TODA Pay Review
Is It the Right Payment Solution for Your iGaming Business?
Adequate
TODA Pay is the trading name of SMART PAYMENTS TECHNOLOGIES LTD, a 2022-vintage Canadian payment aggregator built for high-risk verticals: iGaming, sports betting, forex, crypto exchanges and high-risk eCommerce. It accepts cards (Visa, Mastercard, Maestro), Open Banking in select European markets, alternative payment methods (Klarna, Skrill, Paysafecard, NETELLER, Multibanco, iDEAL, eps, MB WAY, Rapid Transfer, Interac Online) and mobile commerce flows, then settles to the merchant either in fiat through SEPA/SWIFT or in USDT/USDC stablecoin on a T+2 to T+5 cadence per the provider's own published documentation. The product looks competent on paper, with smart routing over a panel of acquirers, AI fraud screening, 3DS2 and PCI DSS claims, and the Romania-focused content suggests real operational traction in CEE. The transparency floor is among the lowest in our database. The only verifiable license is a Canadian FINTRAC MSB registration (M20438511), which is a registration rather than a regulated authorization. The 'Polish EMI' license claimed on the marketing site is not confirmed in the Polish KNF register and could not be verified by the independent payment-rating agency PayRate42. There are no named executives, no UBO disclosure, no Trustpilot profile, no G2 reviews, no Capterra reviews, no Glassdoor presence, no GitHub organization and no public developer portal. Two other high-risk payment processors (SignaPay.ca, DomusPay.io) are registered at the same Richmond, BC address. For a small high-risk operator that needs a USDT-settled rail and is willing to do its own due diligence, TODA Pay may be a workable mid-tier choice. It is not the provider for anyone who needs a licensed counterparty on a regulator-facing compliance map, a verifiable review track record or named ownership.
Quick Info
- Type
- Local/Regional PSP
- Founded
- 2022
- HQ
- Ottawa, Ontario, Canada
- Pricing
- Custom
- APMs
- N/A
- Settlement
- T+2 to T+5 (USDT/USDC); negotiated SEPA/SWIFT for fiat
iGaming Score
- iGaming Fit
- 6.0
- Geographic Coverage
- 6.5
- Security & Compliance
- 4.0
- Fees & Pricing
- 5.5
- Tech & Integration
- 5.0
- User Trust
- 5.0
Our iGaming Score: 5.5/10
Weighted scoring across five criteria
| Criterion | Weight | Score | Rating |
|---|---|---|---|
| iGaming Fit Explicit high-risk and gambling positioning, Romania-specific iGaming blog content, but no named casino references, no SoftSwiss/EveryMatrix/Slotegrator connectors and no dedicated iGaming sales motion published | 30% | 6.0 | Adequate |
| Geographic Coverage Operationally targets Europe, UK, MENA, Africa, GCC and CEE with measurable Romania focus; the only direct licensing footprint is Canadian MSB | 22% | 6.5 | Adequate |
| Security & Compliance PCI DSS claims, 3DS2, AI fraud screening on paper; FINTRAC MSB-only licensing, Polish EMI claim unverified by KNF register or PayRate42, no MGA/UKGC, no SOC 2 / ISO 27001 | 20% | 4.0 | Weak |
| Fees & Pricing No public price card. PSPBox notes no setup fee. The real all-in cost for high-risk gambling typically lands in the 4-6% range, so confirm directly | 16% | 5.5 | Adequate |
| Tech & Integration REST H2H API via Corefy is the only documented integration path. No public dev portal, no GitHub, no SDKs, no plugins, no mobile SDK | 12% | 5.0 | Adequate |
| User Trust Zero verifiable reviews on Trustpilot, G2, Capterra, Glassdoor. PayRate42 and PayAtlas both flag the silence as a transparency concern | 0% | 5.0 | Adequate |
| Overall | 100% | 5.5 | Adequate |
We score each provider on 5 weighted criteria using a 1 to 10 scale. iGaming Fit carries the most weight at 30% because that is what matters most for gambling operators. Geographic Coverage gets 22%. Security & Compliance gets 20%. Fees & Pricing gets 16%. Tech & Integration gets 12%. The final score is a weighted average of those 5. Trustpilot is shown for context but carries no weight, since player reviews of casinos are not a read on B2B acquiring quality.
Score Explanation
Every dimension of this score reflects the same underlying problem: TODA Pay has a functional product on paper and essentially no independent verification of anything that matters. iGaming Fit gets credit for explicit high-risk positioning and a substantive Romania blog post that names real local methods (TopPay, SelfPay, Smith & Smith, BLIK, MultiBanco, RON card processing), which is real operator-facing content rather than template marketing. It loses points for the absence of any named casino client, the absence of SoftSwiss/EveryMatrix/Slotegrator connectors and the absence of a public iGaming case study. Geographic Coverage gets credit for the breadth of currencies advertised (USD, EUR, GBP, AUD, CAD, JPY, NOK, DKK, SEK, PLN, CHF, KZT, RON, TRY, plus stablecoins) and the regional focus on CEE, MENA and Africa. It loses points because the only direct license is a Canadian MSB registration, so the real cross-border coverage rides on TODA Pay's panel of upstream acquiring partners rather than on a regulated EMI or PI license of its own. Security & Compliance is where the score collapses. FINTRAC MSB is a registration with no capital requirement and no consumer-protection regime, the Polish EMI claim is not independently verifiable, PCI DSS is referenced without a published attestation, and there is no MGA, UKGC, MGCB or Curacao gaming-specific license, no SOC 2 Type II, no ISO 27001 and no public penetration testing partner. Fees & Pricing scores neutrally because nothing is published: no setup fee per PSPBox, but no rate card, no rolling reserve disclosure and no FX markup. Tech & Integration is functional through the Corefy connector, which is the only documented path. User Trust is the worst dimension in the scoring system: zero reviews on Trustpilot, G2, Capterra and Glassdoor, which for a payment processor operating since 2022 is unusual, and PayRate42 explicitly flags it as a red signal.
Who Is TODA Pay Best For?
