VPN-friendly casinos in Australia and what that label actually means in 2026

“VPN-friendly” is a phrase the offshore casino industry invented for itself. In Australia, no state or territory issues a licence for an online casino, so the entire category sits outside the country’s gambling framework. A VPN does not license the operator. It does not put the activity under Australian consumer law. It moves an IP address. That is the whole technical story — and the only one worth telling before a reader spends a dollar.

The data below is current as of 29 October 2026, cross-checked against the Australian Communications and Media Authority’s register of blocking actions and formal warnings.

Eleven offshore casinos the ACMA has warned — and the label they all share

The eleven brands below share one thing that the marketing copy about each one never mentions: every one of them has been the subject of a formal warning from the ACMA for offering prohibited interactive gambling services to Australians. They differ in their licence claims, in their payment menus, and in how loudly they advertise “VPN-friendly” as a feature. None of them is licensed to offer online casino games in Australia, and the ACMA’s position on that has not changed.

The point of listing them side by side is to show how thin the differences are once the prohibition is held up to them. The brands change; the legal status does not.

Two of the eleven — National Casino and Casino Intense — appear in sources that also reference Australian consumer-protection registries. The remaining brands do not surface in those listings at all, which means the marketing pages are the only place their payment menus, bonus terms, or VIP programmes can be inspected. Two operators recur across the warnings: Dama N.V. owns or has owned four of the brands in this set, and the same operator has been warned in three different calendar years.

Why “VPN-friendly” is the headline on every one of them

A casino cannot legally offer its product to an Australian customer. If it detects that the visitor is in Australia — by IP geolocation, by the phone’s timezone, by the bank’s country code on a deposit — it has to refuse the play, or it has to hide it. The first option loses the customer. The second is what “VPN-friendly” describes: a service that does not block the visitor who shows up with an IP from somewhere else.

The technical change is small. A VPN tunnels the player’s traffic through a server in a country the casino’s geolocation list accepts, then presents that exit-country IP to the casino’s web server. The casino sees a connection from, say, a server in Frankfurt or Reykjavík. It does not see the connection that originated in Sydney. The web server lets the session through, the deposit page loads, and the spin button works.

That is all the VPN does. It does not change the licence the operator holds. It does not change the small print. It does not change which dispute body exists if the operator refuses a withdrawal. It does not move the activity out of the reach of the Interactive Gambling Act. It moves an IP address.

What the ACMA does about that

The Australian Communications and Media Authority investigates complaints, issues formal warnings, and asks Australian internet service providers to block identified offshore sites. As of the round reported on 26 June 2026, a cumulative total of 1,751 illegal gambling and affiliate marketing websites had been blocked since the first blocking request in November 2019, and more than 230 unlicensed gambling services had left the Australian market since enforcement was strengthened in 2017. The most recent blocking round in that report named twelve sites: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz.com, Spinrise, Vinyl Casino and Wildsino.

Two things follow from those numbers. The first is that the ACMA’s blocking rate has been sustained for more than six years, and the round-to-round throughput is high enough that no single blocking event closes off the market. The second is that the cumulative block list does not, on its own, prevent a player who already knows the site from getting to it; it makes casual reach-through search harder and adds a friction the operator has to route around. The formal warning is the more serious instrument, because it names the operator as a person and gives them a chance to comply before further action.

The prohibition at the centre of the page

The Interactive Gambling Act 2001, as strengthened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies, or in-play betting to a person in Australia. No state or territory issues a licence for those products. What is licensable is wagering on races and sport placed before the event, lotteries, and keno.

The shape of that regime matters for a VPN-friendly page because the prohibition sits on the provider, not the player. The offshore casino is the entity the ACMA can act against. The individual punter is not prosecuted for placing a bet through a VPN tunnel — but they also gain nothing from Australian consumer law, no complaints body, and no recourse if a balance is held when the site is blocked.

