UK

Paddy Power Betfair attack shows extent and boldness of UK cybercrime

Steve Hoare0160 views

Flutter Entertainment confirmed yesterday (8 July) that its Paddy Power and Betfair UK brands had been subject to a heavy cyber attack.

The respective sportsbook and betting exchange brands were targeted by cyber criminals who were able to access information like emails and account names.

It is understood that a significant number of customer accounts were targeted. However, Flutter stated that serious information like passwords, ID documents and payment details, were not accessed by the cyber attackers.

“We can confirm that our Paddy Power and Betfair businesses have suffered a data incident involving personal information for some of our customers,” a Flutter statement provided to SBC News read.

“Immediately upon becoming aware of this incident, we informed relevant regulators and authorities and initiated a full investigation, supported by external IT security experts, to understand what happened and how we can better protect our networks and customers.

“The unauthorised access has been removed and the incident contained. Our investigation concluded that the affected information was isolated to limited betting account information. No passwords, ID documents or usable card or payment details were impacted. We are informing all affected customers.

“Safeguarding and securing our customers’ information is of the utmost importance to us.”

The incident highlights the extent of cybercrime threats to online-focused businesses, with a huge range of companies subject to attacks over the past year, not just those in the gambling sector.

The British government’s Cyber Security Breaches Survey for 2025, for example, found that 43% of UK businesses reported a cyber security breach or attack in the past year – showing that Paddy Power and Betfair’s recent issue is hardly uncommon.

For companies like Flutter, which has access to one of the best tech stacks the industry has to offer as well as other important aspects like legal counsel, overcoming cyber security issues is a challenge – but not an enormous one.

For the many SMEs which make up both the B2C and B2B pillars of the betting industry, cyber issues may present more of a challenge.

According to a study conducted by Umazi, a digital ID platform, which was released the same day as the attack on Flutter, SMEs are the biggest victims of cyber criminality. The firm’s study found that 70% of SMEs are worried that business identity information and other data could be stolen.

“This isn’t a digital economy, it’s a digital illusion,” said Cindy van Niekerk, CEO and Founder of Umazi. “While regulators and corporates applaud innovation, SMEs are being left behind with legacy processes that actively undermine cybersecurity and economic growth.”

The British government, which is acutely aware of how big a contribution financial services make to its economy, has attempted to clamp down on cyber crime through legislation, such as the Product Security and Telecommunications Infrastructure Act.

These measures will provide some support to betting and gaming firms as much as any other digital business. However, the attacks against Flutter, one of the biggest betting firms in the world, showcases the boldness of cyber criminals and the extent of the threat faced by businesses large and small.

Read more

UKGC puts frictionless financial checks at the heart of safer gambling strategy

Steve Hoare0157 views

The UKGC seems as confident as ever in how it has crafted one of the key measures of the UK Gambling Act review, emphasising that financial vulnerability checks are turning out to be as “straightforward as possible”.

Last week, Helen Rhodes, who is the Commission’s current Director of Major Policy Projects, gave a speech which set out a more refined, data-led vision for player safety, including an update on what has been learned from the pilot of financial checks.

In August last year, the UKGC began rolling out what it calls ‘light-touch’ vulnerability checks using publicly available data. These checks were a key measure of the Gambling Act review, seen as a means to protect customers against potentially unsustainable gambling spending.

Initially set at a threshold of £500 in net deposits over a 30-day rolling period, the limit was lowered to £150 from February 2025. These checks were designed to operate with what the UKGC described as “minimal friction”, something betting stakeholders have been adamant is an absolute necessity.

During stage one of the pilot, around 95% of financial vulnerability assessments were completed what the UKGC described as frictionlessly, which then rose to 97% in stage two. These figures exceed the 80% frictionless completion rate estimated in the 2023 Government White Paper.

Black market concerns
The news comes in the midst of industry demands to see greater consistency when it comes to financial risk checks. Concerns that these checks could turn more gamblers towards black market betting if not carried out in a frictionless and simple manner are long-running, dating back to the initial conversation around affordability during the 2020-2023 review of UK gambling regulation.

BGC CEO Grainne Hurst recently explained on SBC’s Safe Bet Show podcast that obstacles such as this wouldn’t see customers stop using the products they like, they’ll just decide to stop using the products they like in the regulated sphere, and they’ll go elsewhere to get those products.

She added: “In the black market, where there’s no regulation, they pay no tax, there’s no player protection whatsoever.”

