UK Affordability Checks in 2026: Which Check Is Which…

On this page

Check one: financial vulnerability checks
Check two: financial risk assessments
So what actually happens to you
Why documents still get demanded
How to keep an account out of the friction
Sources

The confusion is understandable, because the two schemes arrived in the wrong order for a clean story. Financial vulnerability checks came first and are already running. Financial risk assessments were announced, delayed, piloted and are now being introduced in stages. They have different thresholds, different data and different consequences, and the difference is the whole answer to the question everyone actually asks: will this show up on my credit file?

Check one: financial vulnerability checks

These are the light-touch checks. The Gambling Commission's own description is that they use publicly available information — bankruptcy orders or their equivalent, County Court Judgments, Individual Voluntary Arrangements, and records of that kind. They do not involve credit reference data. The Commission has said plainly that some operators were under the incorrect impression they were receiving credit reference data as part of a vulnerability check, and that sharing such data is not permitted as part of one.

£500 net deposits in 30 days — the threshold at which the requirement came into force, from August 2024.
£150 net deposits in 30 days — the lower threshold that followed.

Note what "net deposits" means: deposits minus withdrawals over the period, not turnover. A player who cycles the same £200 through a hundred spins has not deposited £20,000. A player who tops up £40 a week has crossed £150 in a month without thinking about it.

Check two: financial risk assessments

These are the data-driven assessments that were argued about for two years. The Commission confirmed on 7 July 2026 that it will introduce them in stages, starting with the largest operators, and the stage-one triggers are far higher than the numbers that dominated the public debate:

£5,000 net deposit in a rolling 24-hour period for customers aged 25 and over.
£2,500 net deposit in a rolling 24-hour period for higher-risk younger customers under 25.

On the Commission's figures, less than 0.5 percent of customers exceed the stage-one threshold, pilot data showed 97 percent of those above the threshold levels could be assessed frictionlessly, and fewer than 3 percent of accounts would face an assessment. The assessments use credit reference agencies to produce a document-free result, and the Commission states there is no impact on the customer's credit score. During the early stages of implementation no enforcement action will be taken over an operator's failure to act on an assessment, although the rest of the licence conditions remain enforceable throughout.

So what actually happens to you

Below £150 net a month: nothing in either scheme is triggered by spend alone. Operators still have their ordinary duties to act on other signals.
Above £150 net a month: a vulnerability check on public records. No credit file involvement. In most cases you will not see it happen.
A visible marker on public records: a bankruptcy, CCJ or IVA can put a hold on the account until the operator looks at it. This is the scenario in which players find out a check exists.
£5,000 in a day at a large operator: stage one of a financial risk assessment, run through credit reference data, no documents, no credit-score effect.

Why documents still get demanded

Here is the part that the threshold debate obscures. Neither scheme is the reason most people are asked for a payslip or a bank statement. That request comes from anti-money-laundering obligations and from the operator's own customer-interaction duties, both of which have existed for years and neither of which has a published threshold. An operator can ask for source-of-funds evidence long before any affordability trigger is reached — and when a player complains that "the £150 check asked for my bank statements", it is usually this, not the vulnerability check, that did it. The distinction matters because the two are appealed differently: see source of funds against source of wealth for what is actually being asked for.

How to keep an account out of the friction

Not by staying under a threshold — by being boring. Use one payment method in your own name. Do not move money in and out to reset a figure; patterns like that are exactly what monitoring is built to notice. Keep the deposit limit tools switched on, because a self-imposed limit is the cheapest evidence that spending is controlled. And complete verification when you open the account rather than when you want the money out, which is the single change that removes most withdrawal delays.

More on what operators are required to offer is in Rules by Country; UK-specific shortlists are on our UK page.

Sources

Gambling Commission — financial vulnerability checks: thresholds of £500 (August 2024) and £150, public records only, credit reference data not permitted
Gambling Commission, 7 July 2026 — staged introduction of financial risk assessments, £5,000 and £2,500 net deposit in 24 hours, no credit-score impact, no early enforcement

Quoted from the Gambling Commission's own publications and read on 27 September 2026. Thresholds and stages change; the Commission's pages take precedence over this one.