The licensed wagering side, and why it is not the same market

The Northern Territory Racing and Wagering Commission regulates 52 of Australia’s online bookmakers, including Sportsbet, Bet365 and Ladbrokes, which are licensed in the Territory for tax reasons. The commission has no full-time staff and meets once a month in Darwin. Those operators are licensed for sports and race wagering, not for online casino games. The licence they hold is the reason their deposit routes — debit card, bank transfer, PayID, Osko, BPAY — are legal for an Australian customer to use. None of them can legally accept a credit card or a credit-related product for online wagering. None of them can legally accept digital currency. Those bans took effect on 11 June 2024, with operator penalties reaching A$247,500.

A reader who is weighing whether to use a VPN to reach an offshore casino is not weighing two licensed Australian options. They are weighing one licensed Australian option — sports and race wagering, under the IGA — against an unlicensed offshore option. That is the comparison the marketing tends to obscure.

The losses the offshore side is taking from Australians anyway

The 2025 report from H2 Gambling Capital estimates that Australians lose about A$3.9 billion a year to illegal gambling sites, and that the share of gambling going through legal channels fell from 74 per cent in 2021 to 64 per cent. The legal share is shrinking, not because legal wagering is contracting, but because the offshore pull is growing faster. The figure is a model estimate, not a measured total — H2 Gambling Capital’s methodology draws from regulator filings and observed payment flows — but it is the figure the regulator-cited reports run with.

A reader who treats VPN access as a workaround has to weigh that against the ACMA’s blocking rate. If 1,751 sites have been blocked in roughly six and a half years, that is about 270 sites a year on average, or roughly one blocking every business day. A site that is reachable today may not be reachable next month. A balance sitting on a blocked site is a balance that the operator still controls.

Where a VPN actually changes what the casino sees

A casino’s geolocation check is a stack, not a single signal. The bottom layer is the IP address — the public address of whatever network the visitor is using. A VPN replaces that with the address of the VPN’s exit server, and the casino’s IP geolocation database reports the country the exit server sits in. That is the layer a VPN handles well.

The layers above the IP are harder. The phone’s system clock and its reported timezone are not changed by the VPN. The browser’s language headers are not changed. If the player deposits from an Australian bank account, the bank country code on the transaction tells the casino where the money came from. If the player wins and the casino tries to send money back, the payout side sees the same bank country. A VPN helps with the front door. It does not help with anything the casino learns from the deposit or the payout.

That is the reason an offshore casino’s terms pages frequently reserve the right to ask for further verification, and frequently refuse withdrawals when the verification does not match the country the player claimed to be in. The marketing does not advertise that. The terms do.

The “VPN-friendly” claim and the “does not check” reality

A casino that advertises itself as “VPN-friendly” is making a smaller claim than it appears to. It is not promising that the player will not be detected. It is promising that it does not block connections from known VPN exit IPs at the front door. That is a different statement from “we cannot tell where you are from”, and it is a different statement from “we do not care where you are from”. A casino that does not check the IP at all is open to any visitor; a casino that allows VPN use is open to any visitor whose IP it cannot tie to Australia by its own list. The list updates. The visitor’s IP does not always keep up.

Six of the eleven brands in the ranking above carry no data on payment method coverage at all. Two carry data only from listings — not from the operators themselves. The casinos’ own pages on this subject are mostly silent, which is itself a piece of information: a brand that markets itself as VPN-friendly does not publish a list of payment methods that work cleanly from Australia, because it cannot, in writing, tie those methods to a country it has been warned not to serve.

Credit cards, digital wallets, and what an Australian bank does on its own

The credit card ban that applies to licensed Australian wagering is not the only friction an offshore casino faces from the Australian banking side. Westpac’s gambling block works at card level: it refuses authorisation of transactions registered under the merchant category code for betting and casino gambling on eligible personal credit and debit cards. ANZ’s gambling block, activated in the ANZ app, also blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, not just the physical card. Once turned on, removing ANZ’s block requires a 48-hour waiting period, and the bank warns that not all gambling transactions will be blocked and that some non-gambling transactions might be blocked in error. Commonwealth Bank offers a comparable lock on eligible cards through the CommBank app, with the same caveat that blocking cannot be guaranteed complete.

