“Affordability check” gets used for two separate UK rules, and mixing them up is the source of most of the worry. One has been running since 2024. The other was confirmed by the Gambling Commission in July 2026 and still has no date for when it begins.
| Financial vulnerability check | Financial risk assessment | |
|---|---|---|
| Status | In force | Confirmed July 2026, start dates still to come |
| Trigger | £150 net deposits in a rolling 30 days | Thousands of pounds in a day or a quarter (see below) |
| Data used | Public records only | Credit Reference Agency data |
| What you send | Nothing | Normally nothing; documents only in rare fallback cases |
Neither rule matches the picture of a casino asking for three months of payslips before it will take a deposit. That does happen, but when it does it is the operator's own policy at work.
Below, each regime in turn, then what any of it has to do with players looking at sites outside the UK system.
Casinos Not On GamStop Worth A Look
- Welcome packs with no wagering
- 15+ provably fair Originals
- Rakeback and weekly cashback via loyalty
- Sportsbook on the same balance
- Originals with seed verification
- Large sportsbook
- Daily races and weekly raffles
- Very wide coin support
- Originals and lottery games
- Sportsbook
Financial vulnerability checks: already in force
These started on 30 August 2024, triggered by £500 of net deposits over 30 days. On 27 February 2025 the trigger came down to £150 of net deposits over a rolling 30 days. Net means money in minus money out: deposit £250 and withdraw £180 in the same window and your net figure is £70.
Once you pass the trigger, a UKGC-licensed operator has to carry out a light check for signs of serious financial difficulty. The minimum it looks for is a bankruptcy order, a County Court Judgment, an Individual Voluntary Arrangement or a Debt Relief Order.
What gets forgotten. The vulnerability check runs on public records. Nobody looks at your salary, bank account or credit score, and you have no form to complete. A request for documents at the £150 level comes from the operator's own rulebook.
Financial risk assessments: confirmed, not yet started
This is the regime the forum threads were really worried about. After a pilot that began in August 2024, the Commission confirmed on 7 July 2026 that it will arrive in stages. The figures are fixed. The dates depend on implementation groups that were set up during the summer of 2026.
| Phase | Players aged 25+ | Players aged 18 to 24 | Operators covered |
|---|---|---|---|
| First phase | Net deposits above £5,000 within 24 hours | Above £2,500 within 24 hours | The largest operators |
| Middle phase | Not yet announced | Not yet announced | Not yet announced |
| Full scheme | Above £1,000 in a day, or £3,000 across 90 days | Above £750 in a day, or £2,000 across 90 days | A wider group |
The first phase is aimed at a tiny group. The Commission puts it at under 0.5% of customers. Even the eventual daily figure of £1,000 is many times the £150 people quote, because the £150 belongs to the vulnerability check.
What the operator actually receives
A risk assessment draws on Credit Reference Agency data. As the Commission describes it, the process asks you for no documents and leaves your credit score untouched. The operator gets a result, not a copy of your file.
It does not work smoothly for everyone. Roughly one case in a thousand cannot be assessed from that data, and there the operator may turn to open banking or ask for paperwork. That is the scenario people post about, and it is rare.
Pilot results. The Commission reported that 95% of first-stage and 97% of second-stage checks in the pilot went through without any friction, well above the 80% the 2023 White Paper had predicted. It also found that high spenders were more likely to be in financial trouble than comparable credit-file populations, and that some were being missed.
Does any of this push people offshore?
Less than you would think from reading forums. For most UK players the vulnerability check never shows itself: no message, no request, no paperwork. The risk-assessment thresholds sit far above what a typical player deposits.
The reasons people give for leaving the UK market are better documented and more ordinary: the slot stake limit of £5 a spin at 25 and over and £2 for 18 to 24 year olds, the ban on bonus buys, the loss of autoplay and quick spin, and most often of all a GamStop self-exclusion that is still running.
The rules only bite at the high end. Someone moving five figures in a day will run into the first phase at a UK site, and would not offshore, because offshore operators have no equivalent scheme.
How offshore sites handle it
They have no scheduled check, which helps and hurts in equal measure. There is no threshold and no regulator setting one. Instead, the operator reviews an account when something prompts it, and the usual prompt is a big withdrawal. Our offshore KYC guide covers what that review asks for.
So the real difference is when the check lands. In the UK it comes as money goes in, follows published rules and has a regulator behind it. Offshore it comes as money goes out, at the operator's discretion, with nobody overseeing the decision.
Key figures at a glance
- £150 net in 30 days: a public-records check that asks you for nothing, running since 27 February 2025.
- £5,000 in 24 hours (25+): the first risk-assessment trigger, largest operators only, start date still unconfirmed.
- About 1 in 1,000: the share of risk assessments expected to need documents or open banking.
- Paperwork below these levels is an operator decision, and you are entitled to ask which rule it is based on.
One more thing. If you joined GamStop because gambling had stopped being fun and started causing harm, keep the exclusion running. GamCare offers free, confidential support on 0808 8020 133.
Play with money you can afford to lose. Casino games are built to return less than is staked over time. Set a budget and use your account's deposit limits. Free, confidential support is available from GamCare on 0808 8020 133. More on staying in control.