Khipu
Khipu SpA is a Chilean account-to-account (A2A) payment-initiation provider that turns ordinary bank transfers into a checkout method. It operates under a civil-law collection mandate, initiating transfers from the payer's own bank and settling proceeds to a local merchant account. Chile is its home and strongest market, with coverage in Argentina and Peru. For iGaming operators, it’s essentially a low-cost, card-independent deposit rail with native payer-identity binding.
Why Operators Choose Khipu
Khipu is a conversion and acquisition alternative tool, not an online payment platform in the full sense.
💡 Khipu solves one problem: allowing a Chilean player to fund an account from a bank balance without a card, at a merchant cost that is a fraction of card interchange fees.
It solves nothing else. It does not route, fail over, disburse, or underwrite. Any operator treating it as a casino payment solution rather than a single rail inside a wider stack will discover the gap at the withdrawal step.
Its fit is strongest in Chile and materially weaker elsewhere. Argentina and Peru have published pricing and bank lists, but both markets are dominated by rails Khipu does not own — Mercado Pago and MODO in Argentina, Yape, Plin and PagoEfectivo in Peru. As an online casino payment method, it should be positioned as a secondary or complementary deposit option in Chile and, on current evidence, as a fallback at best in the other two.
Strengths
Chilean coverage is broad for a single connection: twelve banks, including BancoEstado, whose CuentaRUT account underpins mass-market financial inclusion, plus seven wallets and prepaid products, including Mercado Pago, Coopeuch, Copec Pay, Superdigital, and Tapp Caja Los Andes. Settlement notifications are JOSE JWS-signed and itemized, carrying payer name, payer identity number, payer email, originating bank, fee scheme, gross amount, and commission per transaction — reconciliation-grade data that most alternative payment methods do not expose.
Player advantages. No card or account credentials are shared with the operator; authentication happens inside the player’s own banking session, typically with a two-factor code and PIN. Funding is in local currency, and for players without cards (a substantial segment in Chile), it is an access route rather than a convenience.
Commercial advantages. Chilean pricing is published rather than negotiated from an opaque base: 0.69% plus IVA (value-added tax) on the amount collected, or a fixed UF 0.0105 plus IVA per transaction, UF being Chile’s inflation-indexed unit of account.
Argentina is 0.6% plus IVA; Peru is S/1.4 plus IGV; Mexico is MXN 5.5 plus IVA. Volume discounts are offered in every market. Because a completed credit transfer is not reversible by the payer through a scheme process, there is no card-style chargeback liability and no representment cost.
Technical advantages. Khipu’s casino payment integration is relatively straightforward, with the platform prioritizing operational reliability over complex payment orchestration. Operators can dynamically display the list of supported banks during checkout, helping players start deposits with fewer steps. Payments can also be linked to a specific national identity number, reducing the risk of third-party funding and improving AML controls.
Settlement notifications include detailed payment information for automated reconciliation, while refunds can be processed until 01:00 on the following business day. Khipu also provides ready-made integrations for major e-commerce platforms and publishes regular independent security audit reports, giving operators greater visibility into the platform’s security posture.
Limitations
The decisive constraint is that Khipu only works with clients holding a local bank account at an institution regulated in the country of operation, and that it does not carry out operations for clients requiring cross-border payments. An offshore-licensed operator therefore cannot contract directly. It must either incorporate locally or reach Khipu through an aggregator, and Khipu classifies aggregators as risk clients subject to exceptional mitigation. That is a hard limit on Khipu casino integration for most internationally licensed brands.
Regulatory exposure in the core market is also a major limitation, and it is not Khipu’s fault. Chile has no online gambling license.
⚠️ In September 2025, the Supreme Court held that online gambling is illegal unless expressly authorized, naming Polla Chilena de Beneficencia, Lotería de Concepción and Teletrak as the only authorized entities, and ordered internet service providers to block unlicensed sites.
Payment-side enforcement has escalated sharply: from August 1, 2026, banking and non-banking payment-method operators must withhold 19% VAT on each transaction to listed non-registered platforms; any payment provider for gambling in Chile is now a potential withholding agent and an enforcement target.
Provider policy compounds this. Khipu’s KYC policy lists physical and online betting sites, online casinos and gaming clubs as activities requiring special supervision, referable to its Crime Prevention Officer, and adds that regulated casinos constituted in Chile fall among activities the settlement bank must explicitly authorize. Khipu reserves the right to disable accounts whose products are considered illegal, and requires the payment description field to itemize goods or services rather than carry a cart code. Acceptance is discretionary and bank-dependent, not automatic.
Operationally, Khipu has several important limitations operators should account for:
- No published payout product: Khipu supports deposits, but operators need a separate provider or banking arrangement for withdrawals.
- No routing or failover: Failed transactions cannot be automatically redirected to another payment provider.
- Limited built-in risk tooling: Khipu does not publish a 3-D Secure equivalent, device fingerprinting, configurable fraud rules, or a merchant dispute console.
- No FX capability: Transactions are processed in the local currency of each market and settled locally.
- Deposit limits may restrict higher-value transactions: New individual collection accounts in Chile are capped at CLP 50,000 per payment until the limit is increased by agreement. Daily transfer limits imposed by individual banks may create additional restrictions outside Khipu’s control.
Khipu: Markets and Availability
Although Khipu operates in several Latin American markets, its commercial value to iGaming operators differs considerably between them. The table below highlights where the payment provider is most relevant and the key factors affecting deployment in each jurisdiction.
| GEO | Provider Presence | Relevance for Casinos and Sportsbooks | Typical Setup | Key Alternatives | Limitations |
|---|---|---|---|---|---|
| Chile | Home market. Twelve banks plus seven wallet and prepaid products published. Direct merchant acquiring available to locally banked entities. | High as a deposit rail. Card penetration gaps and entrenched transfer behaviour make A2A a genuine first-deposit route. | Direct contract for a Chilean entity with a local bank account; otherwise via a local PSP or aggregator. | Webpay Plus, Mach, Servipag, Multicaja, Klap, Mercado Pago, bank transfer, cards. | No online gambling licence exists; Supreme Court blocking orders; criminal complaint against PSPs; 19% VAT withholding by payment operators from 1 August 2026; gambling requires enhanced due diligence and bank authorization. |
| Argentina | Nine banks plus Mercado Pago published. Local entity registered in Mendoza. Pricing 0.6% plus IVA with direct collection to the merchant account. | Moderate to limited. Provincially licensed operators must settle in ARS through local accounts, and the market standard is wallet-led. | Via a local PSP or acquiring partner in the licensed province. | Mercado Pago, MODO, DEBIN, Rapipago, Pago Fácil, debit cards. | No national license; separate provincial licenses and .bet.ar domains required; RENAPER biometric KYC mandatory; payment intermediaries act as perception agents for the indirect tax on online betting under Decreto 293/2022. |
| Peru | Four banks published (BCP, Interbank, Scotiabank, BBVA). Pricing from S/ 1.4 plus IGV, soles or USD. | Limited. Presence is confirmed, but consumer adoption and merchant acquiring depth in iGaming are not publicly disclosed. | Via a local PSP alongside a MINCETUR-licensed entity. | Yape, Plin, PagoEfectivo, Niubiz and Izipay card acquiring, interbank transfers. | License, local presence and MINCETUR-approved supply chain required; crypto prohibited; narrow bank coverage limits reach relative to wallet rails. |
| Mexico | Pricing page published (from MXN 5.5 plus IVA). No Mexican banks appear in the official coverage list, and technical documentation states operations in Argentina, Chile and Peru only. | Low. Evidence is contradictory and insufficient to support a cashier decision. | Not established. | SPEI, CoDi, OXXO, Mercado Pago, card acquiring. | Federal SEGOB permit regime; provider coverage in Mexico is not publicly disclosed and must be confirmed during commercial onboarding. |
💭 Operator note: Khipu’s footprint is Southern Cone and Andean only. There is no Brazil, Colombia, or Ecuador coverage, so operators building a pan-LatAm cashier cannot use it as a regional layer — it is a country-specific rail that must be procured alongside a regional provider. Contact the GR8_TECH team to design a payment stack that combines Khipu with local acquiring, payout rails, and alternative payment methods across Latin America.