Meanwhile, the UKGC has previously reiterated that finance risk checks’ should not be considered ‘affordability checks’.

In May, the Commission explained: “Financial risk assessments would be a much more targeted way of identifying potentially financially vulnerable customers. They would not affect a customer’s credit score if they were introduced in the future.”

A turning point?
What sets this new approach apart, Rhodes emphasised, is that it avoids blanket affordability checks. Rather than testing if every punter can afford their spending, the Commission’s model hones in on those who may already be financially at risk.

The goal is not to interfere with the vast majority of players who gamble safely, but to step in early where harm is most likely, the Director asserted.

In stage two of the recent pilot, around 3% of assessments could not be matched, improving on the 5% unmatched rate seen in stage one. Both percentages are significantly lower than the 20% rate without frictionless assessments predicted in the White Paper.

Having now moved into the analysis phase, the Financial Risk Assessments are designed to identify a specific group of customers: those who are not only spending large amounts, but also showing signs of worsening financial distress.

This can include red flags such as multiple arrears, defaults or evidence of bankruptcy.

Continuing her speech, Rhodes said: “The pilot findings represent a significant step forward, and our analysis phase will enable us to further explore how operators could embed assessments into their overall customer interaction approaches and how to reduce unnecessary inconsistency between credit reference agency reports.”

Looking ahead, the Commission is analysing how these financial checks can be embedded more smoothly into the customer journey.

Rhodes was keen to stress that the regulator remains open to industry feedback, mentioning that nearly 1,000 responses were submitted during the consultation.

By anchoring its reforms in financial vulnerability rather than broad affordability, the Commission is signalling a more balanced and targeted approach, making financial vulnerability checks no longer “an afterthought”.

Read more

GamCare to end gambling harm prevention programme for Under-18s

Steve Hoare0148 views

GamCare will no longer operate its gambling harm prevention and education programme for children and under-18s in Britain.

The treatment support charity has announced the “difficult decision” to end its specialist Young People’s Programme, which will be shut down by the end of September 2025. The decision was taken due to a lack of sustainable funding.

The charity informed the media that:
“From October 2025, GamCare will no longer provide education, prevention or outreach programmes aimed at reducing gambling harm experienced by children and young people, nor will it offer specific treatment and support services for under-18s.”

GamCare has operated its Young People’s Programme since 2020, helping to support and educate over 250,000 children, young people, and stakeholders within local communities.

The closure of the programme will not impact GamCare’s core treatment services, which continue to provide frontline support and resources for individuals experiencing gambling addiction or those harmed by someone else’s gambling.

The National Gambling Helpline (Freephone 0808 8020 133) will continue to offer dedicated support for children and under-18s, with trained advisors providing specialist assistance.

Regarding wider policy development on gambling protections for under-18s in the UK, GamCare confirmed it will maintain its Youth Advisory Board, “to ensure young people’s voices continue to inform our work.”

GamCare’s core focus will remain the provision of high-quality, accessible support to the thousands of people who use its services each year—both those struggling with gambling directly and those affected by someone else’s gambling.

While GamCare’s direct youth education and outreach services will cease, dedicated education and early-intervention support for children and young people will continue to be available through the Young Gamers and Gamblers Education Trust (YGAM).

YGAM delivers evidence-based programmes to help prevent gaming and gambling harms among those aged 7 to 24, alongside training for teachers, youth workers, and parents. Its work is central to the UK’s national Gambling Education Framework and continues to play a vital role in safeguarding younger audiences from gambling-related risks.

New Leadership and Strategic Direction

2025 also sees GamCare begin a new chapter under the leadership of Victoria Corbishley, former UK Director at the British Red Cross. Corbishley takes on the role of CEO at a pivotal moment for all organisations involved in the prevention and treatment of gambling harms.

Her appointment coincides with the implementation of a new statutory RET (Research, Education and Treatment) Levy, expected to be applied from 1 April 2025.

The new system will see the NHS, alongside the newly established Prevention Commissioner and the Office for Health Improvement and Disparities (OHID), serve as the primary stewards of the Levy’s guaranteed £100 million in annual funding for programmes across British communities.

Irrespective of these structural changes, GamCare will continue to uphold its mandate to expand the accessibility of treatment services for those seeking help. Furthermore, the charity remains committed to its collaborative efforts to raise awareness of gambling harms across communities and businesses, recognising them as both a social disorder and a mental health issue.

