Gambling Commission Warns Weak ID Checks Undermined FRA Pilot
The Gambling Commission has warned that weak identity checks by operators undermined its pilot of financial risk assessments, in a blog post published on August 12, 2026 that doubles as a reminder of existing rules under Licence Condition 17.
The regulator’s findings have direct consequences for how operators listed across our UK online casinos section onboard customers.
What The Pilot Analysis Found
Writing in the blog, Helen Rhodes, the Commission’s director of major policy projects and evaluation, and Sarah Webster, senior policy officer, said one key aim of the further analysis of the financial risk assessment pilot was to understand why a small proportion of customers could not receive a frictionless assessment.
Those customers were left "unmatched" because their details could not be matched to records held by the credit reference agencies used in the pilot, a step the Commission calls essential to a frictionless check.
Its analysis pointed to identity verification as a key factor, with matching sometimes failing even for the highest-spending accounts.
The Errors Operators Made
The Commission set out recurring problems in how firms had recorded customer details at onboarding: only an initial recorded with no full name, use of a nickname instead of the legal name, a commercial address given in place of a residential one, or a combination of these.
In wider casework, the regulator also found customers onboarded using a middle name in place of their forename, creating mismatches with records held elsewhere, such as GAMSTOP and undermining the effectiveness of self-exclusion, the blog says.
The Consumer Cost
Poor upfront checks do more than reduce matching rates.
The Commission said more than a quarter of complaints reaching its contact centre concern this area, and it is one of the most common disputes referred to alternative dispute resolution providers.
Consumers frequently report frustration at being asked for identity information only when they try to withdraw funds, delays that the Commission says stem from checks that should have been carried out much earlier.
It also flagged concern about "fuzzy matching," where operators onboard customers on partial or equivocal verification supplied by third-party providers.
What The Regulator Wants
The message to operators is to capture complete and accurate information at registration, apply verification standards that provide robust assurance of identity, and stop deferring unresolved queries until the point of withdrawal.
The Commission stressed that it does not expect enhanced due diligence for every new customer, but firms should be as robust as possible during onboarding.
The warning comes as the phased rollout of financial risk assessments approaches, with phase one set to follow further industry engagement over the summer, and pilot data not due to be published until September.
The Commission has said that fewer than 3% of active accounts would trigger an assessment, with 97% of those frictionless.
