News · Ireland
ID Checks and Held Withdrawals — What Ireland's New GRAI Rulebook Changes for Players
Irish players have spent years using operators licensed somewhere else — Malta, Gibraltar, the Isle of Man — with account rules written for a different jurisdiction. That is now changing, and one of the first places you will feel it is the identity check standing between you and your own balance.
Two things happened in August 2026 that bear on this directly. The UK Gambling Commission published findings showing that more than a quarter of complaints reaching its Contact Centre concern identity verification, and the Gambling Regulatory Authority of Ireland (GRAI) closed a consultation on the exact regulation that governs what Irish licensees must tell their account holders.
The verification problem, in plain terms
The British findings are worth reading in Ireland because most operators serving Irish players are the same corporate groups, running the same platforms and the same third-party verification suppliers.
The Commission’s diagnosis: operators were deferring identity checks until a customer tried to withdraw. Accounts got opened with an initial instead of a full forename, a nickname, a work address instead of a home one, or a middle name in the forename field. Those records did not match credit reference agency data, so the account sat “unmatched” — invisible until a payout request forced someone to look.
“It is not appropriate to wait until a withdrawal request to follow up outstanding queries,” wrote Helen Rhodes, the Commission’s director of major policy projects and evaluation, and Sarah Webster, senior policy officer, in the published findings.
The regulator also criticised fuzzy matching by verification providers, which it said “can accept information that is similar rather than an exact match.” An account can look verified in the operator’s own system and match nothing anywhere else.
If you have ever had a withdrawal held while an operator asked for a passport scan and a utility bill, this is usually why. It is rarely the casino inventing an obstacle. It is a check that should have run on day one running on day ninety instead.
Where Ireland now stands
Until this year, Irish online gambling sat outside any dedicated domestic regulator. Operators held Revenue Commissioners permissions for betting duty purposes, and player-protection rules came from wherever the operating licence was issued.
The Gambling Regulation Act 2024 ended that. The sequence during 2026, per Licentium’s summary of the commencement timetable:
- 9 February 2026 — B2C betting licence applications opened
- 1 July 2026 — first remote betting licences issued by GRAI
- Later in 2026 — remote gaming and charitable licence applications open
- 1 December 2026 — legacy Revenue permissions end for in-person operators
The Act creates six licence categories and gives GRAI teeth that no previous Irish body had: penalties of up to €20 million or 10% of annual turnover, whichever is higher. Sportsbooks, betting exchanges, intermediaries, affiliates, marketing partners, white-label suppliers and payment processors serving Irish customers all need authorisation.
The regulation that matters for account holders
On 20 August 2026 at 3pm, GRAI closed consultations on three draft regulations. The third is the one to watch if you hold an online account.
Section 173 prescribes what remote licensees must give account holders: specified information at account level, alerts at set intervals detailing winnings, losses and time spent gambling, and defined periods during which the licensee must provide immediate access to your full gambling history.
The other two drafts cover Section 86 (which games may be authorised under an Irish gaming licence) and Section 152 (the records and accounts licensees must keep, tied to quarterly returns and the inspection process). Reporting on the draft games rules indicates a maximum wager of €10 and maximum winnings of €3,000 on relevant games — figures that would put Irish gaming limits well below the stake levels common on Malta-licensed builds.
None of this is finalised. Consultation responses now go back to GRAI before the regulations are made.
Why Section 173 is a verification story
An operator that cannot reliably identify you cannot reliably do any of what Section 173 asks. Alerts about your losses and time spent assume the account belongs to a known person, at a known address, with a single record rather than three near-duplicates. A gambling history you can access on demand assumes the same.
Ireland is also building a national gambling exclusion register under the Act — the domestic equivalent of Britain’s GAMSTOP or the Dutch Cruks system. Every exclusion register in the world works by matching your details against operator records. Britain’s regulator has just documented what happens when that matching fails: people who believe they are self-excluded can still gamble on an account whose data does not line up.
Ireland gets to build its register knowing that. It is a genuine advantage of starting late.
What Irish players should do now
Practical steps, none of which depend on when the regulations are finalised.
- Use your legal name and home address on every account. Forename exactly as it appears on your passport or driving licence. This one habit removes the most common cause of a held withdrawal.
- Verify on day one, at zero balance. Upload documents when the operator first offers, not when you have €400 waiting behind the check. The friction costs nothing when there is nothing at stake.
- Check who actually licenses your operator. During the transition, some sites serving Ireland hold a GRAI licence, some still operate on a Malta or Gibraltar licence, and some hold neither. The GRAI register is the place to look. An unlicensed site owes you no verification standard and no dispute route.
- Ask for your gambling history in writing. You do not need Section 173 to be in force to request a full account statement — deposits, withdrawals, session times. Operators generally hold it. Reading twelve months of your own numbers is more informative than any bonus comparison.
- Keep the paper trail if a payout is held. Ask which specific check failed and when it was first run. That question is much harder for an operator to answer vaguely than “where is my money”.
Sources
- Licentium — Ireland GRAI Remote Betting Licences from 1 July 2026
- Gambling Regulatory Authority of Ireland
- Solutions Hub — GRAI opens consultations on three gambling regulations
- Infoplay — Ireland reinvents its regulated market, 17 August 2026
- GamblingNews — One in Four UKGC Complaints Regard Identity Verification Failures, 17 August 2026
- Gambling Regulation Act 2024 — sections 86, 152 and 173
Responsible gambling. A regulator with enforcement powers changes how operators behave. It does not change the mathematics of the games, which carry a built-in expected loss over time. Set a budget and a session clock before you play, not during. If gambling is causing harm to you or someone close to you, call the Gambling Awareness Trust helpline on 1800 936 725 (free, 24/7 — gamblingcare.ie) or contact Problem Gambling Ireland. 18+.
This article may contain affiliate links. 18+. Please gamble responsibly. Gambling Awareness Trust — 1800 936 725 · gamblingcare.ie.