iGaming Hub's Complete Guide to Online Casino Payment Gateways in 2026

Online Gambling Merchant Account: The Operator's Complete Guide for 2026

Online Gambling Merchant Account Complete Guide

What exactly is an online gambling merchant account and why is it different from a standard business account?

An online gambling merchant account is a specialized acquiring relationship that allows an operator to accept card payments, Visa, Mastercard, and sometimes Amex, from players. It differs from a standard merchant account because gambling carries MCC code 7995, which triggers elevated chargeback risk, legal complexity across jurisdictions, and strict card scheme rules that most standard acquirers simply refuse to underwrite.

Visa and Mastercard publish their own rules for gambling transactions. Mastercard's rules, for instance, require that gambling merchants register through their Gambling Payment Program and maintain chargeback ratios below 1%, breach that threshold and you're on a monitoring program that can end in termination. Visa has similar thresholds under VAMP (Visa Acquirer Monitoring Program). These scheme-level requirements exist before you even get to the acquirer's own risk appetite, which is typically far more conservative.

Standard payment processors like Stripe, Square, or PayPal explicitly prohibit online gambling in their acceptable use policies. If you try to process gambling transactions through a general-purpose merchant account, sometimes called 'miscoding', you risk immediate account termination, fund holds, and potential card scheme fines passed down to you. I've seen operators lose six-figure balances sitting in processing queues because they cut corners here. Don't.

A genuine high-risk gambling merchant account comes with an acquirer who has a gambling license on their radar, an underwriting team that actually reviews your RTP reports and AML policy, and contractual terms that reflect the real risk profile: rolling reserves, higher discount rates, and volume caps. That's not a bad deal, it's an honest one. The operators who get into trouble are the ones who shop for the cheapest or most permissive terms without understanding what they're agreeing to.

Which acquirers and payment processors actually approve online gambling operators?

The specialist high-risk acquiring market for online gambling is dominated by a relatively small group of processors: Payvision (now ING), Credorax (now Bluesnap in some regions), Nuvei, Paysafe's acquiring arm, Cleo, Unlimint, and regional players like Genome or Fonix. Your license jurisdiction and chargeback history are the two biggest approval levers.

Nuvei has become one of the most operator-friendly acquirers for licensed gambling businesses, particularly for operators holding MGA, UKGC, or regulated US state licenses. They have a dedicated iGaming vertical and can support multi-currency settlement, which matters enormously if you're running a LATAM or European operation. Paysafe's acquiring division similarly has deep gambling roots, they've been processing for online casinos since before most current operators were in the industry.

For operators on Curaçao or Anjouan licenses, the acquiring landscape is meaningfully narrower. You'll typically be working with offshore-friendly processors, some of whom operate through less transparent banking relationships. The fees are higher, I've seen discount rates of 6-9% quoted to Curaçao-licensed operators versus 3-5% for MGA licensees, and the reserve requirements are steeper. That's not arbitrary; it reflects the actual risk those acquirers are taking on.

Platform providers like SoftSwiss and EveryMatrix have payment orchestration layers that can route transactions across multiple acquirers. If you're launching on one of these platforms, lean on their existing acquiring relationships as a starting point, they've done the volume to negotiate better rates than a fresh operator can. Just make sure you understand whether those acquiring relationships are contractually yours or the platform's, because that distinction matters enormously if you ever migrate platforms.

One underrated option for operators in certain markets is local acquiring. A Brazilian operator with a SIGAP license, for example, may find that a local Brazilian acquirer offers better approval rates and lower fees for Pix and domestic card transactions than any international processor. Always evaluate local acquiring alongside international options, the conversion rate difference can be 10-20 percentage points on domestic cards.

Selected gambling-friendly acquirers by license jurisdiction compatibility (2025-2026 market)
Acquirer / ProcessorLicenses Typically AcceptedApprox. Discount Rate RangeRolling Reserve (typical)Notes
NuveiMGA, UKGC, Isle of Man, regulated US states3-5%5-10% / 90 daysStrong iGaming vertical; multi-currency settlement
Paysafe AcquiringMGA, UKGC, Curaçao (case-by-case)4-6%5-10% / 90-180 daysDeep iGaming history; also offers Skrill/Neteller integration
UnlimintCuraçao, MGA, Anjouan5-8%8-15% / 180 daysGood for emerging markets and LATAM
Cleo (formerly Payvision)MGA, UKGC, Isle of Man3.5-5.5%5-10% / 90 daysING-backed; strong EU card processing
GenomeMGA, Curaçao5-7%10% / 180 daysSmaller volumes; useful as backup acquirer
Local Brazilian acquirers (e.g., Cielo, Rede)SIGAP (Brazilian license)1.5-3.5%VariesFar better domestic card approval rates

How does your gambling license affect merchant account approval odds?

