Spain has introduced stricter payment verification requirements for licensed online gambling operators, placing identity protection and transaction security firmly in the spotlight.
Spain has taken another step towards strengthening consumer protection in online gambling, introducing new rules that require licensed operators to verify that a player’s gaming account and payment method belong to the same person.
The measure entered into force on October 28, 2026, following the adoption of Royal Decree 813/2026. It applies to online gambling operators holding a state licence and covers the payment methods used to deposit money into gaming accounts and withdraw winnings.
Under the new requirements, operators must establish a match between the identity registered on a gaming account and the legal owner of the payment method associated with it. The objective is to make it more difficult for individuals to use another person’s financial details to access online gambling services.
While identity verification is already an established part of regulated online gambling, the new rule places greater emphasis on verifying the ownership of the payment instruments themselves.
Identity Fraud Remains a Concern
The Spanish Ministry of Consumer Affairs has linked the measure to an increase in reported identity impersonation cases involving online gambling.
According to figures cited by the ministry, 8,675 complaints involving identity impersonation were recorded in Spain during 2025, representing a 12% increase compared with the previous year.
Authorities have highlighted the use of payment methods whose ownership may be difficult to verify in real time, including certain bank cards and electronic wallets. Such arrangements can create opportunities for individuals to use financial instruments that do not belong to them, potentially exposing account holders and operators to additional risks.
The issue also has implications beyond individual disputes. Identity misuse and unclear payment ownership can complicate efforts to identify suspicious financial activity, establish who ultimately controls an account and investigate potential money-laundering risks.
By requiring account and payment ownership to match, Spanish authorities aim to make these arrangements more difficult to exploit.
Existing Accounts Face a Six-Month Transition
The new rules distinguish between newly registered players and customers who already held accounts before the requirements came into force.
New accounts are subject to the verification obligation from October 28. Existing customers, meanwhile, have a six-month transition period to ensure their payment methods meet the new standard.
During that period, existing players may continue depositing funds using their previously registered payment methods and participating in games. However, withdrawals are restricted until the required ownership verification has been completed.
If an account remains non-compliant after the transition period, the operator must terminate the contractual relationship and notify the relevant regulator. Any remaining balance must also be returned in accordance with the applicable rules, subject to relevant anti-money-laundering obligations.
These provisions create an operational challenge for operators, particularly those managing large customer databases with different payment arrangements.
Companies will need to identify accounts that require additional verification, communicate the requirements clearly and provide customers with a practical way to resolve discrepancies before the transition period expires.
What Does This Mean for Online Casino Operators?
For the industry, the Spanish measure reinforces a broader trend towards stronger financial controls in regulated gambling markets.
Operators can no longer treat payment processing as a purely technical function separate from customer verification. The connection between account ownership, payment security and regulatory compliance is becoming increasingly important.
There may also be implications for the customer experience. Additional checks can create friction during registration or withdrawals, especially if players do not understand why verification is required or discover that their existing payment details do not meet the new standard.
Clear communication will therefore be essential. Operators will need to explain what information must be verified, how customers can complete the process and what happens if their payment details cannot be confirmed.
The challenge is to strengthen security without creating unnecessary confusion for legitimate customers.
A Wider Regulatory Direction
Spain’s decision reflects a continuing effort to make online gambling more transparent and accountable.
For players, the change provides an additional safeguard against certain forms of identity misuse. For operators, it represents another compliance obligation that must be integrated into payment systems and customer management procedures.
The longer-term impact will depend on how effectively the rules are implemented and whether the new checks reduce fraudulent activity without creating disproportionate difficulties for legitimate account holders.
One point is already clear: payment security is becoming an increasingly important part of the relationship between online casinos, regulators and their customers.