UK Gambling Commission Considered Suspending Evolution Licence Over AML Failures Before Settling for 4.75 Million Pounds

The UK Gambling Commission settled with Evolution Malta Holding Limited for 4.75 million pounds in July 2026 following an investigation into serious anti-money laundering control failures. The Commission found that Evolution's AML risk assessments were outdated between April 2024 and January 2025, that its oversight of third-party supply chain risks was inadequate, and that its games were made available on six unlicensed UK-facing websites run by two operators for approximately 11 months between December 2023 and November 2024. Large volumes of UK consumer visits to those sites were recorded during this period. The Commission stated the failings were serious enough for it to have considered suspending Evolution's UK licence before settling on a financial penalty, an independent audit within one year, and a contribution toward investigation costs.

Updated July 2026

What Did the UK Gambling Commission Find?

The Gambling Commission's enforcement action against Evolution is one of the most significant it has pursued against a B2B supplier rather than a direct consumer-facing operator. The investigation identified several distinct categories of compliance failure.

Evolution's AML risk assessments were found to be outdated for a period spanning April 2024 to January 2025, meaning the documentation the company maintained to demonstrate its understanding of money laundering risk within its operations did not reflect the actual risk environment it was operating in. A documented compliance framework that does not reflect real-world risks provides no meaningful protection and no defensible position when enforcement action begins.

Customer due diligence controls were found to be inadequate. The Commission also identified failures in how Evolution assessed and monitored third-party risks, specifically regarding the risk of its games being distributed to and through unlicensed operators. The oversight of supply chain and distributor risks was characterised as deficient in ongoing monitoring. These failings together constitute breaches of Licence Conditions 12.1.1(1-3) and 12.1.2 of the Commission's standard licence conditions.

How Did Evolution's Games End Up on Unlicensed Sites?

Between December 2023 and November 2024, Evolution's live casino games were made available on six websites that were accessible to UK consumers but did not hold the licences required under the Gambling Act 2005. The six sites were operated by two entities. The Commission detected the problem in August 2024, approximately eight months into the period of unlicensed distribution, before formally opening its investigation in December 2024 and notifying Evolution.

The Commission recorded large volumes of visits to those sites by UK consumers during the period in question. The UKGC declined to name the six sites or their operators in its public enforcement notice, noting only that the unlicensed distribution had occurred. The decision to withhold the names of the unlicensed operators is not explained in the public record.

The root of the failure was Evolution's inability to translate its documented compliance framework into effective operational practice. Knowing that unlicensed distribution is a risk is not the same as operating systems that reliably detect and prevent it. The Commission's findings suggest that Evolution's supply chain oversight did not catch the distribution anomaly until the regulator itself identified it.

What Did the Gambling Commission Consider Doing?

John Pierce, the UKGC's Director of Enforcement, stated explicitly that the failings were "serious enough for us to consider licence suspension." A suspension of Evolution's UK licence would have had immediate and severe operational consequences: the company would have been unable to supply its products to UK-licensed operators, cutting off one of the world's most significant regulated gambling markets.

The Commission ultimately did not suspend the licence. Instead it reached a settlement comprising three elements: a financial penalty of 4.75 million pounds, a requirement for Evolution to commission an independent audit of its UK licence compliance within one year, and a contribution toward the Commission's investigation costs. The financial penalty is substantial for the sector but modest relative to Evolution's revenue scale: the company reported revenues of approximately 21 billion Swedish kronor in its 2025 annual results.

What Is Evolution Required to Do Now?

The settlement imposes three forward-looking obligations. The independent audit requirement is the most operationally significant. Within 12 months of the settlement, Evolution must commission an external review of its UK licence compliance covering the specific areas identified as deficient: AML risk assessments, customer due diligence, and supply chain oversight. The audit's findings and any resulting remediation would be subject to Commission review.

Evolution also implemented ring-fencing measures for its European operations in 2025, during the investigation period. These measures were described as costly and appear to have been taken in response to the identified supply chain risk. Ring-fencing is a technical term for operational controls that prevent products or services from being accessed by or through unlicensed or out-of-scope entities, and its implementation suggests Evolution recognised the structural nature of the supply chain oversight failure the Commission had identified.

