Responsible gambling and affordability

UK Financial Risk Assessments (FRAs) Explained

What the Gambling Commission confirmed in July 2026 about financial risk assessments, the stage one and full thresholds, what the checks use, and how operators should prepare.

4 min readPart of responsible gambling and affordability

On this page
  1. What did the Commission confirm?
  2. How do FRAs differ from financial vulnerability checks?
  3. How should operators prepare?
  4. What questions should operators ask credit data providers?
  5. How should FRAs fit with existing checks?
  6. How does the UK approach compare?
  7. Worked example: stage one in practice
  8. What mistakes do operators commonly make?
  9. Checklist
  10. Frequently asked questions
  11. Sources
  12. More guides

Financial risk assessments (FRAs) are credit-data checks that UK online operators will run on customers who deposit large amounts, to spot financial difficulty such as defaults and arrears. The Gambling Commission confirmed on 7 July 2026 that they will start in stages: first at the largest operators for net deposits above £5,000 in 24 hours (£2,500 for under-25s), later at lower thresholds. The Commission says the checks will not affect credit scores and that most will be frictionless.

Key takeaways

  • Stage one: net deposits above £5,000 in 24 hours (25 and over) or £2,500 (under 25) [1].
  • Full implementation: above £1,000 in 24 hours or £3,000 over 90 days (25+); £750 or £2,000 (under 25) [1].
  • Fewer than 0.5% of customers exceed stage one thresholds; fewer than 3% of accounts would be assessed at full implementation [1].
  • 97% of assessed customers in the pilot could be assessed without friction [1].
  • The stage one timetable is set after implementation groups report [1].
£5,000stage one trigger (24 hours)
<0.5%customers above stage one
97%frictionless in pilot
7 Jul 2026Commission confirmation

What did the Commission confirm?

[1]” tabindex=”0″>

FRA thresholds [1]
Stage Age 25 and over Under 25 Who
Stage one Net deposits above £5,000 in a rolling 24 hours Above £2,500 in 24 hours Largest operators
Full implementation Above £1,000 in 24 hours or £3,000 over 90 days Above £750 in 24 hours or £2,000 over 90 days All remote operators

How do FRAs differ from financial vulnerability checks?

[1] [2]” tabindex=”0″>

FVC versus FRA [1] [2]
FVC FRA
Data Public records Credit reference agency data
Trigger £150 net deposits in 30 days Stage one £5,000 in 24 hours
Finds Bankruptcy, CCJs, IVAs, DROs Defaults, arrears and broader financial difficulty
Status In force since August 2024 Staged from 2026

How should operators prepare?

  1. Map exposureCount customers who would exceed stage one and full thresholds.
  2. Choose data partnersCredit reference agencies and integration timelines.
  3. Design outcomesWhat happens for each result: no action, interaction, limit, review.
  4. Prepare messagingExplain checks plainly; no credit score impact.
  5. Train VIP and supportHigh-depositing customers concentrate in VIP; see VIP management.
  6. Join implementation groupsInfluence the stage one timetable.

What questions should operators ask credit data providers?

Questions for FRA data providers
Question Why
Coverage Share of customers who can be assessed without friction
Latency Assessments must not delay play unnecessarily
Signals returned Defaults, arrears, indebtedness indicators
Data protection Lawful basis, transparency, no credit score impact
Audit trail Evidence for the Commission

How should FRAs fit with existing checks?

  1. Keep FVCs runningFVCs at £150 in 30 days continue.
  2. Add FRAs at the thresholdsStage one first, then lower thresholds.
  3. Merge outcomesOne customer view for safer gambling decisions.
  4. Avoid duplicate requestsIf credit data clears the customer, do not ask for documents.

How does the UK approach compare?

Comparable approaches
Market Approach Source
Great Britain Staged credit-data FRAs plus public-record FVCs [1] [2]
Netherlands Affordability checks above €700 a month (€300 under 25) [3]
Germany €1,000 monthly limit; enhanced approval above [4]
New Jersey RG triggers on large deposits and turnover [5]

Worked example: stage one in practice

  1. Customer aged 31 deposits £3,000.
  2. Deposits another £2,500; net deposits now £5,500 in 24 hours.
  3. FRA triggered; credit data returns no concern; recorded.
  4. No friction for the customer; monitoring continues.

What mistakes do operators commonly make?

Waiting for the final timetable

Integration takes months.

Assuming no enforcement means no action

Other licence conditions still apply [1].

Poor messaging

Customers fear credit score impact without explanation.

Checklist

  • Exposure modelled at both stages.
  • Credit data partner chosen.
  • Outcome matrix designed.
  • Customer messaging ready.
  • VIP and support trained.
  • Credit data provider assessed.
  • FVC and FRA outcomes merged.

Frequently asked questions

What is an FRA?

A UK financial risk assessment using credit reference data on high-depositing customers.

When do FRAs start?

In stages; the stage one timetable follows implementation group work.

What triggers stage one?

Net deposits above £5,000 in 24 hours (£2,500 for under-25s) at the largest operators.

Will an FRA affect my credit score?

The Commission says no.

How many customers are affected?

Fewer than 0.5% at stage one and fewer than 3% of accounts at full implementation, per the Commission.

Are FVCs replaced?

No. FVCs continue at £150 in 30 days.

What did the pilot find?

97% of those above thresholds could be assessed without friction.

Will operators be fined early on?

Not for failing to act on an FRA result in early stages, but other duties apply.

Do FRAs replace source of funds checks?

No. FRAs are about financial risk; source of funds is about legitimacy of money.

Will FRAs require documents?

The Commission expects most assessments to be frictionless using credit data.

Sources

  1. Gambling Commission: financial risk assessments in a staged approach (7 July 2026)
  2. Gambling Commission: financial vulnerability checks (May 2026)
  3. Government of the Netherlands: online gambling protections
  4. SBC News: LUGAS and the GGL
  5. New Jersey DGE: online responsible gaming rule adoption

Affordability checks

UK financial vulnerability checks, Dutch thresholds, German limits and Sweden’s duty of care.

Deposit limits by market

Mandatory and default deposit limits in the UK, Netherlands, Germany, Sweden, Malta, Ontario and US states.

Markers of harm

The behaviour and payment signals regulators expect operators to monitor and act on.

VIP management and AI VIP hosts

How VIP programmes work, the compliance guardrails, and where AI VIP hosts fit.

United Kingdom

Payments, KYC, responsible gambling and marketing rules in United Kingdom.

Further reading elsewhere