Spain’s Royal Decree 813/2026 Requires Payment Ownership Verification for Online Gambling Transactions
Spain’s Royal Decree 813/2026 mandates that online gambling operators verify payment methods match registered account holders before processing transactions. Existing customers have a six-month transition during which withdrawals are blocked until verified, after which unverified accounts must close. Operators also have six months to update systems and must align with Sepblac identity standards.
SCCG Take — The staggered timelines give operators a narrow window to integrate verification controls, raising compliance costs while reinforcing AML integrity for Spain’s regulated remote market.
Spain has introduced new anti-money laundering obligations for online gambling operators centered on payment method verification.
Operators must confirm that the holder of any payment instrument matches the registered gambling account owner before deposits or withdrawals may proceed. The requirement appears in Article 21 of Royal Decree 813/2026, which amends supporting rules under Law 10/2010 on prevention of money laundering and terrorist financing. Records of verification checks on initial customer transactions must be retained. The rules cover all remote channels including electronic, computer, mobile applications and other interactive platforms.
The decree was published in the state gazette (BOE) on October 10 and will come into force on October 28 2026, with obligations phased by separate timelines.
Core Verification and Transition Obligations
Existing customers receive a six-month transition period. Deposits and play may continue during this window, but withdrawals of winnings are blocked until payment ownership is verified. After the period ends, operators must terminate accounts that remain unverified and report both activations and closures to the Directorate General for Gambling Regulation (DGOJ). Any outstanding balances, including withheld winnings, must be returned subject to anti-money laundering and counter-terrorist financing controls.
The decree also tightens remote identity verification standards to align with minimum requirements set by Sepblac, Spain’s financial intelligence authority. Spain’s National Identity Document is recognised in both physical and digital formats. Written policies addressing international financial sanctions must form part of operators’ broader compliance frameworks.
Staggered Timelines and System Updates
Operators have six months to adapt technical systems, customer identification procedures and account management processes. Requirements specific to electronic identification methods and associated data retention take effect 18 months after publication.
These measures leave licensed operators with defined windows to audit and upgrade payment gateways and identity controls. Precise integration with existing compliance systems will determine the extent of operational adjustment required before full enforcement.
Reporting: Focus Gaming News
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →