L&L Europe Agrees to £900,000 Settlement Following UK Gambling Compliance FailuresL&L Europe Limited has agreed to make a £900,000 payment to the UK Gambling Commission following a regulatory review

L&L Europe Limited has agreed to make a £900,000 payment to the UK Gambling Commission following a regulatory review that identified deficiencies in its anti-money laundering (AML) controls, customer protection measures and withdrawal procedures. The findings relate to the period between October 2024 and October 2025.

The settlement, announced on 21 October 2026, followed a review of the operator’s remote gambling licence. The Commission identified breaches involving the prevention of money laundering and terrorist financing, customer due diligence, safer gambling procedures, technical standards and the fairness of terms governing customer withdrawals.

The regulator found that L&L Europe’s money laundering and terrorist financing risk assessment did not adequately explain how risk factors were evaluated or how the effectiveness of controls was scored. It also lacked sufficient clarity regarding the measures specifically applicable to customers in Great Britain.

The company’s AML controls relied heavily on financial thresholds and sampling rather than sufficiently considering individual customer risk profiles. The review also identified instances in which the operator did not effectively follow its own procedures.

One customer case highlighted weaknesses in source-of-funds checks. A customer deposited £4,400 within eight hours of opening a gambling account and subsequently withdrew £50. The operator accepted a gambling account as the source of the funds but did not adequately investigate the fact that the associated bank account had been opened only two weeks before the customer registered. There was no sufficient evidence establishing that the funds originated from employment, business income or savings.

The Commission also found shortcomings in the operator’s approach to identifying potential gambling-related harm. Its customer-interaction systems relied heavily on financial indicators, while alerts relating to time spent gambling, failed deposits and deposit frequency were not consistently activated across all websites. In some cases, alerts required two indicators to occur on the same day, potentially preventing individual warning signs from triggering further assessment.

The regulator’s findings included a case involving a customer who made 84 unsuccessful deposit attempts within seven days because of insufficient funds, without the system identifying the activity as a potential indication of harm. In another case, a customer reached a financial threshold on the day of registration but was not contacted until two weeks later, after repeatedly reaching the same threshold.

Other cases involved a 21-year-old customer who lost £6,500 within three days of opening an account and an 18-year-old customer who lost £4,000 in eight minutes. The review also identified a customer who had recently returned from self-exclusion and exceeded a monthly net deposit limit set as part of their return.

The Commission further identified problems with the operator’s withdrawal arrangements. One contractual term prevented customers from submitting a new withdrawal request until their previous request had been authorised. The regulator considered the term unfair under the Consumer Rights Act 2015.

Officials also observed withdrawal requests being withheld for reasons unrelated to legal or regulatory requirements. In addition, the operator’s fraud and collusion procedures required manual reviews of every fifth or tenth withdrawal for certain customers, leading to delays and requests for information that could, in some cases, have been obtained earlier.

The Commission found that these practices breached requirements governing fair terms and customer identity verification. The relevant rules require operators not to make a withdrawal conditional on providing information that could reasonably have been requested earlier, while preserving the ability to obtain information where another legal obligation requires it at that stage.

A further breach concerned technical standards, with the regulator finding that customers could spend beyond limits set by themselves or the operator.

L&L Europe has cooperated with the investigation and accepted the findings. The Commission noted the company’s remedial action plan and its efforts to address the identified deficiencies. The operator has introduced a standalone money laundering and terrorist financing risk assessment tailored to Great Britain and changed its withdrawal procedures so that withdrawals are withheld only where legal or regulatory requirements justify doing so.

The £900,000 settlement is a payment in lieu of a financial penalty, with the funds payable to the UK Consolidated Fund. The company is also required to contribute towards the Commission’s investigation costs, and the findings have been published in a regulatory statement.

The case reinforces the Commission’s expectations that remote gambling operators maintain risk assessments that accurately reflect their business, apply customer due diligence consistently, identify indicators of gambling harm and ensure that customer funds are handled fairly. The regulator has emphasised that the existence of written policies is not sufficient where operational controls fail to identify risks or are not implemented effectively.

By fLEXI tEAM