Why KYC exists
KYC is not just a casino rule. It is a legal obligation to prevent money laundering that all licensed gambling operators must follow. The casino must confirm three things before you start playing:
- Identity. You are who you say you are, verified by a government-issued photo ID.
- Residence. You live in a jurisdiction the operator is legally permitted to serve, verified by a utility bill, bank statement, or similar proof tied to your address.
- Source of funds. At higher activity levels, proof that the money you're depositing comes from legitimate income, verified by payslips, tax returns, or recent bank statements.
The strongest frameworks (UKGC, GGL, KSA, Spillemyndigheden) require all three upfront or at low thresholds. Lighter frameworks (Curaçao) often leave the timing to the operator. Most regulated operators worldwide require identity and residence proof at registration, and source of funds when your activity crosses a certain limit.
The document playbook
Have these documents ready before you register. Submit them when you sign up, not when you make your first withdrawal, because processing them earlier is much faster.
Identity (one of)
- Passport (the most widely accepted)
- National ID card (EU)
- Driver's license (UK, Canada, Australia, NZ)
- State or province photo ID (US, Canada)
The ID must be valid and not expired. The image quality is important: keep it flat, well-lit, with all four corners visible and no glare on the photo or hologram.
Residence proof (one of)
- Utility bill (electricity, gas, water, internet) from the last 90 days
- Bank or credit card statement from the last 90 days
- Tax document or government letter from the last 90 days
- Rental contract or mortgage statement
These must show your full name, full address, and a recent date. The address must match the one on your casino account exactly. Mobile phone bills are sometimes rejected, so landlines or other utilities are better.
Payment method proof (one of)
- Card photo: front showing the first 6 and last 4 digits, with the middle 6 masked, and your name visible
- E-wallet account screenshot showing your name and account ID
- Bank statement showing the account used for deposits
Send this when the operator needs to verify that the payment method belongs to you. Mask the middle 6 digits of your card for security; the operator does not need to see them.
Source of funds (when triggered)
- Recent payslips (typically the last 2-3 months)
- Most recent tax return or P60 / W-2 equivalent
- Bank statement showing income deposits
- Business owner: company accounts or a letter from your accountant
- Self-employed: tax filings and recent invoices
This is requested when your total deposits or withdrawals reach a certain limit. UKGC and MGA operators often check this after $2,000-$5,000 of lifetime activity. Tighter frameworks check this sooner. If you refuse to provide this, the operator may suspend your withdrawals.
Common rejection patterns
- Address mismatch. The address on the bill does not match the address on your account. Update one so they match exactly.
- Document too old. Most operators require proof from the last 90 days. Older bills are usually rejected.
- Blurry or cropped photo. The verification systems check for quality automatically. Retake the photo with the document flat, in natural light, with all four corners visible and in focus.
- Name mismatch. Your account name does not exactly match your ID name (for example, using a nickname, missing a middle name, or dropping accent marks). Use your full legal name as it appears on your ID.
- Expired ID. If your passport expired, the operator cannot accept it. Renew it before you submit.
- Wrong document type. Sending a phone bill when a utility bill was asked for, or a selfie when ID was needed. Read the request carefully before you send it again.
Market-specific patterns
- Denmark, Sweden, Norway, Finland. Digital-identity systems (MitID, BankID, etc.) handle verification at registration, so you rarely need to upload separate documents.
- Netherlands. DigiD-verified accounts are required at every KSA-licensed operator. You verify your identity through the government system at signup.
- Spain. Cl@ve or DNIe-based verification is used at most DGOJ operators.
- UK. UKGC operators run strict checks on money laundering and affordability. Documents are usually asked for when you hit deposit limits or higher tiers of play.
- US iGaming states. Each state runs extra checks like SSN verification, state-issued ID, and geolocation. This is the strictest onboarding process, but once verified, your account is usually stable.
- Offshore (Curaçao, Anjouan). Verification is often lighter, sometimes only triggered at withdrawal, and occasionally not enforced for small amounts. The downside is that you have less protection if something goes wrong.
Frequently asked
Why does the casino need my passport AND a utility bill?
What's "source of funds" and when does it trigger?
My documents keep getting rejected. What's wrong?
Can I use a passport from a different country than where I live?
How long does verification take in practice?
Do regulated and offshore casinos have different KYC standards?
Continue reading
Withdrawal speed
KYC status is the second biggest variable in how fast you get paid.
Licensing explained
Different regulators have different KYC thresholds - what to expect by jurisdiction.
Spotting scams
When KYC gets weaponized: the patterns that separate legitimate friction from fraud.
Responsible gambling
Self-exclusion and limits work through the same identity verification.