Crypto Casino UK: What a Licence Actually Requires

A crypto casino in the UK market is not a free-for-all. Any operator accepting Bitcoin, Ethereum or stablecoins while serving British customers sits inside the same regulatory perimeter as a high-street bookmaker. The Gambling Commission does not licence "crypto casinos" as a category. It licences gambling operators, and those operators must meet the same conditions whether a deposit arrives by debit card or by blockchain transfer.

That distinction matters more than most affiliate write-ups admit. Plenty of sites badge themselves as crypto-friendly while holding a Curaçao or Anjouan licence and refusing UK sign-ups. Others hold a UK remote casino licence and quietly accept crypto through a payment processor. The gap between those two positions is where the real story lives, and it is a story about accountability rather than novelty.

This page works through what it takes to obtain and keep a UK gambling licence while handling crypto. It covers anti-money laundering (AML) duties, know-your-customer (KYC) checks, audit trails, the payment rules that trip operators up, and how the biggest brands in the market actually behave. Numbers are drawn from public Commission publications, fee schedules and enforcement notices. Where a figure is a calculation, the arithmetic is shown.

How Does the UK Licence Framework Treat Crypto Casinos?

The Gambling Commission regulates gambling, not currency. A remote casino licence under the Gambling Act 2005 permits operators to offer casino games to British customers, and the licence conditions and codes of practice (LCCP) set out how. Crypto sits underneath that as a payment and funds question, not a separate licence class. An operator either holds a UK remote casino licence or it does not.

As of 2026 the Commission has issued remote casino licences to a few hundred operators in total, and the number accepting crypto in any form is a small fraction of that. The Commission has been explicit in its guidance that licensees must treat cryptoassets as a high-risk funding channel and apply enhanced due diligence accordingly. There is no lighter-touch regime for blockchain.

What this means in practice: a UK-licensed crypto casino must run the same customer interaction checks, the same affordability assessments and the same suspicious activity reporting as a card-based operator. The blockchain adds a layer of traceability that card payments lack, and regulators increasingly expect operators to use it rather than ignore it.

Which Regulator Oversees Crypto Gambling in Britain?

The Gambling Commission, based in Birmingham, licenses and supervises commercial gambling in Great Britain. Its remit covers remote casinos, sportsbooks, bingo, lotteries and land-based venues. Northern Ireland operates under a separate framework, and the Republic of Ireland has its own regulator. For crypto specifically, the Commission works alongside the Financial Conduct Authority (FCA) on anti-money laundering supervision and the National Crime Agency (NCA) on suspicious activity reports.

Do UK-Licensed Casinos Accept Cryptocurrency Directly?

Some do, some do not, and many accept it only through a third-party processor that converts to fiat at the point of deposit. The Commission has not banned crypto deposits, but it has tightened the rules around source of funds. Operators that accept crypto must verify where the coins came from, which is harder than checking a bank statement.

What Is the Difference Between a UK Licence and an Offshore One?

An offshore licence, typically from Curaçao, Anjouan or Kahnawake, allows an operator to accept international players but not British ones. Offshore crypto casinos often advertise heavily to UK audiences without holding a UK licence, which puts them outside Commission protection. If a dispute arises, there is no UK statutory redress route and no access to the Commission's complaints process.

What Does It Take to Get a UK Remote Casino Licence?

Getting a licence is not a formality. The application process runs through the Commission's casework team and can take several months, sometimes longer if the applicant's structure is complex. The Commission assesses the applicant's finances, its ownership chain, its key personnel and its technical systems. Crypto handling adds questions about fund segregation and blockchain analytics.

Applicants must demonstrate they can meet the LCCP conditions before they go live, not after. That includes having an AML programme in place, a customer interaction framework, and a technical audit of the gambling software. The Commission has refused or withdrawn licences in cases where applicants could not show adequate source-of-funds controls.

The financial side is significant. Application fees are set by the Commission's published fee schedule and scale with gross gambling yield (GGY). A small operator might pay a few thousand pounds; a large one pays substantially more. Annual fees follow the same logic, and there are additional charges for variation and for certain regulatory returns.

What Are the Application and Annual Fees?

Fees are tiered by GGY band. For a remote casino, the application fee and annual fee both rise as GGY climbs. The Commission publishes a fee table that operators must budget for. On top of the licence fee, there is a contribution to the National Lottery and a levy to fund research, prevention and treatment of gambling harm. The statutory levy replaced the voluntary system and now runs at a set percentage of GGY.

Who Has to Pass the Suitability Test?

The Commission's suitability test covers the applicant company, its shareholders, its directors and its key management. Anyone with a significant interest must submit to a personal questionnaire and a criminal record check. The Commission looks for financial stability, honesty and competence. A history of regulatory breaches in another jurisdiction weighs against an applicant.

What Technical Systems Must an Operator Prove?

Before launch, the operator must show its remote gambling equipment meets the Commission's technical standards. That includes random number generator testing, game fairness certification and secure data handling. For crypto, the operator must also show how it will trace transactions and flag high-risk wallets. These are not optional extras; they are conditions of the licence.

