Fortris, the Málaga-rooted crypto treasury and payments company, processes payment flows for offshore betting businesses that accept customers in U.S. jurisdictions where those operators are not licensed, a source said. The source said the activity has been corroborated.
The allegation puts a named infrastructure provider at the center of a longstanding enforcement problem: offshore gambling companies cannot reach U.S. bettors at scale without payment, wallet and settlement services capable of moving deposits in and winnings out.
For years, enforcement cases showed how some gambling businesses and their processors concealed transactions from banks. Crypto has changed the mechanics. A betting operator can now accept assets directly, separate funds among many wallets, pay players and affiliates in bulk, and convert between crypto and fiat through third parties. Those capabilities can support lawful, regulated gaming. They can also reduce the practical effect of controls built into card and bank-payment networks if providers do not verify who their customers are, where their players are located and whether the gambling is legal in those places.
That is why the public positioning of Fortris deserves scrutiny. Fortris markets a crypto treasury and payments platform directly to the gaming sector. Its website describes direct player deposits, player and affiliate payouts, dedicated wallets for different brands or regions, embedded cashier flows, real-time settlement and “no risk of chargebacks.”
Those statements independently establish that Fortris has built and markets infrastructure suited to gambling payment flows. The source’s allegation goes further: it says the company’s infrastructure is being used for offshore betting businesses taking payments connected to U.S. customers outside licensed state markets.
The source did not provide operator names, wallet addresses, transaction volumes or dates that could be independently tested or disclosed. Fortris did not respond to a request for comment before publication. The allegation is therefore presented as a source claim, not as a regulatory or judicial finding.
The allegation against Fortris
The source said Fortris processes payments for offshore online betting companies serving U.S. customers and that the activity is illegal because the operators are accepting business in jurisdictions where they lack authorization. The source said the conclusion was corroborated before publication.
The claim concerns payment processing for customer gambling activity, not merely Fortris selling generic accounting software to a company that happens to operate in gaming. That distinction matters. A technology vendor may be remote from individual wagers; a provider enabling player deposits, withdrawals, cashier integrations and settlement sits much closer to the underlying transaction flow.
The identities of the operators, the amount of money moved, the assets or blockchains used, and what Fortris personnel knew about the location of individual bettors are not established in this article. The allegation is nevertheless specific enough to test against Fortris’s public product claims, corporate structure and compliance representations.
What Fortris offers gaming companies
Fortris describes itself as a platform for institutional crypto treasury operations. Its payments page is titled “Crypto payment processor” and says the company supports incoming and outgoing cryptocurrency flows. The page advertises an embeddable, brandable Fortris Cashier, as well as an API through which a customer can integrate its own cashier.
The company’s gaming page is more specific. It says deposits settle directly into a gaming company’s enterprise wallets without delays or rolling reserves. It promotes crypto acceptance without chargebacks, tools to track surges in player activity, and the creation of dedicated wallets for each “sub-brand, region or game title.” It also says customers can handle player deposits and payouts to players, affiliates and suppliers through embedded flows on their own websites.
These are commercially useful features for a licensed gaming operator. They are also the parts of the payment stack that require the strongest jurisdictional controls. A platform that can see wallet activity and player-payment patterns is in a position to ask whether the operator is licensed, whether U.S. traffic is blocked where required, and whether purported regional wallets match the actual location of players.
The corporate structure crosses Spain and the United Kingdom. Spanish commercial-gazette records show that Technest Solutions SL was incorporated in Málaga in 2017 as an IT consultancy and that Fortris Global Ltd became its sole shareholder in June 2025. Fortris’s U.S. lobbying filings also identify the Spanish company as doing business as Fortris.
Companies House lists Fortris Global Ltd as an active U.K. private company incorporated on October 13, 2023, with a London registered office and a software-development business classification. Fortris’s website identifies executives in Singapore, Málaga and Vancouver. Calling Fortris simply a Spanish payment processor would therefore be incomplete: the documented business combines a Málaga operating history with a U.K. parent and an international team.
The licensing question is less clear. Searches of public registers did not locate Fortris Global Ltd or Technest Solutions SL under those exact names as a Banco de España-authorized payment or electronic-money institution, an FCA-authorized firm or registered cryptoasset business, or a U.S. FinCEN money-services business. That absence is not proof of noncompliance: Fortris may act as a software or technical-services provider and rely on separately regulated custody, exchange or banking partners. It does make the company’s precise role—software provider, custodian, payment processor, money transmitter or agent—an important question.
