Quick Answer
Build the affordability check into card authorization: track each customer's net deposits over rolling windows, then approve, reduce or hold each deposit before funds land, matching how processors price betting risk.
Document-based reviews work the other way round. A host on the Milvy YouTube channel warned that a bank statement sent for an affordability check shows "all the history and where you spend your money and what you buy." A gate needs none of that. Its inputs already sit in your card and payout records.
Key Points
- Under the Gambling Commission's SR Code 3.4.4, a financial vulnerability check has applied since 28 February 2025 when net deposits exceed £150 in a rolling 30 days .
- The Gambling Commission cited a customer who deposited £25,000 in 25 days before the operator interacted with them, an enforcement failure it says is still happening.
- The Gambling Commission's financial risk assessments start with over-25s gambling more than £5,000 in a rolling 24 hours at the largest operators, after a rollout pause in May 2026.
The affordability decision can happen at the moment a card deposit is authorized, not weeks later.
The regulator expected most bettors never to notice an affordability check. When its pilot launched, its own assessment was that checks would leave 90% of UK customers unaffected, put the remaining 8% through light checks and send 2% to one-to-one intervention before signing on. The hard part is that 2%.
Payment-method rules have not found them either. A two-year review of the UK ban on gambling with credit cards found no significant impact on high-risk customers, who kept going by borrowing outside the financial system. Blocking a card type moved the money. It did not measure it.
Bettors, meanwhile, feel the friction long before any protection. In a video on the Milvy YouTube channel, the host read out a report that losses of "as little as 100 pounds a month" could prompt demands for proof that a customer can afford them, and warned that bank statements sent for those checks would show every exchange bet a match bettor had placed. The same host's fix was borrowed from card issuing: start new betting accounts on maximum stakes of 10 or 20 pounds, then raise them as the customer proves sensible.
I find that the most practical proposal in the whole debate, and it came from a bettor rather than a regulator. Card issuers already work this way.
A deposit-velocity gate puts the same logic inside card authorization. The limit starts low, reads net deposits across rolling windows and rises with account history, so most customers never meet a document request. That aims at both objectives the Commission named before its pilot launched, according to James Ross on an SBC podcast episode: "identifying high-risk accounts and maintaining frictionless checks for recreational customers."
Card processors do not underwrite a betting operator by its label. They price how the money moves: stored balances, how fast deposits arrive and the path cash takes back out. Setting your own deposit triggers is not a new expectation either: in its 2020 enforcement report, the Gambling Commission said it had already recommended that operators reassess their trigger frameworks, starting from their customer base and customers' disposable income levels.
Most operators already run the other checks. Under UK rules, every customer goes through identity verification, and a customer who refuses to share information for anti-money laundering or safer gambling checks may not be allowed to keep gambling. Identity gets settled at sign-up. Affordability does not.
Bettors feel that gap. In a 2024 r/HorseRacingUK thread, one commenter described the checks as "background checks triggered by Net monthly deposits", while others suspected operators reached for them only once a customer started winning. I read that suspicion as the raw material of a disputed deposit.
In a 2024 information response, the Gambling Commission said it is not exploring enforced open banking, which it says would not align with an approach "based on consent and transparency." Its pilot is also measuring how many customer accounts come back unmatched or with thin files, so a credit-file layer may not reach every customer. Start by asking which of your customers would return nothing from a credit file search, and what your cashier would do with their next card deposit.
Which deposit triggers do UK betting rules already use?
UK betting rules already measure affordability risk as deposit velocity: net deposits over a rolling window. Every trigger in force or planned is a number your card cashier produces.
Before redesigning anything, map your current deposit flow against four questions:
- Which rolling windows must you track today: 30 days, 24 hours, or 90 days?
- Does your ledger calculate net deposits (deposits minus withdrawals) or only gross deposits?
- Is each trigger evaluated before the card authorization request leaves your cashier, or after funds reach the wallet?
- When an automated rule acts, who reviews it, and where is the rationale stored?
