UK gambling operators fail identity checks in pilot programme

UK gambling operators left identity gaps that undermined their own risk check pilot

Helen Rhodes and Sarah Webster published a blog post on the Gambling Commission's website that most of the industry read as a regulatory rebuke. The subject was the financial risk assessment pilot. The finding was that the friction operators complained about was, in significant part, friction operators created.

The scheme required prediction markets and gambling operators to match customer identities against credit reference agency records before the risk assessments could run. Where matching failed, customers were routed to more intrusive manual checks. The industry had pointed to these cases as evidence that financial risk assessments were unworkable — generating exactly the kind of customer friction that drives players toward unlicensed platforms. The Gambling Commission has now looked at what caused the failures and concluded the answer was inside the operators' own systems: initials filed where full legal names belong, nicknames entered in place of forenames, business addresses recorded instead of residential ones.

These are not edge cases. More than a quarter of complaints reaching the Commission's Contact Centre involve identity verification. The same failures that degraded the pilot's matching rates are the ones already generating a volume of complaints large enough to make identity the leading dispute category sent to alternative resolution services.

The industry's argument against financial risk assessments rests on a specific claim: that the checks create disproportionate friction for ordinary customers, and that this friction is structural, inherent to what the scheme requires. The Gambling Commission's response is that a material share of the friction was not structural — it was the product of operators onboarding customers with incomplete data and then discovering the gaps at the worst possible moment. Licence Condition 17 requires name, address and date of birth to match before gambling is permitted. The casework the Commission reviewed suggests many operators treat identity flags as a withdrawal-stage problem rather than an onboarding one.

That distinction matters commercially. A customer who cannot withdraw is an angry customer with a story. A customer who is gently re-verified at account opening is not. The Commission is not claiming that financial risk assessments are frictionless if the data is clean. The claim is narrower and harder to dismiss: that the pilot produced worse friction than it should have, and that operators contributed to that outcome, and that they then cited the outcome as evidence the scheme was flawed.

Whether this settles the argument is unlikely. The racing and gambling sectors have run organised campaigns against financial risk assessments, and the Commission is advancing a two-stage rollout without waiting to publish its full evidence review from the pilot. That sequencing will continue to draw criticism regardless of what the identity data shows. The industry has reasons beyond the pilot to resist the assessments, and the Commission has reasons beyond the pilot to proceed with them.

What the blog post does is remove one line of argument. The operators who filed accurate, complete customer data and still experienced matching failures have a genuine complaint about the scheme's mechanics. The ones whose matching failed because a customer was registered under a nickname at a commercial address do not.