UK Gambling Commission Warns Operators Over Identity Verification Gaps and Fuzzy Matching

TL;DR — In a 12 August 2026 blog post, the UK Gambling Commission reminded remote operators of their identity verification obligations under Licence Condition 17 after finding that some licensees are not collecting complete customer details at registration and are relying on permissive, or fuzzy, matching through third-party providers. The problem surfaced during the Commission's financial risk assessment pilot, where unmatched customer accounts were traced back to records holding only an initial, a nickname, or a commercial address. The Commission also said more than a quarter of complaints to its contact centre concern identity verification, typically when customers who passed registration checks are asked for more documents at the point of withdrawal.

Read the original post: Reminder of identity verification requirements for remote operators, UK Gambling Commission, 12 August 2026. Coverage: ID Tech, NEXT.io.

What the rules require

Licence Condition 17 requires operators to verify a customer's name, address and date of birth, and to establish that those details belong to a single real individual, before the customer is permitted to gamble.

What the Commission found

• Incomplete registration data. Some accounts were opened with only an initial instead of a full name, a nickname in place of a legal name, or a business address rather than a residential one.
• Fuzzy matching. Some operators accept near matches from verification providers, onboarding customers on partial or equivocal confirmation of their credentials. The Commission says this introduces risk across several regulatory areas and contributed to unmatched data in the pilot.
• Friction pushed to withdrawal. Verification gaps are often only caught when a customer tries to cash out, which is when most of the related complaints arise. Identity verification accounts for over 25% of contact centre complaints.

What operators are expected to do

• Collect complete and accurate details at registration: full legal names and residential addresses.
• Apply verification standards that give genuine assurance the customer exists, rather than accepting approximate matches.
• Resolve identity discrepancies promptly, instead of deferring checks to the withdrawal stage.

The Commission's framing is that stronger upfront verification both improves compliance and reduces the customer friction that currently generates complaints.

Related reading

• Age assurance accuracy standards
• UK digital ID for alcohol age checks
• Under-16 social media age verification

More from AIR: AIR Identity and gaming and esports, or browse the full AIR blog.