Financial risk checks at UK casinos: what runs now and what waits

Where things stand on 8 November 2026

News stories often fold everything into one phrase, yet the Gambling Commission runs two separate tools: one already in daily use at every online licence holder, the other decided, with thresholds, but still waiting for a launch date. We read the Commission's conditions, news, blog posts and its briefing of 5 November 2026; where its pages disagree, we say so.

So a request for papers from a licensed casino today comes from identity rules, anti-money-laundering duties or the operator's own view of how you gamble, not from a risk assessment. On 16 April 2026 the Commission said no customer had yet faced a measure based on one.

The financial vulnerability check that runs now

The rule is social responsibility code 3.4.4, binding remote licence holders with a few exceptions. It is set off by net deposits, meaning money in minus money out, over a rolling 30 days at one operator: above £500 from 30 August 2024, and above £150 since 28 February 2025.

At the very least the operator must search public records: bankruptcy or its equivalent, county court and High Court judgments, individual voluntary arrangements, administration orders or decrees, and debt relief orders. Your credit rating is not affected.

A match settles nothing by itself. The operator weighs it with the rest of your account, takes what the code calls proportionate action and records why; an automated decision must be open to review by a person. The action might be a lower limit or a halt to marketing.

How long a check counts

The Commission's own pages differ here. The licence condition says no new check is needed if one took place in the previous 12 months, while a blog post of 14 May 2026 calls a check valid for six months. We follow the condition text; if the period matters to you, ask the operator which one it uses.

Early results

At the £500 level an average of 7% of active accounts were checked. 78% of results came back in ten minutes or less and another 10% inside two hours, and 68% of operators had run similar checks of their own accord before the rule (blog, 14 May 2026).

Financial risk assessments: approved, staged, still waiting

A financial risk assessment uses credit reference agency data for customers who spend heavily, and the Commission calls it “frictionless, document-free”. It does not move your credit score. The operator receives an overall assessment plus four markers (defaults, multiple arrears, significant arrears and a debt management plan) for regulatory use only, never commercial.

On 7 July 2026, after a Board decision of 19 June, the Commission announced a staged start. Stage 1 covers the largest operators only. Its lower line applies to customers under 25 and, according to the Board minutes, to people returning after self-exclusion.

Stage 1 should reach under 0.5% of customers; in full, under 3% of accounts. In the early stages the Commission will not take enforcement action over how an operator reacts to a result, though its other licence duties still apply.

The start date remains open. On 8 November 2026 it had not been named: on 5 November the Commission said its consultation response, which will carry the date, was due “in the coming weeks”. Until then nobody is assessed this way.

What the pilot showed

The pilot ran with the largest remote operators from September 2024 to April 2025 in three phases, with NatCen as evaluator. It was not a live test, and no customer's account was affected.

Phase 1, on historical data for inactive customers, ran over 530,000 checks at three credit reference agencies on about 300,000 accounts; around 95% matched. Phase 2, on active customers, ran about 1.7 million checks on some 860,000 accounts. There 97% needed nothing from the customer, and only 0.1% of accounts, one in 1,000, were estimated to need an assessment that could not finish automatically. The 2023 White Paper had expected 80% and 0.6%.

Pilot customers were two to four times as likely to have a debt management plan, and two to five times as likely to show a default in the last 12 months, as a comparable part of the population.

The post-pilot analysis of 16 April 2026 kept that picture (under 3% of active accounts assessed, 97% of them automatically) and traced many failed matches to weak identity checks by operators. NatCen's report was still unpublished on 8 November 2026.

Why the Commission avoids the word “affordability”

Much coverage calls all of this affordability checks; the Commission does not. In May 2025 it said risk assessments are a different thing and that there are no proposals or plans for affordability checks. In April 2026 it said so again and added that the scheme sets no spending caps.

The thresholds decide when a check begins, not how much you may spend. Passing £150 in 30 days does not stop you depositing; it starts a search of public records.

An older Commission page for players, dated 13 January 2022, still speaks of affordability. Treat it as history: the 2025 and 2026 statements are the current position.

What an operator may ask you for

Requests you meet today come from four places, and none of them is the credit-data assessment.

Your identity

Under licence condition 17.1.1 your name, address and date of birth are confirmed before you gamble, and before your first deposit the operator must say which documents it may ask for, when and in what form. It may not hold a withdrawal over something it could have asked earlier, unless the law requires it. On 12 August 2026 the Commission told operators that initials, nicknames and business addresses are not enough at sign-up.

Where your money comes from

Anti-money-laundering rules allow questions about source of funds or wealth where necessary and proportionate, at any stage rather than only at withdrawal, and the Commission expects you to be told why a payment is held. Its older page for players (January 2022) names bank statements as one example.

How you gamble

Under social responsibility code 3.4.3, in force since 12 September 2022, operators watch spending, its patterns, behaviour and account activity for signs of harm, and serious signs mean marketing must stop.

If an assessment cannot finish

Once assessments begin, documents or open banking data should be needed only where the automatic route fails, about one account in 1,000 on pilot figures.

How three operators describe their own checks

Operators may go beyond the minimum. Three examples from our answer files, read on 8 November 2026:

• Betfair Casino: the help centre describes a soft credit check through TransUnion that, by Betfair's account, leaves your credit rating untouched and can lead to a limit. It is Betfair's own step, not the Commission's assessment, and the page shows no date.
• MrQ: an account once registered with GAMSTOP gets a fixed limit of £500 a month, which the help article of 29 September 2026 says can be raised with proof of income, usually to no more than 30% of average monthly income.
• Videoslots: before you play, the UK terms ask your occupation and how much you can spend a month, and that figure becomes a monthly loss limit. The version we could read dates from July 2021, so it is not confirmed as current.

That variety is why the third of our six questions asks what is checked before you play; see the answers of all six operators.

How to prepare, and what to do if a check gets in the way

A few habits make checks smoother.

1. Sign up with your full name and home address as they appear on your documents; in the pilot, initials and business addresses often broke the automatic match.
2. Choose a deposit limit while opening the account. Since 31 October 2025 operators must prompt you to set a financial limit before money goes in, and since 30 September 2026 they must offer a limit on gross deposits.
3. Passing £150 in net deposits in 30 days at one operator starts the vulnerability check; that is routine, not a warning.
4. Asked for documents? Ask why and in what format before sending anything, and note the date.
5. If a request stalls your account, complain to the operator in writing. After eight weeks without a resolution, go to the ADR service named in its terms, and send the Commission a short account of it too.

A check is no reason to leave the register behind: a business without a Gambling Commission licence acts illegally in Great Britain wherever it is based, and these rules do not bind it (see spotting an unlicensed casino site). At your first deposit a licensed operator will also ask you to confirm how your balance is protected; our page on player funds explains the levels.

If a check touches debts or deposits you already regret, it may be a good moment to pause. Through GAMSTOP you can shut yourself out of all online licence holders in Great Britain at no cost, for half a year, a full year or five years, and the National Gambling Helpline (0808 8020 133) picks up without charge, day and night. More routes are on our help page.

Timeline, 2023 to 2026

Dates from Commission pages read on 8 November 2026, with two related changes to limits.