Crypto Casino: Licensing Duties, Fines and Compliance Costs in the UK

A crypto casino operating in Britain faces a defined set of statutory obligations. The Gambling Commission licenses remote operators under the Gambling Act 2005, and that licence carries fixed annual fees, reporting duties and enforceable penalties for breach. This page sets out the requirements, the numbers and the enforcement record.

Crypto assets do not remove a site from UK jurisdiction. If the facility is available to consumers in Great Britain, the operator requires a licence regardless of whether wagers are settled in bitcoin, ether, stablecoins or pound sterling. The Commission has repeated this position in written guidance issued between 2021 and 2025.

The financial exposure is quantifiable. Annual licence fees, compliance staff costs, independent audit charges and potential fines all sit on the operator's balance sheet. A licence issued under section 33 of the Act can be revoked, and unpaid duty is recoverable through civil proceedings.

What Licence Does a Crypto Casino Need in Great Britain?

The relevant permission is a Remote Operating Licence issued by the Gambling Commission under the Gambling Act 2005. Section 33 permits the Commission to grant, suspend or revoke such licences. A crypto casino that accepts British customers without one commits an offence under section 33(1) and faces unlimited fine on conviction.

Which licence class covers crypto-denominated wagering?

The Commission does not issue a separate licence category for crypto settlement. Operators declare their payment methods on the operating licence application, and crypto rails are recorded there. The licence fee band depends on total gambling yield, not on the currency of settlement, so a bitcoin-settled casino pays the same band fee as a sterling equivalent.

How long does the application process take?

The Commission states a target of up to 16 weeks for a complete remote operating licence application from receipt of all required documents. In practice, applications involving novel crypto custody arrangements run longer, because the regulator asks for written evidence of wallet controls, key management and the identity of any third-party custodian used to hold customer funds.

What happens if a site operates without a licence?

Unlicensed remote gambling is an offence under section 33 of the Gambling Act 2005. The Commission may pursue criminal proceedings, apply for a High Court injunction to block access, and pursue confiscation of proceeds. Between April 2023 and March 2024 the Commission opened enforcement cases against 21 operators for unlicensed activity or licence breaches.

Which regulator oversees the crypto side?

For the payments layer, the Money Laundering Regulations 2017 apply through the Proceeds of Crime Act 2002 obligations. Firms handling cryptoasset exchange or custody in the UK may also need registration with the Financial Conduct Authority under the Money Laundering Regulations, separate from the Gambling Commission licence.

Do white-label or platform arrangements change the duty?

No. The brand name on the site does not determine who holds the licence. The Commission requires the entity that contracts with the customer to hold the operating licence. White-label agreements where a licensed platform provider operates the back end are permitted, but the licence holder remains accountable for compliance reporting and for any fine imposed.

What is the cost of the licence itself?

The Commission publishes its fee schedule annually. For a remote operating licence, the application fee and the annual fee are calculated on banded gross gambling yield. Bands run from under £500,000 to over £500 million, with annual fees ranging from approximately £5,000 at the lowest band to around £500,000 at the top band before any multi-year discount.

Which Compliance Costs Should a Crypto Casino Budget For?

Beyond the licence fee, a compliant operation carries recurring expenditure. The Money Laundering Regulations require a nominated officer, independent audit of controls, staff training records and documented risk assessments. Each of these has a market price, and the totals materially affect the viability of a small crypto-facing brand.

What does a nominated MLRO cost?

A Money Laundering Reporting Officer with gambling sector experience in the UK commands a salary typically in the range of £55,000 to £95,000 per year in London, or £40,000 to £65,000 outside the capital. Where the role is outsourced to a compliance consultancy, monthly retainers commonly fall between £2,500 and £6,000 depending on transaction volume.

How much is independent testing?

Independent testing of Random Number Generators and payout verification is required by the Commission's licence conditions. Accredited laboratories charge per game or per platform. A full suite covering slots, live tables and crash-style titles from providers such as Pragmatic Play, NetEnt, Evolution and Hacksaw typically lands between £15,000 and £60,000 for initial certification, with annual re-testing at a lower rate.

