GRAI Enforcement Powers: Fines, Licence Suspension and What Happens to Unlicensed Sites

The Gambling Regulatory Authority of Ireland was given meaningful enforcement powers under the Gambling Regulation Act 2024. This was a deliberate departure from the previous, largely voluntary regulatory regime. This page explains exactly what GRAI can do when operators break the rules — and what it means for unlicensed sites targeting Irish customers.

Financial Penalties: Up to €20 Million

The headline enforcement power is financial. Under the Gambling Regulation Act 2024, GRAI can impose administrative financial sanctions of up to:

• €20 million, or
• 10% of the operator's annual worldwide turnover in the preceding financial year

— whichever is the greater of the two figures.

For large international operators, 10% of worldwide turnover will often exceed €20 million, making the actual penalty cap potentially very large. This structure — matching the approach used in EU data protection fines under GDPR — is designed to ensure penalties are proportionate to operator size rather than being easily absorbed as a cost of doing business.

Financial penalties at this level place Ireland in the same tier as the UK Gambling Commission (UKGC), which has issued penalties in the tens of millions of pounds against major operators. The GRAI has signalled it intends to use these powers actively, not hold them in reserve.

Licence Suspension and Revocation

Financial penalties are one tool; licence action is another — and potentially more powerful. GRAI can:

• Issue a compliance notice requiring an operator to remedy a specific breach within a set period.
• Suspend a licence on a temporary basis while an investigation is ongoing or while an operator is required to implement remedial measures.
• Revoke a licence entirely for serious, repeated or deliberate breaches.
• Impose conditions on a licence — for example, restricting the types of products an operator can offer, or requiring enhanced monitoring.

Licence suspension or revocation is a severe sanction — it means the operator must stop serving Irish customers entirely. For operators that derive significant revenue from Ireland, this is a potentially business-ending enforcement action.

In urgent cases where there is an immediate risk to consumers — for example, evidence that an operator is in financial difficulty and not protecting customer funds — GRAI can take emergency suspension action without the usual notice period. Operators have a right of appeal against enforcement decisions.

Criminal Offences and Prosecution

Beyond administrative enforcement, the Gambling Regulation Act 2024 creates criminal offences. Operating gambling services in Ireland without a GRAI licence is a criminal offence. This means:

• Individuals who run unlicensed gambling operations can face criminal prosecution.
• Companies operating without a licence face criminal liability alongside any administrative penalty.
• Facilitating unlicensed gambling — for example, as a payment processor or technical provider — can also create criminal exposure.

Criminal prosecution is a tool of last resort for the most serious cases, particularly targeting operators who repeatedly ignore GRAI enforcement or who operate in clearly illegal ways.

Powers Against Unlicensed Sites

Enforcing against operators who have no Irish presence is inherently more difficult than enforcing against licensed operators. The Act gives GRAI a toolkit for this:

• Court injunctions: GRAI can apply to the Irish courts for an injunction requiring an unlicensed operator to cease providing gambling services to Irish customers. These orders are legally binding and enforceable through contempt proceedings.
• ISP and payment blocking: GRAI can seek court orders requiring Irish internet service providers to block access to unlicensed gambling sites, and requiring payment processors to refuse transactions with unlicensed operators. This is a significant new power.
• Advertising prohibition: GRAI can direct Irish media organisations and advertising platforms to cease carrying advertising for unlicensed operators, and can seek enforcement action against those that continue to do so.

These tools will develop in effectiveness over time as GRAI builds its enforcement capacity. In the meantime, the practical enforcement gap against determined offshore operators is acknowledged as a limitation of any national regulatory regime.

Transparency and Public Enforcement Register

GRAI publishes details of formal enforcement actions on grai.ie. This creates a public register of regulatory decisions that serves multiple purposes: deterrence (operators know breaches will be publicised), consumer information (players can check whether an operator has had enforcement action against it), and accountability (GRAI's enforcement approach is visible to scrutiny).

This transparency is modelled on UKGC practice, where published enforcement notices have become an important part of the regulatory landscape.

How This Compares to the Previous Regime

Before the Gambling Regulation Act 2024, gambling regulation in Ireland was fragmented: the 1956 Gaming and Lotteries Act, the Betting Act 1931, and various amendments created a patchwork with significant gaps, particularly for online gambling. Enforcement powers were limited and largely ineffective against online operators.

The new regime represents a step-change. The €20m/10% penalty cap, licence revocation powers, criminal offences for unlicensed operation, and ISP blocking tools together create a materially stronger enforcement framework than previously existed. Whether GRAI uses these powers consistently and at scale is now the key question — and one that will only be answered by its track record over the coming years.

For the full picture: GRAI licence explained — Ireland's gambling regulator guide.

Frequently Asked Questions