Yesterday, July 14, Maine’s LD 2007 took effect, prohibiting online sweepstakes games built on dual-currency systems and casino-style simulations. Two weeks earlier, on July 1, Indiana’s HB 1052 did the same, establishing civil penalties for conducting a sweepstakes game in the state. With Connecticut, Montana, New Jersey, California, and New York having acted in 2025, and Oklahoma and Iowa joining this cycle, the map of states that have moved against the dual-currency sweeps model has grown crowded, fast.
But the headline for compliance professionals is not another ban. It is who these new laws reach. The enforcement perimeter is no longer drawn around operators alone. It now sweeps in the vendor layer: payment processors, banks, geolocation providers, game content suppliers, platform hosts, and media affiliates. If your business touches sweepstakes gaming revenue anywhere in the value chain, your state-law exposure changed this month.
The 2026 Scoreboard: From Five States to a National Trend
The 2025 legislative cycle produced enacted measures in Connecticut, Montana, New Jersey, California, and New York. The 2026 cycle has already added Indiana (HB 1052, effective July 1), Maine (LD 2007, effective July 14), Oklahoma, and Iowa (SF 2289, which expands gaming enforcement authority to reach unlicensed internet gaming). Tennessee, Maryland, Minnesota, Virginia, and Louisiana continue to weigh similar measures.
The statutory language varies, but the targeting logic is consistent: internet-accessible games, casino-style simulations, and dual-currency systems in which a purchased entertainment currency sits alongside a promotional currency redeemable for cash, cash equivalents, or prizes. Legislatures are no longer debating whether the free method of entry defeats the consideration element — they are simply defining the model itself as prohibited.
The Real Shift: Liability Moves to the Vendor Layer
New York’s statute set the template. It prohibits not only operating, conducting, or promoting online sweepstakes games, but also supporting them through specified service-provider relationships — expressly naming financial institutions, payment processors, geolocation providers, gaming content suppliers, platform providers, and media affiliates. California’s AB 831 extends misdemeanor liability to operators, payment processors, and affiliates. Pending bills in Minnesota and Virginia carry similar support-entity prohibitions.
For the payments ecosystem, this is a structural change. A processor that underwrites a sweeps merchant, a BaaS platform that holds its FBO flows, or a program manager that settles its redemptions is no longer just managing card-brand and reputational risk — it may be committing a state offense. Merchant underwriting files, MCC coding decisions, and third-party risk reviews are about to get examined through a very different lens.
What BSA/AML and Payments Teams Should Be Doing Now
- Re-underwrite the portfolio. Identify every merchant, program, and sub-merchant with dual-currency sweeps exposure and map their footprint against the enacted and pending state list — the analysis is now state-by-state, not federal.
- Treat state-illegal gaming proceeds as an AML issue, not just a credit-risk issue. Processing transactions for gambling that is illegal under state law raises unlicensed-gambling and SAR considerations under the BSA — monitoring rules and investigation playbooks should reflect the new effective dates.
- Pressure-test geolocation controls. Blocking Indiana on July 1 and Maine on July 14 is only as good as the geofencing evidence behind it. Independent certification of geolocation controls is becoming table stakes for operators and a diligence item for their banks and processors.
- Update onboarding and exit playbooks. Define tolerance now: which sweeps models, in which states, with what redemption mechanics — and document the off-boarding path before a regulator or bank partner asks for it.
For Operators: Exit, Retool, or Regularize
Operators face a three-way decision in each affected state: exit cleanly (with documented geoblocking and player-balance wind-downs), retool the product away from prohibited dual-currency mechanics, or pursue regulated pathways where they exist. Maine itself illustrates the direction of travel — the same session that banned sweeps casinos authorized tribal iGaming under LD 1164, effective July 29. The market is not disappearing; it is being pushed into licensed, supervised channels. Compliance maturity is what determines who survives the transition.
FinCheck’s Perspective & Way Forward
At FinCheck, we have supported sweepstakes and social gaming platforms, their payment partners, and their banks through exactly this kind of regime change. Our read: the vendor-liability trend will accelerate, because it works — cutting off payments, geolocation, and content is far more effective than chasing offshore operators. Expect more states to copy New York’s support-entity language in 2027 sessions, and expect bank partners to front-run legislation with their own de-risking decisions.
The way forward is disciplined and unglamorous: a current state-by-state legal exposure map, a risk assessment that treats sweeps exposure as its own category, independently certified geolocation controls, monitoring scenarios tuned to redemption flows, and honest board-level conversations about which states and models are worth the risk. Businesses that do this now will keep their banking relationships; those that wait for the first subpoena will not.
How FinCheck Can Help
FinCheck LLC advises gaming and sweepstakes platforms, FinTechs, MSBs, and payment processors on BSA/AML risk assessments, independent AML audits, geolocation controls certification, policy and procedure development, and fractional compliance officer support. If the July effective dates in Indiana and Maine touch your merchant portfolio or your product roadmap, let’s talk before your regulator — or your bank — does it for you.
