Spain has approved Royal Decree 813/2026, introducing stricter payment verification and customer identification requirements for online gaming platforms. The changes amend regulations implementing Law 10/2010 on preventing money laundering and terrorist financing. The decree takes effect on October 28, 2026, with separate adjustment periods for certain obligations.

Payment Methods Must Match Account Ownership

Under the new rules, platforms must confirm that the person named on a payment method is also the registered account holder. The requirement covers deposits and withdrawals made through websites, computer systems, mobile applications and other interactive channels. Operators must also retain records of verification checks conducted for initial transactions.

Six-Month Transition for Existing Users

Existing users will have six months to complete the required verification. During this period, they can continue using their current payment methods and accessing the platform, but withdrawals of rewards will be restricted until ownership is verified.

Once the transition period ends, platforms must terminate accounts where payment ownership remains unverified and report the relevant account activations and closures to Spain’s Directorate General for the Regulation of Gaming (DGOJ). Remaining balances, including withheld rewards, must be returned subject to applicable financial compliance requirements.

Stronger Identity Verification and Compliance Controls

The decree also strengthens remote identity verification standards. Procedures must meet minimum requirements established by Sepblac, Spain’s financial intelligence authority. Spain’s national identity document will be formally recognised in both physical and digital formats, while provisions concerning electronic identification and the retention of related information will apply 18 months after publication.

Businesses must also maintain written policies covering international financial sanctions and countermeasures, alongside their existing anti-money laundering controls.

Additional Compliance Measures Ahead

Payment verification adds to other regulatory initiatives in Spain. These include a common algorithm being developed by the DGOJ to identify potentially risky user behaviour, as well as proposed centralised monitoring arrangements for younger and vulnerable customers, with particular attention to users aged 25 and under.

The new requirements place greater emphasis on payment transparency, reliable identity checks and consistent compliance procedures across licensed platforms.