A beauty salon accepting thousands of tiny payments after midnight might sound like a surprisingly successful business. In the Philippines, regulators discovered something very different: some apparently ordinary merchants registered on digital-payment platforms were allegedly fronts for online casinos.
The Bangko Sentral ng Pilipinas (BSP) showed that more than 8,000 merchant accounts linked to alleged illegal activity have been shut down, after surveillance identified unusual payment patterns involving businesses registered as beauty salons, bakeries and small retailers. According to BSP Deputy Governor Mamerto Tangonan, some merchants were processing thousands of transactions worth as little as PHP 50 or around US$0.80, late at night and into the early morning. Investigation showed that some of those payments were actually online casino bets.
The discovery exposes a weakness that gambling regulators around the world increasingly need to confront. An illegal casino does not necessarily need to look like a casino inside the financial system. If payments can be routed through intermediaries or merchants registered under unrelated business categories, blocking a gambling website or removing an app may only address the visible end of a much larger infrastructure.
Payment companies frequently work with merchant aggregators, which help connect large numbers of smaller businesses to electronic-payment infrastructure. This is particularly valuable in the Philippines, where expanding digital financial inclusion has been an important policy objective. The BSP's National Retail Payment System is explicitly designed around interoperability and inclusion, allowing businesses and consumers to participate more easily in electronic payments.
But additional layers can make it harder to identify the ultimate merchant behind a transaction.
A payment provider may see an apparently legitimate small business while the actual economic activity occurring behind it is something entirely different. In this case, regulators say apparently ordinary merchants were receiving payments that were ultimately associated with online gambling.
This is effectively a merchant-identity problem.
Traditional KYC asks who the customer is. Payment companies increasingly need equally strong KYB, Know Your Business , controls to establish who the merchant is, who owns it, what activity it conducts and who ultimately benefits from the money flowing through it.
The BSP has drafted tighter requirements that would give payment providers greater visibility over merchants, beneficiaries, ownership structures, payment channels, transactions and settlement accounts. Payment arrangements that make those relationships difficult to reconstruct could be prohibited.
If regulators and payment companies can reliably identify the ultimate beneficiary of those payments, disguising a casino as a bakery becomes considerably harder.
The concept is straightforward: create a centralized repository of merchants accepting QR payments so financial institutions can better establish who sits behind individual merchant identities and QR codes.
This becomes increasingly relevant as QR-based payments expand.
The BSP and Philippine Payments Management Inc. have continued developing the country's digital-payment infrastructure, including InstaPay for Business and QR-based merchant payments. The broader objective is to make digital transactions easier and more interoperable for legitimate consumers and businesses.
But convenience creates an obvious regulatory challenge. The easier it becomes for legitimate merchants to accept payments digitally, the more important it becomes to prevent illegal operators from hiding inside the same infrastructure.
The BSP is therefore attempting to make merchant identity as important as transaction speed.
Under a draft circular reported earlier this month, the BSP proposes suspending the acceptance and processing of new Operator of Payment Systems applications for 12 months. Existing applications could continue to be assessed, but no final approval or rejection would be issued during the suspension.
The proposed pause illustrates the scale of the regulatory rethink.
This is not simply about finding several badly classified merchants. The central bank is reconsidering how payment operators identify businesses, how intermediaries are used and whether the existing architecture provides enough transparency to reconstruct where money ultimately goes.
For online gambling, that could have significant consequences.
Historically, regulators concentrated heavily on operators: licenses, domains, advertising, games and responsible gambling.
Increasingly, enforcement is moving into the infrastructure surrounding those operators.
Payments are particularly powerful because an illegal casino may operate outside the regulator's direct jurisdiction while still depending on banks, e-wallets, payment processors, crypto services or merchant accounts to move money.
The Philippines has already moved in this direction. In 2025, the BSP ordered supervised institutions to remove links providing direct access to online gambling from their mobile apps and websites. The latest merchant investigation demonstrates why simply separating gambling from an e-wallet interface does not eliminate the underlying payment challenge.
PAGCOR Chairman Alejandro Tengco has confirmed that the gambling regulator is aware of apparently innocent businesses being used by unregistered online casinos and is cooperating with the BSP.
