Contenido
A player I know well switched entirely to Bitcoin deposits at offshore casinos in 2024. His reasoning was simple: no bank flags, no card declines, no paper trail. When I asked him about the DGOJ’s enforcement capability against crypto gambling, he laughed. He wasn’t wrong to — at least not yet. The crypto gambling market is projected to exceed 65 billion dollars by 2026, and the regulatory infrastructure to monitor it is still catching up to the scale of what’s already happening.
Why Cryptocurrency Creates Enforcement Gaps for the DGOJ
The DGOJ’s enforcement model relies heavily on financial infrastructure. Mikel Arana, the DGOJ’s Director General, has stated that the regulator now has data on credit card payments to all gambling operators, using that information to check whether payments flow to legal or illegal operators. This payment monitoring is effective for card and bank transfer transactions because they pass through intermediaries — banks, card networks, payment processors — that the DGOJ can monitor and, when necessary, compel to block transactions.
Cryptocurrency bypasses every one of those intermediaries. A Bitcoin transaction moves directly from the player’s wallet to the casino’s wallet. No bank processes it. No card network logs it. No Spanish payment processor handles it. The transaction exists on the blockchain — publicly visible but pseudonymous, meaning the DGOJ can see that money moved but can’t easily connect the wallet addresses to specific individuals without additional investigation. The DGOJ blocked 229 portals covering 2,961 web pages in 2025, but blocking a domain is irrelevant when the casino’s smart contract lives on a blockchain that can’t be taken offline by any single authority.
Bitcoin accounts for roughly 66% of crypto gambling volume, followed by Ethereum at 9% and Litecoin at 6%. The remaining share is split across dozens of altcoins and stablecoins. Each cryptocurrency has different privacy characteristics: Bitcoin is pseudonymous but traceable through blockchain analysis. Privacy coins like Monero are designed to obscure transaction details entirely. The more privacy-focused the cryptocurrency, the harder the enforcement challenge becomes.
The Tax Documentation Problem for Crypto Gambling Winnings
Spanish tax law requires declaring all gambling winnings regardless of the payment method used. A player who wins 5,000 euros worth of Bitcoin at an offshore casino owes IRPF on that gain just as they would on a card-funded win at a DGOJ-licensed site. The law is clear. The compliance mechanism is absent.
At a licensed casino, the operator generates year-end summaries of player activity that feed directly into the IRPF calculation. At a crypto casino, the player is responsible for maintaining their own records: wallet addresses, transaction hashes, amounts in euros at the prevailing exchange rate on each transaction date, and the distinction between gambling gains and cryptocurrency capital gains. Most players don’t maintain these records. Many don’t know they need to. The Agencia Tributaria’s increasing focus on cryptocurrency transactions means that historical non-compliance — years of unreported crypto gambling — could surface during future audits, with penalties and interest accumulating retroactively.
Player deposits in Spain’s regulated market reached 4,322.46 million euros in 2025, all flowing through documented channels. The portion of gambling activity that flows through cryptocurrency is undocumented by design. This creates a growing gap between actual gambling activity and reported gambling activity — a gap that the Agencia Tributaria is aware of but doesn’t yet have the tools to close comprehensively. The DGOJ has acknowledged the challenge, noting that new strategies for monitoring bitcoin gambling operations are being developed.
How Crypto-Only Casinos Exploit the Monitoring Gap
A new category of offshore casino has emerged in the past three years: the crypto-only platform. These operators accept no fiat currency at all — deposits and withdrawals happen exclusively in cryptocurrency. By eliminating the fiat-to-crypto conversion point, they remove the last connection to the traditional financial system that regulators can monitor. No bank ever sees the transaction. No payment processor logs it. The player’s banking relationship remains clean of any gambling-related activity.
Some of these crypto-only casinos operate without any gambling licence — not even a Curaçao CGA licence. They exist on the blockchain as smart contracts or decentralised applications, with no identifiable corporate entity, no registered address, and no jurisdiction that claims oversight. If the operator disappears with player funds, there’s no regulator to complain to, no company to sue, and no country whose laws apply. The player’s only recourse is whatever reputation-based trust system the crypto gambling community has built around that particular platform.
The growth trajectory of these platforms is steep. DeFi gambling protocols — decentralised finance applications that automate the casino’s function through smart contracts — have emerged as a category that didn’t exist three years ago. The smart contract holds the house bankroll, processes bets, and distributes payouts algorithmically. There’s no customer support because there’s no company. There’s no dispute resolution because there’s no human decision-maker. The code is the casino, and if the code has a flaw or a backdoor, the player’s funds are at risk with no institutional recourse.
The irony is that the same blockchain transparency that makes cryptocurrency traceable in theory makes it opaque in practice for regulatory purposes. The DGOJ can analyse blockchain data, but connecting wallet addresses to Spanish residents requires intelligence capabilities beyond what gambling regulators typically possess. Law enforcement agencies have blockchain analysis tools, but deploying those resources for gambling regulation competes with higher-priority use cases like money laundering and terrorist financing investigations. The tax implications for crypto gambling winnings are clear in law but difficult to enforce, and that gap between legal obligation and practical enforcement is exactly what crypto-only casinos exploit. As the European regulatory landscape evolves — with MiCA and other frameworks bringing cryptocurrency transactions closer to mainstream financial oversight — the enforcement gap will narrow, but it won’t close quickly enough to address the current scale of the problem.
FAQ
Can the DGOJ trace cryptocurrency gambling transactions to individual players?
The DGOJ can monitor blockchain transactions using analysis tools, but connecting pseudonymous wallet addresses to specific Spanish residents requires additional intelligence work beyond standard regulatory capabilities. Bitcoin transactions are publicly visible on the blockchain but don’t contain personal identifying information. Privacy-focused cryptocurrencies like Monero are designed to resist this type of analysis entirely.
Do crypto-only casinos need a gambling licence to operate?
Any casino offering services to Spanish players requires a DGOJ licence regardless of the payment method used. In practice, crypto-only casinos typically operate without any gambling licence, and some exist as decentralised applications with no identifiable corporate entity or jurisdictional anchor. The absence of a licence means no regulatory oversight, no player protection mechanisms, and no recourse for players if the operator fails to honour withdrawals.