Spain Tightens Payment Verification, Exposing Italy’s Shortcomings.
From 28 October 2026, online gambling operators in Spain must confirm that the card, bank account or e-wallet used for deposits and withdrawals belongs to the gaming account holder. Royal Decree 813/2026 adds this requirement to Spain’s anti-money laundering rules.
Existing customers have until 28 April 2027 to verify ownership. During that period, they can deposit and play but cannot withdraw winnings. Accounts still unverified after the deadline must be closed, and operators must notify the DGOJ and return the balance.
Italy’s rules leave a gap
Italy already requires identity checks, but its rules do not explicitly require operators to match the payment instrument holder’s name with the gaming account holder’s. Licence terms require deposits to use identifiable instruments and withdrawals to go to the account holder through traceable methods. Operators must retain payment records for 10 years, but the rules do not specify when or how names should be compared.
Read Also: Spain Reopens Consultation on Gambling Risk Detection System
Cash and account risks
Italy permits cash deposits of up to €100 per week at physical points of sale. Since cash has no registered holder, operators must rely on account activity to spot suspicious patterns. A mismatch involving a card or e-wallet could signal third-party account use, money laundering, or a self-excluded player gambling under another person’s identity.
Steps for Italian operators
Licensees could check names when a payment method is registered and again at the first withdrawal. Document mismatches for review, and assess cash deposits alongside wider account behaviour. Spain’s rule takes effect on 28 October 2026, with the transition period ending on 28 April 2027. The DGOJ is also consulting on a risk-detection mechanism, with comments due by 26 October.