The Gambling Commission introduced financial vulnerability checks at £500 in net deposits per rolling 30 days at the end of August 2024, then lowered the trigger to £150 per rolling 30 days in February 2025. Under SR Code 3.4.4 of the Licence Conditions and Codes of Practice, the lower line has applied since 28 February 2025 to a customer's deposits minus withdrawals. The check itself searches public records for bankruptcy orders, county court judgments, IVAs and similar markers.
The common assumption is that an affordability check means a credit check. The Commission says the "affordability" description is inaccurate, and its vulnerability check does not include credit reference bureau data. The trigger is a payment number. The check is a public record lookup.
The next layer is spend based. The BBC reported on 7 July 2026 that online gamblers spending more than £1,000 in 24 hours or £3,000 over a rolling 90 days will face a financial risk assessment built on credit reference agency data, with a lower £750 in 24 hours line for under-25s. The first stage covers only over-25s gambling more than £5,000 in a rolling 24 hours at the largest operators, which the Commission expects to reach less than 0.5% of customers. That plan arrived after the rollout was paused in May 2026, so the later stages have no fixed dates.
| Control | Trigger | Window | Data source | When it runs |
|---|---|---|---|---|
| Financial vulnerability check (30 August 2024 to 27 February 2025) | Net deposits above £500 | Rolling 30 days | Public records | After the threshold is crossed |
| Financial vulnerability check (from 28 February 2025) | Net deposits above £150 | Rolling 30 days | Public records | After the threshold is crossed |
| Financial risk assessment, first stage | Over-25s spending above £5,000 | Rolling 24 hours | Credit reference agencies | After the threshold is crossed |
| Financial risk assessment, later stages | Spending above £1,000 (£750 for under-25s), or above £3,000 | 24 hours, or rolling 90 days | Credit reference agencies | After the threshold is crossed |
| Deposit-velocity gate | Operator-set net deposit tiers | The same windows | The operator's own deposit and withdrawal ledger | Before the card authorization request |
Combining 5 sources points to one pattern: every live or planned trigger is calculated from money moving into and out of the account. The rules describe the check that follows a crossed threshold. They say nothing about holding the card authorization that crosses it.
Customers often misread these lines: in a 2024 r/HorseRacingUK thread, one commenter put the 90-day loss trigger at £2,000, lower than the line the BBC reported. Spell out on your deposit screens which window a held payment crossed, so the customer is not left guessing.
Acquirers read a merchant the same way. When our underwriting team described card break and mystery-pack merchants in September 2026, the point was that a processor prices the shape of the money (prepaid credit, stored balances and a buyback path that lets cash out) rather than the category written on the application. I apply that lens to betting. A sportsbook or casino wallet is a stored balance with a withdrawal rail attached, and the speed at which net deposits build is exactly the part of that shape a trigger table describes. Any operator applying for merchant payment processing solutions in this vertical should present those triggers as underwriting evidence, not as compliance paperwork filed somewhere else.
Which raises the harder question: if the triggers are already payment numbers, why do the checks built on them still lose good customers while missing the ones in real trouble?
Why do affordability checks lose good customers and still miss real risk?
Post-deposit checks can fail twice: document requests can lose most of the customers asked, while bureau and statement data still miss financial strain building in real time.
Start with friction. In January 2023, a player in the GGPokerCommunity subreddit said they were asked for "a ton of docs" just to raise their limits, and were told it was "all part of local regulations." A staked professional in the same thread said their limits could not rise because their bank account "doesn't reflect that I'm staked." A winning sports bettor asked how retail winnings could ever count as proof when they appear on a statement only as cash deposits.
Those are anecdotes. The vendor figures point the same way, and they come from firms selling an alternative. In 2023, one affordability data provider claimed that roughly 90% of UK players churned when an operator reached out for financial data. An open banking payments provider wrote in May 2026 that industry estimates put document-based checks at around 12% conversion at best, with 65% of consumers saying they would refuse outright. Back in 2022, the industry's own trade body cited polling in which nearly 70 per cent of people who bet said they would be unwilling to accept compulsory affordability checks.
