Regulation
Spain requires online gambling payment details to match player identity
Spain's new identity-matching rule applies to deposits and withdrawals at state-licensed gambling sites. Existing players have six months to verify methods, but winnings cannot be withdrawn before checks pass.
What changed on 28 October
From 28 October 2026, Spain's nationally licensed online gambling operators must check that the named holder of each deposit or withdrawal method is the same person who owns the gambling account. The requirement comes from Royal Decree 813/2026, which amended Spain's anti-money laundering rules for remote customer verification.
A verified gambling profile alone does not satisfy the new payment-method check. A bank account, card or electronic wallet used with that profile must also be attributable to the same person. The rule addresses third-party payment methods and impersonation; it does not mean that payment systems themselves are being prohibited.
New accounts and existing players face different deadlines
New gambling accounts created on or after 28 October must comply from the outset. Customers registered before the rule took effect have a six-month transition period to make the necessary changes. Operators also have six months to adapt their technical systems.
For existing customers, the transition is not a six-month exemption from withdrawal verification. The decree permits continued deposits and play with previously established payment methods during that period, but winnings cannot be withdrawn until ownership of the payment method has been checked. That distinction is material for anyone relying on an existing card or e-wallet.
If a pre-existing account has not met the ownership-matching requirement by the end of the transition, operators must terminate the contract, notify Spain's gambling regulator and return remaining balances, including winnings held back during the checks, subject to applicable anti-money laundering duties.
Why Spain introduced the check
Spain's consumer ministry says reports of online gambling identity impersonation increased by 12% during 2025, reaching 8,675 complaints through its PACS reporting protocol. The ministry identified payment methods whose holders can be harder to validate immediately, including cards and electronic wallets, as one avenue used in identity misuse.
The requirement concerns gambling operators holding national licences in Spain, not every website that can be accessed from the country. A customer should check the name attached to each saved payment method and contact the licensed operator about its verification process before requesting a withdrawal. The decree does not specify a universal document, processing time or verification fee.