Deposits, Withdrawals and Settlement
Khipu’s product set comprises Instant Payments (collection), Automatic Payments (PAC mandates and direct debit, also collection), and Open Finance data services. All three move money toward the merchant or move data. Operators must source payouts elsewhere.
| Area | Operator View |
|---|---|
| Deposit availability | Redirect or in-app A2A initiation from a supported bank, wallet or prepaid account. Strongest in Chile across twelve banks and seven wallet or prepaid products; narrower in Argentina and Peru. Payment links, email requests, and pre-selected bank flows are supported. |
| Withdrawal availability | No payout or disbursement product is published in Khipu’s documentation. Some distributing PSPs list a payout capability in their method matrices, but this is not documented by Khipu and their market listings are internally inconsistent. Withdrawal support must be confirmed during commercial onboarding. |
| Typical deposit speed | Player-side completion in seconds to minutes once bank authentication succeeds. Confirmation is asynchronous: the redirect indicates the transfer is in verification, not that it has completed. Credit only on verified webhook or API status. |
| Typical withdrawal speed | Not applicable through Khipu. Where operators pay out by local bank transfer, provider transfer time is separate from operator approval queues and first-withdrawal KYC, which typically dominate total elapsed time. |
| Settlement model | Three published modalities: collection into Khipu’s account; collection into a segregated Khipu account reserved for the merchant; or direct collection into the merchant’s own account with Khipu acting purely as technology provider and billing fees separately. In the first two, Khipu deducts its commission and settles the net balance in a consolidated daily payment. Single currency per market; no FX. |
| Deposit-only risk | Accepting Khipu deposits without offering a matching withdrawal method is the default state, not an edge case. Operators must design a bank-transfer payout path from day one and communicate it before first deposit. |
| Deposit–withdrawal asymmetry | Near-instant funding against payouts governed by approval, KYC and banking cut-offs. The perceived gap is widest for first withdrawals and for players who deposited outside banking hours. |
| What depends on the setup | Settlement day (next business day per pricing and documentation; up to the third banking business day per the standard mandate), commission scheme, collection modality, per-transaction and monthly caps, gambling acceptance, and whether the bank holding the collection account authorises the activity. |
Withdrawal Availability
Practically speaking, Khipu is a payout destination rather than a payout processor or a purpose-built online casino payment method. A Chilean player who funded via Khipu is withdrawing to the same bank account, but the operator initiates that transfer through its own banking or disbursement provider instead of Khipu.
Building the Payment Stack Around Khipu
Khipu cannot serve as a complete payment layer. It covers one direction of one flow in up to three markets, and must be combined with acquiring, payouts, orchestration and risk tooling to produce a working cashier.
| Complementary Payment Layer | Why Operators Need It | Priority Markets |
|---|---|---|
| Local card acquiring | Khipu reaches only banked players willing to authenticate in their banking session. Debit and credit remain necessary for reach, for higher-value deposits above bank transfer limits, and for players who abandon at the bank-login step. | Chile, Argentina, Peru |
| Local wallets and instant rails | Wallet rails dominate where Khipu is weakest. In Argentina, LOTBA-regulated operators work with locally standard wallets; in Peru, wallet adoption exceeds bank-portal transfer behavior. | Argentina, Peru |
| Cash and voucher methods | A meaningful unbanked and under-banked segment cannot use A2A initiation at all. Voucher and agent networks convert players Khipu structurally cannot reach. | Peru, Argentina, Chile |
| Dedicated payout rails | The single largest gap. Local bank-transfer disbursement or a mass-payout provider is mandatory in every market where Khipu deposits are offered. | All |
| Payment orchestration, routing and failover | Khipu exposes no cascading, retry, or alternate-provider logic. Bank-side outages translate directly into failed deposits without an orchestration layer holding the routing rules. | All |
| Fraud and identity tooling | Device fingerprinting, velocity rules, risk scoring and identity verification are not provider-supplied and must be operator-side or sourced from the wider stack. | All |
| Treasury and FX infrastructure | Settlement is single-currency and in-country. Converting and repatriating CLP, ARS or PEN balances is entirely the operator’s problem. | All |
💭 The final payment mix should be determined by the answers to the three questions in order:
- Do you hold a license and a local bank account in the market?
- Does a compliant payout path exist at your operation before deposits are switched on?
- Does the deposit mix still perform when Khipu is removed for a day?
A rail that fails all three tests should not be primary. The GR8_TECH team can help evaluate whether Khipu is the right fit for your operation and recommend the payment stack needed to support your commercial, regulatory, and operational requirements.
Most Common Fraud and Risks
Like any casino payment system based on account-to-account (A2A) transfers, Khipu shifts some fraud prevention responsibilities to the operator. While bank-side authentication and identity verification reduce certain risks, operators remain responsible for protecting player accounts, monitoring suspicious activity, and ensuring funds are credited only after payment confirmation.
