UK Gambling Commission flags white-label risk in 2026 money laundering review

What happened

The Gambling Commission published its 2026 update to the money laundering and terrorist financing (TF) risk assessment for Britain’s licensed gambling industry on 31 July 2026, iGaming Business reported. The update revises the 2023 methodology and draws on data covering 1 April 2023 to 31 October 2025. Remote casinos, non-remote casinos, and betting, both remote and non-remote, all carry a high risk rating for money laundering (ML) and TF. National Lottery and society lotteries remain low risk, and peer-to-peer gambling, including poker and betting exchanges, carries a high ML risk rating.

Gambling software risk was upgraded from low to medium for ML. Casino TF risk is rated medium. The nationwide TF assessment remains low overall. Only 3% of remote casino operators were registered as money services businesses (MSBs), compared with 56% of non-remote casino operators, the Commission found.

Between April 2024 and March 2025, remote casino gross gambling yield (GGY) reached five billion pounds. Slot games reached 4.2 billion pounds, remote betting reached 2.6 billion pounds, and non-remote betting reached 2.5 billion pounds. Money laundering activity linked to MSBs tied to casinos totaled 70 million pounds in that period.

The Commission named insufficient scrutiny of white-label partnerships and other business-to-business relationships as the primary vulnerability across the sector. It also flagged deficient anti-money laundering (AML) and counter-terrorism financing (CTF) policies, weak staff training, inadequate thresholds, and poor monitoring of linked accounts. Emerging risks include AI-generated fraudulent identity documents, rising e-wallet use, and illegal, unlicensed gambling operators accepting cryptoassets.

Why it matters

As analysis, the gap the Commission has identified sits exactly where accountability tends to blur. White-label arrangements let a third-party brand operate gambling services under a licensed operator’s permission. The licensed operator still carries the compliance obligation, even for a relationship it may not fully control end to end. A high risk rating attached specifically to this vulnerability suggests oversight of business partnerships lags behind oversight of direct customers.

The gap in MSB registration, 3% of remote operators versus 56% of non-remote operators, is worth flagging as an open question rather than a settled explanation. The Commission’s report does not state why remote operators register far less often. It may reflect genuine differences in payment exposure between channels, or it may reflect inconsistent self-assessment against MSB criteria. Either way, the disparity itself is the signal operators should not ignore.

The upgrade of gambling software from low to medium risk points the same direction. Scrutiny is moving upstream, toward vendors and platform providers, not only operators facing customers directly.

Practitioner angle

Given the Act now urgency, compliance teams at licensed operators should move this week on:

• Auditing every white-label and business-to-business partnership against the Commission’s high risk rating, confirming due diligence, monitoring, and contractual AML/CTF obligations are current.
• Non-remote operators verifying their MSB registration status against the 56% baseline the Commission cited, and remote operators documenting why their registration rate sits far lower, at 3%.
• Reviewing AML/CTF policies, staff training records, transaction monitoring thresholds, and linked-account monitoring against the specific deficiencies the Commission named.
• Updating know your customer (KYC) identity verification controls to account for AI-generated fraudulent documents.
• Extending monitoring to e-wallet channels and illegal, cryptoasset-accepting operators as emerging exposure points.

The single most important step is auditing white-label and business-to-business partnership oversight now, since the Commission named it as the primary vulnerability driving the sector’s high risk rating.