Your license is the single most important factor in acquiring approval. MGA and UKGC licenses unlock the widest pool of acquirers and lowest fees. Isle of Man and Gibraltar are close behind. Curaçao and Anjouan licenses narrow your options significantly and push fees up. A regulated US state license (New Jersey, Michigan, Pennsylvania) is extremely strong but only usable within that state's player base.

The reason licensing matters so much to acquirers is that it signals regulatory oversight. An MGA license means the operator has passed AML/KYC audits, maintains segregated player funds, and is subject to ongoing compliance monitoring. That reduces the acquirer's risk of being pulled into a regulatory enforcement action. Curaçao's older B2B sublicense model offered almost none of that assurance, which is why Curaçao's 2023 gaming law reforms (the National Ordinance on Offshore Games of Hazard, or NOOGH) were watched closely by the acquiring community. The new Curaçao Gaming Authority framework, with mandatory AML compliance and player fund requirements, should gradually improve acquiring access for Curaçao operators, but it'll take time for acquirers to update their risk models.

Anjouan (Comoros) licenses are the newest offshore option and sit at roughly the same tier as old-model Curaçao in acquirer perception, useful for getting operational quickly, but you'll pay for it in processing fees and reserve requirements. I'd treat an Anjouan license as a bridge, not a destination, unless your business model is genuinely crypto-first and card processing is secondary.

If you're targeting the US market, the acquiring question is almost moot at the federal level because you need a state-by-state license, and each state's licensed operators work with acquirers approved within that regulatory framework. New Jersey's DGE, for instance, has an approved vendor list that includes specific acquiring relationships. Michigan and Pennsylvania are similar. The good news is that regulated US state licenses are extremely acquirer-friendly, the bad news is that each license costs $500,000-$2M+ and takes 12-24 months to obtain.

License jurisdiction vs. acquiring access and typical processing costs
License JurisdictionAcquirer PoolTypical Discount RateReserve RequirementEstimated License Cost
UKGC (UK)Widest, most major acquirers2.5-4.5%5% / 90 days£25,000-£50,000+ application; ongoing fees
MGA (Malta)Very wide, Tier 1 acquirers accessible3-5%5-10% / 90 days€25,000 application + annual fees
Isle of Man / GibraltarWide, comparable to MGA3-5%5-10% / 90 daysSimilar to MGA range
Curaçao (new CGA framework)Moderate, specialist acquirers5-8%8-15% / 180 days~$15,000-$30,000 (new framework)
Anjouan (Comoros)Narrow, offshore specialists only6-9%10-15% / 180 days~$10,000-$20,000
US State (NJ, MI, PA)Narrow but high-quality, state-approved2.5-4%Varies by state$500,000-$2M+

What documents and information do you need to apply for a gambling merchant account?

The underwriting package for a gambling merchant account is substantially more involved than a standard business application. Expect to provide corporate documents, your gambling license, AML/KYC policy documentation, a business plan with processing volume projections, proof of player fund segregation, and, if you have history, at least three months of chargeback and processing statements.

Here's what a complete underwriting package typically looks like in practice: Certificate of incorporation and corporate structure chart showing ultimate beneficial owners (UBOs); copies of gambling license(s) and any associated regulatory correspondence; AML/KYC policy and procedures document, acquirers want to see this is real, not a template you downloaded; responsible gambling policy; website URL and screenshots of the live or staging environment showing age verification, terms and conditions, and responsible gambling tools; bank statements for the business (typically 3-6 months); and processing history if available, including chargeback ratio data.

The UBO disclosure requirement catches operators off guard more than anything else. If your corporate structure runs through nominee directors or has layers of holding companies in opaque jurisdictions, acquirers will either reject the application or spend months requesting additional documentation. Simplify your corporate structure before you apply, it's worth the legal cost. I've seen applications stall for four months because the acquirer couldn't get comfortable with a three-layer offshore holding structure.

