Chargebacks at 3 % on Maltese-licensed

That delivery driver who lost your $2,000 package at the door last Christmas and refused to take blame? That’s exactly what Visa feels like every time a Maltese .com operator pushes a $2 k withdrawal without step-up 3DS and then gets smacked with a second chargeback. The fine schedule is public: $125 for the first slap, $500 for the second, and once you’re on that treadmill, Merchant IDs rarely climb back off. At 1.5 %–3 % chargebacks on .coms with no rolling KYC refresh or real-time IDV you’re not running a casino—you’re running a chargeback factory. The irony? The same KYC checkbox at registration that gatekeeps a $50 deposit fails to stop a $2 k withdrawal because 90 % of players treat it as a formality to tick and forget. Visa’s rules are clear: any single transaction above $1 k triggers step-up 3DS unless you have a two-factor authentication record within the last 90 days. Maltese .coms love the convenience of passing the buck to their processor’s 3DS gateway, but once the acquirer sees recurring chargebacks from the same MID, the acquirer pushes the risk back—either higher rolling reserves or outright MID suspension. Worse, if your chargeback rate drifts north of 0.6 %, you’re already dipping into the fine zone. Add in Malta’s remote-gambling tax (5 % gross revenue) and the cost of representment (each retry $15-$25 in admin plus staff time) and your thin-margin GGR evaporates before it hits the bank. Most operators I’ve audited fix this with a two-pronged fix: upgrade KYC at the $1 k mark (either ID scan or liveness selfie) and enforce 3DS2 step-up for all withdrawals over $1 k. The upgrade costs around €3–5 per player, but it’s cheaper than paying $500 every second chargeback—especially when your acquirer starts shaving mid-month settlements to cover the risk. Bottom line: lazy KYC at registration is the same as handing Visa a blank cheque. Step-up 3DS isn’t optional; it’s insurance against sliding into the fine zone faster than a Martingale player.

knew this one would come back to bite someone one day ah well when i launched that malta .com in 2018 we ran the same old "kyc at reg" model—ticked the box, forgot it. had a player who deposited €50, played €5,000 in a weekend, then pulled a €2 k withdrawal same afternoon no step-up, no id scan just because the kyc tickbox was done three months earlier and the name matched the card ouch by month four we were at 2.8 % chargebacks and the acquirer started sniffing around like a dog on a meat truck processor said hey do 3ds on every withdrawal over €1 k we said nah too many drop-offs after the first step-up 3ds they gave us a two-week ultimatum or higher rolling reserve (10 % instead of 5) which at our NGR meant losing the profit on half our ggr for three months straight switched to a tiered approach: kyc refresh every €2 k deposit/spend activity and step-up 3ds on every withdrawal over €1 k cost us €4 per active player but that’s peanuts compared to a €500 fine when the second chargeback hits the processor escalates it to the card scheme and suddenly your mid is flagged on their risk list for 18 months the real kicker? malta’s 5 % tax never saw a single cent of those €500 fines they just vanished into the acquirer’s pocket the lesson? old school offshore trick of “tick once, forget forever” only works while you’re small and nobody notices once the volumes hit mid-six figures you’re either baking the fines into your margins or you’re explaining to the board why the acquirer froze settlements for a week

Still scratching my head why half these Maltese .coms think their KYC checkbox is a get-out-of-jail-free card. Hannah already nailed the math, so let me save you the suspense — those fines stack faster than FTDs in a poker bot’s GGR report. I ran one of these brands for three years before we woke up to the fact that Visa’s spreadsheet doesn’t care about your fancy twilight-licensed Maltese paperwork; it cares about your rolling 30-day chargeback rate hitting 0.6 %. Sam_Biz hit the nail right through the MID: the €4 per active player for tiered KYC refresh and 3DS step-up is cheaper than a single $500 fine that travels straight to the boardroom deck like an unexpected winter storm. But here’s the twist — after we implemented the same tiered logic, we discovered that 40 % of our chargebacks weren’t even fraud; they were friendly-fire from players who simply forgot they’d used a different card two weeks prior. So we layered in wallet-to-card linkage on every deposit over €1 k — €2 per player, one API call. Chargeback curve went from 2.3 % down to 0.4 % in eight weeks. Malta’s 5 % tax didn’t bat an eyelid when those €500 fines vanished, but the acquirer sure did — suddenly they started offering 2 % lower rolling reserve instead of 10 %. Sometimes the cheapest “insurance policy” is the one you bolt on before the fine schedule becomes your monthly budget line. 😏

Wait—rolling reserve? So if your fine schedule piles up and the acquirer says "10 % rolling reserve instead of 5 %", does that mean they literally keep 10 % of every deposit for weeks until they decide it’s safe? Or is it a one-time hit that sits there like a buffer? 😬

watched a guy in my last malta setup burn through his entire marketing budget on affiliate deals only to find out his acquirer held 15 % of every deposit for 60 days because his rolling reserve tripped from 2.3 % chargebacks ah the rolling reserve is exactly what it sounds like: they don’t just slap you with a fine and walk away—they take a slice of your deposits every single day and squirrel it away in a separate escrow account until the chargeback heat dies down or you prove you’ve cleaned up your act picture it like this: you deposit €10,000 on monday, processor immediately locks €1,500 (15 %) and drips it back to you only after 60 clean days without new chargebacks by which point you’ve already spent the cash on ads and wondered why your cash flow feels like it’s running through a sieve it’s not a fine, it’s a hostage situation where they get to decide when you’re trustworthy again

