A card payment is approved by the bank that issued your card and processed through a card network such as Visa or Mastercard. Cards offer a dispute route called chargeback, which comes from card scheme rules rather than law, and some countries add legal protection for credit cards. How much protection you get depends on the country, the card type and the transaction, and some regulators restrict the use of cards for gambling altogether.
On this page
How a card payment works
When you pay by card online, the merchant's payment provider sends the transaction through the card network to the bank that issued your card. The issuer checks the details, runs fraud checks and confirms there is enough money or credit, then approves or declines the payment.
Approval takes seconds. Final settlement between the banks involved happens later, which is why a transaction can show as pending before it appears in full on your statement.
Debit cards draw on money already in your account. Credit cards borrow against a limit. Prepaid cards spend a balance loaded in advance.
Authentication and security
Many countries now require extra verification for online payments, such as a one-time code or approval in a banking app. In the UK, strong customer authentication rules apply when someone initiates an electronic payment or accesses an account remotely, and they are intended to limit fraud1.
Authentication helps when criminals have stolen your card details. It does little when you are persuaded to approve a payment yourself, which is how many scams work.
Chargebacks and legal protection
A chargeback asks your card issuer to reverse a transaction, typically because goods or services were not provided or the payment was not authorised. MoneyHelper, the UK government-backed guidance service, explains that chargeback is an agreement the card schemes have signed up to, not a legal right, and that it can apply to debit, credit and prepaid cards2.
MoneyHelper says UK claims should be made within 120 days of the purchase2. Other countries and issuers apply their own criteria and time frames, so the terms of your own card are what count.
Some jurisdictions add statutory protection for credit cards. In the UK, Section 75 of the Consumer Credit Act covers credit card purchases costing more than £100 and up to £30,0002. That protection can be lost when a third party such as an e-wallet sits between you and the merchant2.
Fees and currency conversion
Card payments in a foreign currency can attract a conversion fee from your issuer. You may also be offered the option to pay in your home currency instead of the merchant's, a service known as dynamic currency conversion. European consumer organisation BEUC reported that the exchange rate used for this is almost always worse than the standard rate3.
Your issuer's fee schedule sets out how different types of transaction are classified and charged. It is worth reading before using a card with merchants abroad.
Gambling-specific restrictions
Card rules around gambling vary widely by country. In Great Britain, the Gambling Commission banned the use of credit cards for gambling from 14 April 2020, citing the risk of harm from gambling with money people do not have4.
Many banks also offer gambling blocks that stop an account or card being used for gambling transactions, and at least one UK bank adds a cooling-off period before a block can be lifted5. Research from the University of Bristol found that blocks can be effective, but that some people got around them through cash withdrawals and e-wallets6.
Whether gambling is permitted at all depends on where you are. For the position in the Maldives, see how gambling is treated under Maldivian law.
Fraud and scam risks
- Fake checkout pages: copies of real payment pages built to capture card numbers, expiry dates and security codes.
- Phishing messages: texts or emails about a failed delivery or refund that lead to a card details form.
- Bank impersonation: callers who claim to be your bank's fraud team and ask you to approve a transaction or read out a code.
- Hidden subscriptions: a small "verification" charge that turns into a recurring payment.
- Unregulated merchants: businesses with no clear licence or address, where a chargeback may be the only realistic route to getting money back.
What to check before paying by card online
- The web address is the one you meant to visit, and the payment page is served over a secure connection.
- The merchant's legal name, registered address and any licence or registration number are published and can be checked.
- The terms explain refunds, cancellations and how complaints are handled.
- You know which currency you will be charged in and what conversion fees apply.
- Transaction alerts are switched on in your banking app, so unexpected charges show up straight away.
- You keep receipts, confirmation emails and screenshots in case a dispute is needed.
For wider warning signs, read our guide to checking a gambling licence.