UKGC Flags White-Label Deals as a Top Laundering Risk
The Gambling Commission rated inadequate white-label due diligence at the top of its 2026 risk scale. The line that should worry hosts is not about Britain at all.
On 30 July 2026 the Gambling Commission published its money laundering and terrorist financing risk assessment for the British gambling industry. Inside it, one vulnerability is scored at the ceiling of the Commission’s own scale — nine out of nine, high likelihood and high impact:
Inadequate due diligence on white-label partnerships.
Most of the coverage stopped there, filed it as a British compliance story, and moved on. That is a mistake, and the reason is a single clause buried in the Commission’s case study — a clause that has nothing to do with Britain.
- Published 30 July 2026, drawing on information gathered 1 April 2023 – 31 October 2025.
- White-label due diligence failures: 9/9 — the top of the Commission’s likelihood-and-impact scale.
- B2B and business-investor due diligence failures: 6/9, still high overall risk.
- Remote betting keeps its High overall rating; sector GGY was £2.6bn in April 2024 – March 2025.
- The case study faults an operator for not assessing whether a partner’s activity was illegal in Britain or in the territory where it was conducted — your partner’s third-country traffic is now your finding.
- Practical effect: hosts are shrinking partner books, and brands are pricing their own licence against being someone else’s top-rated risk.
What the assessment says
The mechanics of a white-label arrangement are not in dispute. A third-party brand offers gambling to players using the licensee’s licence and technical infrastructure. The brand does the marketing, owns the customer relationship, and takes the commercial upside. The licensee holds the permission — and, as the Commission restates, remains responsible for ensuring that everything conducted through the partnership meets regulatory requirements.
What is new is the weight. Rating that vulnerability at nine out of nine puts it at the top of the Commission’s scale, which is a supervisory instruction dressed as an analysis. Licensees are expected to reflect the national assessment in their own risk assessments and policies. An operator whose white-label controls look the same in October as they did in June has a documentary problem, not just a control problem.
The Commission also published a case study, and it is unusually specific about what went wrong. An investigation found a licensed operator with white-label partnerships had failed to carry out effective due diligence on:
| Failure identified | What was missing | What a host needs on file |
|---|---|---|
| Ownership of the third party | Effective due diligence on who owns the brand partner | UBO verified to natural persons, with documents — not a corporate chart |
| Source of funds | Source of funds for the business relationship | Evidenced SoF/SoW for the partner entity and its principals |
| Legality of the partner’s activity | Whether the activity was illegal in Britain or in the territory where conducted | Market-by-market legality assessment of every geography the brand takes traffic from |
| Ongoing scrutiny | Continuing oversight of the relationship | Monitoring with defined triggers and a dated review cycle |
Two of those three substantive failures are ordinary AML hygiene applied to a counterparty rather than a player: know who owns them, know where their money comes from. Any host that cannot produce both on demand for every brand it carries is, by the Commission’s own scoring, sitting on its highest-rated vulnerability.
The third is different in kind.
The clause that travels
Read it again: whether the partner’s activity was illegal in Britain or in the territory in which it was conducted.
The Commission is not asking a British licensee to police British legality. It is asking a British licensee to have a defensible view on whether its brand partner is operating lawfully in other countries — countries where the Commission has no jurisdiction, no licence, and no enforcement power.
That converts a familiar grey-market question into someone else’s regulatory finding. If a brand running on your licence takes meaningful traffic from a market where its offering is unlawful, that is no longer solely the brand’s exposure. It is a due-diligence failure in your file, assessed by your regulator, in a category rated at the top of its scale.
Most white-label hosts run partner due diligence as a corporate exercise: incorporation documents, a UBO declaration, a signed warranty that the brand will comply with applicable law. A warranty is not an assessment. The Commission’s case study penalises the absence of the operator’s own consideration of the question — meaning a contractual promise from the partner does not discharge it. You need to have looked, and to be able to show what you concluded and when.
This is where the story stops being British. The white-label model exists precisely because it lets a brand reach players without holding a licence, and the economics of many brand books depend on traffic that is not neatly confined to regulated markets. An expectation that the host assesses third-country legality attacks that economics directly — and it does so in the jurisdiction whose supervisory practice other regulators most often copy.
What this does to the model
Set the ratings next to the rest of the assessment and the direction is clear. Remote betting retains a High overall risk classification, on a sector generating £2.6 billion of GGY in the year to March 2025. Business-to-business relationships and business investors are separately flagged at 6/9 for receipt of illicit funds. The Commission is describing a sector where the sharpest risk sits not with players but with the counterparties operators contract with.
