Financial Risk Checks
Under licence condition 3.4.4 set by the Gambling Commission, British gambling operators must apply light-touch financial vulnerability checks once a customer's net deposits exceed £150 in a rolling 30-day window. This requirement, effective from 28 February 2025 following an introductory £500 limit, sits as a mandatory compliance obligation on the licensee rather than a credit check on the individual player.
The framework operates on a graduated scale. Understanding how an operator monitors customer spend requires looking at the deposit thresholds, the age-based triggers, and the explicit operational limits enforced when an assessment cannot be completed.
The Two Tiers of Net Deposit Triggers
The current baseline rules stem from an initial implementation phase. Between 30 August 2024 and 27 February 2025, the Gambling Commission set the financial vulnerability check threshold at £500 in net deposits over a rolling 30-day period.
Following that introductory period, the Commission enacted its consultation decision to reduce that ceiling. From 28 February 2025, the trigger dropped to £150 across the same rolling 30-day calculation, measuring total deposits minus total withdrawals.
These baseline checks are designed to be light-touch. They apply across all remote betting and gaming licensees, establishing a uniform starting line across the regulated market.
Escalation to Enhanced Financial Risk Assessments
Higher spending levels trigger a separate tier of scrutiny known as Financial Risk Assessments. This framework rolls out in stages rather than all at once.
Stage one applies strictly to customers aged 25 or older and is restricted to the industry's largest operators. The assessment is triggered when a customer reaches £5,000 in net deposits within a single rolling 24-hour period. The Gambling Commission said this initial threshold was expected to affect less than 0.5% of customers.
The final stage of the framework introduces tighter, permanent thresholds divided by customer age:
- Customers aged 25 and older trigger an assessment at £1,000 in net deposits within a rolling 24-hour period, or £3,000 across a rolling 90-day period.
- Customers under 25 face lower limits, triggering an assessment at £750 in net deposits within a rolling 24-hour period, or £2,000 over a rolling 90-day period.
The distinction creates a clear divide between routine monthly monitoring at £150 and intensive risk evaluation at four-figure deposit sums.
Assessment Methods and Operator Verification
When a customer crosses these higher spend markers, the operator must gather information to evaluate financial capacity. Regulatory summaries outline specific non-invasive methods for this stage, including live chat interactions where the customer self-declares income alongside open-source background checks.
Some customers report being asked for documents like bank statements or wage slips when deposits mount. The Commission's published regulatory determinations focus on operator duties, open data, and self-declaration methods rather than specifying a fixed list of customer-facing documents.
Public regulatory guidance does not set out an exhaustive catalogue of mandatory paperwork. It does not dictate standard resolution timeframes for internal reviews, nor does it publish uniform advance-preparation steps for players. The rules specify the thresholds and compliance duties, leaving individual operators to design their evidence-gathering workflows to satisfy the licence condition.
Account Restrictions When Assessments Cannot Run
The framework provides an explicit consequence when an operator cannot complete the required assessment.
If a Financial Risk Assessment cannot be undertaken, the customer can continue to reach the £5,000 threshold for three consecutive months. Once that third consecutive month passes without a completed assessment, the licensee must restrict the account from further play until the financial risk assessment has been carried out.
