The Dutch KSA has spent the summer of 2026 making it very clear that the light-touch phase of the Kansspelautoriteit is over. Two years after the €300 default deposit limit and the Cruks self-exclusion register both went live, the regulator has moved from writing rules to enforcing them, and the operators unlucky enough to be first in line have been paying serious money to learn the lesson.
The audit round
Every KSA-licensed operator has been through an on-site or documented audit in the last twelve months, focused on three things: deposit-limit enforcement, Cruks-check reliability, and marketing conduct. The audits are not spot checks; they are structured against a published rubric with a red-amber-green scoring system. Ambers get a corrective-action window; reds get a fine and, in the worst cases, a suspension.
Fines already handed down
Two operators have taken seven-figure fines in the last four months, both for the same core failure: allowing deposits above the €300 default limit without a documented affordability check, in some cases stretching to five-figure single deposits. A third operator has taken a smaller fine for a Cruks-check lag that let a self-excluded player back into the funnel for six hours after registration. The regulator has published each case in some detail, and the language is unusually specific about which processes failed.
Marketing crackdown
The 2024 general advertising ban has been reinforced with a set of interpretations that pull in a great deal of what used to be defensible. Sports sponsorship packages have been unwound, affiliate creatives that lean on lifestyle imagery have been banned, and any communication that could plausibly reach a Cruks-listed individual is treated as a serious breach. Two large affiliates have withdrawn from the Dutch market entirely rather than adjust.
What players are seeing
Three things in the daily experience. First, the deposit-limit override screen is now more visible and asks for actual affordability confirmation, not just a checkbox. Second, the Cruks check runs at login and again at deposit, so a same-day self-exclusion becomes effective within minutes, not on a next-day sync. Third, the promotional emails that used to leak into inboxes have gone very quiet.
Verdict
The Netherlands remains one of the strictest online markets in Europe, and the KSA's enforcement lane means it is going to stay that way. From a player-safety perspective this is a positive story. From a market-competitiveness perspective it is going to produce more operators exiting or consolidating, and probably a further nudge in the offshore direction for a subset of players who are unhappy with the deposit limits.