Read more

GambleAware community fund hits £2.2m milestone in final phase

Steve Hoare0155 views

GambleAware has distributed £2.2m through its Community Resilience Fund (CRF) since its launch in 2022, specifically targeting rising vulnerability linked to the ongoing cost-of-living crisis.

The fund marked the charity’s first open funding initiative available to organisations outside the traditional gambling harms sector, with a strong focus on underserved communities. It is now in its final phase of delivery.

Immense impact
The charity has released a new independent evaluation by Ipsos which highlights the fund’s reach, particularly in marginalised and ethnic minority communities disproportionately affected by gambling harm.

So far, almost 14,000 people have been supported through awareness campaigns and early intervention efforts, with the fund providing 12-month grants to 12 grassroots groups.

Many were first-time recipients, using funds to raise awareness and offer early intervention. After reporting strong results, GambleAware then extended support with £1.66m to 11 projects – showing high impact and long-term potential.

Anna Hargrave, Deputy Chief Executive and Chief Commissioning and Strategy Officer for GambleAware, commented: “The effects of gambling harm can grip anyone, and having grassroots, community focused organisations that can reach individuals at risk, is vital.

“The Community Resilience Fund is here for that very reason, so that we can reach the people who need support most. We’re really pleased that funded projects have been able to reach thousands of people, especially those from underrepresented communities who might not otherwise seek support.”

Some of the aforementioned projects consisted of; Al Hurraya, Big Issue Foundation, Blackburn Foodbank, Coram’s Field, Epic Restart Foundation, Hull FC Rugby Community Sports and Education Foundation, Prison Radio Association, Reframe Coaching, Sharma Women’s Centre, Simon Community Scotland and Yellow Scarf.

Hargrave emphasised that it is “hugely important” that there is recognition of the sector’s growing shift from fragmented services to whole-system responses.

She added: “The protection against gambling harms requires joint ownership across public health, lived experience, communities, and systems.”

What has been done?
Looking at Blackburn Foodbank for example, GambleAware gave a grant of up to £100,000 as part of the initial £1.2m CRF allocation, which helped integrate gambling harm awareness into the organisation’s existing services.

Meanwhile, GambleAware also partnered with Yellow Scarf to expand blocking software to include Ukrainian, Polish, and Russian versions, making it accessible to vulnerable Eastern European migrants who often face language barriers.

Additionally, at the Prison Radio Association, the charity enabled the production and distribution of the podcast series Hold or Fold which delves into the impacts of problem gambling via personal stories.

Finally, at Al Hurraya, a Nottingham-based charity which focuses on assisting Black, Asian and Minority Ethnic communities dealing with addiction and related issues, the funding enhanced services and provided support to individuals affected by gambling harms.

Manjit Bajwa, Al-Hurraya Operations Manager and CRF Project Manager, concluded: “We are deeply committed to raising awareness and reducing harm associated with gambling. We’ve been fortunate to work closely with our communities, offering both individual counselling and crucial family support.

“We greatly appreciate the chance to share best practices and learning with our esteemed partners, including EPIC Restart Foundation and Shama Women’s Centre in the East Midlands, as part of the CRF Project.”

Read more

Lack of sustainable funding sees GamCare close Young People’s provision

iGamingExpert0157 views

GamCare has announced that it will no longer provide its Young People’s provision services later this year due to a lack of sustainable funding.

At the end of September, GamCare will stop providing education, prevention or outreach programmes aimed at reducing gambling harm experienced by children and young people, or its specific treatment and support offer for under-18s.

The gambling harm support provider has been offering these services for children and young people for more than half a decade.

“For over five years, GamCare has delivered harm prevention programmes which have reached over 250,000 children and young people, parents, and professionals across the UK,” stated GamCare.

“Due to a lack of sustainable funding, GamCare has made the difficult decision to close its Young People’s provision at the end of September 2025.”

Statutory levy

Back in April, the UK Government implemented the new statutory levy on the gambling industry, which replaced the previous system of voluntary industry contributions.

Through the levy, up to £100m per year is expected to be raised, which will be collected and administered by the UK Gambling Commission (UKGC) under the strategic direction of the UK Government.

To generate funding for the levy, operators will be charged a percentage of their gross gambling yield from the previous year. These percentages are 1.1% for online operators, 0.5% for casinos and bookmakers and 0.2% for bingo operators.

Splitting up the levy funding, 20% will go to the Research Commissioner, UK Research and Innovation, to research to establish a bespoke Research Programme on Gambling, as well as the UKGC, to direct further research in line with licensing objectives.

