UK identity-check failures are distorting financial risk assessments, says the Gambling Commission

More than a quarter of all complaints handled by the UK Gambling Commission’s Customer Contact Centre come from identity verification errors. That matters because the regulator’s Fraud Risk Assessment (FRA) pilot, running between 2024 and 2025, was meant to make financial checks less painful for operators and customers — and instead exposed a data-quality problem that the industry still has to clean up.

1. Helen Rhodes and Sarah Webster set out the FCA’s? no — the UKGC’s diagnosis in a blog post explaining why the FRA pilot did not deliver the results it wanted. The core idea was straightforward: operators would assess a customer’s financial profile by matching their data against credit reference agencies, without forcing the user through extra steps or visible friction.
2. On paper, that works only if the operator submits accurate identity data: name, address, and date of birth have to match the external records exactly. In practice, the regulator found the problem was not the matching system itself but the data going into it. The recurring errors were truncated names, nicknames entered as legal names, and business addresses used instead of the customer’s residential address.
3. The UKGC said the “no match” cases were only a minority of all users assessed, but the knock-on effects were bigger than the raw numbers suggest. A bad record can trigger slower, more complex review processes and weaken player-protection tools such as GAMSTOP, while also creating more room for fraud and money laundering risk.
4. The report also points to a familiar operator pattern: identity and risk checks are often done only when a customer asks to close an account, not earlier. The Commission called that reactive and said it increases friction at the worst possible moment, which is how complaints end up in dispute-resolution channels.
5. One point the regulator made very plainly: it is not asking operators to conduct deep investigations into every customer at registration. It is asking for consistency. Under Licence Condition 17, identity checks must be applied evenly throughout the customer relationship, not just at the end when the account is being shut down.