The main operational risks include:
- Third-party funding and AML exposure: Deposits from accounts that do not belong to the registered player remain the primary compliance risk. Khipu helps mitigate this by linking payments to a verified national identity number, but operators should enforce this control on every deposit.
- Account takeover and bonus abuse: Bank authentication alone does not prevent compromised player accounts or multi-accounting. The operator’s wider iGaming payment solutions should provide additional fraud detection.
- Premature payment crediting: Deposits should only be credited after Khipu confirms successful payment, not when the player returns from their banking session.
- Limited built-in fraud tooling: Khipu provides secure payment authentication and detailed settlement data but does not include advanced fraud controls such as device fingerprinting, configurable risk rules, or merchant dispute management.
💡 The most effective control is verifying that every deposit originates from the same individual who owns the gambling account. Combined with operator-side fraud monitoring, this significantly reduces AML exposure, third-party funding, and many common payment disputes.
Compliance
Khipu’s controls protect Khipu. They discharge none of the operator’s licensing, AML, or player-protection obligations, and in Chile the provider’s own acceptance decision is contingent on its settlement bank.
| Domain | Provider Position | Operator Implication |
|---|---|---|
| PCI DSS | Not applicable to the core flow; no card data is captured. Khipu publishes monthly third-party perimeter vulnerability reports and a security validation report. | Card scope persists for every other casino payment method in the cashier. Khipu narrows the surface; it does not remove the obligation. |
| Authentication | Payer authenticates inside their own bank, typically with a second factor and PIN. No 3-D Secure equivalent is offered or needed. | Session, device and behavioral controls remain operator-side. Bank authentication proves account access, not player identity at your brand. |
| AML and KYC | Merchant-level due diligence under a published KYC policy, with screening against OFAC, United Nations, judicial, UAF and CMF sources. Gambling is an activity requiring special supervision. | Provider merchant KYC is not player KYC. Full onboarding, source-of-funds and enhanced due diligence obligations remain with the operator. |
| Account-ownership verification | Identity-based payment verification restricts a payment to a specified national identity number and returns the payer’s identity in the settlement data. | Configure and enforce it. Payment-account ownership evidences the funding source; it does not by itself prove gambling-account ownership. |
| Responsible gambling | No responsible gambling functionality is offered or claimed. | Deposit limits, cool-off, self-exclusion and affordability checks are entirely platform-side. |
| Transaction monitoring | Khipu monitors for suspicious activity under Chilean Law 19.913 and reports as required. | Operator AML monitoring, thresholds and suspicious-activity reporting are unaffected and must run independently. |
| Local gambling restrictions | Acceptance is discretionary; Khipu may suspend clients whose activity may contravene national or foreign law, and may require explicit bank authorisation. | Confirm gambling acceptance in writing before launch and re-confirm after any change in Chilean law. Assume no contractual guarantee of continuity. |
| Tax withholding | Payment-method operators in Chile are withholding agents for 19% VAT on transactions to listed non-registered platforms from 1 August 2026. In Argentina, payment aggregators act as perception agents for the indirect tax on online betting. | Model the withholding into deposit economics and cashier messaging. A deducted deposit is a support ticket and a conversion loss. |
| Cross-border restrictions | Khipu does not serve clients requiring cross-border payments and requires a locally regulated bank account. | Local incorporation and local banking, or an aggregator relationship, are prerequisites — not optimizations. |
| Data protection | Published data-protection policy; settlement data includes payer name, identity number and email. | Payer personal data received through settlement files falls under the operator’s own retention, minimization and access controls. |
| Recordkeeping | Electronically signed payment receipts and itemized daily settlement reports; discrepancy claims must be raised within five days of the report. | Automate settlement-file ingestion and exception handling. Missing the five-day window means the settlement is deemed accepted. |
Conclusion: When Does Khipu Make Sense?
Khipu is best viewed as a specialized deposit rail rather than a complete payment platform. For operators targeting Chile, it can improve conversion and provide an alternative to card payments, but it delivers the greatest value as part of a broader payment strategy. A complete cashier still requires complementary solutions for payouts, fraud prevention, payment orchestration, and compliance.
By combining Khipu with the right online payments infrastructure, operators can build a payment stack that balances local player preferences with the operational resilience needed to support long-term growth.
Share
