Age verification is the regulatory foundation of responsible iGaming — the gate through which all player relationships begin. Since 2019, UKGC-licensed operators have been required to verify player age before accepting any deposit, a tightening of the previous regime that permitted initial play without verification. The technical implementation of this requirement — specifically, the integration between the age verification system and the payment gateway — determines whether the regulatory obligation is met with the precision the Gambling Commission expects and whether the player conversion rate is optimised in the process.
The Regulatory Requirement: Age Before Deposit
The UKGC's Social Responsibility Code Provision 3.2.12 requires that operators take all reasonable steps to prevent underage gambling. Since the 7 May 2019 update to the LCCP, this explicitly means that operators must verify a player's age before allowing them to deposit. The previous "Age Verification Plus" (AVP) framework, which permitted operators to allow deposits pending verification with winnings withheld until verification was complete, was discontinued.
The current requirement is clear: no deposit before age is verified. A player who registers and attempts to deposit without completing age verification must be prevented from doing so by the payment system. This is not a soft rule that can be satisfied by a warning message — the payment gateway must enforce the block. An operator that accepts a deposit from an unverified account, even if the account holder is subsequently found to be of legal age, has breached the LCCP if the deposit occurred before the verification was complete.
What Constitutes Effective Age Verification
The UKGC does not prescribe a single verification method, but it requires that the method used provides a reasonable assurance of age. Methods that meet this standard include:
Credit bureau check: The player's name, date of birth, and address are matched against credit bureau records (Experian, Equifax, TransUnion). If the records confirm that a person with these details over 18 exists at the stated address, age is considered verified. This method covers most UK adults with a credit history and is fast — typically under one second. Individuals with thin credit files (young adults, recent arrivals) may not be verified by bureau check and require documentary verification.
Document verification: The player uploads a passport, driving licence, or national identity card. An automated or manual review confirms the document's authenticity and extracts the date of birth. Many operators require a biometric liveness check alongside the document — the player takes a selfie that is compared against the document photo to confirm the submitter is the document holder.
Open Banking identity: Where the player deposits via Open Banking and their bank confirms the account holder's name and date of birth (where available through the open banking API), this can constitute age verification in some frameworks. The bank has already verified its customer's identity under its own KYC obligations, and the biometric authentication at bank level provides a strong assurance of identity continuity.
Technical Architecture: Gating Payment to Verification Status
The technical implementation requires the payment gateway to query the player's verification status before processing any deposit instruction. The authoritative source of verification status is the player management system (or a KYC service layer), and the payment gateway must receive a verified signal from this system before proceeding with payment authorisation.
The integration must handle several edge cases:
Verification in progress: The player has initiated verification (submitted documents) but the review is not yet complete. The correct response is to hold the deposit at the gateway — not to decline it, but not to process it until verification completes. The player should receive a clear message that their deposit is pending verification completion.
Verification timeout: The KYC service is unavailable and the verification status query returns a timeout. The safe default is to decline the deposit — not to allow it on the assumption that verification would have been positive. Processing deposits when verification status is unknown is the error mode that the UKGC takes most seriously.
Reverification triggers: Where a player's verification expires (some operators set annual reverification requirements) or where the operator has reason to question the validity of the original verification, the payment gateway must block deposits until reverification is complete, even for previously verified accounts.
Balancing Compliance with Conversion Optimisation
The commercial tension in age verification is that friction reduces conversion. Operators that require lengthy document uploads before any deposit is possible lose a meaningful percentage of new player registrations — players who abandon the process before completing verification. The compliance framework requires verification before deposit, but it does not specify that verification must be slow or painful.
The highest-performing operators have optimised the verification journey to minimise elapsed time: credit bureau checks complete in under a second for the majority of players, effectively invisible in the registration flow. For the minority who require documentary verification, mobile-optimised document capture tools (Onfido, Jumio) complete verification in under two minutes. The payment gateway then releases the first deposit attempt that was queued during verification, without requiring the player to re-initiate the deposit.
This "deposit intent capture" model — where the player initiates a deposit, the system captures their intent and queues the payment, completes verification in parallel, and processes the queued deposit automatically upon verification — significantly reduces abandonment rates relative to a model that requires players to return to the deposit page after verification is complete.
CCYFX provides specialist banking infrastructure for iGaming, crypto, FX brokers, and offshore structures. UK, European & US IBANs.
Speak to Our Team