The UK Gambling Commission has adjusted the overall risk level of gambling software suppliers from low to medium in its 2026 Money Laundering and Terrorist Financing Risk Assessment, focusing on products flowing to illegal platforms through multiple commercial relationships, exposure to cryptocurrency assets, and technology-driven evasion of identity verification. Suppliers must maintain verifiable control over the final destination of their products, even if they do not directly interact with players.
Software Supply Chain Becomes the Only Sector with an Increased Rating
Gambling software is the only sector in this assessment where the overall rating has been raised. Regulatory bodies believe that licensed suppliers may lose visibility of the final deployment locations of their products through dealers, cross-border partners, or third-party arrangements.
Continuous Monitoring of Downstream Customers Required After Contract Signing
One-time due diligence cannot cover software resale and changes in customer business. Suppliers need to retain final operating domain names, actual controllers, license status, payment entities, and technical access records, and promptly suspend services when products appear on unlicensed sites.
Cryptocurrency Assets Increase the Complexity of Funding Sources
The assessment categorizes transactions related to cryptocurrency assets as a new risk category, with a medium likelihood of occurrence and high potential impact. Even if suppliers do not directly serve players, investments, settlements, and business partners may introduce untraceable funds into B2B relationships.
AI Testing Traditional Identity Verification Capabilities
The Commission points out that AI-generated documents, deepfake videos, and face-swapping technologies can be used to bypass KYC processes. Operators and suppliers need to combine live detection, device intelligence, document authenticity, and abnormal behavior, rather than just checking a document image.
Casinos Offering Payment Services Also Listed as High Risk
Some physical casinos operate as Money Service Businesses, allowing overseas customers to withdraw or use funds, potentially making it difficult to verify the original sources. Regulatory focus extends from single bets to payment links, fund conversions, and cross-border beneficiaries.
Compliance Responsibilities Need to Be Transferred Along the Technology Chain
Platforms, aggregators, game studios, testing agencies, and operators all hold data at different stages. Contracts should explicitly prohibit resale to unlicensed entities, stipulate audit rights and event notifications, and allow transaction monitoring results to be escalated across departments.
————
This article is from "PASA-Global iGaming Leaders," a gambling industry news channel:https://t.me/pasa_news
Original in-depth gambling channel:https://t.me/gamblingdeep
Free data reports: @pasa_research
PASA Matrix: @pasa002_bot
PASA official website: https://www.pasa.news
