You ask your casino for a £200 withdrawal after a good night on the slots, and the page asks for payslips instead. The request traces back to licence conditions the UK Gambling Commission added in August 2024, and if you hold an account at a UK-licensed site, they cover you whether you bet £10 a month or £10,000.
Light checks start when your net losses reach £500 inside a rolling 30-day window and you are 18 to 24, or £1,000 if you are 25 or older. Your operator runs a soft search against credit reference and public data rather than asking you for anything. That search leaves no footprint your bank can see and it does not touch your credit score. You might assume otherwise when the email lands.
Back comes a banded estimate of your disposable income, plus flags for County Court Judgments, insolvency records and similar markers. The band gives the compliance team a sense of what you can absorb. It does not hand them your salary, your mortgage or your grocery bill.
Losses near £2,000 over 180 days for the 18 to 24 group, or £4,000 for everyone else, push you into an enhanced check. Now the operator asks for evidence: bank statements, payslips, savings, sometimes a letter about benefits. Most accounts never reach this tier. The ones that do belong to high-stake customers, and the operator weighs what you can prove against the risk of letting unaffordable play continue.
The thresholds measure net loss: money in minus money out across the period. Deposit £500, withdraw £450, repeat that cycle for a month and you sit at £50 of loss, nowhere near a trigger. Deposit £300 and withdraw nothing and you sit at £300 and climbing. Turnover on a low-stakes slot session can run to thousands without moving the number that matters.
Bonuses complicate the picture. Operators treat bonus funds and winnings differently depending on terms, and some work out loss before bonus deduction. Ask support for your net loss figure over the last 30 days if you want to know where you stand. They can see it and so can you.
Registration already requires proof of identity: name, date of birth, address. Those checks answer who you are. Financial risk checks answer whether you can afford what you are spending, and they run on a separate track with different data and different triggers. Passing one tells you nothing about the other.
You can decline to send documents. The operator then decides whether to keep your account open on limited terms or close it. Your balance comes back either way, and no UK-licensed site can keep funds because you refused a check. You lose access, along with any bonus you had running and the withdrawal you were waiting on. You can refuse on principle. Move to an unlicensed site afterwards and you trade the check for zero protection.
Set deposit limits the day you register, before you know what a good session feels like. A limit you set in calm conditions holds. One you set after a bad night rarely does. Open banking transfers through services such as Trustly settle in seconds and leave a clear trail, and PayPal and debit cards work in much the same way. Credit cards stopped working for UK gambling deposits in April 2020 under the Commission's credit card ban, so treat any site that still offers one as a warning sign.
Operators count your losses across every product they offer, including sports bets and novelty betting markets, and the thresholds read the total. Uneven losses across products show in the data before they show in your bank balance.
The Commission's first proposal put light checks at £125 of net loss a month. Gambling reform groups called it overdue, the industry called it intrusive, and the regulator moved the line up before publishing the final conditions. A pilot with several operators ran through 2023 to test how soft searches performed against real account data. The result landed in licence conditions in 2024.
The Commission will move the thresholds again as evidence comes in, and the gap between the two age bands shows where its attention sits. Younger accounts trigger checks sooner because the harm data for 18 to 24 year olds looks worse.
Your transaction history lists deposits and withdrawals with dates, and the gap between the two columns is your net loss for whatever period you pick. Check it once a month. A spreadsheet takes ten minutes and shows a trend that stays invisible week to week. Support can quote your net loss for the last 30 and 180 days on request, which tells you how close you sit to a trigger.
Take someone on £40,000 a year with £1,800 of monthly take-home pay. A light check triggers once their net loss passes £1,000 in 30 days, and an enhanced check at £4,000 across 180 days. A single £250 lost month sits nowhere near either line. Three losing months in a row at £1,400 each puts them past the second threshold and into a document request.
Raise it with the operator first, in writing, and ask why your account was flagged. They have to respond, and their answer tells you whether a soft search pulled bad data. Errors happen: a credit file that belongs to someone who once lived at your address, a default settled years ago that still shows. If the response goes nowhere, take the complaint to an alternative dispute resolution provider. UK-licensed operators must fund ADR and the adjudicator's decision binds them. The Gambling Commission does not settle individual disputes, but it collects complaints and uses the patterns to decide where to look next.
Some brands publish the process on the same page where they ask for documents, give a realistic timescale and accept a bank statement PDF in place of a video call. Others leave you guessing for a fortnight. A site like Ocean spin sets out what it runs and when, so you can plan a withdrawal instead of discovering a hold at the point you want your money. Read the help pages before you deposit anywhere. Operators who explain their checks tend to handle customers with more care.
Deposit limits, session reminders and time-outs sit in your account settings at every UK-licensed operator, and they take two minutes to configure. GamStop removes you from every licensed site in the country for a minimum of six months and you cannot reverse it early. BeGambleAware and GamCare both run free support lines if your spending has already gone past entertainment.
Regulators in several EU states and parts of North America drafted versions of the same idea after watching the UK rollout. Soft searches became the template because they avoid forcing every customer to hand over payslips, and the tiered trigger system gives operators a way to sort high-risk accounts from routine ones.
Checks cost you a few minutes and some paperwork. An unlicensed site leaves you with none of it: no UKGC oversight, no GamStop, no route to complain when a withdrawal stalls. The rules are clumsy in places and the Commission keeps revising them. Learn how they work and you plan your play rather than react to an email on a Saturday night.