Apple Pay itself adds no surcharge — Apple does not charge consumers for using the wallet, and any fee is the merchant’s card-processing cost, not Apple’s. Apple Pay, Google Pay and Samsung Pay transactions together accounted for around 45 per cent of all card payments in Australia by number at the end of 2025. Transaction limits and PIN requirements on Apple Pay are set by the card issuer or the merchant, not by Apple. The block sits on the bank side: a player whose bank has flagged the merchant category code gets a decline regardless of which wallet fronts the tap.

The Reserve Bank of Australia’s July 2025 review proposes removing surcharges only on eftpos, Mastercard and Visa transactions, leaving American Express outside the scope of the proposed surcharge ban. American Express operates as a three-party scheme rather than Visa and Mastercard’s four-party network, and was issuing charge cards from 1 October 1958 — long before any of the digital wallets existed. None of that changes the IGA’s underlying position that an Australian-licensed wagering service cannot accept credit. It does explain why the surcharge conversation keeps Amex separate.

PayID, Osko and the named-account question

PayID sits at the top of the licensed Australian wagering deposit stack. Paying to a PayID shows the name of the account holder before the transfer is sent, and the operator of the PayID system warns that being asked to transfer money to a PayID on an illegal gambling site almost certainly means a scam site. PayID-based instant transfers are available at more than 100 Australian financial institutions. With Osko, a bank transfer between participating Australian banks arrives in under a minute, 24/7, whether addressed to a BSB and account number or to a PayID.

More than 25 million PayID identifiers were registered on Australia’s New Payments Platform as of April 2025. The platform became accessible to the public on 13 February 2018 and is owned by New Payments Platform Australia Ltd, whose 13 shareholders include the Reserve Bank of Australia and the country’s major banks. Participants must keep monthly outages to no more than two minutes, and in 2021 the ACCC authorised merging NPP Australia with BPAY and eftpos into a single company, Australian Payments Plus.

A site asking an Australian to deposit by PayID is doing two things at once. It is asking for a transfer from an account whose holder’s name the punter sees. It is creating a paper trail that points back to an Australian bank, in a currency the casino’s licence does not cover. That is not what a VPN-friendly marketing page describes, but it is what an Australian deposit looks like in practice.

BPAY and the limit of the bill-payment route

BPAY is a bill-payment service in online banking: the payer enters the Biller Code and the Customer Reference Number printed on the bill. BPAY has operated in Australia since 1997, is available in the online banking of more than 140 banks and financial institutions, and is offered by more than 95,000 businesses. It is run by Australian Payments Plus, the same operator as PayID and Osko, and was launched on 18 November 1997. It is owned equally by Australia’s four major banks via parent company Cardlink Services Limited. In September 2021 the ACCC authorised the merger of BPAY Group, eftpos and NPP Australia under the AP+ holding entity.

For an Australian-licensed wagering service, BPAY is one of the legal deposit routes. For an offshore casino, it is not a deposit route at all — the bill-payment infrastructure does not recognise an overseas biller in the IGA’s prohibited category. The presence of BPAY on an offshore casino’s payment page is itself a signal that the page is a marketing artefact rather than a working deposit option for an Australian customer.

Crypto and the threshold-report rule

AUSTRAC’s threshold-transaction-report rule requires reporting of transfers of A$10,000 or more, but only for physical cash. Ordinary electronic bank transfers are not subject to that per-transaction reporting requirement, regardless of the amount sent. Crypto sits in a separate category. The IGA’s 2024 amendments ban digital currency as a payment for licensed online wagering, alongside credit. An offshore casino that markets a crypto deposit is operating in the space the Australian rules have moved away from, not the space they permit.

That is also why “VPN-friendly crypto casino” appears in the supporting terms around this subject. The phrase is doing two jobs at once: it points at a payment method the licensed side will not process, and at an access method the ACMA has been blocking for six years. The combination is a marketing one. It is not a compliance one.

