Key Moments:
- Spain has enforced stricter anti-money laundering measures for online gambling payments through Royal Decree 813/2026.
- A six-month transition period will allow players and operators to adapt, but unverified payment methods cannot be used for withdrawals during this time.
- The new regulations officially take effect on October 28, 2026, introducing tighter remote identity verification requirements and recognizing both physical and digital ID documents.
Strengthened Oversight on Payments and Transactions
Spain has introduced a series of enhanced regulatory measures targeting the online gambling industry, focusing on the verification of payment methods and the management of financial transactions. The recently published Royal Decree 813/2026 updates the country’s anti-money laundering and counter-terrorist financing regulations, placing greater responsibility on operators to confirm that both deposits and withdrawals are made using payment methods registered to the account holder.
Operator Obligations and Record-Keeping
Under these new rules, operators are now required to authenticate the ownership of payment methods at the point of the first transaction. They must also maintain thorough records of these checks. The mandate applies across all forms of online gambling, including websites, mobile applications, and other digital services. Records of account activations and closures must be reported to the Directorate General for Gambling Regulation (DGOJ).
Transition Period Details
The sector has been given a six-month transition window to implement the necessary systems and processes. During this timeframe, existing customers are permitted to continue depositing funds and participating in gambling activities while operators conduct the required verifications. Importantly, customers whose ownership of payment methods is unconfirmed are barred from withdrawing winnings. As stated in the transitional rules, “may not withdraw the winnings they have obtained” until the verification process is completed.
| Transition Period Duration | Key Restrictions | Operator Duties |
|---|---|---|
| 6 months | Unverified payment methods cannot be used for withdrawals | Verify payment ownership, update records, report account status to DGOJ |
Final Compliance and Account Closures
After the six-month transition, operators must close any accounts with unverified payment methods and notify the DGOJ accordingly. Any outstanding balances, including previously withheld winnings, must be returned at account closure in compliance with anti-money laundering and counter-terrorist financing rules.
Implementation and Additional Regulatory Changes
The updated rules come into full effect on October 28, 2026, though some elements may have different implementation timelines. The decree also introduces stricter procedures for remote identity verification, requiring operators to adhere to Sepblac’s security protocols. Both physical and digital forms of Spain’s National Identity Document (DNI) are now accepted for these processes. Furthermore, operators must develop formal written policies addressing international financial sanctions and countermeasures.
Ongoing Regulatory Initiatives
These regulatory enhancements coincide with other ongoing projects in Spain’s gambling sector, such as the DGOJ’s planned system for early identification of risky gambling behavior using player data analytics.
- Author
Daniel Williams
