Rank Group's casino arm failed AML rules for five years

Three Grosvenor Casinos entities will pay £5 million to the British government's consolidated fund after the Gambling Commission found that staff accepted cryptocurrency deposits converted to sterling without checking where the money came from, that managers made compliance decisions without written guidance, and that customers lost tens of thousands of pounds with no recorded intervention from anyone on the floor.

The failures ran across 51 casinos. That scale matters more than the fine.

The Commission opened a licence review after receiving intelligence on the operators, then conducted a targeted compliance assessment in June 2025. What it found was not a rogue venue or a rogue employee. It was a policy architecture that had not been updated to reflect UK Money Laundering Regulations that changed in 2020. Five years of regulatory drift, across more than fifty sites, without a central correction.

One case in the published report involves a customer who won around £260,000 and then lost £250,000 within twelve days. No recorded intervention. Another customer lost £25,000 before anyone stepped in. A third lost approximately £50,000 in a single stretch with no safer-gambling contact documented. What the Commission is describing is not a failure of individual judgment — it is a failure of the system to require judgment at all. Managers exercised discretion because the written policies gave them no other option. When you leave compliance to discretion, you get the results that discretion produces under pressure.

The cryptocurrency finding deserves its own sentence. Staff treated digital assets as clean once they appeared as sterling in a bank account. The conversion event was treated as provenance. It is not. This is precisely the mechanism that makes crypto attractive to anyone moving money that does not have a clean origin, and Grosvenor's policies had no answer for it.

The conventional read on this settlement is that land-based operators face the same scrutiny as online platforms, that the Commission is signaling it will not treat physical casinos as a lower-risk category. That reading is correct as far as it goes. The deeper issue is that Grosvenor has agreed to a third-party audit of its AML and social responsibility implementation — not just a fine and a corrective undertaking, but external verification that the correction has actually happened. That audit condition is the enforcement mechanism with teeth, and it will tell us more about whether the Commission considers this matter closed or ongoing.

Rank Group accepted the findings. Grosvenor confirmed as much. A settlement is not an admission in the criminal sense, but it is a formal record that these systems failed and that the operator has agreed to be watched.