What are typical AML software costs?

Transaction monitoring tools priced for mid-size operators run from roughly £1,500 to £8,000 per month. Crypto-specific screening adds a further charge for blockchain analytics, commonly £500 to £3,000 monthly, because wallet clustering and sanctions screening on public ledgers requires a separate data feed from fiat-only vendors.

How much does responsible gambling tooling cost?

Deposit limit, reality check and self-exclusion integrations are mandatory under licence condition 3.1 and the Commission's guidance on customer interaction. Third-party providers charge per active account. Budgeting £0.15 to £0.60 per customer per month is a realistic range for a mid-tier platform, plus integration work at launch.

What does a legal opinion on crypto settlement cost?

Specialist UK gambling counsel bill hourly. A written opinion on whether a particular token constitutes a payment method or a wagering instrument typically falls between £3,000 and £12,000, depending on whether the token is a stablecoin, a native utility asset or a proprietary in-house balance. Ongoing retainer arrangements add £1,000 to £4,000 per month.

Do multi-year licence fees reduce the burden?

The Commission offers a discount for licences renewed on a multi-year cycle. Paying three years up front currently attracts a discount in the region of 10 to 15 percent on the annual component. The saving is real but modest against the total compliance spend, and it does not offset penalties for late reporting.

Cost lineAnnual range (GBP)Trigger
Operating licence fee£5,000 – £500,000Band by gross gambling yield
MLRO salary or retainer£40,000 – £72,000Required under MLR 2017 reg. 21
RNG / payout testing£15,000 – £60,000Licence condition, initial certification
AML monitoring software£18,000 – £96,000Ongoing transaction surveillance
Blockchain analytics£6,000 – £36,000Wallet screening and sanctions checks
Responsible gambling tools£5,000 – £40,000Customer interaction duties
External legal counsel£12,000 – £60,000Opinions, regulatory correspondence

What Penalties Has the Gambling Commission Imposed?

The Commission publishes settlement and penalty notices. Recent figures give a clear picture of the enforcement range for remote operators, including those that settle in crypto. Fines are calculated with reference to the operator's gross gambling yield and the seriousness and duration of the breach.

What is the largest recent fine on a remote operator?

In 2024 the Commission issued a £19.2 million penalty against an online operator for systemic failures in customer interaction and anti-money laundering controls. That figure sits at the top of the published range and reflects a multi-year period of deficient monitoring rather than a single incident.

How are fines calculated?

The Commission applies a starting point based on a percentage of gross gambling yield, then adjusts for aggravating and mitigating factors. Duration of the breach, the number of affected customers and the operator's cooperation all move the number. Published settlements show effective rates between 1 percent and 12 percent of relevant yield for serious cases.

Do directors face personal liability?

Yes. The Commission can impose a personal licence on individuals, and a personal licence holder who fails to discharge their duties may have that licence suspended or revoked. Under the Company Directors Disqualification Act 1986, a director of a licensed operator convicted of a gambling offence can face disqualification for up to 15 years.

What happens to a licence after a serious breach?

Section 102 of the Gambling Act 2005 allows the Commission to suspend a licence, and section 104 allows revocation. In the 2023 to 2024 reporting year the Commission revoked or suspended 9 licences and issued 12 warning letters to remote operators. A suspended licence halts all revenue from British customers immediately.

Are there fixed-penalty options for lesser breaches?

The Commission does not operate a fixed-penalty scheme for licence breaches. Every case is assessed individually, and outcomes range from a formal warning letter through to a penalty notice published on the Commission's website. Publication itself carries a commercial cost, since payment processors and banking partners review the register during onboarding.

What enforcement powers cover crypto-specific failures?

Where an operator fails to identify the source of crypto funds, the Commission treats it as a breach of the licence condition requiring adequate AML procedures. The same framework applies as for fiat cases: the operator must demonstrate wallet ownership checks, sanctions screening and enhanced due diligence for transactions above defined thresholds.

Which Reporting Duties Apply to Crypto-Settled Accounts?