Weighted scoring across five criteria
Recommended For
- Small high-risk operators that need stablecoin settlement. Small-to-mid high-risk operators that need a card-plus-APM acquiring rail and want USDT or USDC settlement to bypass correspondent-banking friction. The T+2 to T+5 stablecoin settlement to a wallet on Tron or Ethereum (per the provider's own documentation) is structurally useful for merchants who have been de-banked or whose primary banking relationships will not handle gambling, forex or crypto exchange flows. Combine that with no setup fee and a panel-of-acquirers smart routing layer and TODA Pay reads as a workable mid-tier high-risk option, but only if you have done independent UBO due diligence and accepted the transparency gap as a known risk.
- Romania-focused casinos and betting operators. Operators with material exposure to Romania, Turkey, the GCC and emerging-market CEE corridors. The Romania blog post specifically calls out RON card processing for Visa and Mastercard, cash voucher integrations with TopPay, Smith & Smith and SelfPay, Apple Pay and Google Pay tokenized wallets and open banking high-value settlements, which is real local-method depth for a market where most pan-European PSPs only cover Visa/MC. For a small CEE casino that wants RON processing plus stablecoin payout, TODA Pay's value proposition is differentiated from a generic global gateway.
- MENA and GCC merchants on emerging-market rails. Forex and CFD brokers that already serve non-US and non-EU markets and want a second or third acquiring relationship for redundancy. The MSB-only licensing means TODA Pay should not be the only counterparty on the compliance map for a regulated brokerage, but as a back-up acquirer to handle traffic that primary PSPs decline (high-decline geos, high-risk customer profiles, recurring-billing forex deposits) it can earn its keep. The smart routing layer is what most brokers buy here.
- Forex brokers looking for a non-US-touching back-up acquirer. Crypto exchanges and white-label crypto operators that need a fiat card rail alongside their on-chain flows. The native USDT/USDC settlement option means the exchange does not need a separate stablecoin off-ramp partner, since fiat deposits land on the exchange's hot wallet directly in stablecoin form. This is operationally clean for crypto-first business models, though the absence of a MiCA CASP license on the settlement leg means EU-exposed exchanges still need a separate licensed counterparty for European traffic.
Not Recommended For
- MGA, UKGC and MGCB-licensed casinos. Casinos licensed by the MGA, UKGC, MGCB, AGCO or any tier-1 gambling regulator that requires PSP counterparties to demonstrate regulated authorization. TODA Pay holds only a FINTRAC MSB registration, which is not equivalent to an EMI or PI license, and the Polish EMI claim on the marketing site is unverified by independent sources and does not surface in the KNF register. For an MGA-licensed casino conducting periodic compliance reviews, TODA Pay would be a hard sell on the regulator-facing side regardless of operational performance. Nuvei, Paysafe and Worldline are the licensed alternatives that pass MGA compliance review without friction.
- US-facing operators. Operators serving the United States in any meaningful way. TODA Pay holds no US state money transmitter licenses and no FinCEN MSB registration, and the Canadian FINTRAC registration does not cover US flows. For US-facing iGaming the licensed acquirers are Nuvei (a US-licensed acquirer with an iGaming track record) and Worldpay; for US crypto payouts BitPay (US MSB) or BVNK (all-50-state MTL) are the structurally correct picks. Trying to route US traffic through TODA Pay creates regulatory exposure on both ends.
- Enterprise operators with SOC 2 vendor requirements. Enterprise operators with mature vendor onboarding processes that require SOC 2 Type II reports, ISO 27001 certificates, named senior management bios, audited financial statements and reference customers. TODA Pay does not publish any of those. The corporate transparency floor here is meaningfully lower than for Adyen, Nuvei, Checkout.com or any other tier-1 PSP, so for an operator processing $5M+/month the diligence delta is too large.
- Compliance teams requiring named UBO disclosure. Compliance and risk teams that require named UBO disclosure as a condition of vendor onboarding. The TODA Pay website discloses departmental structure (Tech, Cybersecurity, Product, Legal, Finance) but not a single individual director or beneficial owner. Public Companies House-equivalent disclosure in BC Canada shows SMART PAYMENTS TECHNOLOGIES LTD, but the registered address (170-6660 Graybar Road, Richmond, or 28-19628 55A Avenue, Langley) is a corporate-services address shared with at least two other high-risk processors (SignaPay.ca, DomusPay.io). For any FATF-respectful operator that level of opacity is a non-starter.
- SoftSwiss / EveryMatrix casinos wanting a connector. Casinos running on SoftSwiss, EveryMatrix, Slotegrator, Digitain or any iGaming platform that benefits from a pre-built payment connector. TODA Pay does not publish iGaming-platform integrations, so integration is custom REST API work via Corefy or direct. CoinsPaid, Praxis Tech and EveryMatrix's own MoneyMatrix have native SoftSwiss connectors and turnkey deployment paths.
- Operators that build vendor confidence partly through public review evidence. TODA Pay has no Trustpilot profile, no G2 reviews, no Capterra listing, no Glassdoor presence and no GitHub footprint. For internal stakeholders who treat public review evidence as a baseline trust signal, the complete silence cannot be argued around.
Geographic Coverage
Per-market verdict, regions, and market focus
One provider, two answers. The verdict flips depending on who is asking, and that is the point. The overall score rates the company. This rates the fit for your market.
Offshore operator
Curaçao / Anjouan licence, serving grey and restricted markets.
Licensed operator
Holds the local licence in a regulated market.
Market-by-market verdict
Won't serve offshore operators in the markets we track.
| Market | Casino | Sportsbook |
|---|---|---|
| RO Romania | Limited43 | Limited43 |
The tier is the verdict. The small number orders providers inside a tier; it is not a provider-level score. Full method on our methodology page.
Regions
- Europe
- UK
- North America
- MENA
- Africa
- Asia-Pacific
- CIS
Coverage Analysis
Operationally global per marketing copy, with measurable focus on Romania, Turkey, the GCC, Kazakhstan, Poland, the UK, Germany, Sweden, Austria, Canada, Australia and emerging-market corridors in Africa and MENA. FATF blacklist jurisdictions are excluded by policy. The directly held licensing footprint is Canadian only, the FINTRAC MSB (M20438511) attached to SMART PAYMENTS TECHNOLOGIES LTD. The Polish EMI claim, if independently verified, would unlock European passporting under PSD2, but as of May 2026 no independent source has confirmed that claim and the KNF EMI register does not surface SMART PAYMENTS TECHNOLOGIES LTD or any TODA Pay-branded entity. The practical implication is that TODA Pay's cross-border reach rides on its panel of upstream acquiring partners (which it does not publicly name) rather than on a passport-portable license of its own. That structure is normal for high-risk aggregators and not inherently a problem, but it does mean any compliance assessment must be done on the upstream acquirers rather than on TODA Pay's own license.
