A whistleblower dossier reviewed by FinTelegram suggests that deposits into the unlicensed offshore casino Holyluck were routed through a layered payment chain involving checkout.agpayer.com, a Paylink node associated with Ukraine’s TAS Link, and Smartflow Payments Limited — the UK electronic money institution trading as SENDS and authorized by the FCA. The dossier includes comprehensive screenshots and other documentations. Here is our report.
Key Findings
- HolyLuck Casino Network: appears to be operated by Costa Ricao-registered Gem Limitata through multiple domains including
holyluck.com,holyluck2.com, orholyluck3.com. - Named acquirer identified: Newly reviewed correspondence shows TAS Link directing the complainant to SENDS / Smartflow Payments Limited as the acquirer handling the case.
- MCC 5816 appears in transaction evidence: A reviewed card-transaction screenshot shows a London GBR descriptor, ECOM, tokenized = yes, and merchant category 5816, consistent with the whistleblower’s miscoding allegation.
- Quicko payout trail reinforced: A separate screenshot shows a payout reference to quickowallet TarnowskieGo POL, supporting the earlier claim that Quicko sat on the payout side of the alleged gambling flow.
- Regulatory context sharpens the case: Public records show Smartflow Payments Limited is FCA-authorized under FRN 900873, while Companies House records show Alona Shevtsova as the active person with significant control. Ukrainian authorities have separately sanctioned Shevtsova and publicly linked her to an IBOX Bank miscoding case involving illegal casinos.
The case also appears broader than a single website. According to additional information provided by the whistleblower, the gambling operation uses multiple Holyluck domains, including holyluck.com, holyluck2.com, and holyluck3.com, and is linked to Gem Limitada, a Costa Rica-registered entity. That multi-domain structure is relevant because it suggests a networked merchant-facing operation rather than an isolated payment event.
A Hidden Acquirer Comes Into View
The most important development in this whistleblower case is that the acquiring side is no longer opaque.
In an email reviewed by FinTelegram, TAS Link LLC told the complainant that the case had been forwarded to the acquirer and instructed the complainant to direct further inquiries to [email protected]. That materially changes the profile of the story. What had previously looked like a technically plausible routing trail now points to a specifically named UK-regulated payment institution: Smartflow Payments Limited, trading as SENDS.
Public records support that Smartflow Payments Limited is a real and regulated UK EMI. SENDS states on its website that Smartflow is authorized by the FCA under the Electronic Money Regulations and Payment Services Regulations, and the FCA register export lists 900873 – Smartflow Payments Limited – Authorised Electronic Money Institution. Companies House records also show Ms Alona Shevtsova as the active person with significant control and an active director.
The whistleblower card-transaction screenshot shows a 50.00 EUR debit with:
- a London GBR merchant descriptor,
- merchant category 5816,
- transaction type: ECOM,
- and tokenized: yes.
A second screenshot shows a payout reference to quickowallet TarnowskieGo POL, consistent with the earlier claim that the payout side of the flow ran through Quicko in Poland.A third screenshot contains the TAS Link message pointing the complainant to SENDS as the acquirer.
Taken together, these materials do not yet prove criminal complicity by any party. But they significantly tighten the evidentiary chain: deposit-side presentation → routing-side infrastructure → acquiring-side identification → payout-side endpoint.
Why MCC 5816 Matters
The compliance significance of the new transaction screenshot lies in the appearance of MCC 5816.
The whistleblower’s core allegation is that an offshore gambling deposit was not presented to the card system as gambling, but as a lower-risk digital-goods transaction. Mastercard materials distinguish gambling from digital-goods categories and require acquirers to assign a valid and accurate MCC. If the reviewed screenshot reflects the actual authorization or clearing presentation of an offshore casino deposit, then the case raises a serious question of MCC masking or miscoding rather than a simple consumer dispute.
Summary Table: The Alleged Payment Chain
| Brand / Name | Legal Entity | Jurisdiction | Apparent Role | Evidence Position |
|---|---|---|---|---|
| Holyluck (holyluck.com, holyluck2.com, holyluck3.com, etc) | Gem Limitada | Costa Rica | Underlying gambling-facing merchant activity | Public information on the Holyluck websites |
checkout.agpayer.com | Not publicly identified | Unconfirmed | anonymous Checkout / orchestration layer | Routing screenshot supports presence in flow |
paylink.com.ua / inst3.paylink.com.ua | Publicly associated with TAS Link infrastructure | Ukraine | Technical routing node | Routing screenshot supports presence in flow |
| TAS Link (www.taslink.ua) | TAS Link LLC | Ukraine | Processing / technical intermediary | Reviewed email shows TAS Link directing the complainant to SENDS as acquirer |
| SENDS (www.sends.co) | Smartflow Payments Limited | United Kingdom | Named acquirer in TAS Link correspondence | Supported by TAS Link email plus FCA / Companies House records |
| Quickowallet / Quicko (quickowallet.com) | Quicko sp. z o.o. | Poland | Apparent payout endpoint | Payout screenshot supports reference; KNF revocation independently verified |
| Alona Shevtsova | Person with significant control of Smartflow Payments Limited | Ukraine / UK company control | Ownership / control context | Supported by Companies House and Ukrainian official/public sources |
The TAS Link Role Is Now More Concrete
The original screenshots suggested a path through checkout.agpayer.com and a paylink.com.ua node. TAS Link’s own materials describe PayLink as an e-commerce and online-payments platform supporting Google Pay, Apple Pay, card payments, transfers, and related payment-system features. TAS Link also publicly states that it has been NovaPay’s processing partner for more than five years and describes itself as a Mastercard Member Service Provider and Visa Third Party Agent.