It is that the disguise apparently worked inside digital-payment infrastructure until transaction behavior revealed something was wrong.
That tells regulators something important.
The visible casino website is only the storefront. Behind it sits an ecosystem of merchant accounts, payment processors, aggregators, QR codes, banks, wallets and potentially crypto infrastructure.
Effective regulation therefore needs to follow both sides of the transaction: where the player is gambling and where the money actually goes.
The Philippines is increasingly doing exactly that.
And if the next phase of gambling enforcement is built around merchant identity rather than simply domain identity, the beauty salon pretending not to be a casino may ultimately prove far easier to find.
Bangko Sentral ng Pilipinas. (2026, June 26). BSP strengthens rules to safeguard financial consumers in digital marketplaces and platforms. Philippine Information Agency. BSP consumer-protection announcement
Bangko Sentral ng Pilipinas & Philippine Payments Management, Inc. (2026, July 29). BSP, PPMI launch new digital payment services. Philippine Information Agency. BSP digital payments announcement
Inside Asian Gaming. (2026, September 17). Philippine Central Bank to tighten controls on how payment providers assess payment channels due to proliferation of casino micro-payments. Inside Asian Gaming report
The Business Times. (2026, September 17). Casinos posing as salons, bakeries spur Philippine digital payment review. The Business Times report
The Philippine Star. (2026, September 7). BSP plans pause on new payment system operators. Philstar report
The Bangko Sentral ng Pilipinas (BSP) showed that more than 8,000 merchant accounts linked to alleged illegal activity have been shut down, after surveillance identified unusual payment patterns involving businesses registered as beauty salons, bakeries and small retailers. According to BSP Deputy Governor Mamerto Tangonan, some merchants were processing thousands of transactions worth as little as PHP 50 or around US$0.80, late at night and into the early morning. Investigation showed that some of those payments were actually online casino bets.
The discovery exposes a weakness that gambling regulators around the world increasingly need to confront. An illegal casino does not necessarily need to look like a casino inside the financial system. If payments can be routed through intermediaries or merchants registered under unrelated business categories, blocking a gambling website or removing an app may only address the visible end of a much larger infrastructure.
Why Would an Online Casino Pretend to Be a Bakery?
The answer lies partly in the increasingly complex structure of digital payments.Payment companies frequently work with merchant aggregators, which help connect large numbers of smaller businesses to electronic-payment infrastructure. This is particularly valuable in the Philippines, where expanding digital financial inclusion has been an important policy objective. The BSP's National Retail Payment System is explicitly designed around interoperability and inclusion, allowing businesses and consumers to participate more easily in electronic payments.
But additional layers can make it harder to identify the ultimate merchant behind a transaction.
A payment provider may see an apparently legitimate small business while the actual economic activity occurring behind it is something entirely different. In this case, regulators say apparently ordinary merchants were receiving payments that were ultimately associated with online gambling.
This is effectively a merchant-identity problem.
Traditional KYC asks who the customer is. Payment companies increasingly need equally strong KYB, Know Your Business , controls to establish who the merchant is, who owns it, what activity it conducts and who ultimately benefits from the money flowing through it.
BSP Wants to Follow the Money
The Philippines' response is potentially more important than another round of casino-domain blocking.The BSP has drafted tighter requirements that would give payment providers greater visibility over merchants, beneficiaries, ownership structures, payment channels, transactions and settlement accounts. Payment arrangements that make those relationships difficult to reconstruct could be prohibited.
If regulators and payment companies can reliably identify the ultimate beneficiary of those payments, disguising a casino as a bakery becomes considerably harder.
A National QR Merchant Database Could Make the Payment Trail Clearer
Another interesting proposal is the development of a National QR Code Merchant Database.The concept is straightforward: create a centralized repository of merchants accepting QR payments so financial institutions can better establish who sits behind individual merchant identities and QR codes.
This becomes increasingly relevant as QR-based payments expand.
The BSP and Philippine Payments Management Inc. have continued developing the country's digital-payment infrastructure, including InstaPay for Business and QR-based merchant payments. The broader objective is to make digital transactions easier and more interoperable for legitimate consumers and businesses.
