The Gambling Commission has tried to calm one of the loudest fears around new financial risk checks: that players will suddenly have to hand over more bank statements, payslips or extra ID documents because they’ve hit a regulatory trigger. Tim Miller’s recent comments on the matter are unequivocal. He says that isn’t what the system is meant to do. The question is whether players should trust that promise when they’re dealing with real casino support teams.
By Brian Taylor | 6 May 2026
The debate around financial risk checks has become a fog machine. Depending on who’s speaking, they’re either a sensible, targeted safeguard for high-risk accounts or the first step towards every ordinary punter being treated like a mortgage applicant. I don’t think either version is good enough. What Miller has now done is draw a line under one specific fear: document demands following a financial risk assessment.
In his recent speech, Miller said it can’t be right in 2026 that some operators still ask customers to share bank statements and other financial documents when there may be little real need to do so. He called that approach outdated, inconsistent and disproportionate. That’s strong language from the regulator, and it’s worth taking seriously. The Commission isn’t merely saying documents shouldn’t be needed in most cases. It’s saying that asking for financial documents after a financial risk assessment would serve no legitimate regulatory purpose, and that consumers could rightly refuse.
What Miller pushed back against
The pilot numbers are central to the Commission’s defence. Miller said the pilot showed 97% of assessments could be completed in a frictionless way, which is well above the 80% level expected in the original white paper. He also said only around one in 1,000 active accounts would be unable to receive an assessment frictionlessly. If those figures hold up in the real world, the nightmare version of the policy looks much less likely.
But this is where I think the public scepticism becomes understandable. Most players don’t experience regulation through pilot percentages. They experience it through support chat, withdrawal problems, repeated document uploads and vague messages about “regulatory requirements”. So when the UKGC says “this won’t create a document burden”, a lot of players instinctively hear, “that’s what you say now.” I don’t blame them. The gambling industry has trained customers to be suspicious by making too many basic checks feel like punishment.
There’s also a difference between the new financial risk assessment proposal and existing checks already in force. The current light-touch financial vulnerability check applies when a customer’s deposits minus withdrawals exceed £150 in a rolling 30-day period. That check is based on public record information such as bankruptcy orders, county court judgments, IVAs, Debt Relief Orders and similar markers. It’s not supposed to be a demand for players to send in fresh ID or financial documents either.
So will players still be asked for paperwork?
Yes, sometimes. That’s the bit that needs to be kept separate from Miller’s statement.
That distinction is the whole matter, really. Casinos can still ask for documents where there’s a proper reason. If your name doesn’t match your payment method, if you’re using someone else’s card, if there are signs of fraud, if your account information is incomplete, if there are anti-money-laundering concerns, or if safer gambling concerns have been triggered, the operator may still need evidence. Nothing Miller said wipes out those duties.
What it should wipe out is a lazy new excuse. If a casino tells a player, “You’ve triggered a financial risk assessment, so please send three months of bank statements,” that needs challenging. The Commission’s stated position is that operators should not require documents to assess financial risk following one of these assessments. Miller also said that if the checks are introduced, the Commission could give operators clear guidance that failing to request those documents would not be a reason for regulatory action.
That last point is important because it speaks to operator fear. Some businesses have argued that if a financial risk flag appears, they’ll have to act, and if the data is imperfect, they may fall back on asking the customer for documents to protect themselves. That’s the industry’s worry. From a player’s point of view, it’s also the practical danger. A policy designed to be frictionless can quickly become very friction-heavy if operators panic, over-comply or build clumsy internal rules around it.
My view
Miller’s statement is useful because it gives players a clear line to quote back if a casino blames financial risk checks for a document demand.
But it doesn’t end the trust problem, because many document rows aren’t caused by the rule itself. They’re caused by poor operator behaviour.
The real test won’t be what the UKGC says. It’ll be what casinos do when a flagged account reaches customer support.
The Betting and Gaming Council’s response shows why this row isn’t going away. The BGC says clarity is essential, and argues that if a financial risk flag is raised, operators will still be expected to take action. That could mean limits, restrictions or interventions. From the industry side, the concern is that the Commission’s “frictionless” language underplays what happens after a flag appears. I think that criticism has some force, even if I don’t buy the worst scare stories.
Players should take a practical line. If a casino asks for ID or documents, don’t argue about document checks in the abstract. Ask what the request is for. Is it age and identity verification? Is it payment ownership? Is it source of funds? Is it AML? Is it a safer gambling review? Or is the operator saying the demand follows a financial risk assessment? Those aren’t the same thing, and lumping them together only helps the casino keep things vague.
A sensible message would be something like this: “Please confirm the reason for this document request, the rule or policy it relates to, and whether it is being requested as a result of a financial risk assessment.” That’s firm without being unreasonable. It asks the operator to tie the demand to a specific reason. If the answer is “regulatory requirements”, ask which ones. Players shouldn’t have to guess why they’re being asked for sensitive documents.
The bigger danger is that confusion pushes people in the wrong direction. If licensed casinos make checks feel arbitrary and humiliating, some customers will be tempted by offshore sites promising “no verification” or “no intrusive checks”. That’s a terrible trade. Black market casinos may feel easier at the sign-up stage, but when a withdrawal is withheld or an account is closed, the protections are far weaker. The answer isn’t to run from checks altogether. It’s to insist that checks are proportionate, properly explained and not blamed on rules that don’t require them.
Does Miller’s intervention help? On the narrow point, yes. The UKGC’s stated position is that financial risk assessments should not create an additional ID or document burden for players. They’re meant to be targeted, largely frictionless, and not a disguised affordability interview. But that doesn’t mean document checks are disappearing from UK casinos. It means players should be much more curious about why those checks are being requested.
My take is that this is good news, but only if it survives contact with operator behaviour. If the Commission follows through with clear guidance, and casinos stop defaulting to bank statements whenever they’re nervous, players may genuinely see less unnecessary friction. If operators keep using vague compliance language to ask for paperwork they can’t properly justify, then Miller’s reassurance will become another nice speech that didn’t fix the problem. The regulator has drawn the line. Now casinos need to prove they can stay on the right side of it.