Licensed operators file quarterly and annual returns covering gross gambling yield, customer numbers, self-exclusion registrations and AML activity. Crypto settlement introduces additional record-keeping because the on-chain transaction must be reconciled against the internal ledger and retained for inspection.

How often must returns be filed?

Quarterly returns are due within 30 days of the quarter end, and annual returns within 3 months of the financial year end. Late filing attracts a warning at first instance and a financial penalty on repeat. The Commission's published fee schedule sets the penalty for late payment of licence fees at a fixed sum plus interest.

What records must be kept for crypto transactions?

The Money Laundering Regulations 2017 require records to be retained for 5 years from the end of the business relationship or the date of the transaction. For crypto this includes the wallet address, the transaction hash, the exchange rate applied at the time of settlement and the identity evidence gathered at onboarding.

When must a suspicious activity report be filed?

Where the MLRO forms a suspicion of money laundering, a report to the National Crime Agency is required under section 330 of the Proceeds of Crime Act 2002. Failure to report is an offence carrying up to 5 years imprisonment and an unlimited fine. The internal report must be logged and retained for the same 5-year period.

What customer interaction thresholds apply?

The Commission's guidance requires operators to review customer behaviour at defined triggers. For crypto accounts, rapid deposit-and-withdrawal cycles are a named risk indicator. Operators must document the trigger, the action taken and the outcome, and make these records available on request during a compliance assessment.

Do UK-licensed sites have to report to HMRC?

Gross gambling yield is subject to Remote Gaming Duty, currently set at 21 percent, collected by HMRC. Crypto-denominated winnings are converted to sterling at the point of settlement for duty purposes, and the operator must retain the conversion rate evidence. Late payment of duty carries penalties under the Taxes Management Act 1970.

What happens during a Commission assessment?

The Commission conducts routine assessments of licensed operators, typically on a cycle of 18 to 36 months. The review covers AML files, customer interaction records, game testing evidence and complaint handling. An assessment can escalate to a formal investigation if deficiencies are found, and investigation costs are recoverable from the operator.

How Do Offshore Licences Compare for UK-Facing Crypto Brands?

Several crypto casinos serving British customers hold licences from Curaçao, Anjouan or Kahnawake rather than the Gambling Commission. The cost profile is materially different, and so is the enforcement risk. The distinction matters for compliance planning and for the operator's legal exposure.

What does a Curaçao licence cost?

Following the 2023 overhaul of the Curaçao regime, licence fees are structured in tiers. Published fees for the current framework start in the low thousands of US dollars per year for smaller operators, with a one-off application charge. The total first-year outlay is typically below £15,000, a fraction of a UK remote operating licence at comparable yield.

Is an offshore licence lawful for UK customers?

Holding an offshore licence does not authorise the provision of services to consumers in Great Britain. The Gambling Act 2005 applies by reference to the location of the customer, not the location of the licence. Operators advertising to British consumers without a Commission licence risk prosecution and website blocking orders.

What is the practical enforcement position?

The Commission cannot fine an operator outside its jurisdiction, but it can pursue advertising offences, seek payment processor disruption and obtain High Court orders. British banks and e-money firms routinely decline onboarding for brands that cannot evidence a Commission licence, which is often a more effective constraint than a fine.

How do Anjouan and Kahnawake compare?

Anjouan has issued a large volume of sub-licence arrangements at low cost, with published annual fees in the region of a few thousand US dollars. Kahnawake applies a more established framework with its own compliance review. Neither regime imposes the reporting cadence or the penalty scale of the Gambling Commission.

What is the reputational cost of an offshore licence?

Affiliate networks and payment providers treat licence status as a due-diligence factor. Brands operating under Curaçao or Anjouan authorisation frequently face higher chargeback reserves, longer settlement cycles and exclusion from mainstream comparison sites. The commercial penalty is indirect but persistent across the operator's revenue mix.

