Player protection Affordability checks

Will Your Casino Start Checking Your Bank Balance? UK Affordability Checks Explained

affordability checks banner

Few phrases wind gamblers up like “affordability check”. You’ve seen the headlines about casinos snooping through your bank account, and maybe you’ve been asked for documents yourself. Here’s what’s actually happening right now, what’s still only proposed, and which of these things actually wants to look at your money.

By Brian Taylor | 1 July 2026

Ask a room full of UK players what an affordability check is, and you’ll get a room full of different answers, most of them cross and about half of them wrong. That’s not the players’ fault. This is one of the worst-explained corners of gambling regulation, and the noise around it, from operators, campaigners and a fair chunk of the gambling press, has turned a fairly narrow set of rules into a fog of surveillance panic.

Here’s the heart of it. When someone says “my casino is checking my finances”, they could be talking about three completely different things. One’s been live for over a year. One’s still only a proposal that hasn’t been switched on. And one isn’t really a “check” at all; it’s the operator asking you for paperwork, and it’s the bit that actually annoys everyone. Sort those three apart, and the whole subject gets a lot less frightening and a lot more practical.

Live nowThe light-touch vulnerability check An automated check on public-record data once your deposits pass a monthly threshold. Invisible for almost everyone, no documents needed.
Proposed, not liveFinancial risk assessments (FRAs) A more powerful credit-data check for the highest spenders. Still only a pilot in mid-2026, with no decision yet to switch it on.
A separate thingThe operator asking for documents Bank statements and payslips, requested under money-laundering and customer-interaction rules. Not the automated checks, and the bit players actually hate.

The one that’s actually running

Start with the check that exists today. Since 2024, UK-licensed operators have had to run a light-touch financial vulnerability check once your net deposits- that’s deposits minus withdrawals- pass a threshold over a rolling 30-day period. It began at £500 in August 2024 and dropped to £150 from February 2025, which is where it sits now.

Here’s the part the scare stories skip. This check does not look at your bank account, your salary, your spending or your balance. It uses only publicly available data, the serious financial distress flags that sit on public record, so bankruptcies, County Court Judgments, debt relief orders and the like. It doesn’t weigh your postcode or your job. It doesn’t ask you for a thing. For the vast majority of people it runs silently in the background and returns a simple red, amber or green in seconds. The Commission’s own figures had most of these coming back within ten minutes, and it has no effect on your credit score at all.

If you’ve deposited a few hundred pounds this month and nothing odd has happened, that’s because, for most players, nothing does. The check exists to catch acute vulnerability, the person gambling through a bankruptcy, not to audit ordinary punters. And even when something flags, the operator isn’t meant to slam the door. A single old CCJ for a disputed parking ticket isn’t supposed to be treated like a bankruptcy, and the regulator has been clear that the sensible response to a flag is often a deposit limit or a quiet word, not throwing you off the site.

The one everyone argues about, and gets wrong

Now the measure that dominates the headlines, and the one a startling amount of online content states as fact when it’s simply not true. Financial risk assessments, or FRAs, are the heavier check that would draw on credit reference agency data rather than just public records. I want to be exact here, because I’ve read article after article claiming these went live in early 2026. They didn’t.

Setting the record straight As of mid-2026, FRAs are still a pilot, run in a non-live environment on historical data, where not one real customer has had a single real action taken. The Gambling Commission’s board hasn’t yet decided whether to introduce them at all, never mind how or when.

If they do arrive, the design on the table is less invasive than the panic suggests. FRAs would trigger only for the highest-spending accounts, roughly 3% of active customers on the thresholds tested. Of those, the pilot found around 97% could be assessed with no friction at all, meaning only about one active account in a thousand would hit any kind of snag. They wouldn’t touch your credit score. And if you’re a “thin file” with little credit history, that counts as no risk, not as a problem to be solved.

There’s a subtlety worth grabbing hold of, because the regulator keeps saying it and keeps being ignored. An FRA isn’t designed to work out what you can afford. It doesn’t inspect your income and rule on your budget. It looks for signals that you’re already in difficulty, things like recent defaults, debt management plans or bankruptcy. That’s why the Commission bristles when its own measure gets called an “affordability check”. It isn’t judging your affordability. It’s scanning for people who are already in trouble.

The bit that actually makes people angry

The demand to send in bank statements, payslips or proof of where your money came from isn’t the vulnerability check, and it isn’t the FRA. It’s a separate operator process entirely.

Those document requests come out of the operator’s own anti-money-laundering duties and customer interaction obligations, not out of the automated financial checks. That matters enormously, because it’s the source of nearly every “my casino is spying on me” horror story. The automated checks are simple and data-led. The document demand is a person at the operator deciding, sometimes reasonably and sometimes not, that they want to see your paperwork.

This is where I’ll happily be critical, because the regulator itself has all but admitted the problem. It’s described the current setup as a patchwork, with operators asking customers for documents when there may be little real need to. It has told operators, in as many words, not to jump into demanding bank statements or closing accounts every time a check flags something. One senior figure went as far as saying that asking for documents after a financial risk assessment lacks a legitimate regulatory purpose. Read that back: the intrusive experience players resent most is largely operator behaviour that the Commission is actively trying to curb, not a rule it imposes.

What to do if you’re asked for documents

Five things worth knowing

Ask what kind of request it is. Money-laundering and source-of-funds, an affordability concern, or a response to a specific flag? You’re entitled to know why.

Ask what triggered it. A vague “routine checks” line isn’t good enough when they want your bank statements.

Know the trade-offs of refusing. Declining can have consequences, especially for money-laundering checks, but operators aren’t meant to treat document demands as their automatic first move on financial risk grounds.

Redact sensibly. If you do share a statement, you rarely need to expose every unrelated transaction on it.

Escalate if it’s disproportionate. A request that clearly outruns any reason is complaint territory, and ultimately ADR territory, like any other dispute.

One more fear worth heading off, because it comes up constantly. No, you’re not about to be forced to plug your bank account into a casino through open banking. The Commission has been explicit that it isn’t pursuing mandatory open banking, that any such data sharing would be consent-based, and that choosing not to share it wouldn’t block you from gambling. It’s being explored only as an optional route for the small number of cases the automated checks can’t match. The “they’ll see my whole account” worry belongs firmly in the overblown pile, at least as things stand.

Why the subject runs so hot

It helps to understand why this topic generates so much heat, because both sides have a reason to frighten you. The industry, deep in a brutal year of a 40% online gaming tax and stake caps, has every incentive to paint checks as intrusive surveillance that’ll drive you offshore, and it’s threatened legal action to stop FRAs. A trade body survey made much of the claim that 65% of bettors would refuse to hand over financial documents. Campaigners, on the other side, have an interest in the checks looking as necessary and formidable as possible. The reality, as usual, is duller than either camp wants it to be. The live check is light-touch and mostly invisible; the proposed one is narrow and still switched off; and the real friction is a document request culture that the regulator is trying to soften.

Will your casino start checking your bank balance? Not through the automated system. The live check reads public distress flags; the proposed one would read credit file signals, and neither touches your bank account nor your credit score. The only thing that actually asks to see inside your account is the operator’s own document request, and that’s driven by money-laundering and customer interaction rules the regulator is currently pushing operators to apply more sparingly, not more. None of which means you should accept a heavy-handed demand for your financial life story. It means knowing which of these three things you’re dealing with, making the operator tell you which it is, and pushing back when the request outruns the reason. The checks aren’t the surveillance monster the headlines are selling. The friction is there, but it’s mostly a behaviour problem, and behaviour is exactly what complaints and pressure can change.