Player wellbeing and what an offshore casino cannot offer

A reader weighing VPN access is also weighing what they lose by stepping outside the Australian framework. The answer is most of the consumer protections the licensed side is built around.

BetStop and the offshore gap

BetStop, the National Self-Exclusion Register, has been live since August 2023. It binds Australian-licensed online and phone wagering services. An offshore casino is not connected to it. A punter who has excluded themselves through BetStop can still reach an offshore site through a VPN, deposit, and play, because the offshore operator has no obligation to honour an Australian self-exclusion register it is not part of.

That gap is the practical limit of every self-exclusion tool the licensed side offers. The exclusion follows the licence. The VPN-friendly casino has no licence to exclude against.

Where help is, when the help is wanted

The National Gambling Helpline is 1800 858 858. It is free, 24/7, and there is a chat service at Gambling Help Online. Those services are open to anyone in Australia, whether the gambling they are concerned about was on a licensed Australian bookmaker or on an offshore site. A punter who is reading this page because they are weighing a VPN-friendly casino, and who is unsure whether they want to keep weighing it, can call the line and ask the question out loud.

The helpline does not advertise offshore casinos, does not promote any brand in this ranking, and does not take a position on the legality of VPN access. It takes calls.

The line that has to be drawn somewhere

A formal warning from the ACMA is not the same as a prosecution. It is the regulator’s way of putting the operator on record before considering further action. The June 2026 blocking round is the further action. The brand pages and the bonus pages do not mention either. They mention the licence number on the footer. They mention the regulator in the small print. They do not mention the Australian warning, because the Australian warning is the one fact the marketing copy cannot fold into a feature list.

The reader’s position is the harder one. The reader is being asked to choose between an option the Australian framework treats as lawful and an option it treats as prohibited. The VPN, in that choice, does not move the option. It moves the route to it.

What the brands actually show when you line them up

The eleven brands in this ranking are not a leaderboard. They are a sample. Each was selected because the ACMA itself named it in a formal warning, and the sample together covers more than four years of enforcement activity, from 2022 through 2026. The differences between them are not differences of legality. They are differences of operator name, of warning date, and of where their payment menus — to the extent they exist for an Australian visitor — surface in third-party listings.

RocketPlay

RocketPlay has been the subject of two ACMA actions: the earlier warning to Dama N.V. in May 2022 and the more recent warning to Pulsup Ltd in March 2026 over Rocketplay.com.au. The change of operator between the two warnings — Dama N.V. to Pulsup Ltd — is the most legible fact in the brand’s history. It tells the reader that the formal warning does not, on its own, retire the brand; a successor entity picks it up. Subject support for the brand surfaces only in third-party listings, not on the operator’s own pages.

Level Up Casino

Level Up Casino sits inside the May 2022 Dama N.V. warning alongside five other brands. The grouping is the relevant fact: the ACMA warned Dama N.V. as the operator across six casino brands in a single notice, and the brand-level names on that notice are Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos. Three of those six have reappeared under fresh operator names in subsequent warnings. The warning is to an operator, not to a brand, and an operator can carry several brands out of a single notice.

Woo Casino

Woo Casino is one of two Dama N.V. brands the ACMA warned again in 2025, the other being Spirit Casino. The Dama N.V. name recurs in this ranking more than any other single operator. No third-party listing coverage data is attached to the brand for the subject of payment method support, which means the reader looking at Woo Casino is reading the marketing page.

Spirit Casino

Spirit Casino was the subject of the May 2025 Dama N.V. warning, alongside Woo Casino. The same operator, the same calendar year, two separate brands. Like Woo Casino, Spirit Casino carries no third-party listings data for subject support.

National Casino

National Casino was named in the July 2025 ACMA warning to Consolutetish S.R.L., and the same warning also covered Bizzo Casino. National Casino is one of two brands in this ranking that surface in third-party listings tied to Australian consumer-protection registries — the ACMA’s own site, AUSTRAC, and BetStop. That is not the same as being licensed; it is the same as appearing in registries the reader can check.

