Gambling moves large amounts of money quickly, in small transactions, between parties who have never met. That makes it attractive for laundering and makes operators subject to the same anti-money-laundering regime as banks in most licensed markets.
Two questions sit underneath all of it: who is this customer, and where did the money come from. Almost every obligation in this area is a way of answering one of them.
Identifying the customer
Know your customer, usually shortened to KYC, is identity verification: establishing that the person opening the account is who they claim, is old enough, lives where they say, and is not someone the operator is prohibited from serving.
- Identity and age. Document checks, database lookups or bank-derived identity depending on the market. Age verification is the one obligation with no tolerance anywhere.
- Location. Critical in jurisdictions licensed at state level, where play must physically occur inside the boundary and is checked continuously during a session.
- Sanctions and politically exposed persons. Screening against lists at registration and on an ongoing basis.
- Exclusion registers. Checking the national register before allowing play, where one exists.
- Duplicate accounts. Detecting the same person under multiple registrations, which matters for both bonus abuse and exclusion integrity.
Source of funds and source of wealth
Knowing who someone is does not tell you whether the money is theirs. Source of funds asks where this particular money came from; source of wealth asks how the customer came to have money at all. The two are distinct and regulators have repeatedly penalised operators for conflating them.
Checks are triggered by thresholds, by pattern, or by the relationship between spend and what is known about the customer. Evidence means documents: payslips, tax returns, bank statements, sale contracts. A statement by the customer is not evidence, and accepting one has been the specific failing in several large enforcement cases.
The uncomfortable overlap is with harm. A customer losing far more than their apparent means is both an anti-money-laundering question and a safer-gambling question, and the same evidence answers both. This is why affordability checks and source-of-funds checks have converged in practice. The harm side is covered separately.
Ongoing monitoring
Verification at registration is a snapshot. The obligation is continuous, and monitoring looks for patterns rather than single transactions: deposits followed immediately by withdrawal with minimal play, sudden changes in staking, funding from multiple instruments, structuring deposits just below a threshold, or play inconsistent with the customer's profile.
Where a pattern cannot be explained, the operator reports it to the national financial intelligence unit. In most jurisdictions the customer must not be told that a report has been made, which is why an account can be frozen with an explanation that sounds evasive.
Why gambling is treated as high risk
Three features make the sector attractive to laundering. Money can be introduced in many small amounts, play can be minimal before withdrawal, and the funds come back out with a plausible explanation attached: a win. The clean-looking output is the point.
Live casino and peer-to-peer products add a further problem, because a player can lose deliberately to another player and transfer value with the house taking only its commission. Collusion monitoring in poker exists for competitive integrity and for this reason at once.
What enforcement actually looks like
The published settlements in mature markets are remarkably consistent. The failings are rarely exotic: a customer lost a very large sum over a short period without any check; a source-of-funds explanation was accepted without evidence; an exclusion was recorded but the account remained open; a flag was raised internally and nobody acted.
Penalties fall on the operator, and in jurisdictions with personal licensing they fall on named individuals as well. Britain requires personal management licences for senior people with compliance responsibility, which makes the obligation personal rather than corporate. The British regime is described here.