17. KYC, AML, and Player Verification: What Casinos Ask and Why

It starts like this: you hit a nice win, click Withdraw, and the status says “Pending.” An email lands in your inbox. It asks for your ID, a bill, maybe even bank slips. Your cash now waits on KYC. This guide tells you what they ask for, why they ask, and how to pass fast without stress. It also shows what to do if things stall, and who can help.

The short answer before you upload anything

Online casinos check who you are, where you live, and where the money comes from. This is KYC and AML. It is law for them, not a whim.

Have a valid photo ID: passport, national ID, or driver’s license (front and back).
Have a proof of address: a utility bill or bank statement from the last 3 months.
Show you own the payment method: the same card, e-wallet, or bank account you used.
For larger sums or risky patterns: show Source of Funds (SoF) like payslips, tax return, or sale papers.
Use the same name on the account, ID, and payment method. Do not switch payout method last minute.
Send clear color scans or photos. No glare. All four corners must show.

Why casinos verify you now (and did not push so hard years ago)

Rules got strict. Fines got large. Fraud rose. So did chargebacks and account takeovers. Regulators told firms to “know your customer,” track risk, and stop money laundering. A casino that ignores this can lose its license. Your win is real, but payout must wait until checks clear.

The main line is set by global bodies. See the FATF Recommendations on AML. Banks and payment firms also shape best practice, such as the Wolfsberg Group guidance on CDD. Gaming regulators then add local rules and audits. Casinos do not choose KYC; they must do it.

What they ask for — by trigger and scenario

Requests depend on risk signals. Triggers can be your first cash out, a new device, method switch, a big leap in bets, a hit on sanctions or PEP lists, or a crypto deposit. Below is a quick map of common asks and how to pass them first time.

First withdrawal around €/$/£2,000	Photo ID + proof of address	Standard CDD before funds leave the platform	Use a bill or bank statement less than 90 days old; show full address	FinCEN CDD Rule
Age and identity at signup (UK: before you can play)	Photo ID; sometimes selfie match	Age check and identity check are license terms in the UK	Make sure date of birth on account matches your ID	UK age and identity verification rules
Card deposit but e-wallet withdrawal (mismatch)	Card photo (masked) + e-wallet ownership proof	Anti-fraud; return funds to the same source	Withdraw back to the card used for deposit if allowed	FATF Recommendations
Large or unusual deposit pattern	Source of Funds: payslips, bank statements, tax return	EDD when activity does not match normal profile	Highlight salary lines; explain any big one-off credits	FATF Recommendations
Address check after ID is approved	Utility bill, bank statement, government letter	Confirm where you live to assign risk and rights	Use a PDF or photo that shows your name, address, and date	EU anti-money laundering directives
High roller or fast rise in stakes	SoF and sometimes SoW (e.g., business income, asset sale)	Check if funds are legal and within your means	Give a short note: job, income range, and documents to back it	Malta’s AML/CFT framework for gaming
PEP or sanctions false positive	Extra ID check, job role details, address proof	EDD for politically exposed persons and watchlists	State your job title and if you hold public office (yes/no)	OFAC Sanctions List
Crypto deposit from an exchange	Proof of exchange account + wallet path	Travel-rule style tracing; check source and flow	Keep a screenshot of the deposit path and your account name	EU AML directives
Multiple accounts on same device or address	ID for each user; proof of address; device checks	Stop bonus abuse and identity fraud	Do not share accounts; verify each adult user on their own	UKGC guidance
Chargeback or fraud flag	Full KYC + payment method proof + SoF	High fraud risk; must lock down identity and source	Explain the event in plain words; provide bank letters if any	what a chargeback is

Pro tip: CDD means basic checks (ID, address, payment). EDD is deeper (SoF/SoW, job, business docs). SoF tells where the money for play came from. SoW is your wider wealth, like assets and long-term income.

Inside the invisible checklist: how risk scoring works

Casinos score risk. It is not only the size of your win. They look at age, place you live, method, device, play style, and list hits. A “red flag” can be a new card, a fast jump in stakes, or a mismatch in names. A PEP hit (you or a close one in public office) will push the check to EDD. See also the FATF guidance on PEPs.

If they ask for SoF, do not panic. Think simple: show how the money got to your bank or wallet. Salary? Send two or three payslips and a bank statement that shows the same pay. Self‑employed? Send a tax return and an account summary. Sold a car? Send the sale bill and the bank line. Keep notes short and clear. You do not need to send more than they asked for.

Most delays come from small things: glare on photos, cut corners, old bills, or a name that does not match. Fix those first.

Regional snapshots: what changes by market

United Kingdom: Age and ID must be checked before you can deposit or play. SoF is common for higher spend or when risk rises. ADR like IBAS can review disputes.
European Union and Malta: Risk‑based checks under EU AML rules. The Malta Gaming Authority follows a clear AML/CFT playbook. See EU anti-money laundering directives and Malta’s AML/CFT framework for gaming.
United States: State law varies; federal AML rules apply. Payment rails and geolocation add extra checks. Expect strict SoF if amounts grow.
Canada: Identity rules and methods are set by FINTRAC; see FINTRAC identity verification methods. Expect bank‑level standards at licensed sites.
Australia: AUSTRAC sets KYC rules; see AUSTRAC KYC guidance. A risk‑based approach is used, with EDD for higher risk.
Curaçao and other offshore hubs: Policies differ by operator. Ask for the KYC policy and dispute path before you deposit.