The Prevention Commissioner, Office for Health Improvement and Disparities (OHID), will receive 30% of the levy funding. OHID will develop a comprehensive approach to prevention and early intervention.

Meanwhile, 50% of the levy funding will go to the Treatment Commissioner, NHS England and relevant bodies in Scotland and Wales, who will commission treatment and support services in collaboration with the third sector.

Support still available for young people

GamCare added that while specialist services for young people will come to a halt later this year, its Youth Advisory Board will continue to operate to make sure that young people’s voices continue to inform its work, adding that it “remains committed to reducing gambling harm and none of our other services are affected by this change”.

“Children, young people and their families can still seek support by contacting the National Gambling Helpline on Freephone 0808 8020 133 or via live chat, available 24/7, and we will signpost them to the appropriate support for their circumstances,” noted GamCare.

“GamCare’s core focus will continue to be the provision of high-quality, accessible support to the thousands of people who come through our services each year, both those who are struggling with gambling directly as well as those who are affected by someone else’s gambling.”

Read more

UK Gambling Commission fines Fafabet £170,000 for T&Cs failures

iGamingExpert0162 views

The UK Gambling Commission (UKGC) has issued a £170,000 fine to Taichi Tech Limited, which trades as Fafabet, for regulatory failures, including the use of unfair terms and conditions.

Taichi Tech, which has been licensed by the Commission since February 2021, will also be subject to a third-party audit to check that it is complying with anti-money laundering and safer gambling policies, procedures and controls.

The UKGC investigation once again raises the issue of fair, clear and transparent terms and conditions by operators following the High Court case involving Paddy Power earlier this year.

T&Cs lacked transparency

According to the investigation, the UKGC discovered that Taichi Tech contained the following statement within their bonus terms for new casino promotions:

“Fafabet have the right at their own discretion to close accounts or forfeit winnings.”

The Commission concluded from its investigation that Taichi Tech breached the fair and open licensing condition by “including a discretionary term allowing the operator to close customer accounts or forfeit winnings without clear justification”, adding that these kinds of terms “lack transparency and may lead to unfair outcomes for consumers”.

The UKGC noted that the Licence Conditions and Codes of Practice (LCCP) that operators must abide by refer to the general consumer protection legislation of the Consumer Rights Act 2015 (CRA).

The LCCP states that licensees must ensure their terms and practices are “fair, clear, and do not breach consumer protection law” and so “must therefore have regard to the CRA as part of their overall compliance obligations under the LCCP”.

John Pierce, Director of Enforcement and Intelligence at the Gambling Commission, said: “We expect all operators — regardless of their size or customer base — to comply with consumer protection legislation and ensure their terms and conditions meet regulatory standards.

“Licensed operators must ensure their terms are clear, fair, and transparent, so customers fully understand what to expect.”

AML and social responsibility failures

The UKGC noted that its investigation also discovered AML and social responsibility breaches, including failures to “effectively manage risk and implement adequate consumer protection measures”.

These failures included some customers gambling large sums in a short period despite the operator holding limited customer information, individuals exhibiting potential markers of harm (such as high-velocity spending over short periods) being given “insufficient customer interaction from the operator”.

In addition, the Commission noted that the operator didn’t further follow-up or intervene with customers they had sent safer gambling emails to but who didn’t respond and their concerning behaviour continued.

In response, the UKGC stated that Fafabet “acknowledged that it previously fell short of the standards expected” and has since “taken steps to address these shortcomings”.

Fafabet is required to commission an independent third-party audit to assure ongoing compliance with all relevant regulatory requirements as part of the regulatory outcome.

Operator T&Cs highlighted again

Fafabet’s fine from the UKGC is another reminder that operators must make sure that their terms and conditions are fair, clear and transparent.

Back in March, Paddy Power lost a High Court case and was ordered to pay customer Corrinne Pearl Durber compensation of £1m in relation to a disputed pay-out of a “Monster Jackpot.”

Durber was denied a jackpot of £1.097m that she won on the slot game Wild Hatter with the operator, who opted instead to only initially pay her £20,000 due to what they claimed to be a “software error” which caused an incorrect display.

The court ruled in favour of Durber, stating that the rules advertised to customers should take precedence over the company’s terms and conditions, noting that Paddy Power’s “terms were not clearly signposted”.

The court added that Clause B1 – which stated that, in the event of a discrepancy between the screen display and the server records, the server records would be definitive – was “buried in 44 pages of dense text” and was an unfair contract term that granted absolute power to the defendant to override errors while excluding the customer’s right to challenge them.