Regional Breakdown
The Romania focus is the most concrete regional play TODA Pay has made. RON card acquiring, cash voucher integration and ONJN-aware gambling positioning suggest real merchant relationships in the Romanian iGaming market, and CEE more broadly (Poland, Czech Republic, Hungary, Bulgaria) is reachable through the same APMs. MENA and GCC are referenced in the marketing copy with no specific named partner or country coverage list, so without local acquiring relationships in Saudi Arabia, UAE, Egypt and similar markets, the MENA pitch is more aspirational than operational. Africa coverage is similarly thin in specifics, since the language about 'exclusive access to advanced payment solutions across Africa' is unsubstantiated by named partners (no Flutterwave, no Cellulant, no MFS Africa partnership disclosed). For real African coverage Flutterwave, Cellulant or PayTabs are the actual specialists. CIS coverage through KZT settlement is real, and Kazakhstan is one of the few non-EU CIS markets TODA Pay can demonstrably handle.
Key Features for iGaming Operators
Products, payment methods, and verticals
Key Products
Card Payment, Card Payout, Open Banking Payment, Alternative Payment Methods, Mobile Commerce Payment, IBAN Bank Transfer Payout, smart routing, crypto settlement (USDT/USDC)
Six customer-facing products plus an orchestration layer. Card Payment accepts Visa, Mastercard and Maestro deposits with high-speed processing and 3DS2, while Card Payout sends real-time payouts to a beneficiary Visa or Mastercard card via Visa Direct or Mastercard Send. Open Banking Payment handles real-time PSD2 bank transfers in the UK, Germany, Sweden and Austria with SCA enforcement. Alternative Payment Methods covers e-wallet top-ups and bank-card alternatives (Klarna, NETELLER, Skrill, Paysafecard, iDEAL, eps, MB WAY, MultiBanco, Rapid Transfer, Interac Online). Mobile Commerce Payment covers Apple Pay and Google Pay tokenized flows on mobile devices. IBAN Bank Transfer Payout sends fiat via SEPA or SWIFT to a beneficiary IBAN. On top of these sits a smart-routing orchestration layer that directs each transaction through the channel most likely to approve it across TODA Pay's panel of upstream acquiring partners (which are not publicly named). The settlement leg offers a choice: fiat through SEPA or SWIFT on a negotiated cadence, or USDT/USDC stablecoin on a T+2 to T+5 cadence per the provider's own published documentation, to a merchant wallet on Tron, Ethereum or another supported chain.
Payment Methods
Card payments cover Visa, Mastercard, Maestro and (per the PayAtlas listing) JCB, UnionPay and RuPay. Card payouts route Visa Direct and Mastercard Send to a beneficiary card with real-time settlement. Alternative payment methods exposed through the Corefy connector include Klarna, eps, iDEAL, MB WAY, MultiBanco, NETELLER, Paysafecard, Rapid Transfer, Skrill Wallet, SEPA Transfer, Interac Online and generic Open Banking. Mobile Commerce Payment covers Apple Pay and Google Pay tokenized flows. Open Banking is offered in the UK, Germany, Sweden and Austria with PSD2 / SCA compliance and real-time bank settlement. IBAN Bank Transfer Payout sends fiat through SEPA or SWIFT to a beneficiary IBAN. For Romania specifically, the marketing blog calls out native RON processing for Visa and Mastercard, cash voucher solutions through TopPay, Smith & Smith and SelfPay, and BLIK as an adjacent option (BLIK is Polish, so the Romania post mixes references, which is worth flagging). For an iGaming operator the high-value methods here are Visa/MC cards, Apple Pay / Google Pay, NETELLER, Skrill and the Romania-specific cash voucher rails. The TODA Pay homepage additionally features Trustly, PayPal and BLIK among its partner logos, not exposed through the Corefy connector but advertised as supported through direct integration. The notable gaps for iGaming are no Brite, no direct PIX, no MercadoPago and no AstroPay routing.
Verticals
Explicit positioning for high-risk verticals: iGaming (casino, sports betting, lottery), forex and CFD brokerage, crypto exchanges, plus eCommerce, subscriptions, marketplaces and money services (adult entertainment is not named but the high-risk framing makes it implicit). The PayAtlas listing names 30+ verticals across crypto exchanges, gambling/betting, e-learning, SaaS, hotels, travel, insurance, money services, skill gaming, forex trading and more, a broad list consistent with a horizontal high-risk PSP rather than a vertical specialist. iGaming is real but undifferentiated: there are no named casino references, no SoftSwiss/EveryMatrix/Slotegrator connectors, no published iGaming-specific case studies and no dedicated gambling sales motion visible. For a forex broker or crypto exchange the positioning is cleaner, since the Card Payout product and USDT/USDC settlement are structurally good fits for non-casino high-risk verticals.
