
The owner of Grosvenor Casinos will pay just over £5 million after the regulator found anti-money laundering and safer gambling failures across 51 venues. It’s the biggest settlement we’ve seen this year, and the first big one to land squarely on bricks and mortar. It’s also a good moment to ask what this endless parade of penalties actually tells us.
The case in brief
Who: Grosvenor Casinos Limited, Grosvenor Casinos (GC) Limited and Gaming Group Limited, all Rank Group companies, running 51 casinos across Britain.
What: A £5,012,261 settlement paid to the government’s Consolidated Fund, plus an independent third-party audit of AML and safer gambling policies.
Why: A licence review, triggered by reports and intelligence, found systemic weaknesses in both money laundering controls and customer protection.
Rank Group isn’t a small operator caught napping. It’s one of the most established names in British gambling, the company behind Grosvenor’s casinos and Mecca’s bingo clubs, and a FTSE-listed business with every resource it needs to get compliance right. That’s what makes this week’s settlement worth more than the usual eye roll. The Gambling Commission opened a formal licence review after receiving reports and intelligence about the three Grosvenor licensees, carried out a targeted compliance assessment in June 2025, and found weaknesses that it describes as systemic rather than isolated. Rank had already flagged a £5 million provision for a regulatory settlement in its full-year results, so the figure itself won’t shock the City. The detail should shock everyone else.
What went wrong
I’ll start with the money laundering failures, because one finding stands out. The casinos hadn’t updated their anti-money-laundering policies to reflect changes to the Money Laundering Regulations made in 2020. That’s a gap measured in years, not weeks, and its knock-on effect was that some customers who should have been treated as higher risk simply weren’t. Venue managers were left to make discretionary calls without clear guidance, which meant checks on where customers’ money came from were inconsistent at best. Even enhanced checks required by Rank’s own rules were sometimes skipped, including for customers such as students from higher-risk jurisdictions and people with unusual funding patterns.
There’s a crypto aspect too. The policies were unclear on cryptocurrency as a source of funds, and staff accepted crypto as legitimate once it had been converted into sterling and landed in a bank account, without checking where it had come from in the first place. Converting crypto to pounds doesn’t clean up its origins. It just moves the question one step along, and that’s precisely the step these checks exist to take.
The safer gambling cases
A customer who lost around £50,000 with no recorded safer gambling intervention.
A long-standing customer who won about £260,000, then lost £250,000 within 12 days, with no recorded protective interaction.
A returning customer who lost £25,000 before anyone stepped in.
Beyond those headline cases, the Commission found a pattern of repeated low-level interventions with no assessment of whether they were working, and slow escalation to the tools that actually bite, such as gambling limits or restrictions on debit card payments. Anyone who’s followed my enforcement coverage this year will recognise the pattern: a conversation logged, a box ticked, and the losses carrying on regardless. The Commission’s director of operations, Sue Young, made the point directly, saying these risks “are equally alive in the land-based sector” and urging other venue operators to check their own arrangements. Rank accepted the findings, cooperated fully and moved quickly on fixes, all of which counted in its favour when the figure was set.
Is this happening more often?
It certainly feels like it. This is the fourth enforcement story I’ve written in barely four months, and here’s the year so far.
The 2026 enforcement ledger
June · Betfred’s online arm pays £900,000 for safer gambling failures
July · Evolution settles for £4.75m after its games turned up on unlicensed sites
August · QuinnBet pays £609,104 for AML and safer gambling failures
Late August · BresBet and Bet St George both suspended mid-review
October · Rank’s Grosvenor casinos pay £5,012,261
The official figures tell a more nuanced story than those figures might make it look. In 2023-24, the Commission took action against 19 operators, with £13.4 million in fines and settlements. In 2024-25, the number of enforcement actions rose to 24, but the total value fell to £4.2 million, and the Commission described that drop as a potentially positive sign that standards were improving. Over the same period, its compliance work more than doubled, from around 4,200 activities to more than 9,700. And the truly eye-watering numbers came earlier: Entain’s £17 million in 2022, then William Hill’s £19.2 million in 2023, a record at the time. Since the middle of last year, the rhythm has picked up again, with action against 13 operators in the second half of 2025 alone and the run of cases above in 2026.
Put that together, and my answer to “is this happening more than it used to” is yes, but not in the way people assume. Enforcement is more frequent and far more visible, because the regulator is inspecting much more and publishing much more. What’s changed most recently is reach: the cases are spreading from online operators to suppliers, to small independent bookmakers and now to a land-based heavyweight, and the Commission has reintroduced suspensions alongside settlements. The record-breaking single fines, though, came in 2022 and 2023. This is a wider net, not necessarily a heavier one.
What it says about the industry’s health
The industry’s lobbyists would love these settlements to look like regulatory overreach, part of a war on the sector being fought alongside the tax rises. The industry’s harshest critics would love them to look like proof of a rotten trade. Neither fits the evidence. The Commission’s annual reporting has noted that the largest operators have become markedly more likely to pass compliance assessments first time, which isn’t what a collapsing industry looks like. But Rank’s case shows what still slips through: regulation changes from six years ago not reflected in policy, cryptocurrency waved through on arrival, and a customer losing a quarter of a million pounds in under a fortnight without a recorded conversation.
My diagnosis is a patient that’s mostly stable but keeps presenting with the same infection. It isn’t the exotic stuff that gets operators caught. It’s the basics: knowing your customer’s money, stepping in when losses spiral, and checking whether the step actually worked. Those failures are cheap to prevent and expensive to ignore, and they’re turning up at every size of business. That matters politically, too. This settlement lands in the same autumn the land-based sector is asking the Chancellor not to double Machine Games Duty, and every case like this makes the industry’s pleas a little harder for ministers to hear sympathetically. Compliance failures don’t just cost money. They cost credibility at the worst possible moment.
For players, the practical lessons haven’t changed, but they’re worth repeating. A famous name on the door doesn’t mean someone is watching your play closely, so your own limits and timeouts remain your most reliable safety net, in a casino as much as online. And remember where the money goes: to the Treasury, not to the customer who lost £50,000 without anyone asking if they were all right.
Rank is the latest name on a list that keeps growing, and on this year’s evidence it won’t be the last before Christmas. That isn’t a sign that British gambling is falling apart. It’s a sign that the regulator has stopped looking only where the money is newest and started looking everywhere, including the carpeted rooms where the industry has traded for generations. The question for every operator reading this week’s statement isn’t whether the Commission will find them. It’s what it’ll find when it does, and whether the answer is a policy that was updated in 2020 or one that wasn’t.