UK casino AML rules shift in 2026

Britain’s casino anti-money-laundering framework changed in mid-2026 through amendments to the Money Laundering Regulations and an updated Gambling Commission assessment of money-laundering and terrorist-financing risks in the gambling industry. The documents should be read together: one changes legal detail; the other explains the regulator’s current view of sector exposure.

The majority of the amended Money Laundering Regulations were provisionally expected to take effect on June 30, 2026 following parliamentary approval. The Commission then published its 2026 sector risk assessment on July 30.

The high-risk-country trigger changed

The Commission’s June notice said casino operators would be required to apply enhanced customer due diligence where relevant transactions or customer relationships involve a person established in a country on the Financial Action Task Force’s “Call for Action” list. The automatic geographic trigger no longer also captures FATF’s broader “Increased Monitoring” list.

That is a narrower mandatory trigger, not permission to ignore geographic risk. Casinos continue to assess and apply enhanced measures based on the risk factors in Regulation 33. A country’s absence from the Call for Action list does not make a relationship low risk, and a risk-based review can still lead to enhanced checks.

The wider framework remains layered

The Commission identifies several overlapping duties. Casino operators fall within the Money Laundering Regulations 2017. Gambling operators also have duties under the Proceeds of Crime Act 2002 and Terrorism Act 2000. Licence condition 12.1.1 requires appropriate AML and counter-terrorist-financing policies, procedures and controls that are implemented, reviewed and revised.

Financial sanctions are a separate but connected control area. A firm can face sanctions exposure even where activity does not meet a money-laundering reporting threshold. Screening, escalation, asset-freeze and reporting procedures therefore need their own ownership and testing.

Proliferation financing enters the casino risk file

The Regulations require casino operators to risk assess and mitigate proliferation financing — the provision of funds or financial services connected to chemical, biological, radiological or nuclear weapons and related means of delivery in violation of relevant obligations. For many casino teams, this is less familiar than conventional money laundering.

The practical task is not to turn frontline staff into weapons specialists. It is to update the enterprise risk assessment, customer and geographic risk logic, escalation procedures, governance and training so that proliferation-financing obligations are recognized within the existing financial-crime framework.

Money-service activity needs clear ownership

In March 2026, the Commission updated its notice for casinos that provide money-service-business activities such as certain cheque cashing, money transmission or foreign exchange. Casinos need to notify the Commission within ten days of starting or stopping relevant activity. Depending on the service, registration with HMRC and authorization or registration with the Financial Conduct Authority may also be required.

This is a useful example of perimeter risk. A service offered for guest convenience can place the property inside another regulatory regime. Product owners, cage operations, compliance and legal teams need a shared inventory of what the casino actually does, not only what its gaming licence permits.

Five actions for compliance teams

1. Update country-list logic: document the new automatic trigger and retain risk-based treatment for other jurisdictions.
2. Revise the enterprise risk assessment: incorporate the Commission’s 2026 findings and proliferation-financing exposure.
3. Map money-service activities: identify registration, authorization and ten-day notification requirements.
4. Test implementation: sample customer files, alerts and escalations rather than relying on revised policy text.
5. Brief senior management: licence condition 12.1.1 expects active governance and effective implementation.

A narrower automatic trigger is not a lower standard of judgement. It places more weight on a documented, defensible risk-based decision.

Why Canadian readers should care

The British changes do not apply in Canada, but they illustrate a global direction. Casino AML programmes increasingly combine sanctions, proliferation financing, payment services, digital identity and risk-based customer review. Canadian operators and suppliers should follow their own federal and provincial requirements, including FINTRAC obligations where applicable, while watching international standards that can influence correspondent, vendor and group-level controls.

Cross-border casino groups also need jurisdiction-specific procedures inside a consistent enterprise framework. Copying one market’s threshold into another can create both gaps and unnecessary friction.