Now the accuracy side. Frictionless data is not the same as accurate data. The same open banking provider reported that the regulator's credit reference pilot ran 1.7 million checks across roughly 860,000 accounts, and that different agencies returned different results for the same consumer, with not enough data to explain why. An open banking data firm makes a related argument: payslips, credit scores and statements are a snapshot that tells you "what happened last month," not what is happening now. A customer can look fine on paper while covering bills from savings, an overdraft or a juggled credit card.
| Approach | Source type | Friction signal | Accuracy gap |
|---|---|---|---|
| Document requests (statements, payslips) | Player forum, 2023; payments vendor estimate, 2026 | Low completion; many customers refuse | Cash winnings and third-party staking never show on the player's own statement |
| Credit reference agency data | Payments vendor report on the regulator's pilot, 2026 | Designed to need no customer input | Agencies returned different results for the same consumer |
| Point-in-time snapshot (score, payslip, statement) | Open banking data vendor opinion | Varies by method | Shows last month, not current strain |
| Operator outreach after the deposit | Affordability data vendor, 2023 | Most players asked for financial data leave | Arrives after the money has already moved |
The two failures compound. A customer pulled into a document request after depositing has two easy exits: walk away, or ask their card issuer to reverse the deposit.
I'd treat that second exit as the real cost. Lost customers dent revenue. Disputed deposits put the merchant account itself at risk, because a processor reviewing a rising dispute ratio does not care that the money funded a regulated wallet. A terminated account can follow a business into its next application, which is the situation a TMF/MATCH list merchant account approval process exists to untangle. Far better never to reach it.
None of these failures comes from picking the wrong data vendor. They come from timing: every method in the table runs after the card authorization has already cleared, when the customer has nothing left to gain from cooperating and an easy way to claw the deposit back.
What changes when the check runs at the card deposit itself?
The Gambling Commission recently found a customer who deposited £25,000 in 25 days before the operator interacted with them. Every deposit went through the operator's cashier. What if the check sat right there?
The Commission cited the case in July 2026 as an enforcement failure it says is still happening. The rule in force since 28 February 2025 starts from a figure that same cashier records: deposits minus withdrawals above £150 in a rolling 30 days. Operators still decide where the check sits, and what they gain or lose by moving it.
We read Social Responsibility Code 3.4.4 to see what a check inside card authorization would have to do. Much of it reads like a cashier's job description. Operators must take proportionate action when a check finds risk and record why. They need policies on "the circumstances in which immediate action is necessary to limit harm where significant risk is identified." Decisions can be fully automated, but when one leads to action, the customer must be offered a manual review. And an operator that ran a vulnerability check or risk assessment in the previous 12 months need not run another at the threshold.
Where a check can fire in a card deposit
- Sign-up: identity verification, which the Commission says applies to all customers.
- Card deposit request: the cashier can already work out deposits minus withdrawals for the past 30 days.
- Proposed gate: if this deposit takes the figure past £150 and no check ran in the past 12 months, the check runs before the funds are accepted.
- Stored balance: the money sits in the account, ready to stake.
- Later review: the check arrives as a separate email or on-site message.
- Withdrawal: where late checks come to be seen as a threat to getting paid.
Our diagram. The £150 trigger and the 12-month exemption come from SR Code 3.4.4. Step 3 is our proposal; the code does not require it.
Placement seems to affect whether customers finish a check at all. On a 2023 podcast, guests from a London affordability data firm said about 90% of UK players churn when an operator asks them for financial data. An open banking payments provider reported very different results in May 2026 from UK trials that tied its check to a deposit. Its chief technology officer explained: "Consumers don't complete operator tasks; they complete their own tasks."
Every source on that chart sells a different way to run checks, and none of the figures was independently measured. The trial used open banking, a different kind of check from the public-record search the code requires, and operators could let customers skip it and pay anyway, so the payment figure counts those who skipped. A gate inside card authorization would need its own numbers.
Then we looked for the figure our argument depends on most: whether a deposit gate reduces chargebacks. None of our sources measured disputes; they count completion, churn and revenue. They do show how bettors see late checks. "It's just seen as this annoying process that's a bit of a boogeyman that's going to stop you getting paid out," Joe Streeter, editor of iGamingXpert, said on the iGaming Daily podcast in May 2026. A Reddit commenter in 2024 described bookmakers happy to take money until a customer wins, then wanting "to check your ability to afford the bet they already took." That is one bettor's view and proves nothing about how operators behave. Our reading: a check before the stake asks a question, while a check before a payout can feel like a win being held back. None of our sources tested whether that difference changes card disputes.
