On Wednesday, the Gambling Commission (UKGC) released additional insights regarding the financial risk assessments (FRAs) pilot conducted between 2024 and 2025. Senior executives Helen Rhodes and Sarah Webster pointed out significant flaws in the identification verification processes employed by gambling operators, which compromised the integrity of the pilot. These issues also led to a negative consumer experience, marked by increased friction, higher complaint rates, and greater regulatory risks.
The Commission's blog outlined how failures during the customer onboarding phase—specifically the collection of incomplete or incorrect personal information—prevented some customers from being matched with credit reference agency records during the FRAs pilot. Effectively, this matching is crucial to achieving the pilot's aim of creating a seamless financial risk assessment.
The implementation of the FRAs will happen in stages, with the UKGC confirming the schedule for the first phase after further discussions with the industry over the summer.
Why did these failures occur? The pilot relied on operators' ability to accurately verify customer identities against third-party databases. When matching was unsuccessful, customers were classified as 'unmatched,' which necessitated more cumbersome assessment procedures. Although these unmatched cases were a minority, the Commission scrutinized them and identified consistent issues. These included using initials instead of full names, submitting nicknames instead of legal first names, and providing commercial addresses instead of residential ones.
Such inaccuracies not only hindered matching success but also compromised essential protective measures like GAMSTOP and heightened the risk of fraud and money laundering.
The update provided deeper insights into the Commission's data from its 2024 FRA pilot. Tim Miller, the outgoing executive director of the Gambling Commission, stated during iGBLive that more data updates would not be available until September. In response to the checks detailed, industry representatives criticized them as “self-harm on an immense scale.” Many stakeholders are calling for the Commission to release its complete data findings from the pilot. Grainne Hurst, CEO of the Betting and Gaming Council (BGC), expressed her disappointment, stating that a full evaluation of the pilot has yet to be disclosed, leaving both the industry and public without necessary evidence to support the introduction of these checks. Hurst commented, “These checks cannot be described as genuinely frictionless if they produce unreliable outcomes.”
The Commission also reminded operators of Licence Condition 17, which stipulates that they must verify that a customer exists by ensuring that the name, address, and date of birth all correspond to the same individual before allowing them to gamble. The blog noted that over 25% of complaints the Commission receives pertain to identity verification issues, making it a leading cause of disputes escalated to Alternative Dispute Resolution services.
Furthermore, the regulator's casework has revealed a systemic issue within the industry: identity flags and financial risk alerts are often only checked when a customer requests to withdraw. The Commission condemned the practice of delaying verification until withdrawal requests as it increases consumer frustration and fuels complaints.
This reactive strategy not only escalates customer friction but also risks breaching license conditions and anti-money laundering laws. While the Commission does not expect every customer to undergo enhanced due diligence during registration, it has urged operators to implement rigorous checks to establish unique identities.
