A source of funds request is not an excuse to delay your withdrawal. It is the point of the whole verification apparatus. Anti-money-laundering rules are the reason identity checks exist at gambling sites at all, and a large or unusual win is one of the events most likely to move an account into a band where those rules require the operator to ask.
Understanding the obligation makes the request predictable rather than sinister, and predictable means you can have the documents ready before anyone asks for them.
What laundering money through a casino looks like
The mechanism regulators worry about is simple, which is why it is taken seriously. Criminal proceeds are difficult to explain. Gambling winnings are easy to explain. Any business that converts one into the other is attractive.
The generic patterns are well known in compliance work:
- Refining and cycling. Deposit funds, gamble a small fraction, withdraw the rest, and present the payout as winnings. The gambling loss is the cost of the laundering.
- Structuring. Break activity into amounts that stay below whatever threshold is believed to trigger reporting, across multiple accounts, sessions or days.
- Account layering. Move value between accounts, wallets or players so the trail through the operator is broken.
- Chip or credit transfer. Value moved between customers rather than wagered, so the site functions as a transfer service.
None of that requires the operator to be complicit. It requires the operator to be inattentive, which is precisely what regulation is designed to prevent. That is why a request is directed at the money rather than at you, and why the tone of it is procedural rather than accusatory.
Why gambling businesses are treated as high risk
The international standard is set by the Financial Action Task Force, whose 40 Recommendations countries implement through their own laws. Casinos are covered as designated non-financial businesses and professions — the DNFBP category, which also includes real estate agents, dealers in precious metals and stones, lawyers and notaries, and trust and company service providers.
Recommendation 22 applies customer due diligence obligations to casinos when customers engage in financial transactions at or above a designated threshold, specified as USD or EUR 3,000. FATF also published dedicated guidance on the risk-based approach for casinos in October 2008, covering both land-based and internet operations, and revised Recommendation 1 on the risk-based approach in 2025.
Two qualifications matter. First, FATF sets standards for countries, not rules that bind an operator directly — what binds an operator is the national law of the jurisdiction that licensed it, which may set thresholds and requirements above or below the international baseline. Second, a risk-based approach explicitly means obligations scale with assessed risk, so identical activity at two operators can produce different treatment because their risk models differ. The obligations imposed by an offshore licence are covered in more detail in the comparison of what a Curaçao or Anjouan licence actually requires.
The features that make gambling high risk are structural: high transaction volume, rapid turnover, cross-border customers, cash or crypto funding, and an output that is inherently difficult to distinguish from legitimate winnings.
Source of funds versus source of wealth
These are different questions and get answered with different documents. Conflating them is the reason many submissions get rejected.
| Source of funds | Source of wealth | |
|---|---|---|
| Question answered | Where did this specific money come from? | How did you come to have money at all? |
| Scope | One deposit, or the funding of one account | Your overall financial position |
| Typically triggered by | Crossing a transaction or cumulative threshold | Higher value, higher risk, or a PEP-type profile |
| Evidence style | Transactional records with a clear trail | Biographical documents establishing accumulation |
| Difficulty | Moderate — the records usually exist | High — often requires years of history |
If you are asked for source of wealth rather than source of funds, the case has escalated. That is not necessarily adverse — high-value accounts routinely get there — but it means the review will take longer and a screenshot of an exchange balance will not close it.
What documents get requested
The list varies by operator and jurisdiction, but it clusters predictably. What follows is the general shape of a request, not a guarantee of any particular site’s requirements.
| Purpose | Typical documents | What makes it acceptable |
|---|---|---|
| Identity | Passport or national ID; sometimes a selfie or liveness check | Unedited, all corners visible, in date, name matching the account exactly |
| Address | Utility bill, bank statement, council or municipal tax notice | Usually dated within three months; address matching the account record |
| Source of funds — salary | Recent payslips, employment contract, bank statement showing credits | The salary credit visible landing in the account that funded the deposit |
| Source of funds — crypto | Full exchange transaction history export; on-chain transaction references | An export rather than a screenshot, showing the fiat purchase and the transfer out |
| Source of funds — asset sale | Sale contract, completion statement, corresponding bank credit | The document and the bank credit matching in amount and date |
| Source of wealth — business | Company accounts, dividend vouchers, accountant’s letter | Ownership evidenced and income traceable to you personally |
| Source of wealth — inheritance or gift | Grant of probate, solicitor’s letter, signed gift declaration | The transfer traceable into your own account |
The recurring principle is the audit trail: every document should connect to the next one, and the chain should end at the deposit the casino can see. A payslip on its own proves you are paid; a payslip plus the bank statement showing that payment arriving and then leaving for an exchange proves where the deposit came from.