But convenience creates an obvious regulatory challenge. The easier it becomes for legitimate merchants to accept payments digitally, the more important it becomes to prevent illegal operators from hiding inside the same infrastructure.
The BSP is therefore attempting to make merchant identity as important as transaction speed.
The Philippines May Pause New Payment Operators for 12 Months
The central bank is also considering a temporary halt to new payment-system operator registrations while it reviews the regulatory framework.Under a draft circular reported earlier this month, the BSP proposes suspending the acceptance and processing of new Operator of Payment Systems applications for 12 months. Existing applications could continue to be assessed, but no final approval or rejection would be issued during the suspension.
The proposed pause illustrates the scale of the regulatory rethink.
This is not simply about finding several badly classified merchants. The central bank is reconsidering how payment operators identify businesses, how intermediaries are used and whether the existing architecture provides enough transparency to reconstruct where money ultimately goes.
For online gambling, that could have significant consequences.
Gambling Regulation Is Becoming Payment Regulation
The Philippines provides a good example of a wider shift occurring across online gambling.Historically, regulators concentrated heavily on operators: licenses, domains, advertising, games and responsible gambling.
Increasingly, enforcement is moving into the infrastructure surrounding those operators.
Payments are particularly powerful because an illegal casino may operate outside the regulator's direct jurisdiction while still depending on banks, e-wallets, payment processors, crypto services or merchant accounts to move money.
The Philippines has already moved in this direction. In 2025, the BSP ordered supervised institutions to remove links providing direct access to online gambling from their mobile apps and websites. The latest merchant investigation demonstrates why simply separating gambling from an e-wallet interface does not eliminate the underlying payment challenge.
PAGCOR Chairman Alejandro Tengco has confirmed that the gambling regulator is aware of apparently innocent businesses being used by unregistered online casinos and is cooperating with the BSP.
DivaJackpot's View: Blocking Casinos Is No Longer Enough
The most important part of this story is not that somebody allegedly registered an online casino as a beauty salon.It is that the disguise apparently worked inside digital-payment infrastructure until transaction behavior revealed something was wrong.
That tells regulators something important.
The visible casino website is only the storefront. Behind it sits an ecosystem of merchant accounts, payment processors, aggregators, QR codes, banks, wallets and potentially crypto infrastructure.
Effective regulation therefore needs to follow both sides of the transaction: where the player is gambling and where the money actually goes.
The Philippines is increasingly doing exactly that.
And if the next phase of gambling enforcement is built around merchant identity rather than simply domain identity, the beauty salon pretending not to be a casino may ultimately prove far easier to find.
References
Bangko Sentral ng Pilipinas. (2026). National Retail Payment System. BSP. BSP National Retail Payment SystemBangko Sentral ng Pilipinas. (2026, June 26). BSP strengthens rules to safeguard financial consumers in digital marketplaces and platforms. Philippine Information Agency. BSP consumer-protection announcement
Bangko Sentral ng Pilipinas & Philippine Payments Management, Inc. (2026, July 29). BSP, PPMI launch new digital payment services. Philippine Information Agency. BSP digital payments announcement
Inside Asian Gaming. (2026, September 17). Philippine Central Bank to tighten controls on how payment providers assess payment channels due to proliferation of casino micro-payments. Inside Asian Gaming report
The Business Times. (2026, September 17). Casinos posing as salons, bakeries spur Philippine digital payment review. The Business Times report
The Philippine Star. (2026, September 7). BSP plans pause on new payment system operators. Philstar report
Добави файлове
Our Featured Casino Partners
Добави файлове
Also in Diva Jackpot News
Добави файлове
16 September,
2026
Stake Opens Engine to the iGaming Industry
Stake Opens Engine to the iGaming Industry: Could Casino Game Development B...
15 September,
2026
Prediction Markets Have an Insider Trading Problem
Prediction markets have spent the past few years trying to convince regulat...
15 September,
2026
From Monte Carlo to Crypto Casinos
Few places connect gambling to their identity as strongly as Monaco does. L...
...
...
...


