title: Spain — Enforcement: How hard does the regulator enforce? | advennt.io canonical: https://advennt.io/jurisdictions/spain/enforcement/ [Jurisdictions](https://advennt.io/jurisdictions/) [Spain](https://advennt.io/jurisdictions/spain/) Enforcement Spain · Question 10 of 11 # Enforcement: How hard does the regulator enforce? Mixed · Confirmed · Not reviewed · changed since expert review · 2 post-review updates · Not reviewed · In expert review scope · [Back to full Spain report →](https://advennt.io/jurisdictions/spain/) Key section parameters | Jurisdiction | Spain (ES) | |---|---| | Regulator | DGOJ | | Favourability | Mixed | | Confidence | Confirmed | | Review status | Not reviewed · changed since expert review · 2 post-review updates · Not reviewed · In expert review scope | | Last collected | 18 Oct 2026 | Summary answer The dominant enforcement development this cycle is a confirmed, Tier-1-sourced action against 888 Online Games España, SA, fined two penalties of €275,976 each (€551,952 total) plus a public reprimand for failing continuous business-relationship monitoring (article 6) and special-examination duties … Not reviewed Information added after the 2 Sep 2026 expert review — published for currency and labelled not reviewed. 12 Oct 2026 Not reviewed A DGOJ resolution published via the BOE mandates new technical specifications for harm-warning messages on losses and problem gambling that must accompany all gambling commercial communications, replacing the prior "play responsibly" slogan. Existing advertising contracts may run unadapted for three months, and the resolution becomes effective roughly sixty days after BOE publication. This finding is sourced via specialist gambling trade press summarising the BOE publication; the underlying BOE text was not independently retrieved, so the precise effective date and scope should be read with that caveat in mind. No enforcement event against a named operator, licence suspension, or revocation action was evidenced. The development represents a tightening of mandatory advertising content rather than a new enforcement power or a change to the DGOJ's existing sanctioning authority under Ley 13/2011. 28 Sep 2026 Not reviewed DGOJ combined first-half and second-half sanctions reached approximately EUR142 million this year, reported by secondary commentary as the largest annual enforcement total in the regulator's history, concentrated on very-serious-offence fines against unlicensed supply. This aggregate derives from secondary-source commentary; named individual DGOJ sanctioning resolutions were not independently retrieved this period. The DGOJ's standing enforcement powers under Ley 13/2011 are unchanged: administrative fines of up to EUR50 million, licence revocation, accessory sanctions, public naming, and blocking orders against unlicensed operators, ISPs and payment processors. Under the civil-law enforcement-theory lens, unlicensed supply in Spain is an offence under the gambling statute itself rather than a secondary licence-breach theory, reinforced by DNS/IP and payment-blocking mechanisms; no dedicated safe-harbour doctrine is evident. The enforcing instrument stack runs from the durable enabling Act (Ley 13/2011) down through implementing decrees, with the record sanctions total signaling a durable shift toward more assertive enforcement against unlicensed operators rather than a one-off spike. ## Full section analysis The dominant enforcement development this cycle is a confirmed, Tier-1-sourced action against 888 Online Games España, SA, fined two penalties of €275,976 each (€551,952 total) plus a public reprimand for failing continuous business-relationship monitoring (article 6) and special-examination duties (article 17) under Ley 10/2010, published in the Boletín Oficial del Estado. This is the first AML-driven sanction against a DGOJ-licensed gambling operator observed in this dataset, evidencing that AML execution failures are a live enforcement vector within the licensed sector itself, not only against unlicensed offshore operators. On the sanctions available, the four-year activity ban is a statutory ceiling rather than a standard outcome: counsel confirms it operates as a maximum, and DGOJ's 2024 practice against unlicensed offshore operators ran to two-year bans alongside fines of up to €10 million. The apparent conflict between the four-year figure and the two-year bans observed in practice is therefore a ceiling-versus-practice distinction, not a data error. Separately, a probable-confidence report describes a Q1 2026 sanctions package totalling €10,290,500 against nine online gambling-sector companies, including two €5,000,000 fines on unlicensed foreign operators; this rests on secondary trade press rather than a directly retrieved DGOJ resolution and should be read with that sourcing caveat. Both enforcement threads rely on durable primary legislation, Ley 10/2010 and Ley 13/2011 respectively, as their statutory basis, so the underlying legal authority for enforcement is stable even where individual sourcing confidence varies. Operators should treat the 888 Online Games action as confirmation that continuous monitoring and special-examination compliance are active DGOJ and financial-supervisory priorities.