The new evidence does not prove TAS Link was the acquirer. It shows something narrower and important: TAS Link was in a position to identify the acquirer and, when pressed, named SENDS.
That distinction matters. It turns TAS Link from a merely inferred routing node into a documented intermediary touchpoint in the transaction trail.
SENDS, Smartflow, and the Shevtsova Context
Companies House records show SMARTFLOW PAYMENTS LIMITED is active and that Alona Shevtsova is the active person with significant control. SENDS’ own legal and company pages state that Smartflow Payments Limited is the regulated entity behind the SENDS brand and is authorized by the FCA under FRN 900873.
That ownership fact is relevant because Ukrainian authorities have already acted against Shevtsova in a separate context. In April 2025, President Zelensky enacted an NSDC sanctions decision that included Alyona/Alona Shevtsova, and the Economic Security Bureau of Ukraine later said that Shevtsova and others were suspected in a UAH 5 billion miscoding scheme linked to illegal casinos.
According to the ESBU, the suspects allegedly used controlled companies and false payment purposes describing non-existent goods and services. Separately, the National Bank of Ukraine said IBOX Bank’s license was revoked and liquidation initiated for systematic violations of AML/CFT requirements.
The Quicko Side of the Rail
The reviewed whistleblower screenshot referencing quickowallet TarnowskieGo POL supports the whistleblower’s claim that a partial payout moved through Quicko sp. z o.o. That matters because Poland’s KNF announced on 21 January 2026 that it revoked Quicko’s authorization to provide payment services as a national payment institution, stated that the decision was immediately enforceable, and required the unwinding of relevant relationships by 30 April 2026.
Concluding Summary
The Holyluck dossier is a well-documented complaint about an offshore casino deposit. Based on the materials reviewed by FinTelegram, it now presents a troubling payment-chain picture: an alleged gambling-facing transaction, a routing path involving checkout.agpayer.com and paylink.com.ua, a TAS Link email naming SENDS / Smartflow Payments Limited as the acquirer, and a payout reference tied to Quicko in Poland.
Read more on checkout.agpayer.com and other anonymous payment gateways here.
That does not yet prove that Smartflow, TAS Link, Quicko, or any other intermediary knowingly facilitated illegal gambling or intentionally miscoded the underlying merchant activity. But it suggests that this was not a random payment anomaly. The reviewed screenshots and correspondence point to a cross-border architecture involving a Ukrainian technical node, a UK-regulated EMI, and a Polish payout endpoint — exactly the kind of fragmented structure in which merchant masking, MCC presentation issues, and transaction-laundering risks can arise.
The regulatory context makes the case even harder to ignore. Smartflow Payments Limited publicly states that it is FCA-authorized under FRN 900873 and Companies House identifies Alona Shevtsova as the active person with significant control. TAS Link publicly markets PayLink as an e-commerce and online-payments platform and says it has been NovaPay’s processing partner for more than five years. Poland’s KNF publicly announced the revocation of Quicko’s payment-services authorization in January 2026. These are verifiable public facts; the key unanswered question is how they fit the specific Holyluck transaction trail described by the whistleblower.
For FinTelegram, the document-backed whistleblower dossier is raising serious compliance questions. The strongest current line is this: a named acquirer has emerged, MCC 5816 appears in the reviewed transaction details, TAS Link explicitly pointed the complainant to SENDS, and the payout side appears to reference Quicko. That is already enough to justify scrutiny by card-scheme compliance teams, AML officers, supervisors, and journalists.
Whistleblower Call
FinTelegram is continuing to investigate whether the Holyluck case reflects an isolated payment anomaly or part of a broader cross-border processing pattern involving Smartflow Payments / SENDS, TAS Link / PayLink, agpayer, Quicko, and other merchants or casinos using similar descriptor and MCC structures.
Insiders, former employees, compliance officers, acquirer-side staff, gateway operators, risk analysts, and merchants with evidence relating to SENDS, Smartflow Payments Limited, TAS Link LLC, paylink.com.ua, checkout.agpayer.com, Quicko, or similar MCC 5816-coded gambling-facing card flows are invited to contact Whistle42 securely.
