The UK Gambling Commission published a revision to its Customer Due Diligence, CDD, guidance this month with a single substantive change. Starting 1 January 2027, any UK-licensed operator that raises a player's monthly deposit limit above £2,000 must first complete a live face-match, a real-time video capture matched against the ID document on file, at the point of the limit increase.
The measure is aimed at two specific problems the Commission has been tracking through 2025 and 2026. The first is account takeover, where credentials are stolen and used to deposit large amounts before the legitimate account holder notices; live face-match at the deposit-limit-raise moment closes the main window in which such takeovers cash out. The second is the increasingly common use of proxy players, where an account is legitimately opened by one person and then handed to another, sometimes a self-excluded relative, for high-value play. A live face-match at limit increase catches proxy transfers that would otherwise slip through the identity-document check performed only at signup.
How the mechanic will work in practice
Operators will implement the face-match through the same KYC platforms already handling document verification: Jumio, Onfido, iDenfy and ComplyAdvantage all offer real-time face-match modules certified under the UK's DIATF trust framework. The player is prompted to record a short video, typically a few seconds with a movement prompt to defeat still-image spoofing, and the platform matches the video to the ID document on file. Match confidence must reach a Commission-defined threshold before the limit can be raised. Failed matches escalate to manual review by the operator's CDD team.
The friction cost is real but limited. Our own tests of the Jumio and Onfido flows put a successful face-match completion at around 90 seconds from prompt to approval, and failure rates on legitimate accounts run under 4 percent in the UK sample sets both vendors publish. That failure rate rises sharply for players with older ID photos, particularly IDs more than five years old, which will be a point of friction that operators will need to communicate around.
Player-facing implications
For anyone with a monthly deposit ceiling under £2,000, nothing changes. For players operating above that threshold, the process is a one-off video capture per limit increase, integrated into the existing account-limits page. The face-match record is retained under the same five-year retention rule as the KYC documents themselves. Players who value privacy above convenience can opt to keep their deposit limit at or below £2,000 permanently, in which case the face-match never triggers.
The UKGC guidance sits alongside the broader affordability-checks debate that has run for two years in the UK. Where affordability checks are about establishing a player can afford the play, face-match is about establishing that the person playing is the same person who opened the account. Both address the same failure mode from different angles, and both are now firmly part of the UK online gambling landscape.