What Do AML and KYC Duties Look Like for Crypto Deposits?

This is where crypto casinos earn or lose their licence. The Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 apply to gambling operators, and the Commission supervises compliance. Crypto deposits are treated as higher risk because the funds can originate from anywhere and the customer's identity is not automatically tied to the wallet.

Operators must run customer due diligence (CDD) before a customer can gamble beyond set thresholds. Enhanced due diligence (EDD) applies to politically exposed persons, high-risk jurisdictions and unusually large transactions. Suspicious activity must be reported to the NCA, and the operator must not tip off the customer.

The blockchain is both a problem and a tool. It is a problem because coins can be laundered across chains and mixers. It is a tool because a competent operator can trace a wallet's history and score its risk. The Commission expects operators to use blockchain analytics providers, not to shrug at the complexity.

When Must a Crypto Casino Verify a Customer?

Verification must happen before the customer can deposit, withdraw or gamble in a way that triggers CDD. In practice, most UK-licensed operators verify at registration or at first deposit. The Commission has been clear that "verify later" models are not acceptable for high-risk channels. A crypto deposit is high-risk by default.

What Documents Are Required for Source of Funds?

For crypto, source of funds is the hard part. A bank statement shows salary or savings; a wallet address shows coins. Operators typically ask for exchange statements, proof of purchase, or a signed declaration explaining the origin. If the coins came from mining, they may ask for pool payouts. If from a sale, they want the contract. Vague answers get accounts frozen.

How Do Blockchain Analytics Fit Into AML?

Analytics tools score wallets by exposure to sanctioned entities, darknet markets and mixers. A wallet with direct exposure to a sanctioned address will usually be refused. Indirect exposure may trigger EDD. The operator must document the decision and keep the record. The Commission has cited weak transaction monitoring in enforcement actions.

What Happens If an Operator Fails AML Checks?

The Commission can issue a warning, attach conditions to the licence, impose a financial penalty or suspend or revoke the licence. Penalties are calculated with reference to the breach and the operator's GGY. In serious cases the operator may be required to surrender its licence and exit the market. Enforcement notices are published.

Which Operators Lead the UK Market on Accountability?

The list below is not a ranking of crypto-friendliness. It is a ranking of accountability, meaning licence standing, AML record and transparency. Several of these brands do not accept crypto directly. That is a feature, not a bug: a UK licence plus strict KYC is the accountability standard, and crypto acceptance is a secondary question.

Where a brand is offshore, this page says so plainly. An offshore licence is a different regulatory product with different protections. Players should know which side of the line they are on before they deposit a single satoshi.

Why Do the Big UK Brands Avoid Direct Crypto?

Direct crypto acceptance creates source-of-funds complexity that large listed operators prefer to avoid. A bank statement is easier to verify than a wallet. The big brands also face investor scrutiny and reputational risk. For them, the compliance cost of crypto outweighs the marketing upside. That is a rational choice, not a gap in the market.

Which Crypto-Native Brands Hold UK Licences?

Very few crypto-native brands hold a UK remote casino licence. The Commission's suitability test is demanding, and crypto-native operators often lack the UK-facing compliance infrastructure. Some have applied and been refused; others have chosen to stay offshore. The ones that hold a UK licence tend to be established operators that added crypto as a payment option rather than built their business on it.

What Should You Check Before Depositing?

Check the licence number and the regulator on the footer of the site. Check whether the operator is on the Commission's public register. Check the terms for withdrawal limits and identity verification. If the site is offshore, check which regulator issued the licence and what dispute route it offers. If you cannot find the licence, do not deposit.

How Does the Commission Enforce AML and KYC Breaches?

Enforcement is where the framework gets teeth. The Commission publishes enforcement notices, and the pattern is consistent: weak AML controls, inadequate customer interaction, poor record-keeping. Penalties are calculated with reference to GGY and the seriousness of the breach. The Commission has also required operators to undergo third-party audits and to make remedial payments.

The crypto angle appears in enforcement actions where operators failed to verify source of funds for high-risk deposits. The Commission has been critical of operators that relied on self-declaration without corroboration. For crypto, self-declaration is especially weak because the wallet does not prove ownership.

Audits are part of the picture. The Commission can require an operator to commission an independent audit of its AML and counter-terrorist financing controls. The audit report goes to the Commission, and the operator must show it has addressed the findings. Failure to do so can lead to further action.

What Does an AML Audit Cover?

An AML audit typically covers the operator's risk assessment, customer due diligence files, transaction monitoring, suspicious activity reporting and record-keeping. It tests whether the written policy matches actual practice. For crypto, the audit will look at wallet screening, source-of-funds evidence and the treatment of high-risk jurisdictions.

What Are the Typical Penalties?