Your website needs to be substantially complete before most acquirers will underwrite you. They want to see responsible gambling tools (deposit limits, self-exclusion, reality checks), clear terms and conditions, an age verification mechanism, and jurisdictional restrictions properly disclosed. If you're applying before your site is live, have a detailed staging environment ready. Some acquirers will work with a detailed business plan and mock-up, but it adds weeks to the timeline.

For operators using a white-label platform like SoftSwiss's BGAMING platform or EveryMatrix's CasinoEngine, the platform provider often has a pre-existing relationship with acquirers and can facilitate a faster underwriting process. This is one of the genuine advantages of the white-label model, the platform's compliance infrastructure can partially substitute for documentation you'd otherwise need to produce from scratch.

What do rolling reserves actually cost operators and how do you manage them?

Rolling reserves are the most misunderstood cost in gambling payment processing. An acquirer holds back 5-15% of your gross processing volume for 90-180 days as a chargeback buffer. On a $1M monthly processing volume at 10%, that's $100,000 per month tied up, $900,000 locked at any given time during a 90-day cycle. This is real working capital you cannot access.

The mechanics work like this: each day's processing batch has a percentage withheld, which is released on a rolling basis after the reserve period expires. So if your reserve is 10% for 180 days, you're always carrying roughly $600,000 in withheld funds on $1M monthly volume. That's not a fee, you get it back, but it's a significant working capital constraint that operators routinely underestimate when building their financial model. I've seen operators run into cash flow problems six months into launch because they hadn't modeled the reserve build-up correctly.

Reserve percentages are negotiable, particularly once you've demonstrated a clean chargeback history over 6-12 months. Starting reserves of 10% can often be reduced to 5% after a year of clean processing. Some acquirers will also accept a letter of credit or bank guarantee in lieu of a rolling reserve, which can be more capital-efficient depending on your banking relationships and the cost of the guarantee facility.

The practical implication for launch planning: build 6-9 months of reserve accumulation into your working capital requirements. If you're projecting $500K/month in card processing volume and your reserve is 10% for 180 days, you need roughly $300,000 in reserves tied up before the cycle stabilizes. That's money that needs to come from your operating capital, not from player deposits. Mixing player funds with reserve management is a compliance violation in most jurisdictions anyway.

How do chargebacks threaten your gambling merchant account and what's the threshold?

Visa and Mastercard both enforce chargeback monitoring programs with a 1% ratio threshold. Breach 1% for two consecutive months and you're in a monitoring program. Breach it for four to six months and your merchant account can be terminated and your business placed on the MATCH list, effectively blacklisting you from card processing. Gambling operators typically see chargeback rates of 0.5-2% without active management.

Gambling chargebacks are almost entirely driven by two behaviors: friendly fraud (players claiming they didn't authorize a transaction after losing) and failed KYC (players disputing charges when their account gets suspended during verification). The first is a marketing and UX problem; the second is a compliance process problem. Both are solvable, but they require deliberate attention. An operator who launches with a frictionless deposit flow but no deposit confirmation emails, no clear transaction descriptors, and no proactive KYC will hit 2%+ chargebacks within 90 days.

Transaction descriptors are underrated. When a player sees a cryptic billing descriptor like 'PVTLTD*GAMING' on their bank statement, they dispute it. When they see 'CasinoName.com +1-800-XXX-XXXX', they recognize it and call you first. This single change, a clear, recognizable descriptor, can reduce friendly fraud chargebacks by 20-30%. Most acquirers allow you to set this; use it.

Chargeback management tools like Verifi (Visa's CDRN) and Ethoca (Mastercard's) allow you to receive dispute alerts and issue refunds before they become formal chargebacks. These services cost money, typically $30-$50 per alert, but each alert you resolve costs far less than a formal chargeback in terms of fees and ratio impact. For any operator processing more than $200K/month, these tools are not optional.

If you do get terminated and end up on the MATCH list, it's a serious problem. MATCH (Member Alert to Control High-Risk Merchants) is a shared database maintained by Mastercard and used by all major acquirers. Being on it doesn't permanently bar you from processing, but it means every new acquirer will see it, require a detailed explanation, and apply significantly higher reserves and fees. Getting off MATCH requires either the original acquirer to remove you (rare) or waiting five years for the record to expire.