- iGaming
- sports betting
- forex
- crypto exchanges
- high-risk eCommerce
- subscriptions
- marketplaces
- money services
| Feature | Status | Details |
|---|---|---|
| Deposit Processing | Available | Instant |
| Withdrawal / Payout | Available | Real-time (card payouts) / T+0-1 (IBAN) |
| Instant Withdrawals | Available | Real-time (card payouts) / T+0-1 (IBAN) |
| KYC / AML Built-in | Available | Semi-auto |
| Chargeback Protection | Not available | Merchant |
| Multi-Currency | Available | USD, EUR, GBP, AUD, CAD, JPY, NOK, DKK, SEK, PLN, CHF, KZT, RON, TRY, BRL, INR, USDT, USDC |
| API Integration | Available | REST API (H2H) |
| Local Payment Methods | Available | Varies by market |
| iGaming Specialization | Available | Smart routing across acquiring panel, USDT/USDC settlement option, Romania RON local processing with cash voucher methods, Open Banking in UK/DE/SE/AT |
| Geographic Coverage | Available | 30 countries across Europe, UK, North America, MENA, Africa, Asia-Pacific, CIS |
Pre-Built iGaming Integrations
- Corefy
Pricing & Fee Structure
Fee structure and pricing model
Pricing & Fee Structure
Custom pricing model
On request
On request
T+2 to T+5 (USDT/USDC); negotiated SEPA/SWIFT for fiat
N/A
No setup fee (per PSPBox listing)
N/A
No
Pricing Details
Nothing is publicly priced. The PSPBox listing notes no setup fees and 'competitive pricing,' and PayAtlas marks pricing as 'On Request.' The TODA Pay website itself does not publish a price card, a tier breakdown or volume thresholds. For comparison, B2BINPAY publishes its tiers (0.4% Merchant, down to 0.05% Enterprise), CoinGate publishes ~1% and NOWPayments publishes 0.5-1%, while TODA Pay sits with the opaque-pricing camp that includes most high-risk aggregators (Praxis Tech, Akurateco direct, BridgerPay). Based on category benchmarks, what an iGaming operator should expect during sales conversations is card processing in the 3.5-5% range for licensed gambling on Visa/MC (depending on jurisdiction, MCC, chargeback history and volume), 4-6% for unlicensed or higher-risk profiles, plus a rolling reserve in the 5-10% range held for 90-180 days, plus an FX or conversion spread on top if the settlement currency differs from the processing currency. The USDT/USDC settlement leg likely adds a 0.5-1% conversion spread relative to the fiat-equivalent. APMs and Open Banking are cheaper than cards, typically 1-2% all-in. No setup fee per PSPBox is a real positive. The integration fee and minimum monthly volume are not published.
Negotiation Tips
Treat the sales conversation as the entire price discovery. Insist on a written rate card before signing covering: (a) the per-MCC card processing rate for your specific gambling license type, (b) the rolling reserve percentage and holdback period, (c) the FX or stablecoin conversion spread on settlement, (d) the chargeback fee per dispute, (e) the refund fee per refund, (f) the monthly minimum and any fixed platform fee, and (g) the onboarding and KYB fee. Confirm whether 'no setup fee' per the PSPBox listing still applies to your contract, since sales-led pricing for high-risk aggregators is volatile and that line can disappear. Push for at least one named reference customer in your vertical (casino or sports betting) before signing, because TODA Pay does not publish any, and a serious commercial team will be willing to make introductions under NDA if the relationships exist. Compare the all-in cost carefully against a directly licensed alternative, where Nuvei at 1.5-3.5% on deposits for licensed iGaming on Visa/MC is a higher-confidence comparison even if the headline percentage is similar. The cost of cheap processing through an opaque counterparty is paid in compliance friction and frozen funds when a chargeback wave hits.
Speed & Settlement
Transaction processing and settlement timelines
Instant
Player-initiatedReal-time (card payouts) / T+0-1 (IBAN)
Operator payoutT+2 to T+5 (USDT/USDC); negotiated SEPA/SWIFT for fiat
To operator accountEUR, USD, GBP, AUD, CAD, JPY, NOK, DKK, SEK, PLN, CHF, KZT; plus USDT/USDC stablecoin settlement
Settlement optionsCard deposits clear instantly at the gateway level: the player completes 3DS2 if required, the issuer authorizes, and the merchant gets a webhook within seconds. Card payouts to a beneficiary card via Visa Direct or Mastercard Send claim real-time settlement (typically under 30 minutes, often under 5 minutes depending on issuer cooperation). IBAN payouts via SEPA settle same-day or T+1 within the SEPA zone, while SWIFT payouts to USD or other non-SEPA currencies take 1-2 business days. Open Banking deposits in the UK, Germany, Sweden and Austria settle instantly into the merchant's bank account, bypassing the multi-day card clearing window. The settlement-to-merchant side is where TODA Pay diverges from standard PSPs: fiat settlement runs through SEPA or SWIFT on a schedule the commercial team negotiates per merchant, while the stablecoin alternative is a T+2 to T+5 USDT or USDC payout to the merchant's wallet per the provider's own published documentation (a Romania-focused blog post on todapay.com specifies the T+2 to T+5 window). That sits slightly behind the T+1 to T+3 cycle most card-acquiring PSPs run on direct card rails, so a high-volume merchant should expect a few days of float in TODA Pay's account before stablecoin reaches their wallet, less painful than the older weekly-batch crypto-settlement cadence but still not best-in-class. It is worth verifying directly during the sales conversation, since the published window is single-source from the provider itself. Refund processing is not separately documented but on cards typically follows the standard 5-10 business day issuer window. Mass payouts are advertised as instant on cards and batched on IBAN, with no published per-day or per-month cap. Recurring billing is supported through the Corefy connector's recurring-transaction endpoint. Updated May 2026.
Integration & Tech
Developer experience and technical capabilities
- API Type
- REST API (H2H)
- Onboarding
- 2-4 weeks
- Sandbox
- Sandbox access available via the Corefy orchestration platform once TODA Pay merchant credentials are connected. Direct sandbox access is not self-serve from the public website — requires sales contact.
- Mobile SDK
- No
- White-Label
- No
- Docs Quality
- Limited (no public portal)
Integration Time
1-3 weeks
Pre-Built iGaming Integrations
- Corefy
Integration Assessment
REST API host-to-host integration is the documented surface. The cleanest integration path is via the Corefy orchestration platform connector at corefy.com/integrations/payment-providers/todapay, which exposes auth, capture, sale, void, full refund, partial refund and recurring transactions, plus webhook callbacks for status updates. Direct integration without Corefy in the middle is possible, since the merchant gets API credentials from the TODA Pay commercial team, but it is not self-serve and there is no public developer portal at docs.todapay.com or a similar URL. There is no GitHub organization, no published Node.js / Python / PHP / Go / Java SDKs, no e-commerce plugins for WooCommerce, Magento, PrestaShop or Shopify, and no native iOS or Android mobile SDK. The marketing copy mentions 'streamlined APIs, SDKs and no-code integration options,' but these are not surfaced publicly. For an operator on a custom backend the integration is workable through Corefy, while for a platform-native operator on SoftSwiss or EveryMatrix there is no connector and you would have to build it. The estimated timeline is 1-3 weeks for a custom backend with developer attention, longer if the merchant is also routing through Corefy for the first time.
