PEGI's Loot Box Crackdown: Why EA Sports FC and Pokémon Now Carry a PEGI 16 Rating

PEGI's Loot Box Crackdown: Why EA Sports FC and Pokémon TCG Pocket Now Carry a PEGI 16 Rating

Picture a parent in a European retail aisle, picking up the year's new football game for a ten-year-old. For two decades, that decision was simple: EA Sports FC, like FIFA before it, carried a PEGI 3 badge - suitable for all ages, as benign as a cartoon. This year, that same game sits behind a PEGI 16 label, the same age gate applied to violent shooters and horror titles.

The rating has nothing to do with what is in the game's content. It is about how the game makes its money.

PEGI, the Pan-European Game Information body that classifies games across 38 countries, confirmed on 6 October 2026 that it has begun re-rating existing digital-only titles that feature paid random items - loot boxes, card packs, gacha pulls and keys. Games previously rated PEGI 3, 7 or 12 are being moved to PEGI 16, carrying a new "Paid random items" descriptor. The first wave of casualties is unusually mainstream, and it signals a broader shift: Europe has chosen enforcement over guidance on monetisation design.

From Rulebook to Retroactive Enforcement

The October announcement is not a new policy so much as the delayed second act of one. In June 2026, PEGI began assessing newly submitted games against expanded "interactive risks" criteria, which for the first time allowed factors beyond content - in-game purchases, paid random items, communication features and mechanics that incentivise continued play - to influence an age band. The October phase applies those criteria backwards, to the existing digital catalogue, in stages through the end of the month.

PEGI Director Dirk Bosmans framed the move as consistency maintenance. Online games remain live and updated for years, he noted, so ratings assigned under older standards would inevitably drift from current expectations. PEGI told reporters it has tracked in-game purchases and paid random items for seven years, giving it the data to reassess at scale.

Operationally, the rollout is being administered in the UK by the Games Rating Authority, which has held legal responsibility for game ratings since PEGI took over from the BBFC in 2012. GRA policy manager Connor Hinde announced the change via LinkedIn, acknowledging that a large volume of ratings would shift in a short window and directing publishers to the PEGI Helpdesk. Publishers are now required to update storefront listings and marketing materials. Crucially, the rule applies regardless of whether a game was originally classified through PEGI's Classic procedure or the IARC system used for digital storefronts.

A Football Game and a Pokémon Card Game Now Sit at 16

EA Sports FC is the headline case, though the precise mechanism differs from title to title. The series spent years at PEGI 3, and its Ultimate Team mode - built around purchasing card packs with randomised contents - has long been the canonical example of paid random items hiding inside a mass-market, child-friendly-looking product. On PEGI's own database, EA Sports FC 27 is listed as PEGI 16 with the "Paid random items" descriptor, classified under the June criteria at submission rather than bumped after launch. The retroactive rule's effect on the wider series is the story to watch: existing FC titles built around Ultimate Team now meet criteria that would place them at 16, and PEGI's staged rollout is designed to bring that back catalogue into line.

The wave extends well beyond football. Marvel Rivals shifted from PEGI 12 to PEGI 16 on European storefronts around 17 October, carrying an "In Game Purchases (Includes Random Items)" descriptor. Early coverage of the change appeared without explanation, a timing artefact of the quiet storefront rollout landing before outlets connected it to PEGI's 6 October notice.

Mobile and gacha titles have been caught in force. Pokémon TCG Pocket and Pokémon Masters EX now display PEGI 16 on the UK Play Store. Fire Emblem Heroes rose from 12 to 16. Zenless Zone Zero climbed from 12 to 16, with PEGI's own database entry citing the ability to purchase loot boxes as the reason.

That last detail matters. The rule is broader than item-based loot boxes. Character-based gacha systems, where players spend currency for randomised characters rather than cosmetic items, are caught too - a distinction that pulls a large swathe of the mobile market into the 16 band.

The Criteria Behind the Badge

Under the June 2026 framework, paid random items default to PEGI 16, and social casino games go further, to PEGI 18. Time- or quantity-limited offers land at PEGI 12, dropping to 7 if spending is disabled by default. Unrestricted online communication and NFT or blockchain features can reach PEGI 18.

The conceptual shift is significant. A football game and a Pokémon card game now share an age badge with a violent shooter, because the rating measures monetisation design rather than content. That is precisely the outcome the GRA once sought to avoid. In 2024, director general Ian Rice told an industry audience the authority did not want loot boxes to be "an influential factor" in ratings, partly to avoid banding loot-box games with violent titles. The policy has since reversed direction entirely.

Europe vs. the World

The divergence with North America is stark. In March 2026, the ESRB confirmed it would not adopt PEGI's changes. A spokesperson argued that non-content factors influencing rating categories "could be confusing," while acknowledging that parents want upfront notice of online communication and spending. The board stated it has "no plans" to let factors outside content and context affect ratings.

Europe, by contrast, has been building toward this for years. Germany's USK added loot boxes and online risks to its ratings in 2023 under the Youth Protection Act. Belgium effectively banned loot boxes in 2018. Australia has required a mandatory 15 rating for loot-box games since 2024. Austria's Hermagor district court ruled in March 2023 that FIFA's loot boxes constituted gambling.

What remains to be seen is how publishers respond. They can redesign monetisation to dodge the 16, accept the rating and its marketing consequences, or produce geo-variant builds for different territories. Whether other regulators follow Europe's lead is the next open question.

The Badge Now Says Something New

The deeper story is not the individual ratings but what they represent. Age labels are becoming a lever for regulating monetisation design, not just content, and Europe has opted for enforcement where it once offered guidance. Return to that parent in the aisle: the badge on the box now tells them something it never did before, not about violence or language, but about how the game monetises its players.

The unresolved question is whether a PEGI 16 actually changes spending behaviour - or whether families simply buy the game anyway. No data yet exists on how the new labels affect purchasing decisions in Europe, and the ratings have only just begun to appear on storefronts. If the label does not move the needle, regulators will have to ask what does.