In the case the regulator chose to publicize, the warning reached the cashier before anyone asked the customer a question, and the live trigger is a number the cashier already holds. The completion data, most of it from vendors, favors asking at the deposit. Fewer friendly chargebacks is still a hypothesis. As a processor that boards high-risk merchants, we have a stake in seeing it tested, so here is how to test it properly:
- Calculate deposits minus withdrawals over the rolling 30 days at every card authorization, and flag the deposit that would take the figure past £150.
- Have the gate look up whether a check or risk assessment already ran in the previous 12 months, so it does not stop the same customer twice.
- If the gate declines or limits a deposit automatically, build the manual review route and the record of reasons before launch.
- Ask any check provider for completion rates measured inside the deposit flow, which data the check uses, and whether customers could skip it.
- Track dispute rates for gated and ungated deposits separately before you claim the gate cuts friendly chargebacks.
How we checked this
We read the Gambling Commission's financial vulnerability check rule, BBC reporting on the July 2026 risk assessment announcement, two industry podcasts, an open banking payments provider's May 2026 analysis and a 2024 bettor discussion on Reddit. No figures in this section come from us. The completion figures come from companies that sell alternative checks, and nobody verified them independently. The £25,000 case is a single example, and the Reddit comment is one person's view. We process card payments for high-risk merchants, so a control inside card authorization fits our business. Still unknown: whether gating deposits changes chargeback rates, and how quickly a public-record check can come back inside a card authorization. None of our sources measured either.
- Gambling Commission, SR Code 3.4.4 financial vulnerability check, undated page.
- BBC News, report on the Commission's financial risk assessments, 7 July 2026.
- iGaming Daily podcast, episode transcript on the paused assessments, 27 May 2026.
- The Betting Startups Podcast, episode 73 on streamlining gambling affordability checks, 10 July 2023.
- Open banking payments provider, blog post on gambling affordability checks and financial risk assessments, 5 May 2026.
- r/HorseRacingUK, bettor discussion of affordability checks, 7 December 2024.
What is the most secure credit card processing setup for high-risk betting merchants?
The most secure setup prices how money moves, not the vertical's label: a processor underwrites stored balances and cash-out paths, so the deposit-velocity gate belongs inside card authorization itself.
Here is the build, in the order the cashier runs it:
- Keep a running ledger of deposits and withdrawals for every customer account and every tokenized card, so spreading deposits across several cards does not reset the count.
- When a card deposit request arrives, calculate net deposits over 24 hours, 30 days and 90 days, including the amount now being requested.
- Compare each total with tiers you set below the regulatory lines, so the gate acts before a mandatory check would.
- Return one of three outcomes: send the full amount for authorization, offer a smaller amount or a deposit limit, or hold the deposit for review.
- Log the inputs, the outcome and the reason, and give every automated hold a route to a human reviewer.
The order matters. Steps two through four happen before the authorization request leaves your systems, so a deposit that would push a customer past a tier never becomes a settled card transaction that can later be disputed. Which tiers to use is the one thing I can't hand you. They have to come from your own account history, and no published data yet shows operator-level thresholds or how dispute rates move once a gate goes live.
Silent, automated screening is not a new idea. In 2021, an identity data vendor argued that verifying a new customer "doesn't tell the operator how much they can afford to spend," and recommended running checks at sign-up and whenever spend behaviour changed. The same 2021 post relayed regulator figures showing that online gamblers then held an average of three online accounts, with 56% holding more than one. Two lessons carry over. Sign-up is too early. And one operator's gate cannot see a customer's other accounts, so the gate fixes timing without solving the multi-operator blind spot.