Risk & Compliance
Licensing, fraud prevention, and regulatory compliance
- KYC/AML Automation
- Available. Semi-auto
- Chargeback Protection
- Not available. Merchant
- Licenses
- FINTRAC MSB C100000953 (Cardstream Payment Systems Ltd), PCI DSS, GDPR
- Fraud Prevention
- AI risk engine, 3D Secure 2, tokenization, smart routing
- Responsible Gaming
- No
- Tokenization
- PCI DSS-compliant tokenization referenced in card payment marketing copy — claims to encrypt sensitive data instantly to keep merchants out of PCI scope. No technical detail on network tokenization (Visa Token Service, Mastercard MDES) versus vault tokenization.
- Dispute Resolution
- Sales-led / account manager handled (no published dispute portal)
Compliance Context
PCI DSS is claimed (with no public attestation level published, where Level 1 PCI DSS service-provider status would normally be advertised explicitly and TODA Pay does not). 3D Secure 2 is supported on card flows. Smart routing acts as a fraud-mitigation layer by segmenting first-time deposit traffic from trusted users and directing each transaction through the channel most likely to approve it. An AI-driven risk engine is referenced in marketing copy without naming the underlying vendor (Featurespace, Hawk:AI, Sift and ComplyAdvantage are common stacks for high-risk PSPs, and TODA Pay names none). Tokenization is claimed for storing card data, with the standard pitch of keeping the merchant out of PCI scope, and GDPR compliance is referenced. The licensing posture is the weak link: the FINTRAC MSB registration (M20438511) is a registration with no consumer-protection regime or capital requirement, and the Polish EMI claim is not independently confirmed by the KNF register or by third-party rating services. There is no SOC 2 Type II, no ISO 27001, no public penetration testing partner and no published bug bounty program. For comparison, Adyen publishes its PCI DSS Level 1 attestation, ISO 27001 certificate and SOC 2 Type II report, and TODA Pay publishes none of these as of May 2026.
About TODA Pay: Company Background
Company and product information
- Company Name
- TODA Pay
- Headquarters
- Ottawa, Ontario, Canada
- Founded
- 2022
- Employees
- 10-50 per PayAtlas. Public LinkedIn footprint is thin. No named executive team disclosed on the website's About Us page — only departmental descriptions (Tech, Cybersecurity, Product, Legal, Finance).
- Company Type
- Private
- Product Type
- Local/Regional PSP
- Licenses
- FINTRAC MSB C100000953 (Cardstream Payment Systems Ltd), PCI DSS, GDPR
- Key Products
- Card Payment, Card Payout, Open Banking Payment, Alternative Payment Methods, Mobile Commerce Payment, IBAN Bank Transfer Payout, smart routing, crypto settlement (USDT/USDC)
- Website
- todapay.com
- Supported Verticals
- iGaming, sports betting, forex, crypto exchanges, high-risk eCommerce, subscriptions, marketplaces, money services
- Integration Type
- REST API (H2H)
- Settlement Speed
- T+2 to T+5 (USDT/USDC); negotiated SEPA/SWIFT for fiat
- Onboarding Speed
- 2-4 weeks
- Notable Clients
- N/A
Company History
TODA Pay launched in 2022 under SMART PAYMENTS TECHNOLOGIES LTD, a British Columbia, Canada corporation registered with FINTRAC as a Money Services Business under M20438511 and incorporated under BC company registration BC1266435. The product was positioned from the start as a high-risk-friendly payment service provider for industries that struggle with mainstream acquirers: iGaming, sports betting, forex and CFD brokerage, crypto exchanges and high-risk eCommerce. The founding team is not publicly disclosed on the website, and the About Us page lists departmental structure (Tech, Cybersecurity, Product, Legal, Finance) but no individual executives or directors. The registered office address (170-6660 Graybar Road, Richmond, BC, or 28-19628 55A Avenue, Langley, BC) is a corporate-services address shared with at least two other high-risk payment processors, SignaPay.ca and DomusPay.io, flagged by the independent rating agency PayRate42.
Through 2023-2025 the product expanded its payment-method surface and was added as a ready-made connector on the Corefy orchestration platform, the cleanest documented integration path today. The Corefy connector exposes a host-to-host REST API with auth, capture, sale, void, partial and full refund, recurring transactions and webhook callbacks. Roughly 14 payment methods became exposed through the Corefy surface: cards, Klarna, eps, iDEAL, MB WAY, MultiBanco, NETELLER, Paysafecard, Rapid Transfer, Skrill Wallet, SEPA Transfer, Interac Online, generic Open Banking and Bank Transfer. The marketing site started publishing content emphasizing Africa, MENA, GCC and emerging-market positioning alongside Europe and CEE, though without naming local partners or country-specific licensing.
Late 2025 and early 2026 brought a more concrete regional play in Romania, with a substantive blog post on RON-denominated iGaming payment infrastructure naming local cash voucher rails (TopPay, SelfPay, Smith & Smith) alongside Apple Pay, Google Pay and ONJN-aware gambling positioning. PayRate42 published its independent compliance profile in this window, flagging four specific concerns: registered (not regulated) status under FINTRAC, no public UBO or executive disclosure, the unverified Polish EMI claim, and the shared registered address with other high-risk MSBs. As of May 2026 the company remains privately held under SMART PAYMENTS TECHNOLOGIES LTD with no disclosed funding rounds, no published merchant volume figures, no named reference customers and no Trustpilot, G2, Capterra or Glassdoor presence.
What Users Say About TODA Pay
Our analysis of 0 reviews from Trustpilot and industry sources
Trustpilot Presence
TODA Pay has no Trustpilot profile as of May 2026. PayAtlas confirms zero reviews. G2, Capterra and Glassdoor return no listings. The complete absence of public review evidence is itself a data point worth weighing, covered in the Reviews analysis above alongside the PayRate42 transparency assessment.