How illegal gambling payments have been disguised
The clearest public example of processor misconduct remains the U.S. government’s 2011 online-poker case against principals and processors associated with several offshore poker companies, including PokerStars and Full Tilt Poker. The Justice Department alleged that the companies and their processors deceived U.S. banks after those banks became unwilling to handle online-gambling payments.
According to the government’s announcement, payments from U.S. gamblers were disguised as purchases from nonexistent merchants said to sell products such as jewelry and golf balls. Prosecutors alleged that processors created phony companies and websites, obtained bank accounts under false pretenses, and used merchant names designed to hide the connection to poker. The announcement described charges and allegations at that stage, not findings against every defendant.
That pattern is often called transaction laundering: the business presented to a bank or acquirer is not the business that generated the payment. Related warning signs include misleading billing descriptors, shell merchants, payment aggregation that obscures the underlying operator, frequent switching among bank accounts or merchant identities, and unexplained cross-border settlement chains.
Crypto does not require a fake card descriptor. Instead, it can move the point of concealment. A player may acquire crypto through a regulated exchange or payment app and then transfer it to an address controlled by an offshore operator. The operator may distribute funds among treasury wallets, payout wallets and affiliate accounts before using an exchange, broker or over-the-counter desk to reach fiat. The public blockchain preserves transaction records, but wallet ownership and the commercial purpose of a transfer are not always obvious without customer information and analysis.
The risk is not that crypto payments are inherently illicit. It is that a provider can advertise direct settlement and irreversible payments while doing too little to establish whether the gambling business behind those flows may legally take each wager.
What U.S. law makes relevant
The Unlawful Internet Gambling Enforcement Act prohibits a gambling business from knowingly accepting certain payments in connection with another person’s participation in “unlawful Internet gambling.” The statute’s definition depends on the underlying federal or state law where a bet is initiated, received or otherwise made. It is not a blanket rule that every offshore gambling transaction is unlawful, nor does an offshore license automatically authorize an operator to take bets throughout the United States.
The practical compliance question is therefore granular. A provider serving a betting company must understand the operator’s legal entities, licenses, products and permitted markets. It must also test whether the operator’s actual player base and transaction flows match that information.
Regulation GG, the federal rule implementing UIGEA for payment systems, illustrates the expected distinction. For higher-risk internet-gambling customers, its compliance examples contemplate evidence of legal authority, commitments to report changes, and third-party certification of controls such as age and location verification. For card systems, the rule also discusses correct transaction coding, testing and monitoring for suspicious payment volumes. These are risk-based controls rather than a guarantee that every prohibited payment will be caught, and they are designed not to block lawful, state-authorized gaming.
For a crypto platform, credible controls would ordinarily include risk-based customer due diligence, beneficial-owner verification, review of gaming licenses, jurisdiction and product restrictions, sanctions screening, wallet screening, transaction monitoring, escalation procedures, and action when an operator’s representations conflict with observed activity. A generic promise of “AML” or “full compliance” is not a substitute for those controls.
Why weak processing controls matter
The first impact falls on customers. An unlicensed offshore operator may offer no effective local complaint process, responsible-gambling protection or reliable route to recover funds. Crypto payments advertised as free from chargebacks remove one of the limited remedies available in conventional commerce. If an operator delays or refuses a withdrawal, the consumer may have little practical recourse.
The second impact falls on the payment system. Banks, exchanges and liquidity providers can be exposed to gambling activity they did not knowingly accept. Weak onboarding at one intermediary pushes risk into other institutions, complicating anti-money-laundering monitoring and undermining controls designed to separate licensed activity from prohibited markets.
The third impact is competitive. Licensed U.S. operators pay for state approvals, geolocation systems, player protections, tax compliance and continuing supervision. Offshore operators that reach the same customers through less demanding payment channels can avoid much of that cost.
Fortris is relevant because its own materials place it close to the gaming money flow: deposits, cashier integrations, player payouts, regional wallets and conversion pathways. The source allegation says those capabilities are being used by offshore operators to reach U.S. customers outside licensed markets. Fortris’s marketing does not prove the allegation, but it shows that the claimed activity falls within the type of infrastructure the company openly offers.
The broader lesson is straightforward. A payment or crypto infrastructure company cannot evaluate a gaming client solely at onboarding and then ignore where the money comes from. If Fortris is processing payments for offshore operators that it knows are taking unauthorized U.S. bets, generic claims about KYT, AML and lawful use would not resolve the central issue.