JurisdictionTypical first-year costReporting cadenceMax published penalty
UK Gambling Commission£5,000 – £500,000Quarterly and annual£19.2m (2024 case)
CuraçaoUnder £15,000AnnualSet by licence terms
AnjouanUnder £10,000AnnualSet by licence terms
Kahnawake£10,000 – £30,000Annual plus auditSet by commission rules
Malta Gaming Authority€25,000 – €50,000+Quarterly€5m or 10% turnover

Which Operators Hold a UK Licence and Accept Crypto?

The Commission's public register lists every licensed operator. A small number of brands with UK authorisation offer crypto as a deposit or withdrawal method through a licensed payment processor, while the wagering itself remains denominated in sterling. The register is the authoritative source for checking any brand's status.

How do mainstream brands handle crypto?

Established names such as bet365 casino, William Hill casino, Ladbrokes casino, Coral casino and Betfair casino operate under Commission licences and settle in sterling. Where crypto appears, it is processed as a fiat conversion at the point of deposit, with the operator holding the licence and the payment partner handling the asset.

Which brands accept crypto directly?

A second group, including Stake-adjacent brands and newer entrants such as Mr Vegas casino, Pub Casino, LiveScore Bet and talkSPORT BET, has experimented with crypto rails through third-party processors. Each such arrangement must be declared on the operating licence, and the Commission reviews the control environment before approval.

What about bingo and slots brands?

Bingo-led operators such as Gala Bingo, Sun Bingo, Double Bubble Bingo, Heart Bingo and Fabulous Bingo run under the same licence framework. Their crypto exposure is minimal, since deposit values are lower and payment flows are predominantly through debit cards and e-wallets rather than digital assets.

Do crypto-native brands hold UK licences?

Few do. Brands that settle natively in bitcoin or ether typically hold Curaçao or Anjouan authorisation and exclude British customers at the point of registration. Where a crypto-native brand appears on the Commission register, it usually operates a separate UK-facing entity with sterling settlement and its own compliance team.

How can a customer verify licence status?

The Commission maintains a public register accessible by licence number and trading name. Entering the brand name returns the licence holder, the permitted activities and any enforcement history. Customers should check the register before depositing, particularly where the site advertises crypto settlement.

Which payment processors serve licensed crypto casinos?

UK-licensed operators typically work with processors that hold their own FCA authorisation or e-money licence. The processor carries the crypto-to-fiat conversion and the associated AML duty, while the gambling licence holder retains responsibility for customer due diligence. Contract terms usually specify settlement cycles of 3 to 5 working days.

What Practical Steps Reduce Regulatory Exposure?

Compliance planning for a crypto casino in the UK is a defined process with measurable outputs. The steps below reflect what the Commission expects to see during an assessment, and what auditors check before signing off annual returns.

What should the licence application contain?

The application requires a business plan, financial projections for at least 12 months, details of all persons with significant control, and evidence of the technical platform's testing arrangements. For crypto settlement, add a written description of custody arrangements, key management and the identity of any exchange or custodian used.

Who should be appointed as nominated officer?

Appoint a named MLRO with demonstrable sector experience and no conflicting duties. The Commission expects the nominated officer to have direct access to the board and to attend board meetings at least quarterly. A part-time or purely external arrangement is acceptable only where the individual's availability is documented.

How often should policies be reviewed?

AML policies, customer interaction procedures and game testing schedules should be reviewed at least annually, and after any material change to the platform. Each review must produce a dated record with sign-off. Gaps between review dates are a common finding in published enforcement cases.

What training records are required?

All customer-facing and compliance staff require documented training on AML indicators, responsible gambling triggers and the operator's own procedures. The Commission expects records showing date, content, trainer and attendance. Training intervals of 12 months are standard, with additional sessions after any policy change.

How should crypto wallet screening be configured?

Screening must cover sanctions lists, darknet exposure and known gambling-hub clusters. The configuration should be documented, with a defined escalation path when a screening hit occurs. Operators should retain the screening output alongside the transaction record for the full 5-year retention period.

What triggers an internal compliance escalation?