Notable Clients
No named reference customers are published. The marketing site references high-risk verticals (iGaming, sports betting, forex, crypto exchanges, eCommerce) and emerging-market geographies (Romania, Turkey, GCC, Africa, MENA, CEE) without specific operator names. PayAtlas confirms zero published case studies, and PayRate42 notes the absence of disclosed reference customers as part of its transparency assessment. For an operator running diligence, the absence of any named client (combined with the absence of public reviews on Trustpilot, G2, Capterra and Glassdoor) means there is no third-party signal to rely on, so direct reference checks during the sales process are the only path to validation.
Operational Details
Business terms, contracts, and support
- Dedicated Account Manager
- Yes
- Minimum Monthly Volume
- N/A
- Contract Lock-In
- N/A
- Migration Support
- No
- Min/Max Transaction
- N/A
- Mass Payouts
- Instant + batch, No published limit
- Biometric / One-Click
- No
- Reporting
- Dashboard with transaction reporting (per marketing copy); not independently verified
Compliance-side concerns flagged by PayRate42 in May 2026: (1) FINTRAC MSB-registered but not regulated, so no standardized consumer protection; (2) no public ownership, UBO or executive-team disclosure; (3) two other high-risk payment processors — SignaPay (SignaPay.ca) and DomusPay (DomusPay.io) — share the same Richmond, BC registered address as TODA Pay, suggesting a shared corporate-services arrangement that obscures real beneficial ownership; (4) Polish EMI license claim is not independently verifiable; (5) zero customer reviews on Trustpilot, G2, Capterra or Glassdoor. Operationally the product looks competent and the Romania-focused content suggests real iGaming traction in CEE, but the corporate transparency floor is among the lowest in our database. Do not contract without specific UBO disclosure, verified Polish EMI confirmation (KNF register lookup) and at least one named reference customer.
Frequently Asked Questions
11 questions about TODA Pay
TODA Pay is the trading name of SMART PAYMENTS TECHNOLOGIES LTD, which holds a Canadian FINTRAC Money Services Business registration under M20438511. An MSB registration is a registration rather than a regulated authorization, with no capital requirement, no consumer-protection regime and no FCA / EMI / PI equivalent oversight attached to it. The TODA Pay website additionally claims a 'Polish EMI' license, but as of May 2026 no independent source (KNF register, PayRate42, PayAtlas, independent verification) confirms a Polish Electronic Money Institution authorization at SMART PAYMENTS TECHNOLOGIES LTD or any TODA Pay-branded entity. For an iGaming operator that needs to demonstrate licensed PSP counterparties on a compliance map, TODA Pay's licensing posture does not match what MGA, UKGC or MGCB reviews expect. Nuvei and Worldline are the licensed alternatives that pass tier-1 gambling compliance review without friction.
Yes. High-risk verticals including iGaming, sports betting, forex and crypto exchanges are an explicit target market, and both the marketing site and a Romania-focused blog post reference gambling and betting operators. The product gaps for iGaming are no named casino reference customers, no SoftSwiss / EveryMatrix / Slotegrator pre-built connectors, no dedicated iGaming sales motion published, and no industry awards or trade-press coverage in iGaming Business, SBC, EGR or similar. The functional fit for a small CEE casino, particularly in Romania, is real, while the compliance fit for a tier-1 licensed casino (MGA, UKGC) is weaker than for a directly licensed PSP.
Not publicly disclosed. PSPBox notes no setup fee, and PayAtlas marks pricing as 'On Request.' Based on category benchmarks, an iGaming operator should expect card processing in the 3.5-5% range for licensed gambling on Visa/MC, 4-6% for higher-risk profiles, plus a 5-10% rolling reserve held for 90-180 days, plus an FX or stablecoin conversion spread (0.5-1%) on settlement. APMs and Open Banking should be cheaper at 1-2% all-in. Insist on a written rate card covering MCC-specific processing rates, reserve terms, chargeback fees, FX spread and platform fees before signing, and get one named reference customer in your vertical.
Fiat settlement via SEPA is same-day or T+1 within the EU, and SWIFT settlement takes 1-2 business days. The stablecoin alternative, USDT or USDC payouts to a merchant wallet, runs on a T+2 to T+5 cadence per TODA Pay's own published documentation. That is slightly slower than the T+1 to T+3 most card-acquiring PSPs offer on direct card rails but materially faster than the weekly-batch cadence common at older crypto-settlement aggregators. For comparison, Paysafe and Nuvei typically run T+1 to T+3 settlements on card flows. The T+2 to T+5 window is single-source from the provider, so it is worth verifying during sales conversations.
No. There are no published pre-built connectors for SoftSwiss, EveryMatrix, Slotegrator, Digitain or other major iGaming platforms, so integration is custom REST API work through the Corefy orchestration platform connector or via direct API. For a casino running on SoftSwiss specifically, CoinsPaid (crypto), Praxis Tech (high-risk cards) and MoneyMatrix (EveryMatrix's own PSP) are the natural ecosystem-native picks.
Operationally global per the marketing copy, with measurable focus on Romania, Turkey, the GCC, Kazakhstan, Poland, the UK, Germany, Sweden, Austria, Canada, Australia and emerging-market corridors in Africa and MENA. FATF blacklist jurisdictions are excluded. The only directly held license is the Canadian FINTRAC MSB, so cross-border reach rides on TODA Pay's panel of upstream acquiring partners rather than on a passport-portable license of its own. The strongest concrete operational depth is Romania (RON card processing, cash voucher integrations with TopPay, SelfPay, Smith & Smith), and the weakest is the United States, with no US state money transmitter licenses and no FinCEN MSB registration.
No. There are no US state money transmitter licenses or FinCEN MSB registration, and the Canadian FINTRAC registration does not cover US flows. For US-facing iGaming, Nuvei holds the US acquiring relationships and Worldpay is the historical incumbent; for US crypto, BitPay holds MSB licensing and BVNK has all-50-state money transmitter coverage. Routing US traffic through TODA Pay creates regulatory exposure on both ends and should be avoided.