What happens to the Malta-licensed sites that keep ignoring this until their MIDs are flagged—do they ever claw back enough GGR to cover the lost half-year or is it curtains for good? I’m asking because I’m staring at a €22k month in rolling reserve at 15 % and my accountant just sent me a spreadsheet where my gross looks negative for Q3. 😬

Christ almighty, i’ve seen this movie before when the processors start wagging their fingers like mothers-in-law who just found out you smoked in the cellar. Hannah’s right about the fine schedule, but come on — €3-5 per active player for KYC refresh and 3DS step-up isn’t “insurance,” it’s just the cost of not running a chargeback mill disguised as a casino. Sam_Biz, you’re preaching to the choir with that Malta .com from 2018 — back then the rule was “tick the box, hope the player’s name matches the card, and pray you don’t wake up to an acquirer audit.” But here’s what gets me: we’re still having this conversation in 2024 like some newbie just discovered chargebacks exist. Visa’s €125 and €500 fines aren’t theoretical; they’re the price of keeping your operations stuck in the no-KYC hellscape Malta thought it left behind when Curacao got expensive. BrandBuilder_iGaming, love the wallet-to-card linkage idea — 40 % of those chargebacks were friendly-fire? no kidding. players who switch cards like socks in summer, then scream “fraud” when the old one’s declined. but tell me: how many of you actually test the drop-offs when you force 3DS step-up on every €1 k+ withdrawal? I’ve seen brands lose 20 % of their withdrawal funnel overnight because the average player couldn’t be arsed to dig out their banking app in the middle of a spin cycle. processors call it “risk mitigation”; players call it “extra hassle,” and neither cares about your NGR. TurnkeyPTSD, rolling reserve at 15 % for 60 days is a cash-flow guillotine — you budgeted for growth, not escrow. but here’s the real kicker: Malta’s 5 % tax? they’ll still slap you with it even if your MID’s on life support. acquirers know operators can’t walk away from a licence once it’s stuck in the regulator’s crawl, so they squeeze the juice out of the fruit until it’s pulp. John_Biz, €22k month in rolling reserve at 15 % means your acquirer already smelled blood in the water. The question isn’t whether you claw back GGR — it’s whether your CFO’s spreadsheet survives the autopsy. most brands in this position fold the licence or shuffle to white-label heaven faster than you can say “curacao again.” you want a needle? fine — processors aren’t your friends. they’ll dangle a “free” 3DS gateway in front of you, collect your data, then raise the rolling reserve the second chargebacks tick up. KYC at registration isn’t risk management — it’s the illusion of safety. real risk management starts the moment a player’s first €1 k spins happen. anything less and you’re just feeding the chargeback beast.

Yeah well Malta was supposed to be the goldilocks licence you tick and forget right? but we signed up an aggregator slot last quarter and the processor’s dashboard already flagged three MIDs as “monitoring” just from the first two weeks of volume just from standard deposits/withdrawals under €1k the flag came when our chargeback ratio hit 0.8 % after they did a retroactive manual review for any casino that ever moved above €50k month so now we’re staring at a €4.5k fine and a 15 % rolling reserve for 60 days even though we spend €25 per player on KYC refresh and wallet linkage after every €2k deposit—processor said their new AI model spots card switching faster than a human auditor so maybe this time next year their “auto-step-up 3DS” won’t add 8 % drop-off on withdrawals but for now it’s cheaper to lose €50 per player in funnel or pay €4.5k?

@CostModelAuditor nah bro, it's even worse than you thought — they don't just keep 10 %, they take a slice off EVERY deposit, like a silent tax on growth. Seen it firsthand when our affiliate spend blew up, processor froze 15 % overnight and dripped it back only after 60 clean days. Cash flow felt like running a marathon with a leaky fuel tank 🔥 You budget for ads, not escrow, and suddenly your €10k deposit becomes €8.5k available with €1.5k in purgatory. Best decision we made was jumping to a white-label stack that baked in KYC refresh and 3DS auto-step-up, so chargebacks never spiked past 0.6 %. Roll on, peace of mind.

man, Malta can be a beautiful licence but you can’t just tick boxes and pray, not when Visa’s slapping €500 fines in your face every month like an annoyed bouncer 😅 we’re still paying €8 per player on KYC refresh but that’s peanuts compared to the €42k fine last quarter because the processor’s new AI spotted “suspicious card switching” I nearly fell off my chair when they sent the breakdown, 327 disputed transactions in 6 weeks, all from the same 150 players — classic sock-switchers, no real fraud, just laziness from our side tbf we fired two affiliate networks faster than you can say “chargeback” and now running at 0.35 % thanks to strict wallet-to-card linkage what they don’t tell you? Malta’s 5 % tax still lands even if the MID’s bleeding out from rolling reserves, pure cash-flow suicide if you’re not prepared my white-label stack’s been smoothing it all out for 18 months now, MIDs feel like they’re living their own life

ahahaha 🍿 so the processors’ "AI" is basically a spicy meatball that sniffs out card switchers faster than i sniff out bad fries at 4am… but when it does, suddenly your fine print gets written in red ink and your rolling reserve is chomping through your margin like a beaver on espresso ☕ at this point i’m convinced every MID is just a casino-shaped piñata waiting for Visa to take a swing