Penalties range from warnings and licence conditions to financial penalties and licence revocation. The Commission has imposed penalties in the millions of pounds in serious cases. The exact figure depends on GGY, the breach and any aggravating factors. The Commission publishes a statement of principles for determining financial penalties.

How Often Are Operators Audited?

There is no fixed audit cycle. The Commission conducts risk-based supervision and can require an audit at any time. Operators with a history of breaches or a high-risk profile face more frequent scrutiny. The Commission also uses data returns and mystery shopping to monitor compliance between formal audits.

What Are the Payment and Fund-Segregation Rules for Crypto?

Customer funds must be protected. The LCCP requires operators to keep customer funds separate from operating funds and to have arrangements in place to protect them if the operator fails. For crypto, the question is whether the operator holds the coins or converts to fiat on receipt. Most UK-licensed operators convert to fiat, which simplifies segregation.

Withdrawal rules matter too. Operators must process withdrawals within a reasonable time and must not impose unfair barriers. The Commission has acted against operators that used withdrawal delays as a retention tool. For crypto withdrawals, the operator must verify the wallet address and check it against sanctions lists.

Chargebacks are not available for crypto. That is a material difference from card payments. A player who deposits crypto and loses cannot ask their bank to reverse the transaction. The operator's terms must make this clear, and the Commission expects transparency on the point.

Are Crypto Deposits Covered by UK Deposit Protection?

No. The Financial Services Compensation Scheme (FSCS) does not cover gambling deposits, crypto or otherwise. The LCCP's customer funds protections are a separate arrangement, and they depend on the operator's structure. Players should read the operator's terms on fund protection rather than assume bank-style protection.

How Long Can a Crypto Withdrawal Take?

UK-licensed operators typically process withdrawals within 24 hours once verification is complete. Crypto withdrawals can be faster on-chain but slower if the operator runs additional checks. The Commission's rules require reasonable promptness, and operators that routinely delay withdrawals risk enforcement action.

What Records Must an Operator Keep?

Operators must keep records of customer due diligence, transactions and suspicious activity reports for at least five years. The records must be sufficient to demonstrate compliance to the Commission and to law enforcement. For crypto, the records must include wallet addresses and the results of blockchain screening.

Frequently Asked Questions

Is crypto gambling legal in the UK?

Gambling is legal in Great Britain when conducted by an operator holding a Gambling Commission licence. Crypto is a payment method, not a separate legal category. An operator with a UK remote casino licence can accept crypto if it meets AML and KYC requirements. An offshore operator without a UK licence cannot lawfully serve British customers.

Do UK crypto casinos report winnings to HMRC?

Gambling winnings are not taxable in the UK for the player, and operators do not report individual winnings to HMRC as a matter of routine. The operator's own profits are subject to tax. Crypto gains may be subject to capital gains tax depending on how the coins were acquired and disposed of, which is a separate question.

What is the minimum age for a crypto casino in the UK?

The minimum age for gambling in Great Britain is 18. Operators must verify age before allowing play. Crypto does not change the age limit. An operator that allows an under-18 to gamble, by any payment method, is in breach of its licence conditions.

Can I use a VPN to access an offshore crypto casino from the UK?

Using a VPN does not make an offshore operator legal for UK players. The operator's licence terms and the Commission's rules determine legality, not the player's technical workaround. If a dispute arises, the player has no UK statutory protection. The Commission's advice is to use UK-licensed operators only.

What happens if a crypto casino goes bust?

If the operator holds a UK licence, customer funds protections apply according to the LCCP arrangements. If the operator is offshore, protection depends on the offshore regulator and the operator's own terms. In practice, offshore insolvencies often leave players with limited recourse. Check the fund protection terms before depositing.

How do I check a crypto casino's licence?

Use the Gambling Commission's public register. Search by trading name or licence number. The register shows the licence type, status and any conditions. If the operator is not on the register and claims to serve UK players, treat that as a red flag. Offshore licences are listed on the relevant regulator's own register.

Are crypto casino games provably fair?

Provably fair is a technical claim about how a game's random number generator works. It is not a regulatory standard. UK-licensed operators must meet the Commission's technical standards for random number generation, which is a separate and more rigorous requirement. Provably fair games can be legitimate, but the label alone does not guarantee fairness.

Responsible Gambling and Where to Get Help

Gambling carries risk, and crypto deposits can make losses feel less real because the money is not visible in a bank balance. Set limits before you play, and treat them as fixed. The legal age for gambling in Great Britain is 18. If gambling is causing harm, contact the National Gambling Helpline on 0808 8020 133, which is free and available 24 hours a day.

GAMSTOP is the UK's national self-exclusion register. Registering with GAMSTOP prevents you from gambling with UK-licensed operators for a minimum of six months, and you can extend the period. Registration is free and can be done online. Operators must check GAMSTOP before allowing a customer to gamble.

GamCare provides counselling and support, and the Commission's website lists additional sources of help. If you are using crypto to gamble, consider whether the anonymity is helping you or hiding a problem. The blockchain records the transaction, but it does not record how you feel about it. Get help early.