Spain requires payment methods to match the gaming account holder
From 28 October 2026 online operators must check that deposit and withdrawal methods belong to the account holder, under Royal Decree 813/2026.
By Oliwer Brewitz, Head of Marketing
Key changes
- Payment method holder must match the gaming account holder
- Applies to new accounts from 28 October 2026
- Six-month transition for existing accounts; withdrawals blocked until verified
- Unverified accounts to be closed and balances returned
What changed
A measure in the fourth final provision of Royal Decree 813/2026, approved by the Council of Ministers in October 2026, entered into force on 28 October 2026. State-licensed online operators must verify that the holder of the payment method used for deposits and withdrawals is the same person as the gaming account holder. Accounts opened from 28 October 2026 are covered at once. Existing accounts have a six-month transition: players can keep depositing but cannot withdraw winnings until the match is verified. If it is not verified by the end of the period, operators must terminate the contract, inform the DGOJ and return remaining balances, including unpaid winnings, subject to anti-money laundering rules. The ministry says the aim is to curb identity fraud.
What it means for advertising
The rule adds a verification step to onboarding and cashier journeys. Campaigns that drive registrations are likely to see more drop-off where players use cards or e-wallets whose holder cannot be confirmed easily, and acquisition forecasts should allow for it. Landing pages and onboarding messages can explain the check up front so that new players choose a payment method in their own name, which may reduce abandonment at the first deposit.
What operators should do
Implement holder-name checks for every payment method, including cards and e-wallets. Contact existing customers early, by email and in-app messages, so they can verify their methods within the six-month window. Prepare the closure and refund process for unverified accounts, and log notifications to the DGOJ. Review payment provider contracts to confirm that they return the holder name needed for the match.
Full rules: Spain regulation brief · All Spain updates