Not publicly disclosed. A standard high-risk-aggregator structure would put chargeback liability on the merchant (3DS2 shifts liability to the issuer on authenticated transactions), apply a rolling reserve of 5-10% held 90-180 days, charge a per-dispute fee in the $15-25 range and impose a chargeback ratio cap (typically 1% of monthly volume) above which higher fees or termination follow. Confirm in writing before signing. The USDT/USDC settlement leg has no chargeback exposure, since blockchain settlement is irrevocable, which is one of the structural reasons high-risk merchants like stablecoin payout rails.
No. TODA Pay does not accept crypto deposits from end players. Crypto appears only on the settlement leg, where merchants can be paid out in USDT or USDC on a T+2 to T+5 cadence per the provider's own published documentation. If your players need to deposit in Bitcoin, Ethereum or stablecoins, you need a separate crypto-deposit processor (CoinsPaid for SoftSwiss casinos, CoinGate for MiCA-compliant European deposits, BitPay for US, NOWPayments for self-serve / 350+ coins, B2BINPAY for cheapest enterprise rates).
TODA Pay runs an orchestration layer over a panel of upstream acquiring partners (which it does not publicly name). When a transaction comes in, the routing engine looks at card BIN, MCC, geography, customer history and previous decline patterns, then directs the auth request to the acquirer most likely to approve it, and failed transactions get retried through alternative channels (cascade routing). The benefit is higher approval rates on declined-traffic geos and lower processing cost when multiple acquirers compete on the same flow. The trade-off is the standard high-risk-aggregator one: you do not have a direct relationship with the acquirer that actually holds your merchant account, which means resolving chargebacks, holds and freezes goes through TODA Pay as the intermediary. Standalone payment orchestrators like Corefy, IXOPAY and BridgerPay offer the same routing logic with broader and more transparent acquirer panels.
Four specific concerns flagged by the independent rating agency PayRate42 in 2025-2026: (1) FINTRAC MSB-registered but not regulated, so no consumer-protection regime applies; (2) no public disclosure of UBOs, directors or key executives, since the website's About Us page lists departments but no individuals; (3) the Polish EMI license claim is not independently verifiable in the KNF register or through third-party rating services; (4) two other high-risk payment processors, SignaPay.ca and DomusPay.io, are registered at the same Richmond, BC address, suggesting a corporate-services address rather than an operational HQ. None is automatically disqualifying, but together they raise the diligence bar. For any operator considering TODA Pay, the following are mandatory before signing: an independent KNF register lookup for the Polish EMI claim, a BC corporate registry search for SMART PAYMENTS TECHNOLOGIES LTD officers and UBOs, a request and call to at least one named reference customer in your vertical, a copy of the most recent PCI DSS Attestation of Compliance, and SOC 2 Type II or ISO 27001 evidence (or explicit confirmation that none exists).
Our Verdict: Should You Use TODA Pay?
Final assessment for iGaming operators
Overall iGaming Score
Summary
TODA Pay is a 2022-vintage Canadian high-risk payment aggregator with a functional product on paper, a measurable Romania and CEE focus and a transparency floor among the lowest in our database. The features list reads competently, with smart routing across a panel of acquirers, cards plus APMs plus Open Banking, a USDT/USDC settlement option and real Romania-specific local-method depth, and the absence of a setup fee per the PSPBox listing is a clear plus. The structural problems are that the only directly held license is a Canadian FINTRAC MSB registration (registered, not regulated), the Polish EMI license claim is unverified by independent sources, there is no public disclosure of ownership or named executives, two other high-risk processors share the same registered address, and there is zero verifiable review evidence on Trustpilot, G2, Capterra or Glassdoor.
Strongest Point
Romania-specific iGaming depth and the USDT/USDC settlement option. The Romania blog post is the most concrete operational evidence on the marketing site: RON card processing, named cash voucher partners (TopPay, SelfPay, Smith & Smith), Apple Pay / Google Pay tokenization, ONJN-aware gambling positioning. For a CEE-focused operator that needs RON processing plus a stablecoin payout rail in the same contract, the value proposition is differentiated from what generic global PSPs offer. The smart routing layer over a panel of upstream acquirers is operationally useful for high-risk traffic patterns that face high decline rates from any single acquirer.
Key Limitation
Corporate transparency and licensing posture. FINTRAC MSB registration is a starting regulatory perimeter rather than a meaningful licensing footprint for cross-border processing. The unverified Polish EMI claim, the absent named UBOs, the shared registered address with other high-risk processors and the complete silence on public review channels mean any merchant relationship has to be built on direct document verification and reference checks, since there is no third-party signal to rely on. For tier-1 licensed iGaming operators (MGA, UKGC, MGCB) the licensing gap makes TODA Pay a hard sell on the regulator-facing side regardless of how the product actually performs.
Recommendation
Consider TODA Pay if you are a small-to-mid high-risk operator (gambling, forex, crypto exchange) with Romania, Turkey, GCC, CEE or African exposure who can carry independent due diligence on a thinly disclosed counterparty and who wants the stablecoin-settlement option in the same contract as fiat card processing. Mandatory before signing: a KNF register lookup for the Polish EMI claim, a BC corporate registry search for SMART PAYMENTS TECHNOLOGIES LTD officers and UBOs, at least one named reference customer in your vertical, a current PCI DSS Attestation of Compliance, and a written rate card covering MCC-specific processing rates, rolling reserve terms, FX/stablecoin conversion spread, chargeback fees and platform fees. Skip TODA Pay if you hold a tier-1 gambling license (use Nuvei, Paysafe or Worldline instead), if you serve US traffic (Nuvei or Worldpay for fiat, BitPay or BVNK for stablecoin payouts), if your vendor process requires SOC 2 / ISO 27001 / named UBO disclosure, or if you run on SoftSwiss / EveryMatrix and want a pre-built connector (CoinsPaid, Praxis Tech or MoneyMatrix instead). For pure payment orchestration without the licensing concerns, Corefy and IXOPAY offer the same routing logic over broader and more transparent acquirer panels. Updated May 2026.
Pros
- USDT and USDC stablecoin settlement option on a T+2 to T+5 cadence per the provider's own documentation, structurally useful for merchants who have been de-banked or whose primary banking relationships will not handle gambling, forex or crypto exchange flows. Most card-acquiring PSPs do not offer native stablecoin settlement.