Should you use a payment aggregator or a direct merchant account for online gambling?

For most operators processing under $500K/month, a payment aggregator or payment orchestration platform makes more operational sense than managing direct acquiring relationships. Above that volume, direct merchant accounts almost always win on cost. The real question is whether you have the compliance infrastructure to satisfy a direct acquirer's underwriting requirements at launch.

Payment aggregators in the gambling space, companies like Paysafe's MerchantAccount, or orchestration layers built into platforms like SoftSwiss, pool multiple operators under a single master merchant account. The benefit is faster onboarding (weeks instead of months) and lower documentation requirements. The cost is higher per-transaction fees and less control over your processing relationship. If the aggregator loses their master merchant account, every operator underneath them is immediately affected, I've seen this happen, and it's ugly.

Direct merchant accounts mean you have your own MID (Merchant Identification Number) with the acquirer. You negotiate your own rates, your own reserve terms, and your own processing limits. The downside is that the underwriting process is more rigorous and time-consuming. For a new operator without processing history, this can take 2-4 months. For an established operator with 12+ months of clean statements, it's much faster.

The smart approach for most operators is to start with an aggregator or platform-facilitated acquiring relationship to get live quickly, then transition to direct merchant accounts once you have 6-12 months of clean processing history to show underwriters. Use that history aggressively, it's your strongest negotiating asset. An acquirer who sees $1M/month in processing at 0.6% chargeback ratio is a very different conversation than an acquirer reviewing a business plan with no history.

What alternative payment methods should sit alongside your gambling merchant account?

Card processing should never be your only payment channel. E-wallets (Skrill, Neteller, MuchBetter), open banking / bank transfer solutions, voucher systems (Paysafecard), and crypto wallets each serve different player segments and provide redundancy if your card processing is disrupted. In some markets, Brazil, Germany, the Netherlands, APMs now represent the majority of gambling deposits.

Skrill and Neteller, both owned by Paysafe, are the default e-wallet integrations for European-facing operators. They handle the card-to-wallet funding on their side, which means the transaction that hits your merchant account is a wallet-to-operator transfer rather than a direct card transaction, this can meaningfully reduce your chargeback exposure because wallet disputes go to Paysafe, not back to your acquiring relationship. The trade-off is that Paysafe charges operators a fee (typically 1.5-2.5% for gambling merchants) and has its own compliance requirements.

MuchBetter has carved out a strong position in the gambling e-wallet space, particularly for mobile-first operators. Their fraud rates are low, their onboarding is clean, and they've maintained gambling as a core use case rather than treating it as a compliance headache the way some larger fintechs do. Worth integrating early.

Open banking payments, where players authorize a direct bank transfer via their banking app, are growing fast in the UK (via Pay by Bank / Open Banking infrastructure), Germany, and the Netherlands. They have zero chargebacks by design (push payments can't be reversed the way card pulls can), lower fees than cards, and high approval rates. The limitation is that they don't work for withdrawals in the same way, so you still need a separate payout solution.

Crypto deserves a pragmatic assessment rather than either hype or dismissal. For offshore operators, crypto (primarily USDT, BTC, ETH) can represent 20-40% of deposit volume, and it sidesteps the card acquiring problem entirely. Platforms like CoinsPaid or BitPay offer gambling-specific crypto processing. The compliance burden shifts to crypto AML, you need chain analysis tools like Chainalysis or Elliptic to screen incoming transactions. But for operators whose player base skews crypto-native, this is a genuine primary payment channel, not a novelty.

What does a gambling merchant account actually cost, all-in?

The true all-in cost of card processing for an online gambling operator is typically 4-10% of gross card volume, when you account for the discount rate, scheme fees, chargeback fees, and the implicit cost of tied-up rolling reserves. Setup fees range from $500 to $5,000+. Operators who budget only for the headline discount rate consistently underestimate their payment costs by 30-50%.

Let's break down the cost components honestly. The discount rate (MDR) is the headline number, 3-8% depending on license, volume, and history. On top of that, you'll pay card scheme fees: Visa and Mastercard charge interchange plus assessment fees that typically add 0.3-0.8% depending on card type (premium cards cost more) and geography. Then there are per-transaction fees, typically $0.10-$0.30 each, which matter more at lower average transaction values. Chargeback fees run $25-$100 per incident. And then there's the rolling reserve, not a fee, but real capital tied up.

