.
- iGaming Expert — “Could Malaysia tighten its gambling framework even further?” February 20, 2026. Draft bill context.
- GamblingMaps.org — “Malaysia Online Betting Laws: Winnings Tax & Safe Platforms,” June 18, 2026. February 2026 bill announcement.