- Real Romania and CEE depth. RON card processing for Visa and Mastercard, integrations with local cash voucher providers (TopPay, SelfPay, Smith & Smith), Apple Pay and Google Pay tokenized wallets, ONJN-aware positioning. For a CEE-focused casino the local-method coverage is differentiated from generic global PSPs.
- Smart routing layer over a panel of upstream acquiring partners. Cascade routing on declines, AI-driven risk scoring, separation of first-time deposit traffic from trusted users. For high-decline-rate geos and high-risk customer profiles this can lift approval rates meaningfully against a single direct acquiring relationship.
- No setup fee per the PSPBox listing. For a small operator launching on a new acquiring rail, the absence of an upfront fee lowers the cost of trying the product without committing significant capital. Confirm this still applies to your specific contract.
- Card payouts via Visa Direct and Mastercard Send with real-time settlement. The Card Payout product is useful for casinos that want fast player withdrawals to a beneficiary card without the multi-day SWIFT or SEPA cycle.
- Broad currency support including EUR, USD, GBP, AUD, CAD, JPY, NOK, DKK, SEK, PLN, CHF, KZT, RON, TRY plus USDT/USDC stablecoins. Kazakhstan tenge (KZT) settlement specifically is rare among Western-facing PSPs and is a real selling point for CIS exposure.
Cons
- The only verifiable license is a Canadian FINTRAC MSB registration (M20438511), a registration with no capital requirement and no consumer-protection regime. The 'Polish EMI' license claimed on the marketing site does not surface in the KNF register and is not independently confirmed by third-party rating services as of May 2026.
- Zero public review evidence. No Trustpilot profile, no G2 listing, no Capterra reviews, no Glassdoor presence. PayRate42 and PayAtlas both explicitly flag the complete absence of customer feedback as a transparency concern for a payment processor that has been operating since 2022.
- No public disclosure of UBOs, directors or named executives. The website's About Us page lists departmental structure (Tech, Cybersecurity, Product, Legal, Finance) but not a single individual. For compliance and risk teams that require named UBO disclosure as a baseline, this is disqualifying.
- The registered address (170-6660 Graybar Road, Richmond, BC, or 28-19628 55A Avenue, Langley) is shared with at least two other high-risk payment processors, SignaPay.ca and DomusPay.io, flagged by PayRate42, which suggests a corporate-services / registered-agent address rather than an operational headquarters.
- No public developer portal, no GitHub organization, no published SDKs, no e-commerce plugins (no WooCommerce, Magento, PrestaShop, Shopify) and no mobile SDKs. Integration is gated through sales contact or via the Corefy connector, with no self-serve developer onboarding path.
- No SoftSwiss, EveryMatrix, Slotegrator or other iGaming-platform pre-built connectors. T+2 to T+5 stablecoin settlement (per the provider's own documentation) is slightly slower than the T+1 to T+3 cycle most direct card-acquiring PSPs offer on cards. SOC 2 Type II, ISO 27001 and a named fraud-tooling vendor (Featurespace, Sift, Hawk:AI) are all not published.
Ready to evaluate TODA Pay for your business?
TODA Pay vs. Alternatives: How It Compares
Similar payment processing solutions
If the appeal of TODA Pay is the stablecoin-settlement option, BVNK offers MiCA-licensed (Malta) stablecoin payouts with SOC 2 Type II, ISO 27001 and all-50-US-state money transmitter coverage, more expensive but on a real institutional footing. If the appeal is high-risk card aggregation with smart routing, Praxis Tech and Akurateco are the iGaming-native specialists with longer track records and real client rosters, while Corefy is the cleanest pure-orchestration alternative with a much broader and more transparent acquirer panel. If the appeal is Romania-specific local-method depth, EveryMatrix's MoneyMatrix, Praxis Tech and dLocal all serve CEE with stronger licensing. For US-facing operators TODA Pay is not an option, so use Nuvei or Worldpay for fiat and BitPay or BVNK for stablecoin payouts. For MGA / UKGC casinos that need a licensed PSP counterparty, Nuvei or Paysafe are the safe defaults.
When to Choose an Alternative
- Corefy
Choose Corefy if you want the smart-routing and orchestration benefits TODA Pay markets, but with a transparent vendor footprint, a broader acquirer panel and a published developer portal. Corefy is also the platform through which TODA Pay itself is exposed, so going direct cuts out a layer.
- Akurateco
Choose Akurateco for iGaming-native high-risk card aggregation with smart routing, white-label payment gateway capability and a stronger track record of named casino references. Pricing is sales-led but the product surface is more mature.
- BridgerPay
Choose BridgerPay for a no-code payment orchestration alternative covering 500+ acquirers and APMs. Transparent SaaS pricing, broader integrations and a real public developer surface.
- CoinGate
Choose CoinGate if you want crypto deposits (not just settlement) on a Lithuanian MiCA CASP-licensed rail. Cleaner European compliance posture, named team, real iGaming traction.
- AstroPay
Pair AstroPay if you need LatAm local methods (PIX, Boleto, OXXO, SPEI) alongside TODA Pay's CEE coverage. The two have minimal regional overlap, and AstroPay carries the LatAm licensing TODA Pay does not.
- 6.4

Corefy
Payment Orchestrator- Deposit Fee
- 0.2-0.7%
- Settlement
- Depends
- Methods
- 600+
- Rating
- 4.2/5
- 5.6

Akurateco
Payment Orchestrator- Deposit Fee
- Custom SaaS license
- Settlement
- Depends
- Methods
- 600+
- Rating
- 4/5
- 6.7

Praxis Tech
Payment Orchestrator- Deposit Fee
- Custom
- Settlement
- Depends
- Methods
- 1,000+
- Rating
- 2.4/5
- 6.1

BridgerPay
Payment Orchestrator- Deposit Fee
- 0.1-0.5%
- Settlement
- Depends on PSP
- Methods
- 1,000+
- 5.6

CommerceGate
High-risk PSP + Payment Facilitator- Deposit Fee
- 2-5%
- Settlement
- T+3 - T+7
- Methods
- N/A
- Rating
- 2.8/5
Related Reading
Operator guides and analysis relevant to evaluating TODA Pay.
End of Report. TODA Pay Provider Assessment Report 2026
Prepared and reviewed by the iGaming Payment Solutions Editorial Team ·