A realistic cost model for a mid-size operator processing $500K/month in cards might look like: MDR of 5% = $25,000; scheme fees of 0.5% = $2,500; per-transaction fees at $0.20 on 5,000 transactions = $1,000; chargeback fees on 30 chargebacks at $50 = $1,500; total direct cost = $30,000, or 6% of volume. Plus $50,000 in rolling reserves accumulating during the first 6 months. That's the real picture.

Setup fees vary widely. Some acquirers charge nothing upfront and recover costs through higher rates. Others charge $1,000-$5,000 for underwriting and integration. Payment orchestration platforms like Spreedly or Primer, which route transactions across multiple acquirers, add their own per-transaction fee (typically $0.05-$0.15) but can optimize approval rates and reduce overall processing costs at scale. The ROI calculation on an orchestration layer usually turns positive around $200K-$300K/month in processing volume.

Illustrative all-in payment cost breakdown for a $500K/month gambling operator
Cost ComponentRate / AmountMonthly Cost (on $500K volume)Notes
Merchant Discount Rate (MDR)5%$25,000Negotiable; lower with volume and clean history
Card Scheme Fees (Visa/MC)~0.5%$2,500Varies by card type and geography
Per-Transaction Fees$0.20 × 5,000 txns$1,000Higher per-unit cost at low avg. transaction value
Chargeback Fees$50 × 30 chargebacks$1,5000.6% chargeback rate assumed
Chargeback Alert Services (Verifi/Ethoca)~$40 × 50 alerts$2,000Prevents formal chargebacks; strongly recommended
Rolling Reserve (capital cost)10% held 180 days$50,000 tied up (building)Not a fee, returned after reserve period
Total Direct Monthly Cost~6.4% of volume~$32,000Excluding reserve capital cost

How long does it take to get approved for a gambling merchant account?

Approval timelines for a gambling merchant account range from two weeks (through a platform aggregator with an existing acquirer relationship) to four to six months (for a direct acquiring relationship with a major processor requiring full underwriting). The single biggest delay factor is incomplete documentation, specifically corporate structure clarity and AML policy completeness.

The fastest path to live card processing is through a white-label or turnkey platform that has pre-negotiated acquiring relationships. SoftSwiss, for example, has established acquiring and payment processing infrastructure that new operators on their platform can access relatively quickly, sometimes within 2-4 weeks of completing their own compliance onboarding. The trade-off is that you're processing under the platform's umbrella, which affects your negotiating leverage and portability.

For a direct merchant account application, the realistic timeline breaks down roughly as follows: document preparation and corporate structure review (2-4 weeks if you're organized, longer if you need to clean up your structure); initial acquirer review and questions (2-4 weeks); site review and compliance assessment (1-3 weeks); final approval and integration (1-3 weeks). That's a best-case 6-8 weeks, and 3-4 months is more common for operators who haven't done this before.

The most common delays I see: UBO documentation that requires additional notarization or apostille; AML policy documents that are clearly templates rather than operational procedures; websites that aren't sufficiently complete to satisfy the acquirer's site review; and processing history that shows elevated chargebacks from a previous operation (even if you can explain it). Address all of these before you submit, not after the acquirer flags them.

What are the biggest mistakes operators make with gambling merchant accounts?

The most expensive mistakes are: relying on a single merchant account, failing to model rolling reserve working capital requirements, ignoring chargeback management until ratios are already in breach territory, and choosing a license jurisdiction based solely on cost without considering its impact on acquiring access and fees.

Single-acquirer dependency is the one that causes the most acute pain. An acquirer can terminate your account with 30 days' notice, or immediately for cause, and if that's your only card processing relationship, you have zero card deposits until you find a replacement, which takes weeks to months. Every operator above $100K/month in card volume should have at least two active acquiring relationships. Yes, managing two underwriting relationships is more work. It's still far less painful than explaining to your investors why deposits dropped to zero for six weeks.

The rolling reserve working capital problem is a financial modeling failure, not a payment processing failure. I've reviewed business plans from sophisticated operators who had detailed projections for game content costs, marketing spend, and licensing fees, but had simply written 'payment processing: 5%' as a line item without modeling the reserve build-up. When you're growing fast, reserves accumulate fast. Budget for it explicitly.