How Did Evolution Respond?

CEO Martin Carlesund confirmed that the settlement does not alter Evolution's UK operations. The company's UK licence remains in force, its products continue to be supplied to UK-licensed operators, and no changes to the business model are anticipated as a result of the enforcement action. The settlement resolves the Commission's investigation on the terms agreed, and the independent audit requirement is the primary ongoing compliance obligation.

Evolution has not publicly identified what specific changes to its AML risk assessment process or supply chain monitoring it made in the period between the investigation opening in December 2024 and the settlement in July 2026, beyond the European ring-fencing measure referenced in the Commission's notice.

What Does This Mean for the Wider B2B iGaming Sector?

The Evolution enforcement action carries a direct warning for all B2B iGaming suppliers operating under or supplying to UK-licensed operators. John Pierce's public statement included an explicit reminder to licensees that "operators must ensure their risk assessments are current, regularly tested and reflective of real-world risks." The phrase "real-world risks" is a direct reference to the gap between documentation and practice that the Commission found in Evolution's case.

For B2B suppliers in particular, the supply chain dimension of the action is the most significant. The Commission's finding that Evolution's oversight of distributor and third-party risks was deficient extends the compliance responsibility of a B2B supplier beyond its direct contractual relationships to the downstream operators accessing its products. A B2B supplier whose games appear on unlicensed sites faces regulatory exposure even if the supplier did not directly contract with the unlicensed operator.

The level of the financial settlement, 4.75 million pounds, is significant but should be understood in context. The Commission has imposed larger settlements on operators in recent years. The more consequential element of this action is that the Commission explicitly considered and decided against suspension of a licence held by the world's largest B2B live casino supplier. That decision signals both that the Commission has the appetite to pursue such action against major industry participants and that settlement with remediation requirements represents the current preferred enforcement resolution for serious but remediable compliance failures.

How Does This Compare to Other Recent UKGC Actions?

The Evolution settlement is modest compared to recent consumer-facing operator penalties, reflecting the different nature of the failing: Evolution is a supplier rather than a direct operator, and the Commission's assessment of culpability appears to have been influenced by the company's cooperation, the remediation steps taken during the investigation, and the absence of direct consumer-facing AML failures of the kind that have driven larger operator settlements.

Frequently Asked Questions

Why did the UK Gambling Commission fine Evolution?

The Commission found that Evolution's AML risk assessments were outdated between April 2024 and January 2025, its supply chain oversight was inadequate, and its games were distributed through six unlicensed UK-facing websites run by two operators for approximately 11 months between December 2023 and November 2024, with large volumes of UK consumer visits recorded.

How much did Evolution pay to the UK Gambling Commission?

Evolution Malta Holding Limited agreed to pay 4.75 million pounds as part of a settlement with the UKGC, plus a contribution toward the Commission's investigation costs.

Did the Gambling Commission suspend Evolution's licence?

No. The Commission considered suspension but settled on a financial penalty of 4.75 million pounds, an independent audit of Evolution's UK licence compliance within one year, and a cost contribution. Evolution's UK licence remains in force.

What AML failings did the Commission find at Evolution?

The Commission found breaches of Licence Conditions 12.1.1(1-3) and 12.1.2 covering AML risk assessments that were outdated, inadequate customer due diligence, and deficient monitoring of third-party and distributor risks. Evolution's documented compliance framework was not translating into effective real-world risk controls.

What must Evolution do following the settlement?

Evolution must commission an independent audit of its UK licence compliance within 12 months of the settlement, covering the AML risk assessment, customer due diligence, and supply chain oversight areas identified as deficient. The company has also already implemented European ring-fencing measures during the investigation period.

What does this mean for other B2B iGaming suppliers?

The enforcement action establishes that B2B suppliers are responsible for ensuring their products are not accessed through unlicensed operators, and that outdated AML risk assessments create regulatory exposure even when a documented framework exists. The UKGC has signalled that licence suspension is a live option for suppliers, not just consumer-facing operators.