On 30 July 2026 the UK Gambling Commission (UKGC) published its updated industry risk assessment of money laundering and terrorist financing (AML/CTF) in Britain's licensed gambling sector — the first systematic refresh since 2023. Remote online casinos were again rated «high risk», together with non-remote casinos and betting operators, while the gambling software subsector was upgraded from «low» to «medium». The assessment draws on data from 1 April 2023 to 31 October 2025 and states clearly that the UKGC expects operators to trigger source-of-funds checks at onboarding — not only once a player crosses high deposit or loss thresholds.
The UKGC refreshes this industry risk assessment roughly once every three years — the previous edition was published in 2023, and the current version covers 30 months of fresh data. Over that period the number of active accounts at British online casinos grew, new AI tools began generating forged selfies and identity documents, and several B2B suppliers — from KYC vendors to payment aggregators — became subjects of investigations linked to grey-market activity. Formally the new assessment is not a standalone statute and not a direct amendment to licence conditions, but an official regulatory framework the UKGC will lean on during audits, compliance visits and enforcement decisions over the next three years.
We believe this is the most player-centric UKGC assessment of the past decade. Historically, the requirement to provide source-of-funds evidence kicked in mostly when a player reached high deposit or loss thresholds — typically tens of thousands of pounds. Now the regulator clearly expects an operator to be able to request SOF documents right at the start — at onboarding, not half a year into a customer relationship. That changes not only the sign-up process, but also how quickly a routine top-up can trigger a request to explain the origin of the funds.
The second block of changes is about continuity of checks. Instead of an annual static risk assessment, the UKGC now expects operators to run continuous monitoring — on every suspicious transaction, every new payment pattern. That aligns with the same logic the regulator is applying through Financial Risk Assessments with a £5,000 per 24-hour threshold, and together the two tools weave a continuous cash-flow tracking layer from the first deposit to the final withdrawal.
The third dimension is B2B supplier risk. For the first time the gambling software and platform subsector was upgraded from «low» to «medium» risk. That is a direct signal to licensed casinos: they must more rigorously vet their partners — from KYC verification vendors to payment aggregators — and cut ties when black-market links surface. We already saw the same logic play out in the Evolution Gaming and UKGC live-casino settlement; the new assessment turns that practice into a system-wide expectation.
The fourth theme is artificial intelligence. The UKGC explicitly named AI-generated documents and fake selfies as one of the key emerging risks of 2026. In practice this means that the standard KYC flow at a casino is getting more demanding: expect extra steps — real-time video ID checks, repeat document requests, biometric verifications. For the player this is not bureaucracy for its own sake, but a direct consequence of the fact that choosing a reliable licensed online casino is now an even more important skill; on fake sites, as the MGA has warned about clones of licensed operators, those checks either do not exist or are cosmetic imitations.
What exactly did the UKGC publish on 30 July 2026?
The UKGC published an updated industry risk assessment of money laundering and terrorist financing in Britain's licensed gambling sector, covering the period from 1 April 2023 to 31 October 2025. It is an official regulator document that assigns risk ratings to individual subsectors — remote casinos, non-remote casinos, betting, lotteries, poker, gambling software — and serves as the framework for compliance audits and enforcement decisions. The previous edition was published in 2023, so the refresh runs on a three-year cycle.
Why were online casinos rated «high risk» again?
Remote online casinos are traditionally the most exposed to money laundering because of the anonymity of digital payments, the high velocity of deposit turnover and the global nature of payment rails. As of 31 October 2025 the UKGC observed a growth in cases where players deposit funds that look like earlier withdrawals but in fact come from unverified sources. As a result the updated assessment kept the «high» rating for remote casinos, the betting sector and even peer-to-peer poker.
How will source-of-funds checks change for UK casino players?
The key change is that the UKGC now clearly expects operators to request SOF documents at onboarding and during the early stages of play, not only when a player reaches high deposit or winnings thresholds. In practice a new player can be asked for bank statements, an income statement or an explanation for a large one-off deposit far earlier than before. Operators that do not do this face substantial fines for breaching AML/CTF requirements.
Does this affect European players outside the UK?
Yes — through two channels. First, many operators hold a UKGC licence alongside MGA, ADM, GGL or other European licences, and the updated KYC procedures roll out across all customer bases of those groups. Second, the parallel EU AMLA consultation on gambling is picking up much of the UKGC's approach — so during 2026–2027 similar requirements will become the standard in the EU as well.
As of 1 August 2026, if you play at a UKGC-licensed casino or at any casino inside a group that holds a UKGC licence, prepare a basic KYC pack in advance: passport or ID card, proof of address no older than 3 months, and bank statements for the last 3–6 months. Do not panic if the operator asks for source of funds early — this is now a directly expected regulatory step, not a «suspicion signal». Keep copies of every withdrawal in one secure place so you can quickly evidence the origin of subsequent deposits. And do not try to bypass KYC through a VPN or «fast» offshore unlicensed casinos — there your withdrawals can be frozen without any effective right of appeal.
We expect that by the end of 2026 other major European regulators — MGA, ADM, GGL, KSA, Spelinspektionen — will align their own AML guidance with the UKGC's approach, especially on early source-of-funds checks and continuous monitoring. For the player this means moving to an «always-verified» model: the fewer surprises in your documents, the faster your withdrawals clear. Online casino, lottery and sports betting are for adults (18+) and are not a way to make a living; if you feel your gambling budget is slipping out of control, use GAMSTOP (in the UK), Cruks (in NL), OASIS (in DE), RUA (in IT), Spelpaus (in SE), the ANJ registry (in FR), autoexclusão SPA (in Brazil) or contact your national gambling helpline.