Chargeback management is often treated as a reactive problem rather than a proactive one. By the time your ratio hits 1.2%, you're already in breach territory and your acquirer is sending warning letters. The operators who maintain clean ratios do it through a combination of clear transaction descriptors, fast KYC resolution, proactive dispute alerts (Verifi/Ethoca), and a customer service team that resolves player complaints before they escalate to disputes. None of this is complicated, it just requires consistent attention that many operators deprioritize during launch when they're focused on acquisition.

Finally, the license-cost-optimization trap: choosing Anjouan over MGA to save $30,000 in licensing fees, then paying an extra 2-3% in processing fees on $5M annual card volume. That's $100,000-$150,000 per year in higher processing costs to save a one-time $30,000 licensing fee. The math rarely works. Factor processing cost implications into your license jurisdiction decision from the start.

Frequently asked questions

Can I use Stripe or PayPal for an online gambling site?
No. Both Stripe and PayPal explicitly prohibit online gambling in their acceptable use policies. Attempting to process gambling transactions through either platform risks immediate account termination and potential fund holds. You need a specialist high-risk gambling merchant account from a provider that explicitly supports MCC 7995.
How much does a gambling merchant account cost to set up?
Setup fees range from $0 (some acquirers recover costs through higher rates) to $5,000+ for full direct underwriting. Ongoing costs are typically 3-8% of gross card volume as a discount rate, plus scheme fees, per-transaction fees, and chargeback fees. Rolling reserves of 5-15% are withheld for 90-180 days, not a fee, but a real working capital cost.
Does my gambling license affect my merchant account approval?
Yes, dramatically. MGA and UKGC licenses open the widest pool of acquirers at the lowest rates. Curaçao and Anjouan licenses narrow your options and push fees up by 2-4 percentage points. Regulated US state licenses are strong but jurisdiction-specific. License jurisdiction is arguably the single biggest factor in your acquiring cost structure.
What is a rolling reserve and when do I get my money back?
A rolling reserve is a percentage of each day's processing volume withheld by the acquirer as a chargeback buffer. Typical terms are 5-15% held for 90-180 days, then released on a rolling basis. You always get it back, it's not a fee, but it's real capital tied up that you need to budget for, especially during growth phases.
What chargeback rate will get my gambling merchant account terminated?
Visa and Mastercard both monitor at a 1% chargeback-to-transaction ratio threshold. Breaching this for multiple consecutive months can result in placement on a monitoring program and ultimately account termination. Gambling operators typically need to actively manage chargebacks to stay below 0.8% as a safety buffer.
How many merchant accounts should an online casino have?
At minimum two, ideally three for operators processing above $500K/month in cards. Single-acquirer dependency is one of the most common and avoidable operational risks in online gambling, a termination or account freeze with no backup means zero card deposits until a replacement is approved, which takes weeks to months.
Can crypto replace a traditional gambling merchant account?
For offshore operators with a crypto-native player base, crypto can represent 20-40% of deposits and significantly reduce card processing dependency. But most mainstream players still expect Visa/Mastercard. Crypto should be treated as a complementary channel with its own AML compliance requirements (chain analysis tools like Chainalysis), not a wholesale replacement for card acquiring.
What is the MATCH list and how do I avoid ending up on it?
MATCH (Member Alert to Control High-Risk Merchants) is a shared Mastercard database of terminated merchants used by all major acquirers. You end up on it if an acquirer terminates you for excessive chargebacks, fraud, or policy violations. Being on MATCH doesn't permanently bar you from processing, but it makes acquiring significantly harder and more expensive for up to five years.
How long does gambling merchant account approval take?
Through a platform aggregator with existing acquiring relationships: 2-4 weeks. For a direct merchant account application with a major processor: typically 2-4 months for a well-prepared operator, longer if documentation issues arise. The biggest delay factor is incomplete corporate structure documentation and AML policy.
Are gambling merchant account fees tax-deductible for operators?
Generally yes, payment processing fees are ordinary business expenses and deductible in most jurisdictions where gambling operators are licensed and taxed. However, tax treatment varies by jurisdiction and corporate structure. Consult a tax advisor familiar with your specific licensing jurisdiction, this is not an area to generalize.

Comments

No comments yet, be the first.

Comments are moderated before they appear.