Bizzo Casino

Bizzo Casino is the more complex of the Consolutetish S.R.L. pair. The ACMA warned it twice: in 2022, when TechSolutions (CY) Group Limited and TechSolutions Group N.V. were the named operators, and again in July 2025, when Consolutetish S.R.L. was the named operator. The brand has cycled through operators the way RocketPlay has, and the warning record follows the operator. Subject support surfaces only in third-party listings.

Ignition Casino

Ignition Casino was named in the July 2025 warning to Bamboo Media. It carries no third-party listings data for subject support. The brand name is one that recurs in offshore marketing for poker and casino products; the ACMA’s action against it is one of the more recent entries on the warning list.

Instant Casino

Instant Casino is the subject of the February 2025 warning to EOD Code SRL. It is one of two brands in this ranking that surface in third-party listings for subject support, in this case tied to PayID and to an e-wallet service. The PayID listing is the one a reader in Australia can check against an actual Australian deposit. Its presence does not make the casino legal; it makes the listing verifiable.

Jackbit

Jackbit was named in the April 2026 warning to Ryker B.V., alongside CasinOK. Jackbit carries no third-party listings data for subject support. The brand is a recent entry on the ACMA’s list — the warning was issued in the same calendar year the page is published.

Casino Intense

Casino Intense was named in the April 2025 warning to Sterplay Holding Ltd. It is the second of the two brands in this ranking that surface in third-party listings tied to Australian consumer-protection registries — AUSTRAC, BetStop, and Gambling Help Online. The presence of those references means the brand surfaces in the Australian consumer-protection ecosystem, but the warning itself places it outside the licensed wagering framework.

Sky Crown

Sky Crown is the subject of the ACMA’s warning to Hollycorn N.V., the same operator named in the warning over Blue Leo. No third-party listing coverage data is attached to the brand. The Hollycorn N.V. PDF is the public record, and the brand is named there.

The blocking rate the ACMA has run since 2019

The arithmetic the page needs to do on the ACMA’s blocking record is not about a single round. It is about the cumulative figure, the date of the first blocking request, and the gap between them.

The first blocking request under the ACMA’s regime was issued in November 2019. The cumulative total as of 26 June 2026 was 1,751 blocked sites. The span between the two dates is about six and a half years, or roughly 80 months. Spread evenly across that span, the ACMA’s blocking rate sits at about 22 sites per month, or roughly one site every business day. Spread across the years, the rate has been high enough that no single blocking round closes off the market.

That is a band, not a single figure, because the per-month throughput has not been even. The June 2026 round alone added 12 sites. Earlier rounds added more, earlier rounds added fewer. A reader who treats “22 per month” as a steady state will overstate the early years and understate the recent ones. The honest description is a range: roughly one site per business day on the long average, with peaks that cluster around larger enforcement drives.

The relevance of that range to a reader weighing a VPN is direct. A VPN-friendly casino that has not yet been blocked is not, on this record, immune to blocking. A casino that was reachable when the reader first read about it may not be reachable at the moment of deposit. A balance sitting on a blocked site is a balance the operator still controls. The blocking rate is the operational background to every other figure on this page.

What the marketing page never says, and what the terms page usually does

A VPN-friendly casino’s marketing page leads with three things: a licence badge, a welcome package, and a payment menu. The licence badge usually references Curaçao or another offshore regulator; the welcome package is the figure the page is built around; the payment menu lists methods that may or may not work from an Australian account.

The terms page, when the reader reaches it, says something different. It reserves the right to ask for further identification. It reserves the right to refuse withdrawals to certain countries. It reserves the right to close accounts that fail the verification the operator later decides to apply. None of that is on the marketing page. All of it is what an Australian punter using a VPN is accepting by clicking through.

The reason that matters on a VPN-friendly page is that the VPN itself is invisible to the terms. The terms do not say “if you used a VPN, your withdrawal may be refused”. They say “if we cannot verify your identity to our satisfaction, your withdrawal may be refused”. The verification is the part the VPN does not help. The marketing page does not draw that line. The terms page does not draw it either. The reader draws it alone.

