Payment compliance gets its own stage at SBC Summit this year, and that tells you where the industry's attention has landed. The Lisbon event will run a dedicated Global Payment Compliance track on Wednesday, 30 September, part of the Payment Expert Summit stage, with a fintech track on Tuesday and a crypto and blockchain track on Thursday. Compliance stopped being a back-office chore somewhere in the last two years. It is now a headline agenda item, and for operators the practical question is how much of it the payment stack handles for you.
The track brings together operators, compliance specialists, payment leaders, legal experts and technology providers. The plan, per the announcement, is to look at how businesses can strengthen payments, fight threats and keep up with shifting regulatory expectations, without turning the checkout into something players dread.
Rasmus Sojmark, founder and CEO of SBC, put the tension plainly: "Payment compliance has become one of the industry's biggest balancing acts. Operators are expected to strengthen fraud prevention, AML threats and regulatory oversight, while at the same time delivering the fast, seamless payment journeys that players demand." In plainer language: compliance and speed are one problem, not two. Operators who treat them as separate tend to end up with a slow checkout or an enforcement letter, sometimes both.
Why the timing is not random
This week the UK Gambling Commission published new details from its financial risk assessment (FRA) pilot, which ran through 2024 and 2025, and the findings read like a case study in what happens when identity checks are bolted on instead of built in. Senior executives Helen Rhodes and Sarah Webster wrote that weak ID verification undermined the whole exercise. Some customers could not be matched to credit reference agency records because operators had collected initials instead of full names, nicknames instead of legal names, or a commercial address instead of a residential one.
Those customers were classed as "unmatched" and pushed into heavier assessment processes, even though they were a small minority. The failures also weakened the effectiveness of GAMSTOP, the UK's self-exclusion scheme, and raised the risk of fraud and money laundering. The Commission's own findings showed that a compliance system built on bad data punishes the people it is supposed to protect.
The industry response has been loud. Grainne Hurst, chief executive of the Betting and Gaming Council, said the Commission had yet to publish a full evaluation of the pilot, so neither the industry nor the public had seen the evidence needed to justify introducing the checks. "These checks cannot be described as genuinely frictionless if they produce unreliable outcomes," she said. The full data report is not expected until September, which means the compliance track in Lisbon opens with this debate still running.
What this means for payment gateways
Put the two stories next to each other. A regulator spends two years proving that sloppy identity data turns a "frictionless" check into a miserable one. An industry event gives compliance its own day. The conclusion for anyone running an online casino is hard to avoid: the payment layer is where compliance lives now. KYC at signup, AML screening on transactions, fraud rules, geo-blocking, verification at withdrawal. A gateway either ships those tools or leaves you to assemble them yourself, badly.
This is where crypto payments for igaming get interesting and complicated at the same time. A crypto casino payment gateway can move money across borders in minutes, which is exactly what operators in emerging markets want. But regulators apply the same expectations to crypto rails as to card rails: know who the player is, watch the transactions, and be able to explain both. The crypto and blockchain track at SBC Summit exists for a reason. The technology is the easy part. The compliance wrapper around it is the hard part.
What to check before you sign
So what should an operator actually check before committing? The compliance track agenda is basically a checklist. Who runs transaction monitoring, the provider or you? Is KYC built into onboarding or billed per check by a third party? Can the gateway pay out in the currencies your players actually use, crypto included? And when the regulator calls, does the provider stand next to you or hand you a PDF and wish you luck? These are the questions that separate a crypto casino payment gateway that protects you from one that merely processes.
The same logic applies one level up. Most operators do not buy a gateway in isolation; they take a platform deal and payments come in the bundle. Before signing, confirm that the igaming software solutions you are buying include a compliant payment layer, not just a merchant account. Ask which jurisdictions the processing covers, what the withdrawal flow looks like, and whether crypto is a bolt-on or a first-class citizen of the product.
The Ontario angle
Ontario shows what the standard looks like in practice. The province has run a regulated market since April 2022, and every operator on iGaming Ontario's registered list must meet AGCO standards that cover AML and player protection alongside the games. Payment compliance is part of keeping a license, not a feature you add later. New entrants who shop the payment stack before they shop the game lobby tend to have a much easier first year.
The takeaway
I keep thinking about the unmatched customers in the UK pilot. People who typed the name their friends call them, or used a work address because they move around, and got treated as higher risk for it. That is what compliance looks like when nobody owns the data quality. The SBC Summit agenda is the industry admitting, out loud, that this has to change.
For operators the math is simple: a compliant gateway costs money, and a non-compliant one can cost a license. If you are picking a crypto casino payment gateway for a new operation, put the compliance questions at the top of the list, ahead of fees and payout speed. The pilot data, the regulator's warnings and the September agenda all point the same way.