Crypto and alt‑payments corner

Crypto does not remove KYC. It can add checks. If you use an exchange, the casino may ask for a screenshot of the exchange account and the transfer hash. If you use a self‑custody wallet, they may ask for a proof that you control the address. Sudden swaps between coins or fast loops can trigger EDD. Keep a simple trail: show your account name and the path of funds. This will save hours.

Your data: storage, privacy, and how long it stays

Casinos must store KYC data for a set time, often 5 years or more, based on law. They keep it secure and limit who can view it. If you play in the UK or EU, you have rights over your data, such as erasure in some cases. Read about your right to erase your data. Note: AML rules can override erasure while a duty to keep records still applies.

You can ask how your files are stored, who can see them, and when they will be deleted. Use support chat or email. Keep a record of replies. If you use email, send from the address on your account.

Fast‑pass: a 24‑hour approval checklist

Match names on account, ID, and payment method.
Use clear color images. No flash. No blur. All corners in frame.
Proof of address must show your full name, full address, and a date in the last 90 days.
Upload PDF bank statements if you can. Do not crop out headers or footers.
If asked for SoF, add a short note. Mark salary lines. Explain one‑off credits.
Do not change payout method at the end. Return funds to the source used to deposit.
Use the same device and IP while you pass KYC, if possible.

Pro tip: If your ID shows a former address, include a note and a current proof of address. That small note can cut days of back‑and‑forth.

When things go wrong: holds, odd requests, and how to escalate

Stay calm and ask for a clear list of what is needed. Ask for the reason in one line: CDD or EDD, and which trigger. Keep all files in one email thread or ticket. Reply in the same thread to keep context.

If a request feels too wide, ask for scope and legal basis. A fair line is: “Please confirm which license rule or AML duty requires this file.” They may narrow the ask. You can also offer a redacted file if it still proves the point (for example, hide other transactions not linked to your deposit).

If support stalls, ask for a handover to the KYC team or to a manager. If that fails and you are in the UK, you can go to the Independent Betting Adjudication Service. Many casinos also use the eCOGRA dispute resolution channel. Give them a short timeline, your user ID, dates, and the list of files you sent.

Note: This guide is not legal advice. Rules change by place and license. Always follow the rules that apply to your account.

How to pick casinos that verify fast and fair

Read the KYC policy before you deposit. Look for: when ID is checked, what files they accept, how fast they review, which ADR they name, and what they say about SoF. Good sites list exact file formats, clear timeframes, and a real dispute path. Bad ones are vague or hide the policy.

If you want to avoid hard lessons, use trusted reviews that test KYC speed, document lists, and dispute handling. On our guía de juegos de casino, we share hands‑on checks of casino verification steps and update them when rules change.

Myths vs facts

Myth: “I can play first and verify later.” Fact: In some places (like the UK), you must pass ID before you can play.
Myth: “Crypto means no KYC.” Fact: Crypto can trigger more checks due to tracing needs.
Myth: “A chargeback will fix a slow payout.” Fact: A chargeback can mark you as high risk and make KYC longer. See Visa on what a chargeback is.
Myth: “Casinos cannot ask for SoF.” Fact: They must ask in some risk cases under AML law.
Myth: “They store my data forever.” Fact: Most must delete after the legal period, unless a case is open.
Myth: “They can refuse any payout.” Fact: They must pay if you pass checks and follow T&Cs. If not, you can escalate.

FAQ

Why is my casino withdrawal pending KYC?

The site must check your ID, address, and sometimes SoF before it pays out. This is to stop fraud and meet AML rules.

What documents work for proof of address?

A bank statement or a utility bill is best. It must show your name, full address, and a date in the last 90 days. A rental note or mobile bill may not work in some places.

What is Source of Funds vs Source of Wealth?

SoF is the exact money used to play (like your salary this month). SoW is your wider assets and long-term income (like a business or property).

How long do casinos keep my documents?

Often 5 years or more due to AML law. If no duty applies, you can ask for deletion. See the UK ICO page on your right to erase your data.

Can a casino refuse my withdrawal if KYC fails?

Yes. If you do not pass KYC or used a method that is not yours, they can refuse or return funds to the source. You can fix errors and try again. If you think they act unfairly, use ADR.

Can I blur parts of my bank statement?

You can hide lines not linked to your play if the casino agrees. Do not hide your name, account number, dates, or the lines that prove your SoF.

Will a selfie be needed?

Sometimes. A live selfie or video call helps match your face to your ID and stop ID theft.

Glossary

KYC: Know Your Customer. Checks to confirm who you are.
AML: Anti‑Money Laundering. Laws to stop crime funds.
CDD: Customer Due Diligence. Basic checks like ID and address.
EDD: Enhanced Due Diligence. Deeper checks like SoF/SoW.
PEP: Politically Exposed Person. Public office risk category.
Sanctions check: Screen against global watchlists.
SoF: Source of Funds. Proof of the money you used to play.
SoW: Source of Wealth. Proof of long-term income and assets.
SAR: Suspicious Activity Report. Filed by firms to the state.
ADR: Alternative Dispute Resolution. A neutral body to review cases.

A final checklist you can copy

Account name = ID name = bank/e‑wallet name.
Upload color scans. No crop. All edges in frame.
Use a recent bill or bank statement (under 90 days).
Keep card images masked (show first 6 and last 4 only, if asked).
Keep a simple SoF note and files ready if your play level rises.
Ask support what is needed in one list. Confirm CDD or EDD.
Keep all talk in one ticket. Save every reply.

About this guide: Reviewed by a former iGaming KYC/AML analyst. We cite regulators and standards where possible. This is general info, not legal advice. Rules vary by license and country.