Financial risk checks in gambling

Financial risk checks in gambling: what the rule actually says

Two different things get called financial risk checks in gambling, and mixing them up causes most of the worry. The first is the financial vulnerability check, a condition in the Gambling Commission's Licence Conditions and Codes of Practice at paragraph 3.4.4. It is live, it applies to every online operator licensed for British customers, and it is fairly light: the operator looks at public records for signs of serious money trouble.

The second is the financial risk assessment, a deeper look using credit reference agency data that was aimed at roughly the top 3% of spenders. That one was tested in a pilot under LCCP 3.4.6 and, as of October 2026, the Commission had made no decision to bring it in. So if you have read that every casino now trawls your credit file before you can play, that is not the rule.

According to the Commission's text of LCCP 3.4.4 (opens in a new tab), the check looks for public-record markers such as bankruptcy, a county court judgment (CCJ), an individual voluntary arrangement (IVA) or a debt relief order (DRO). It sits alongside the wider customer interaction rules, which require operators to watch for signs of harm whatever your deposit total. Both are part of the regulatory framework explained on our UK rules hub.

The £150 trigger: how net deposits are counted

The trigger is based on net deposits: the money you pay in minus the money you take out, over a rolling 30-day window. A rolling window means the operator looks back 30 days from any given point, not at a calendar month. Since 28 February 2025 the threshold has been £150. From 30 August 2024 until 27 February 2025 it was £500.

Because withdrawals are subtracted, someone who deposits a lot but also cashes out regularly may never reach the line, while someone making small top-ups that are never withdrawn can cross it quite quickly. The figure is close to the idea of net loss, except that any money still sitting in your balance is counted as deposited but not yet lost.

Whether a payment counts on a given day depends on when it clears and how the operator records it. The rule sets the threshold; the exact mechanics sit with each operator's systems.

There is a sensible limit on repetition. If the operator has already run a vulnerability check, or a fuller assessment, on you in the previous 12 months, it does not have to run another just because you cross £150 again.

What a financial vulnerability check looks at

A vulnerability check is designed to be frictionless for most people. It uses information that is already public rather than asking you to send anything. In practice that means records of formal insolvency and court debt.

• Bankruptcy orders and their status.
• County court judgments for unpaid debts.
• Individual voluntary arrangements, the formal repayment deals with creditors.
• Debt relief orders, which freeze certain debts for people with low income and few assets.
• Other public markers of the same kind, which the code covers with ‘etc.’ rather than a closed list.

If nothing comes up, you will usually notice nothing at all. If something does, the operator has to factor it into how it treats your account under its customer interaction duties. The code leaves the exact response to the operator, which must be timely and proportionate. A check is about spotting people for whom gambling losses could do serious damage, not about refusing service to anyone with a modest income.

A vulnerability check is separate from the identity check every customer goes through before depositing. Age and identity verification confirms who you are; the vulnerability check asks whether there are public signs of financial distress. A third kind of request, for bank statements or proof of where money comes from, can arise under anti-money laundering rules or social responsibility duties. The Commission's guide on why gambling businesses want to know about your finances (opens in a new tab) explains both reasons.

Financial risk assessments: the credit-file checks that are not live

The heavier version was tested under LCCP 3.4.6. Operators in fee categories J1, K1 and L1 took part between 30 August 2024 and 31 March 2025, with the option to extend to 30 April 2025. The three credit reference agencies involved were Equifax, Experian and TransUnion. Assessments ran in the background on customer data and were not used to make decisions about real accounts.

The Commission's update on its post-pilot analysis (opens in a new tab), published in April 2026, reported that 97% of assessed customers went through without friction, and that no consumer had any action taken against them on the basis of an assessment. As of October 2026 the findings were with the Commission's Board and no decision to implement had been made.

Why ‘affordability checks’ is the wrong label

Newspaper headlines settled on the phrase affordability checks, and it stuck. The Commission itself says the term is inaccurate and that it has no plans for affordability checks. Its financial risk checks update (opens in a new tab) sets out that position. The distinction matters: an affordability check would imply a regulator deciding how much each person may gamble, which is not what either the live rule or the piloted one does.

The ideas behind the label came from the government's 2023 gambling white paper, which floated tiered checks at set loss levels. Those numbers were proposals only. None of them became a rule, and the implemented trigger works on net deposits, not on a calculated loss figure.

Why gambling financial risk checks exist

Every casino game carries a house edge, so the more someone stakes over time, the more they are likely to lose. For most players that is a known cost of entertainment. For someone already in serious debt, the same losses can push them into a crisis, and they may not show the usual behavioural signs early enough for an operator to notice.

