Spain now requires online gambling operators to confirm that the holder of every payment method used for deposits and withdrawals is the same person as the account holder. The requirement sits in Royal Decree 813/2026, dated 7 October and published in the Boletín Oficial del Estado on 8 October 2026.
The check is added to Article 21 of the regulation under Spain's anti-money laundering law, Law 10/2010, which governs how operators verify identity. The decree's title is broad. It amends several royal decrees in the financial sector to align them with the current regulatory framework, and the gambling change is one part of that package.
When it applies
- Entry into force. The decree takes effect 20 days after publication. The BOE metadata lists that date as 28 October 2026.
- Six-month transition for registered players. Players already registered have six months from entry into force to complete the change. During that period the transitional provision lets them keep depositing and playing, but not withdraw prizes they have already won.
- Six months for operators too. Operators have the same period to adapt their technical and operational systems.
- Contract termination if ownership is not proven. If a player has not shown that they own the payment method by the end of the period, the operator must terminate the contract, notify the Dirección General de Ordenación del Juego, and refund balances, including unpaid prizes.
Because the six months run from entry into force, the text sets no fixed calendar end date. If the decree takes effect on 28 October, the period would end around 28 April 2027.
What operators have to build
The rule covers both deposits and withdrawals. The text requires operators to check that the holder of the payment method used in deposits and withdrawals is the holder of the gambling account. The check therefore cannot sit only at cash-out.
The text we reviewed sets out the requirement but does not prescribe a single method for proving ownership. Operators will have to choose how to verify it, and that choice will shape how much friction players face.
What it means for bettors
Players should check the name on each payment method they use against their account details now, rather than waiting for the deadline. If ownership is not proven by the end of the transition, the operator must end the contract and refund the balance, including unpaid prizes.
What to watch
The 28 October date comes from the BOE metadata rather than the decree's operative text, so the entry-into-force date should be confirmed against the official publication. Operators should also read the full decree, because it amends several financial-sector royal decrees and not only the gambling rules.
Operators preparing for the same period may also want to review the DGOJ's proposed centralised risk-detection mechanism, which is open for comment until 22 October 2026. For related coverage, see responsible gambling affordability tools.