What changes on 1 January 2027

The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026. Its advertising and inducement measures commence 1 January 2027. On a page published in 2026, that is law with a start date, not law in force. The measures target the way licensed wagering services advertise and the inducements they offer; they do not, on the published text, change the prohibition on unlicensed online casino games. The ACMA’s blocking regime and the formal-warning regime continue in the meantime.

A reader who is reading this page before 1 January 2027 is reading it under the rules as they are now. A reader reading it after 1 January 2027 is reading it under the rules with the new advertising measures in force. Either way, the position on unlicensed online casinos does not change. The VPN-friendly label is the same label. The offshore casino is the same offshore casino. What changes is the inducement language around the licensed side, which is not the subject of this page.

The tax position, briefly

Gambling winnings of a recreational player are not assessable income in Australia, and losses are not deductible, unless the person carries on a business of gambling. That is the model position; a reader with a specific tax question should check with the Australian Taxation Office, because the boundary between recreational play and carrying on a business is the kind of line the ATO draws case by case. None of this changes whether an offshore casino is licensed. It is the question on the other side of whether the winnings are taxable.

Where this leaves the reader

The VPN does not license the casino. It does not put the casino under Australian consumer law. It does not connect the casino to BetStop. It does not give the reader a complaints body. It does not stop the ACMA from blocking the site. It moves an IP address.

The blocking rate has been sustained for more than six years. The formal-warning record keeps growing. The licensed Australian wagering side is open for sports, races, lotteries and keno, with debit card, bank transfer, PayID, Osko and BPAY as the legal deposit routes. None of the eleven brands in the ranking above is on that side. The reader’s choice is not between two VPN-friendly options. It is between one licensed option and one prohibited option, with a tunnel in between.

If a reader reaches the helpline at 1800 858 858 or the chat at Gambling Help Online, the conversation they have there is independent of the brand list on this page. It is also independent of the VPN.

Frequently asked questions

Why does a casino advertise itself as ‘VPN-friendly’ in the first place?

Because the casino cannot legally serve an Australian visitor, and refusing the connection loses the customer. A VPN-friendly front door lets the casino claim it is not the one detecting where the visitor is from, while still knowing enough about the deposit and the payout to enforce its terms later. The label is a marketing position, not a technical capability.

Does using a VPN to reach an offshore casino change whether the activity is legal for someone in Australia?

No. The Interactive Gambling Act 2001 prohibits the provision of online casino games to a person in Australia. The VPN changes the IP address the casino sees; it does not move the activity out of the Act. The prohibition is on the provider, and an offshore operator remains prohibited whether the connection is tunneled or not.

How does a VPN change what an offshore casino site can actually see about the player?

It changes the IP address — the public address of the network the player is using — to one the casino’s geolocation database accepts. It does not change the phone’s timezone, the browser’s language, or the country code on a deposit from an Australian bank account. The VPN handles the front door; the deposit and the payout are separate signals.

What risk does a player take on by using a VPN to reach a casino the ACMA has warned before?

The casino can be blocked by an Australian ISP with a balance still on it. The operator has no obligation to honour Australian consumer law. BetStop does not bind the operator. The terms pages reserve the right to refuse a withdrawal if verification does not match the country the player claimed to be in. The ACMA’s blocking record shows the risk is operational, not theoretical.

Is a casino that ‘allows VPN use’ any different from one that simply does not check?

A casino that does not check the IP at all is open to any visitor, regardless of how they connect. A casino that allows VPN use is open to visitors whose IP it cannot tie to Australia by its own list. The list is the operator’s. It updates. The visitor’s IP does not always keep up. The two positions are not the same, and the small print usually favours the operator.

What should someone consider before treating VPN access as a safe workaround rather than a legal one?

Whether the casino has been blocked before, whether the balance is exposed if it is blocked again, whether the terms reserve the right to refuse withdrawals on verification grounds, whether the payment method leaves a paper trail back to an Australian bank, and whether the self-exclusion tools that bind the licensed Australian side apply at all. The VPN changes none of those answers.