Spain has introduced a new verification requirement for state-licensed online gambling operators. Since October 28, the person named on a gaming account must also own the payment method used for deposits and withdrawals.
The rule appears in Royal Decree 813/2026 and is intended to make identity theft and third-party payment use more difficult. The ministry's guidance says it applies immediately to accounts opened from the effective date.
Existing users receive a six-month transition period while operators adapt their payment and technical systems. They may continue depositing and playing during that period, but winnings cannot be withdrawn until ownership of the gaming account and payment method has been matched.
After the transition, an operator must terminate an account if the ownership match has not been established and report the outcome to the Directorate General for the Regulation of Gambling. Remaining balances and unpaid winnings must be returned, subject to anti-money-laundering obligations.
The European Consumer Centre in Spain says the measure follows a rise in reported identity theft. Ministry data recorded 8,675 online-gambling identity-theft complaints in 2025, 12% more than a year earlier.
