UK Gambling Commission Warns Operators Over Identity Verification Gaps and Fuzzy Matching
TL;DR — In a 12 August 2026 blog post, the UK Gambling Commission reminded remote operators of their identity verification obligations under Licence Condition 17 after finding that some licensees are not collecting complete customer details at registration and are relying on permissive, or fuzzy, matching through third-party providers. The problem surfaced during the Commission's financial risk assessment pilot, where unmatched customer accounts were traced back to records holding only an initial, a nickname, or a commercial address. The Commission also said more than a quarter of complaints to its contact centre concern identity verification, typically when customers who passed registration checks are asked for more documents at the point of withdrawal.
Read the original post: Reminder of identity verification requirements for remote operators, UK Gambling Commission, 12 August 2026. Coverage: ID Tech, NEXT.io.
What the rules require
Licence Condition 17 requires operators to verify a customer's name, address and date of birth, and to establish that those details belong to a single real individual, before the customer is permitted to gamble.
What the Commission found
- Incomplete registration data. Some accounts were opened with only an initial instead of a full name, a nickname in place of a legal name, or a business address rather than a residential one.
- Fuzzy matching. Some operators accept near matches from verification providers, onboarding customers on partial or equivocal confirmation of their credentials. The Commission says this introduces risk across several regulatory areas and contributed to unmatched data in the pilot.
- Friction pushed to withdrawal. Verification gaps are often only caught when a customer tries to cash out, which is when most of the related complaints arise. Identity verification accounts for over 25% of contact centre complaints.
What operators are expected to do
- Collect complete and accurate details at registration: full legal names and residential addresses.
- Apply verification standards that give genuine assurance the customer exists, rather than accepting approximate matches.
- Resolve identity discrepancies promptly, instead of deferring checks to the withdrawal stage.
The Commission's framing is that stronger upfront verification both improves compliance and reduces the customer friction that currently generates complaints.
Related reading
- Age assurance accuracy standards
- UK digital ID for alcohol age checks
- Under-16 social media age verification
More from AIR: AIR Identity and gaming and esports, or browse the full AIR blog.
Partner with AIR
AIR is one integration suite for identity, money and loyalty. AIR Identity lets trusted issuers issue verifiable credentials and businesses verify them, so acquisition starts with users who already qualify, with minimal data custody. AIR Money embeds compliant global financial infrastructure, opening new markets without building new rails. AIR Loyalty gives brands a programmable, stable-value points engine that keeps users coming back.
Partner with us to grow your business.
AIR is built by Moca Network, the identity network of Animoca Brands.
.png)
.png)