The new decision follows months of delay, pilot testing, criticism and careful wording. The Commission will introduce Financial Risk Assessments, or FRAs, in stages. In the first stage, the largest operators will use them for customers whose net deposits exceed £5,000 in a rolling 24-hour period. For under-25s and other higher-risk groups, the stage-one threshold is £2,500 in 24 hours.

Later, if the system reaches full implementation, the thresholds are due to come down. Customers aged 25 and over would trigger an assessment if their net deposits exceed £1,000 in 24 hours or £3,000 across 90 days. Under-25s would face lower thresholds of £750 in 24 hours or £2,000 across 90 days. That’s why the industry isn’t treating this as a tiny technical change. The first step is small. Those that follow will be much bigger.

The Commission’s case is simple enough. It says some high-spending customers are already in financial difficulty but aren’t being spotted or supported by gambling firms. It also says high-spending customers are more likely than the general population to have debt management plans or recent credit defaults. In that context, the regulator thinks limited credit reference data is a cleaner and more proportionate tool than operators making document demands at pressure points in the customer journey.

I can see the logic. Anyone who’s followed UK gambling enforcement cases knows there have been ugly examples of operators letting customers spend eye-watering sums while obvious risk indicators pile up. If the choice is between a targeted, background data check and a live-chat agent asking a customer for bank statements after a withdrawal request, the background check may well be less intrusive.

But the industry’s anger isn’t for nothing either. The Betting and Gaming Council says it’s deeply disappointed and frustrated. Legal voices have pointed to unresolved concerns around credit reference agency data, especially the possibility of different agencies returning different outputs for the same customer. Racing has gone harder still, with the British Horseracing Authority calling the decision a major threat to the sport and warning of economic harm, customer intrusion and black market drift.

That last point is the one that’s come up time and again around this issue. I’m always wary when the licensed industry uses the black market as a shield against every rule it doesn’t like. The argument can become far too convenient. Any restriction, any tax rise, any bonus rule, any safer gambling measure can be branded a gift to illegal sites. At some point, that starts sounding like a go-to deflection.

Even so, this risk can’t be brushed aside. If higher-spending players believe licensed sites are about to inspect their finances, some will look elsewhere. It doesn’t matter whether the Commission says the check is frictionless, document-free and harmless to credit scores. What matters is whether players believe it. Trust is the real battleground here, and the regulator hasn’t won it.

The other problem is implementation. The Commission says no enforcement action will be taken in the early stages for an operator failing to act after an FRA outcome, while existing licence requirements still apply. That sounds pragmatic. It also shows how delicate this is. If the regulator itself is saying, in effect, “we’ll introduce the system but won’t immediately punish every failure to act on the result,” it’s admitting the required operator response isn’t easy to provide.

For online casino players, the key question isn’t whether FRA will happen, because that’s settled now. It’s what happens in practice. Will the casino receive a limited risk signal and reduce marketing to a vulnerable customer? Will it encourage a deposit limit? Will it pause play? Will it ask for open banking? Will it suddenly demand documents? Will support explain anything clearly? Those are the details that decide whether this becomes a targeted protection measure or a new source of account friction.

The Commission insists the aim is to reduce unnecessary document checks, not create more of them. That’s an important promise. Plenty of players already hate being asked for bank statements, wage slips or source-of-funds material after years of ordinary account use. If FRAs replace some of that blunt document chasing, many players may end up better off. If they merely sit on top of the existing mess, the policy will deserve every bit of criticism it gets.

There’s also a casino-specific point that can get lost in the racing row. Sports betting and online casino play don’t carry identical risk patterns. A racing punter staking large sums across events isn’t always behaving like a slots player repeatedly cycling deposits through high-volatility games. A single spending trigger may be administratively neat, but gambling products aren’t all the same. If the final guidance treats every high-spending customer journey as identical, operators will either overreact or hide behind the rules when challenged.

That’s why the next stage matters more than the announcement itself. The implementation groups, operator guidance and formal consultation response will determine whether this is a careful rollout or a slow-motion collision. The Commission has chosen not to retreat. Now it has to prove the policy can survive contact with real players, real data and real cashier behaviour.

I’m not surprised the industry’s raging at the financial risk assessment decision. Some of that anger is predictable self-interest. Some of it is justified concern. My view is that the regulator has a defensible aim but a trust problem. Players do need protection when high spending and financial difficulty overlap. They also deserve a system that’s accurate, proportionate and easy to understand. If the UKGC gets that balance right, the fury may fade. If it gets it wrong, this’ll become another reason for players to believe the licensed market is harder to use than the alternatives it’s supposed to protect them from.