Why thresholds are never published
Every player who has been through this asks the same question: at what amount does the request happen? No operator will tell you, and the reason is not obstruction.
A published threshold is a published instruction. If it were known that reviews trigger at a specific figure, structuring beneath it would be trivial, and structuring is one of the exact behaviours the rules exist to catch. So thresholds sit inside risk models alongside factors nobody advertises either: velocity of deposits, the ratio of wagered to withdrawn, sudden changes in stake size, funding source, jurisdiction, and patterns matched against known typologies.
What you can reason about is direction rather than value. Requests become more likely as amounts rise, as the ratio of withdrawal to wagering rises, as behaviour changes suddenly, and as funding arrives from sources the operator’s model scores as higher risk. The specific circumstances that fire a document request are set out in more detail in why no-KYC casinos still ask for ID, and the way sites structure the resulting escalation is the subject of verification tiers.
What to prepare before you need it
The difference between a two-day inconvenience and a two-month one is almost entirely preparation. Assemble this once and keep it in a folder:
- A clear photo of your ID, unedited, all four corners visible, well inside its expiry date.
- A proof of address issued within the last three months, with the address matching your account record character for character.
- A full transaction history export from any exchange you have used to buy crypto, refreshed periodically.
- Bank statements covering the period in which the funding moved, unredacted except for unrelated third-party details.
- A short written explanation, two or three sentences, stating plainly where the money came from and how it reached the site.
That last item is underrated. A reviewer working through a queue is trying to establish a narrative that the documents support. Handing them the narrative alongside the documents makes their job faster, and faster is the only outcome you control.
The account details themselves matter more than people expect. If you registered with a shortened name, a different transliteration, or an address you have since left, the documents will not match and the submission will bounce — which is a good argument for keeping account details accurate from the start, even at a site that never asked you to prove them. Consistency here is also the practical reason that an unverified account is not the same thing as an anonymous one.
When you genuinely cannot evidence it
Some situations are honest and still hard to document: cash income, funds held for years in a wallet with no purchase record, crypto acquired peer-to-peer, or money that passed through an exchange that no longer exists.
Say so explicitly and early, in the same email, and offer the closest available substitute rather than sending nothing. Reviewers can often accept a chain that is imperfect but coherent. What they cannot accept is a gap they are asked to ignore, because under most AML frameworks an operator that cannot complete due diligence is required not to proceed rather than to proceed anyway. Silence on one item reads as a gap, and a gap is the one thing that reliably converts a review into an indefinite hold — at which point you are in the territory of escalating a frozen withdrawal rather than completing a check.
Frequently asked questions
What is a source of funds check in gambling?
It is a request for evidence showing where the money you deposited actually came from — an exchange transaction history, a bank statement, a payslip, a sale contract. The operator is discharging an anti-money-laundering obligation imposed by its licence. It is separate from identity verification, which only establishes who you are, not where the money originated.
Why does a casino ask for source of funds after a win rather than before?
Because obligations are usually structured around a risk-based approach and transaction thresholds. Small activity sits below the level that triggers enhanced due diligence; a large win, a rapid escalation in stake size, or a cumulative total crossing a threshold moves the account into a higher risk band. The account did not change — the risk score did.
What is the difference between source of funds and source of wealth?
Source of funds is transactional and narrow: the origin of the specific money in this account. Source of wealth is biographical and broad: how your overall net worth was accumulated — salary over years, a business sale, an inheritance, investment returns. Source of wealth is requested at higher risk or higher value, and is harder to evidence.
Can I refuse to provide source of funds documents?
You can, and the standard consequence is that the withdrawal is not processed and the account is restricted or closed. Where a jurisdiction's AML law applies, an operator that cannot complete due diligence is generally required not to proceed with the transaction. Refusal does not lead to the balance being released; it leads to it being frozen.
How long should a source of funds review take?
After a complete submission, a few working days is normal and anything past a couple of weeks is slow. The common cause of long reviews is sequential requests — one document at a time, each restarting the clock. Ask for the entire list in one written reply and submit all of it at once.
Does a no-KYC casino still have AML obligations?
If it holds a licence, yes. Offshore regimes including Curaçao and Anjouan impose AML and KYC expectations on licensees. What no-KYC changes is the timing: verification is not required to open an account or play, but the obligation still exists and is triggered by activity, most commonly at withdrawal.