The economic consequence is straightforward. Doing white-label due diligence to this standard costs real money per partner — verified UBO, evidenced source of funds, a documented legality view on every market, and ongoing monitoring. That cost does not scale with partner revenue; a small brand is nearly as expensive to diligence as a large one. So hosts rationally cut the tail, and the brands at the tail discover that the arrangement they chose to avoid licensing has run out of hosts.
For those brands the arithmetic has changed, and it is worth doing honestly. The cost of a host willing to carry you properly, plus the revenue share, plus the loss of control over your own player relationship, now compares differently against holding a permit in your own name. Our white-label casino service sets out both routes; the Anjouan white-label guide and the Curaçao equivalent cover what running your own licensed brand actually involves, and the best gambling licences of 2026 roundup covers where the credential is cheapest to hold.
For hosts, the work is more immediate:
Re-paper the partner file. Not the contract — the diligence. UBO to natural persons with supporting documents, source of funds and source of wealth for the relationship, and a dated legality assessment per market. If your evidence for any partner is a warranty clause, treat that partner as unevidenced.
Map every partner’s traffic geography. You cannot assess legality in territories you have not identified. Pull the actual player-location data rather than the target-market list in the commercial deck; those two documents disagree more often than anyone admits.
Reflect the national assessment in your own. The Commission expects its risk assessment to feed your policies and procedures. That is a document with a date on it, and inspectors read dates. The controls that survive scrutiny are covered in our iGaming AML and KYC guide.
Decide which partners you actually want. Nine out of nine is the Commission telling you where it will look. The cheapest response is fewer, better-documented partners — and, for the ones you keep, a file you would be content to hand over unprompted.
Suppliers reading this from the technology side face the mirror-image question, and it is answered differently: where a B2B gaming supplier licence should sit depends on your clients’ licences, not your own preference.
If you are a brand weighing a host relationship against your own licence, or a host trying to work out which partners survive this, book a free consultation and we will run it against your actual partner book and traffic mix.
Frequently asked questions
What did the Gambling Commission publish on 30 July 2026?
Its Risk Assessment of Money Laundering and Terrorist Financing in the British Gambling Industry 2026. The assessment draws on information collected between 1 April 2023 and 31 October 2025, with sector financial data covering April 2024 to March 2025. It is the document the Commission expects licensees to reflect in their own risk assessments and policies, so it functions as a supervisory signal rather than a research paper.
How did the Commission rate white-label due diligence?
"Inadequate due diligence on white-label partnerships" was scored at the top of the Commission's scale — 9 out of 9, meaning high likelihood and high impact. A related vulnerability, inadequate due diligence on business-to-business relationships or business investors resulting in receipt of illicit funds, was rated 6 out of 9 and still classified as high overall risk.
Who carries the risk in a white-label arrangement?
The licensed operator. Under a white-label arrangement a third-party brand offers gambling using the licensee's licence and infrastructure, but the licensed business remains responsible for ensuring that everything conducted through the partnership meets regulatory requirements. The brand partner is commercially in front of the player; the licensee is legally in front of the regulator.
Does the Commission expect hosts to assess a partner's activity outside Britain?
Yes — and this is the most consequential line in the assessment. The Commission's case study criticised an operator for not sufficiently considering whether the white-label partner's activity was illegal either in Britain or in the territory in which it was conducted. That places the legality of your partner's traffic in third countries inside your own AML obligation, not outside it.
What should a white-label host hold on every brand partner?
At minimum: verified ultimate beneficial ownership to natural persons, evidenced source of funds and source of wealth for the business relationship, a documented market-by-market legality assessment of where the brand takes traffic, and ongoing monitoring with a defined trigger for review. The Commission's case study identified failures on the first three, which is a fair guide to what an inspector opens first.
Is the white-label model finished in Britain?
No, but it is being repriced. The compliance cost of hosting a brand properly — real UBO work, source-of-funds evidence, and a defensible view on every market the partner touches — is now high enough that many hosts are cutting partner numbers, and many brands are concluding that their own licence is cheaper than being someone else's 9-out-of-9 risk.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
Recommended reading.
Get the cheatsheet
Stay ahead of the rules.
Licensing regimes shift fast. Get Vantegris updates and our 2026 licence cost & comparison cheatsheet — straight to your inbox, no noise.
Licence, done right.
300+ licences obtained across 40+ jurisdictions. Book a free consultation.
Book a free consultation