Image by Amanda Jones from Unsplash
Anyone who has cracked open a FIFA Ultimate Team pack chasing an 89-rated card, or watched a Genshin Impact wish banner tick down to the last ten pulls, already understands the pull of a randomized reward. That instinct is exactly what regulators across Europe have decided looks too close to gambling to keep ignoring. Since June 2026, PEGI has rated any game containing loot boxes as unsuitable for players under 16, and the EU is drafting a Digital Fairness Act, expected in the fourth quarter of 2026, that could restrict loot box sales to minors outright across the bloc.
Europe’s Loot Box Reckoning
American players have lived with a lighter version of this scrutiny for a while. The ESRB added an “In-Game Purchases (Includes Random Items)” label to its ratings back in 2020, a disclosure requirement rather than a restriction, and PlayStation Store listings still carry it today on everything from sports games to gacha titles. Europe just decided a label isn’t enough, and the shift matters for Norwegian players specifically, because it lands on top of an already unusual legal picture.
The link between loot box spending and gambling risk isn’t a hunch dreamed up by lawmakers. A 2018 survey of more than 7,000 players by researchers at the University of York and York St John University found that spending climbed in step with problem-gambling severity, with moderate-risk gamblers spending roughly two and a half times more per month on loot boxes than players who showed no signs of a gambling problem. A follow-up study a year later, run on a sample that hadn’t self-selected into loot-box research, found the same pattern held up. That’s a meaningfully strong signal for something still marketed to teenagers as a cosmetic skin or a card pack.
Norway’s Casino Monopoly, Explained
Norway’s own gambling framework makes the crossover sharper than in most countries. Under the Gambling Act that took effect on January 1, 2023, Norsk Tipping holds an exclusive state monopoly on lottery and casino-style games, and Norsk Rikstoto holds the equivalent for horse racing. No private or foreign operator, however well licensed elsewhere, can hold a domestic Norwegian online casino license. That single fact reshapes everything else in the market: every casino bonus Norge comparison you’ll find online is necessarily about operators licensed outside the country, usually through Malta or Curaçao, and Gambling.com tracks and updates those foreign-licensed listings for players who want to compare terms before committing real money anywhere.
How Norway Enforces the Line
The state hasn’t left that gap unpoliced. Norwegian banks and payment providers have had to block transactions carrying the gambling merchant code MCC 7995 since 2021, and since January 2025 Lotteritilsynet, the Norwegian Gambling Authority, has had the power to order ISP-level DNS blocking of unlicensed sites. By June 2026, that had reached 236 blocked gambling operators run by 72 companies, according to iGamingToday’s review of correspondence between Lotteritilsynet and the Ministry of Culture, with another round of blocking orders issued as recently as February. Norsk Tipping, notably, sits outside all of it: its transactions run through a separate merchant code that was never on the blocklist to begin with.
Same Mechanic, Different Guardrails
Put those two threads together and the picture for a Norwegian PlayStation player gets clearer, not murkier. The randomized-reward mechanics sitting inside a season pass or a card pack are drawing the same regulatory scrutiny as the real-money products on the other side of a DNS block, and the research suggests that’s not a coincidence. Loot box spending and gambling risk move together in the data, and Norway’s government is narrowing the gap between the two markets from the gambling side while the EU works on narrowing it from the game-design side.
None of that means every player who buys a battle pass is headed toward a betting problem. It does mean that a mystery-drop mechanic in a PS5 game and a real-money bonus offer from a foreign-licensed casino site are drawing from the same psychological well, and the second one now comes with actual legal guardrails in Norway that the first one still mostly doesn’t. Anyone comparing offers should read the terms and the odds with the same scrutiny they’d apply to a patch note or a drop-rate spreadsheet, because both kinds of platforms are betting that most people won’t. The industries keep borrowing each other’s mechanics, and in 2026 the regulation is finally starting to catch up to both at once.