Then comes presentation. Our underwriting team's guidance is that an application should describe the actual shape of the business and how each element of it is controlled, rather than a friendlier category label. For a betting operator, that means showing the wallet, the withdrawal rail, and the gate sitting between the card and the wallet. The same guidance flips the question around: ask any prospective processor whether it already boards businesses with that shape.
| Underwriting concern | What the gate lets you show |
|---|---|
| Stored wallet balances growing fast | Net deposit totals per account and per card across 24-hour, 30-day and 90-day windows |
| Cash-out path | Withdrawals netted against deposits, so recycled funds are not counted twice |
| Dispute exposure | A log of holds and reduced amounts issued before authorization |
| Reserve structure | A documented control to put on the table when discussing a one-time hold versus a rolling reserve |
| Chargeback tolerance | An evidence trail a processor can review before acting on a spike |
Those last two rows are where processors differ most. A June 2025 thread in Reddit's r/fintech community listed reserve requirements and chargeback thresholds among six things to confirm before signing, and framed the stakes bluntly: "Will they warn you, or shut you down instantly?" One commenter added that terms which look reasonable on the advertised rate can change once reserves, chargebacks and volume shifts are counted, and urged merchants to get them in writing before processing starts. A working gate gives you something concrete to negotiate with.
Build the gate around card authorization first, since card deposits are what your acquirer underwrites and what cardholders can dispute. If you add a bank-transfer rail such as Seamless ACH payments as a secondary option, feed those deposits into the same ledger. A customer held at the card step should never find an ungated path one tab over.
Where should betting operators put affordability controls next?
At the card authorization step, because processors price how money moves and a deposit gate shows that movement being controlled before a stored balance or cash-out path ever forms.
The regulator frames its goal around timing too. Responding to a December 2024 information request, the Gambling Commission said it wants to tackle cases where customers "have been able to gamble large amounts without any checks or support". In the same response it withheld its pilot documents, warning that "Premature publication of this data could lead to an incomplete and confusing picture emerging." Operators cannot plan around a picture nobody will show them.
I expect the net deposit trigger, already written as a rolling 30-day figure, to stay the anchor while the credit-file layer waits. The number your acquirer will care about is the dispute rate on gated deposits set against the rate on deposits that never met the gate. Before you start logging, ask your processor which dispute records it would accept as evidence for that figure, and in what format. An operator that logs every approve, reduce and hold decision against later disputes will own that number first.
Start with the ledger. Its dispute history is what your next underwriting review will ask to see.
Frequently Asked Questions
What else do operators ask about affordability checks on betting deposits?
Most questions come back to four things: whether regulator checks are live, whether checks can run quietly, how a gate sits beside KYC and whether it changes disputes.
Are UK financial risk assessments live yet?
Not in full. On the iGaming Daily podcast in May 2026, SBC editor-at-large Ted said that "nearly kind of a year on, we don't know where the commission stands." iGamingXpert editor Joe Streeter still called affordability "an inevitable fate." I would plan around the second view.
Can affordability checks run without the customer noticing?
That is the stated aim. On the same episode, Streeter argued checks should run largely "in the background without the players knowing," and said the light-touch pilot targeted around 80% of players going untouched. A gate reading net deposits, meaning deposits minus withdrawals over a rolling window, fits that brief.
Does a deposit gate replace KYC or SCA?
No. Identity verification still settles who the customer is, and strong customer authentication still confirms the cardholder. The gate answers a different question: should this deposit, at this speed, go through?
Will a deposit gate cut forced chargebacks?
No published data yet shows by how much. The figure has to come from operator records, with every approve, reduce and hold decision logged against the disputes that follow. Treat any percentage you are quoted as a claim to test.
How quickly can a betting operator get a credit card merchant account with SeamlessChex?
SeamlessChex offers same-day onboarding with no contracts for established operators that meet its monthly volume minimum, with credit card processing first and ACH second, online or in person. Underwriting still applies. Start through the SeamlessChex contact page with your deposit controls ready to show.
Written by
Jonathan Albert
Co-Founder, SeamlessChex
Jonathan Albert is Co-Founder of SeamlessChex, a credit card processing and fintech payments platform recognized on the Inc. 5000.
Connect on LinkedInSeamlessChex works with established businesses processing a minimum of $25,000 per month.