Spain tightens online gambling: payment-ownership checks now, a joint deposit cap from March 2027

Since 28 October, licensed operators in Spain must confirm that the person paying in and withdrawing is the account holder. A single deposit limit across all operators follows in March 2027.

Spain’s online gambling players face two new layers of control. Since 28 October 2026, operators licensed by the state must check that the person who holds a gambling account is also the holder of the card or wallet used to pay into it and withdraw from it. From March 2027, a single deposit limit will apply to each player across every licensed operator at once, instead of one limit per site.

Both measures come from the Ministry of Social Rights, Consumer Affairs and Agenda 2030 and its gambling regulator, the Dirección General de Ordenación del Juego (DGOJ). In October the DGOJ also opened a free online “Portal del Jugador” (Player Portal), where anyone can see their activity across all licensed operators in one place.

What changed on 28 October

The payment-ownership rule is in Real Decreto 813/2026. The decree is dated 7 October and was published in the Boletín Oficial del Estado (BOE) on 8 October. Most of it updates Spain’s anti-money-laundering rules for the financial sector. For gambling, it amends article 21 of the regulation implementing Law 10/2010 on the prevention of money laundering. When an online operator verifies a customer’s identity electronically, it must now also confirm that “the holder of the payment method used in deposits and withdrawals is the holder of the gambling account”, in the words of the BOE text.

The ministry gave its reasons in a press release on 28 October. Complaints about identity theft in online gambling rose 12% in 2025, to 8,675 cases, according to PACS, the ministry’s protocol for taxpayers whose identities have been stolen. The protocol is run with the national police forces and the tax agency. The ministry said people using stolen identities had relied on payment methods whose holder is hard to verify in real time, such as bank cards and e-wallets. Spain’s European Consumer Centre (CEC-España) repeated those figures and added that the DGOJ’s analysis suggests some cases may be linked to money laundering.

Who is affected, and how

New accounts opened from 28 October must comply straight away. Existing accounts have a six-month transition, set out in the decree’s first transitional provision. During that period, players who registered before the rule took effect can keep depositing with their existing payment methods and keep playing. They cannot withdraw winnings until the operator has confirmed that the account holder and the payment-method holder are the same person.

If the six months pass without that check, the decree tells operators to terminate the contract unilaterally and report it to the DGOJ. The operator must then return any balance, including winnings held back during the transition. Anti-money-laundering obligations still apply. Operators have the same six months to adapt their technical systems.

The rule applies only to operators with a Spanish state licence. Sites that are not licensed in Spain are already outside the legal market, and the decree does not regulate them.

The joint deposit limit: what the decree says

The cross-operator limit comes from Real Decreto 520/2026, dated 24 June and published in the BOE on 25 June 2026. It adds a new article 36 bis and a new annex III to Royal Decree 1614/2011, which governs gambling licences and registers.

Under annex III, the default joint limits are €700 a day, €1,750 a week and €3,300 for each four-week period. The decree defines a day as 06:00 to 06:00 the next day. Weeks and four-week periods start at 06:00 on a Tuesday. A transitional provision says the first weekly and four-week periods begin on the first Tuesday after the rules take effect.

Operators must connect their own limit systems to the DGOJ’s central system and check it before accepting a deposit. Article 36 bis says operators “may not accept” deposits that would take a player over the limits recorded there, and must tell the player why.

Players can lower their limits at any time, and lower limits apply immediately. They can also ask to raise their limits above the defaults or remove them altogether. Those changes take effect three working days after the request. A player cannot raise or remove a limit again until three months have passed since the last increase. Before any increase or removal takes effect, the decree requires the regulator to make information available to the player. The ministry’s press release describes this as “reinforced guarantees of information on the risks associated with gambling”.

The DGOJ says the joint system will particularly help people who play with several operators, a group it estimates at about a third of people active in online gambling in Spain. Until now, a person with accounts at several sites could deposit up to each site’s limit, so the total they could deposit depended on how many sites they used.

Which date: 25 or 26 March 2027?

The DGOJ’s announcement of 21 October said the joint-limit system was in a testing phase and would come “definitively into force on 26 March 2027”, although players could already use it.

The legal text is worded differently. The decree’s second final provision says it enters into force nine months after its publication in the BOE, which took place on 25 June 2026. The BOE’s own analysis of the decree gives the entry-into-force date as 25 March 2027, with some provisions taking effect earlier. The two sources differ by one day. Until the DGOJ or the ministry clarifies, Casino People is reporting both, each with its source: 25 March 2027 for the date given in the BOE analysis, and 26 March 2027 for the regulator’s announcement. Either way, the cap becomes binding on operators at the end of March 2027.

The Player Portal

The Portal del Jugador opened on 21 October. According to the DGOJ, it shows a person’s deposits, stakes, wins and losses, activity history and aggregate statistics across all operators licensed in Spain. It also lists every gambling account registered to the user’s identity, which the regulator says can help people spot accounts opened in their name without their knowledge.

Users can set email alerts for spending and activity thresholds and can view or change their joint deposit limits through the portal. They can also check whether operators have applied a requested change and download annual activity certificates. Access is free. It works through Cl@ve, the government’s digital identification system, and is open to anyone, whether or not they hold a gambling account.

What happens next

For players with existing accounts, the practical deadline is the end of the six-month payment-ownership transition. Anyone whose account was funded with a card or e-wallet in someone else’s name will not be able to withdraw winnings until the account is regularised.

For operators, the next milestone is March 2027, when their deposit systems must check every transaction against the DGOJ’s central limits. Several other rule changes are still in progress. The DGOJ consulted publicly in October on a separate mechanism for detecting risky player behaviour, and it is working on a wider reform of Law 13/2011, the Gambling Act, after a public consultation that opened in May 2026.

Online gambling in Spain is legal only for adults aged 18 and over, and only with operators licensed by the DGOJ. The DGOJ’s safer-gambling website, jugarbien.es, lists support resources for people worried about their own or someone else’s gambling.

Blog

Spain tightens online gambling: payment-ownership checks now, a joint deposit cap from March 2027

What changed on 28 October

Who is affected, and how

The joint deposit limit: what the decree says

Which date: 25 or 26 March 2027?

The Player Portal

What happens next

Sources

Related Posts

High Court curbs rival ‘Aviator’ crash game in Colombia, Romania and Serbia

Bally’s Intralot expects to close William Hill owner evoke deal by Q1 2027