In 2024, Spanish regulators imposed €142.7 million in fines on gambling and online gaming operators, illustrating a significant issue of non-compliance across Europe’s iGaming sector. The problem is pervasive, with regulators across the continent issuing fines at an unprecedented rate, particularly targeting anti-money laundering lapses, social responsibility failures, and deficiencies in self-exclusion systems. Despite these rigorous interventions, breaches persist, prompting questions about the root causes of such widespread non-compliance.
Estimates suggest that annual fines for regulated non-compliance in the European gambling industry exceed €150 million. Spain, a notable leader in this aspect, has seen a surge in non-compliance cases, leading to hefty penalties in recent years. According to Vixio’s AML Fines Outlook, more than €36 million in AML-related penalties were imposed by European regulators between March 2024 and March 2025, highlighting the industry’s struggle to adhere to increasingly strict compliance standards.
In the UK, the Gambling Commission has been a vigilant enforcer, levying £7.16 million in fines between April 2023 and March 2024. For the following year, this figure dropped to £4.2 million, following enforcement action against 24 operators. In an effort to ensure fines are proportional, the commission introduced a new seven-step process in October to calculate financial penalties based on a percentage of the offender’s gross gambling yield.
The trend of tough regulatory action is evident in other European nations as well. The Netherlands’ Kansspelautoriteit (KSA) introduced a stricter fining matrix for 2025, with Category 5 violations now attracting penalties ranging from €2 million to €4 million. Malta-based Gammix Limited was fined €19.7 million for unlicensed operations, one of the heaviest penalties imposed by a European regulator to date. Belgium and Italy have also demonstrated their commitment to enforcement, with record fines of €4.6 million and €1.35 million respectively for non-compliance.
The European Gaming and Betting Association (EGBA) warns that excessive financial pressure could push operators towards the black market if enforcement becomes disproportionate to their revenue. Regulators argue that significant financial penalties are essential as a deterrent.
The compliance issue is deeply rooted in the tension between regulatory demands and commercial imperatives. The regulatory environment is becoming increasingly complex, placing pressure on operators to balance commercial performance with adherence to compliance obligations. As Victoria Reed, chief executive of Better Change, notes, “It is clear that the bar has been raised by regulators both in the UK and across Europe. The sharp increase in regulatory action, especially around AML and social responsibility, suggests that all may not be as it should be in the regulated market.”
Melanie Ellis, a partner at Northbridge Law in London, highlights that investment in compliance infrastructure often clashes with initiatives promising quicker returns. She explains, “The cost of compliance has increased massively. Operators are unable to allocate sufficient funds to this function. In the UK, this relates particularly to the increased expectations regarding customer monitoring and action.”
Meeting compliance expectations has become particularly challenging due to demographic shifts, with the rise of younger, digital-native gamblers exerting pressure on operators to provide seamless, instant experiences without crossing consumer-protection thresholds.
The UK’s Gambling Commission is shifting from reactive enforcement to predictive oversight. Andrew Rhodes, its chief executive, remarked in November that recent suspensions of nine operators were due to issues the commission had repeatedly warned about, such as software provision and self-exclusion. The commission’s new approach relies heavily on real-time monitoring via its Regular feed of Operator Core Data (ROCD), which has enabled the identification of behavioral risk clusters.
Despite the headlines, some industry insiders believe there has been progress in compliance. Richard Williams, a specialist gambling lawyer at Keystone Law, notes that operators have made significant strides over the past five years, particularly in areas such as AML and social responsibility compliance. The regulatory focus, he argues, has increasingly been on collaboration rather than confrontation.
However, non-compliance remains a significant concern. Tamsin Blow, a lawyer at CMS London, points out that enforcement often arises from the complexity of navigating multiple legal systems across jurisdictions. Breaches are typically not deliberate; rather, they reflect difficulties in understanding and meeting diverse legal obligations.
In the Netherlands, which opened its market only four years ago, the iGaming sector is still developing. Bjorn Fuchs, chairman of the Dutch trade body VNLOK, describes the market as a “toddler with a steep learning curve.” He notes that the rapid implementation of regulations and varied interpretations can lead to misunderstandings and oversight lapses. Fuchs emphasizes that while genuine errors should be seen as part of a maturing ecosystem, willful non-compliance should result in loss of operating licenses.
In Norway, where gambling remains a state monopoly, compliance issues are subject to intense scrutiny. The 2025 audit by PwC of Norsk Tipping revealed weaknesses in control and leadership, highlighting that even monopolies are susceptible to governance challenges.
Aside from financial penalties, the reputational damage associated with non-compliance is significant. Ellis warns that repeated non-compliance can affect brand value and long-term profitability, particularly in markets where gambling advertising and social responsibility are under constant political scrutiny.
Looking forward, the industry is moving towards data-driven, risk-based compliance systems. The UK’s ROCD system, for example, serves as a model for how analytics can help identify and mitigate risks. Operators are encouraged to integrate predictive oversight into their operations to align business practices with regulatory expectations and protect consumers.
Richard Williams identifies progress as contingent on addressing AML and social responsibility failings, emphasizing the importance of technology and machine learning in reducing human error. While he is skeptical about EU-wide regulatory harmonization, he notes that effective communication of expectations by regulators is crucial.
Bjorn Fuchs underscores the need for a balanced approach, combining accountability for operators with constructive dialogue between legislators, regulators, and the industry. As Europe’s iGaming sector continues to evolve, incorporating compliance into business models is critical to minimizing penalties and ensuring sustainable growth. Until then, penalties – financial, operational, and reputational – will remain a significant concern for the industry.
4/5