A public-record check gives operators an objective signal that does not depend on how someone plays. It also targets a known gap: before the rule, a customer with a recent bankruptcy could deposit hundreds of pounds a month without anyone looking. The lowering from £500 to £150 widened the net once the first phase had bedded in.

The check sits inside a wider set of protections. Since 31 October 2025 operators must prompt you to set a financial limit before your first deposit, and deposit limits let you cap spending yourself. The credit card ban stops borrowed money going straight onto a gambling account.

What £150 a month means at the slot or table

It helps to translate the trigger into play. Your expected loss on any bet is the stake multiplied by the house edge, a figure explained in our guide to RTP. Net deposits and losses are not the same thing, but over a month of play they tend to move together.

At 60 roulette spins an hour, 556 spins at £10 is a little over nine hours of play. On the slot, the 2.5-second minimum spin time set by the game speed rules means 3,750 £1 spins take at least two and a half hours. Real sessions swing far from these averages, which is exactly why a lucky week can keep net deposits low and an unlucky one can blow past £150 fast. Our cost per hour guide runs more comparisons.

The check does not change your stake limits. Online slots are capped at £5 a spin for over-25s and £2 for 18 to 24-year-olds under the slot stake limits, and those caps apply whatever your check result.

Who the checks cover, and what they don't do

The vulnerability check applies to online gambling businesses licensed by the Gambling Commission for customers in Great Britain. It is triggered by money moving through your account, so it covers slots, roulette, blackjack, live casino and everything else on that account alike.

• It doesn't set a spending cap. Passing £150 starts a check; it does not stop you depositing.
• It doesn't read your credit file. That was the piloted assessment, which is not live.
• It doesn't follow you between brands. Each licensed operator runs its own check on its own figures.
• It doesn't apply in Northern Ireland. Commission rules cover Great Britain only; see our page on gambling law in Northern Ireland.
• It doesn't replace other duties. Operators must still act on behavioural signs of harm below £150.

If a casino asks about your finances: practical steps

Most vulnerability checks happen silently. If an operator does contact you, it is usually for a different reason, such as a source-of-funds request. Here is a calm way to handle it.

1. Read the request carefully and note what it asks for, by when, and why the operator says it needs it.
2. Log in to your account through the app or website rather than following links in an unexpected email, and use the secure upload area.
3. Ask support, in writing, whether the request is an identity, anti-money laundering or social responsibility check; the answer tells you what will satisfy it.
4. Send only what is asked for. Cover or blur unrelated account numbers on bank statements if the operator allows it.
5. Use the pause to look at your own figures. If the total surprises you, set a deposit limit or take a break before carrying on.
6. If you think the request is unfair or the account is being held without reason, use the casino's complaints process; our page on casino account verification covers common hold-ups.

Timeline of UK financial risk check rules

Our partner casinos and financial risk checks

Every partner we list holds a Gambling Commission licence, so the £150 vulnerability check rule applies at all of them in the same way. Coral and Ladbrokes are both run by LC International Limited (account 54743); PlayOJO is run by Skill On Net Limited (39326). The offers below are slot offers and have nothing to do with how checks work. 18+ and terms apply.

• Coral: new players, 1 October 2026 to 1 February 2027. Deposit and bet £10 or more on slots to get 100 free spins on selected games at 10p each; accept within 48 hours, use within 7 days, no wagering on winnings. Neteller, PayPal, Paysafe, Skrill, prepaid cards and certain debit cards don't qualify.
• PlayOJO: new UK customers (not Northern Ireland). A first deposit of £10 or more gets 80 free spins on Big Bass Bonanza at 10p each, with no wagering and winnings paid as cash; not combinable, designated offer link only.
• Ladbrokes: new customers. Deposit and spend £10 or more on slots to get 50 free spins a day for 10 days (up to 500) at 10p each on selected games; claim before 23:59 daily, valid 7 days, no wagering. Prepaid cards, PayPal, Paysafe, Neteller, Skrill and Moneybookers deposits don't qualify.

Because Coral and Ladbrokes share an operator, one person may not be able to open new accounts at both. Read each brand's full review, such as our Coral casino review, before signing up.

18+. Every casino game has a built-in house edge, so over time you should expect to lose what you stake. Set a budget before you play and stop when it’s gone: safer gambling tools and support. Free, confidential help: National Gambling Helpline 0808 8020 133.