Isle of Man GSC Issues AML Guidance V1.4 With B2B and Group Focus

The Isle of Man Gambling Supervision Commission (GSC) has issued version 1.4 of its AML guidance for gambling operators, dated to 10 November 2026 by trade outlets, with greater weight on risks that reach operators through suppliers, partners and corporate groups.

The GSC's anti-money laundering guidance page now lists "AML/CFT Guidance for Gambling Operators V1.4". AML/CFT stands for anti-money laundering and countering the financing of terrorism. The GSC supervises compliance with the Isle of Man's Gambling Acts and the Gambling (Anti-Money Laundering and Countering the Financing of Terrorism) Code 2019, and the guidance sits under that framework.

What V1.4 changes for operators

The headline shift is a sharper look at business-to-business (B2B) relationships. According to TheGamblest and Sigma, the update puts more emphasis on B2B relationships, corporate structures and ownership transparency. The relationships they list as areas of concern are operators, software suppliers, technology providers and companies in the same corporate group.

TheGamblest also says the update clarifies existing expectations and adds no new legal requirements. Jamma, the Italian trade outlet, says a central element is clarification of the risk-based approach, under which operators match the intensity of their controls to the risks they face.

The GSC's page also lists separate guidance for software suppliers, shown as V1.4, as well as documents covering virtual assets and goods and OGRA licence holders with network services permissions (V1, November 2025). OGRA refers to the Online Gambling Regulation Act. Suppliers and hosting providers should check their own documents alongside the operator text.

The risk assessment behind the update

Trade reports connect V1.4 to the GSC's money-laundering risk assessment for gambling, published on 24 February 2026. That assessment gave the sector the following ratings.

Among its key takeaways was criminal ownership or control of gambling businesses or B2B services through front companies and complex corporate structures. The GSC told operators to update their business risk assessments to reflect the findings and to consider whether customer and technology risk assessments also need revising. TheGamblest and Sigma add that the assessment flagged organised crime groups, particularly from East and Southeast Asia, targeting online operators and B2B suppliers, along with cross-border payments and opaque ownership.

What operators should do now

According to Jamma, operators must review the new text, check whether their AML/CFT systems need adjusting, and make any changes as soon as reasonably possible. In practice, that points to a few workstreams:

• Re-map B2B relationships, including software suppliers, technology providers and affiliated group companies, against the business risk assessment.
• Check that ownership and control information for counterparties can be evidenced, including where structures cross borders.
• Confirm that customer and technology risk assessments still reflect the February findings.
• Brief boards and compliance officers on the changes so the update is recorded in governance papers.

Context from earlier GSC activity

The update continues a run of AML-related activity on the island. Gamingo reported on an earlier GSC AML/CFT guidance update in October 2025, and on the Isle of Man Financial Intelligence Unit's warning to the online gambling industry in May 2025. Enforcement activity has also featured, as in the raids on Isle of Man iGaming firms reported in March 2025. For a comparison with another European regulator's approach, see our coverage of Spelinspektionen's anti-money laundering guidance update.

Status reviewed on 12 November 2026. Version numbers and risk ratings come from the GSC's guidance page and its February 2026 risk assessment announcement; the scope of the update is as reported by TheGamblest, Sigma and Jamma. More regulation news and EMEA coverage.