Britain’s remote casino, betting and bingo sector generated £8.3 billion in gross gambling yield in the year to March 2026, up 6.9% year on year, within a total industry of £17.5 billion. For payments and billing professionals, that headline number hides the more interesting story: over the past six years, the deposit flow behind UK online gambling has been rebuilt by regulation into one of the most tightly controlled checkout experiences in e-commerce. Any vendor selling payments, identity or messaging services into this vertical needs to understand the compliance stack it now runs on.
No Credit, by Law
The foundational rule arrived on 14 April 2020, when the Gambling Commission banned gambling with credit cards across online and offline products, with a carve-out only for face-to-face lottery ticket sales. The regulator’s reasoning was blunt: research showed 22% of online gamblers using credit cards to gamble were classed as problem gamblers, and UK Finance estimated 800,000 consumers were gambling on credit.
For payments teams, the important detail is how far the rule reaches. License condition 6.1.2 prohibits accepting gambling payments by credit card “through a money service business” too, and Commission guidance tells operators to make sure e-wallet deposits were not themselves loaded from a credit card. In practice, that means acquiring, wallet and PSP partners all inherit the compliance burden: a UK casino cashier must be able to trace what sits behind the token it is charging.
Verify First, Deposit Second
The second layer predates the card ban. Since 7 May 2019, operators must verify a customer’s name, address and date of birth before allowing them to gamble, which in engineering terms moved KYC from a withdrawal-time checkpoint to a registration-time gate. The days of “deposit now, document-check when you cash out” ended with that rule change, and the Commission also made clear that operators cannot confiscate a customer’s funds because identity documents arrive late.
This is why age and identity verification vendors have become fixtures of the iGaming stack: the check is not a fraud-prevention nicety but a licensing precondition, sitting in the critical path of every new account.
The Affordability Layer
The newest addition is financial vulnerability checking. Under rules phased in during 2024 and 2025, operators must run light-touch financial vulnerability assessments, introduced at £500 in net deposits a month from 30 August 2024 and tightened to £150 a month from 28 February 2025. The checks rely on publicly available data, such as records of bankruptcies and county court judgments, and the Commission has stressed they do not affect consumer credit ratings; a separate pilot of deeper financial risk assessments ran outside the live environment.
Look at that threshold through a billing lens: £150 of net deposits in a rolling 30-day window is not high-roller territory. It means the assessment machinery has to be cheap, automated and frictionless at scale, which is precisely the kind of data-plumbing problem the payments industry is built to solve, and a growing service niche for the vendors that serve it.
Where Carrier Billing Stops
For this publication’s core audience, one boundary is worth spelling out. Direct carrier billing, the mobile operator’s own payment rail, operates in the UK largely under the exclusion in the Payment Services Regulations 2017, which allows charges to a mobile bill only where a single transaction does not exceed £40 and the monthly total stays under £240, and only for digital content, voice-based services, tickets and charity donations.
Gambling deposits are not on that list. That statutory shape, rather than any technical limitation, is why DCB remains confined to low-value content and why the casino cashier belongs to debit cards, bank transfers and e-wallets, even when the deposit itself is made from a mobile screen. Ofcom took over the regulation of phone-paid services from the Phone-paid Services Authority at the end of January 2025, so the conduct rules around that boundary now sit with the communications regulator.
What the Stack Looks Like From the Operator’s Side
Online casino operators licensed in Britain now run every one of these layers at once, and Hollywoodbets, which has held a UK Gambling Commission license since 2019, is among them: its UK platform offers online slots, table games and more, with each deposit channel sitting behind the identity, age and affordability gates described above. Add the requirement that every GB-licensed online operator has participated in the GAMSTOP multi-operator self-exclusion scheme since 31 March 2020, and a modern UK casino cashier is less a payment form than a policy engine, checking who is paying, how, with whose money, and whether they should be playing at all.
That is the commercial takeaway for telemedia and payments vendors. Each regulatory layer added since 2019 has created its own line of procurement demand:
- Identity and age verification at registration, sitting in the critical path of every new account rather than at withdrawal.
- Open-data affordability checks, run automatically against public records at thresholds as low as £150 of net deposits a month.
- Payment-method screening, tracing whether a card, wallet or token is ultimately backed by credit.
- Self-exclusion integration, reconciling every account against the national GAMSTOP register.
The compliance stack, in other words, is the product.
The Consumer-Facing Footnote That Isn’t Optional
One final point belongs in any honest account of this market. The rules exist because the product carries risk, and the same seriousness applies to how it is presented: gambling in Britain is for adults aged 18 and over, deposit limits and self-exclusion are standard tools on licensed sites, and anyone whose gambling is causing concern can contact GamCare’s National Gambling Helpline on 0808 8020 133, free and confidential, at any hour. For the industry serving this vertical, those safeguards are not overhead on the payment stack. They are the specification.