Define thresholds in writing: transaction size, velocity, source-of-funds indicators and any change in customer behaviour. Each threshold should map to a named action and a named owner. The Commission reviews these mappings during assessments and will test them against actual transaction data from the preceding quarter.

How should complaints be logged?

Complaints must be recorded with a unique reference, a resolution date and the outcome. Where a complaint relates to a disputed transaction, the operator should retain the on-chain evidence alongside the internal ledger entry. Complaint volumes and resolution times form part of the annual return.

Control areaReview frequencyEvidence retained
AML policyAnnual minimumVersion history, board sign-off
Customer interactionQuarterlyTrigger log, action taken, outcome
Game testingPer release, annual re-testLaboratory certificate
Staff training12 monthsAttendance record, content outline
Wallet screeningContinuousScreening output, escalation record
ComplaintsMonthlyReference, resolution date, outcome

Frequently Asked Questions

Is a crypto casino legal in the UK?

A crypto casino is legal in the UK only if it holds a Remote Operating Licence from the Gambling Commission. Crypto settlement does not change that requirement. Operating without a licence is an offence under section 33 of the Gambling Act 2005, carrying an unlimited fine on conviction and potential imprisonment for responsible individuals.

How much does a UK gambling licence cost?

The Gambling Commission sets annual fees by band based on gross gambling yield. Bands run from under £500,000 to over £500 million, with annual fees from roughly £5,000 at the lowest band to about £500,000 at the top. Application fees are charged separately, and multi-year payment attracts a discount of 10 to 15 percent.

Can the Gambling Commission fine a crypto casino?

Yes. The Commission can issue penalty notices against any operator holding a UK licence, including those settling in crypto. Published settlements show fines reaching £19.2 million in 2024, with effective rates between 1 percent and 12 percent of relevant gross gambling yield depending on the severity and duration of the breach.

Do I need an FCA licence to accept bitcoin deposits?

The gambling licence covers the wagering activity. Where the operator itself exchanges or custodies cryptoassets as a business, FCA registration under the Money Laundering Regulations may also apply. Most UK-licensed casinos avoid this by routing crypto through a third-party processor that holds the relevant FCA authorisation.

What records must a crypto casino keep?

Under the Money Laundering Regulations 2017, records must be retained for 5 years from the end of the business relationship or transaction date. For crypto this includes wallet addresses, transaction hashes, applied exchange rates and identity evidence. The Gambling Commission can request these records at any time during an assessment.

How long does a licence application take?

The Commission's published target is up to 16 weeks from receipt of a complete application. Applications involving crypto custody arrangements often run longer, because the regulator requests written evidence of key management, wallet controls and the identity of any third-party custodian before granting approval.

Are offshore-licensed crypto casinos allowed to accept UK players?

No. The Gambling Act 2005 applies by reference to the customer's location. A Curaçao or Anjouan licence does not authorise services to consumers in Great Britain. Operators advertising to British customers without a Commission licence face prosecution, website blocking orders and disruption of payment flows through UK banks.

What is the penalty for late licence fee payment?

The Commission's fee schedule provides for a fixed administrative charge plus interest on late payment. Repeated late payment can be treated as a breach of licence condition, which escalates to a formal warning or a penalty notice. Interest accrues from the due date at a rate published in the Commission's annual fee document.

Do personal licence holders carry individual liability?

Yes. A personal licence holder who fails to discharge their duties may have the licence suspended or revoked under section 121 of the Gambling Act 2005. Directors convicted of a gambling offence can also face disqualification for up to 15 years under the Company Directors Disqualification Act 1986.

How often does the Commission audit operators?

Routine assessments typically occur on a cycle of 18 to 36 months, covering AML files, customer interaction records, game testing evidence and complaint handling. An assessment can escalate to a formal investigation where deficiencies are found, and the Commission can recover its investigation costs from the operator under the licence terms.

The compliance obligations for a crypto casino serving the UK market are specific, published and enforced with measurable financial consequences. Licence fees, staffing costs, testing expenditure and penalty exposure can be modelled in advance, and the operators that plan for them avoid the enforcement outcomes documented in the Commission's public notices.