Your media agency just became a compliance risk

Google just turned your media agency into a compliance risk. On September 14, Google expanded its new gambling certification rules across every category under its Gambling and Games policy.

The part most operators should care about is not the certification form. It is the Manager Account.

If an agency MCC manages enough accounts that lose gambling certificates, or enough of those accounts repeatedly violate policy while certified, Google can remove that MCC's ability to apply for new certifications. Existing certifications may also be revoked.

That changes the economics of outsourced acquisition.

For years the operator question was simple: can this agency buy traffic profitably? Now there is another one: who else is sitting inside their manager account?

An agency can run your account perfectly and still carry risk from clients you have never heard of. One aggressive casino. One grey market advertiser. One team constantly testing the edge of policy. Enough bad history at MCC level and suddenly your own acquisition pipeline can be affected.

That is a very different problem.

Google is effectively building a private compliance layer on top of gambling regulation. The regulator decides whether you can operate. Google increasingly decides whether you can acquire customers at scale.

And Google does not care that the violation came from another client inside your agency structure.

This is where I think a lot of iGaming operators are still behind.

We spend ridiculous amounts of time negotiating CPA targets, attribution windows and creative turnaround. Then the infrastructure underneath the account gets treated like plumbing. Nobody asks about it until something stops working.

Vendor due diligence normally stops at pricing, ROAS, creative quality and maybe data access. I would add four questions immediately.

Which MCC will actually own my account?

How many gambling advertisers sit inside it?

How many certificates have been revoked across that MCC in the last 12 months?

What happens to my account if another client triggers an eligibility problem?

If the agency cannot answer those clearly, I would not let them touch a regulated acquisition account before signing the IO.

The same logic already exists elsewhere in finance. You do not give a payment provider access to client money without asking who sits behind the infrastructure. You do not onboard an affiliate network without asking where the traffic comes from.

Paid media should be treated the same way.

The industry spent years outsourcing media buying because agencies had expertise, relationships and scale. That still makes sense. But shared infrastructure now creates shared exposure.

The cheapest agency can become very expensive if its other clients destroy the certification layer your growth team depends on.

Google did not ban agencies this week. It did something more important.

It made their compliance history part of your acquisition risk.

So the next time someone pitches you lower CPA, ask the question that suddenly matters more.

Who else is sitting inside your MCC?