Read more

Meta faces criticism over gambling ad transparency

Steve Hoare0139 views

Meta is facing renewed scrutiny over the advertising policies of its social media platforms, as digital rights campaigners accuse Facebook and Instagram of placing disproportionate restrictions on adverts highlighting gambling-related harms.

The criticism stems from a new report by UK-based digital rights advocacy group, Open Rights Group (ORG), titled “Profiling by Proxy: How Meta’s Data-Driven Ads Fuel Discrimination.”

As reported by iGaming Expert, Meta’s platforms treat public health messaging as political content, triggering heightened transparency rules, while gambling advertisers often bypass comparable oversight.

“Meta requires more transparency about adverts that highlight the harms of gambling than about adverts that promote gambling,” the report states.

The classification of harm-focused ads as political content subjects campaigners to stricter compliance standards, such as identity verification and public disclosure via Meta’s Ad Library.

Meanwhile, commercial gambling ads—including those promoting “social casino” games—are subject to less scrutiny unless they fall into restricted product categories.

ORG’s findings raise red flags around user privacy, especially for vulnerable groups. Through tools like the Meta Pixel, platforms collect extensive behavioural data to construct detailed user profiles, allowing advertisers to micro-target users based on inferred traits. These profiles can reveal addictive behaviors, financial hardship, or mental health vulnerabilities—data points that campaigners argue should never be used to deliver targeted gambling ads.

The timing of the report is significant. In early 2025, the UK High Court ruled in favour of a former problem gambler who accused Sky Bet of unlawfully targeting him using cookies and third-party data. The case reignited calls for tighter ad regulations, particularly as digital platforms become more influential in shaping consumer behaviour.

Responding to these concerns, the UK Gambling Commission (UKGC) enacted new marketing standards in May 2025. Operators are now required to offer users clear opt-in choices for the types of gambling promotions they receive and through which channels.

As regulators tighten oversight on gambling operators, pressure is mounting for Big Tech to fall in line and take accountability of the matter.

Read more

UK charity protects next generation from gambling harm

Steve Hoare0166 views

Gambling harm charity Ygam reached a record number of young people for the year between January 2024 and March 2025.

The organisation’s 10-year anniversary activity report highlighted that it reached approximately 1.3 million children and young people across the UK within that year alone – the highest number since its inception in 2014.

Ygam also reported that it simultaneously managed to provide gambling harm prevention and treatment education to around 10,000 delegates.

In order to ensure its long-term sustainability and inform its future prevention strategy, the charity had also commissioned data-driven evaluation of four of its flagship programmes as part of the report.

Results have shown that Ygam continues to be a trusted partner for problem harm prevention among youth-centric institutions, fostering partnerships with schools, universities, and community groups, among others.

Some of the high profile brands that the charity is working with include The Scouts, NSPCC, The Children’s Society, TSB Bank, Place2Be, and Barnardo’s.

Ygam finds success in education engagement
Continuing with the highlights from the report, Ygam saw 50% of teachers and youth workers implementing the charity’s educational materials in their classrooms within 12 months of completing their training.

Between January 2024 and March 2025, Ygam representatives managed to visit a total of 50 universities across the UK, with around 115,000 university students increasing their knowledge of problem gambling harm.

This is a timely development given last year’s Ygam and GAMSTOP study where it was revealed that 28% of UK students were at risk of problem gambling.

On the digital front, Ygam reached a total of 4.1 million social media impressions between January 2024 and March 2025, which constituted a 322% increase from 2023.

The success of the charity was commemorated by Gambling Minister Baroness Twycross, who said: “I welcome this report, which highlights Ygam’s vital role in educating more than one million young people on how to lead safer digital lives.

“One of my key priorities as gambling minister is to strengthen protections around those most vulnerable to harmful gambling and I look forward to collaborating with Ygam in future as we continue to build a safer online space for young people.”

Ygam and all other gambling charities like it are now operating in a revamped UK market thanks to a new research, education, and treatment (RET) statutory levy mandated by Twycross.

All UK-based gambling businesses will be subjected to mandatory RET contributions, with the first payment scheduled for 1 October. The exact amount will be calculated based on a percentage of a company’s GGR or its equivalent, with 1.1% of GGR for all online operators and 0.1% for pool betting licences.

A total of 50% of the collected funds will be syphoned into NHS England and its Scottish and Welsh counterparts, 30% will go to funding problem gambling prevention strategies, while 20% of the RET levy will be given to gambling harm research.

Read more