KYC/AML Violations: Why Compliance Failures Are Not Covered
All licensed online casinos are legally required to verify player identity (KYC) and prevent money laundering (AML) under FATF guidelines and local regulatory mandates. When a player fails to complete verification, or when transactions trigger AML flags, fund withholding and account restriction are not a casino error — they are regulatory compliance. This guide explains when KYC/AML issues are excluded from coverage, and when a casino may be acting incorrectly.
This topic is a documented exclusion from the GOOD CASINO Guarantee Fund. Cases where funds are held due to incomplete KYC or confirmed AML triggers are not eligible for compensation. However, if you believe a casino is using KYC/AML as a pretext to withhold legitimate winnings without proper regulatory justification, you may request an independent review.
What KYC and AML Mean for Players
KYC (Know Your Customer) and AML (Anti-Money Laundering) are legal obligations, not casino policies. Every licensed casino must comply under penalty of losing their license.
KYC — Identity Verification
Casinos must verify that players are who they claim to be. This typically requires government-issued ID, proof of address, and sometimes source-of-funds documentation for large withdrawals.
AML — Anti-Money Laundering
Casinos must monitor transactions for patterns consistent with money laundering. This includes large cash-equivalent deposits, rapid deposit-withdrawal cycles, and layering behaviors.
Enhanced Due Diligence (EDD)
High-value players, politically exposed persons (PEPs), or players from high-risk jurisdictions may trigger EDD requirements — requiring additional documentation before withdrawals are processed.
Source of Funds (SoF)
Casinos may require players to prove the legitimate origin of gambling funds when cumulative deposits exceed regulatory thresholds (typically €2,000–€10,000 depending on jurisdiction).
Legitimate Dispute vs. KYC/AML Exclusion — Comparison
The critical distinction is whether the casino is applying KYC/AML in good faith under regulatory requirements, or using compliance as a pretext to withhold legitimate winnings.
| Scenario | Legitimate Application | Potential Misuse | Audit Conclusion Method |
|---|---|---|---|
| Verification Request | Casino asks for ID after a large withdrawal request | Casino refuses all withdrawals with no KYC request sent | Check if KYC documentation was formally requested and timeline |
| Document Rejection | Document rejected because it is expired or unreadable | Valid, clear documents rejected without stated reason | Review rejection notice — was a specific deficiency cited? |
| AML Hold | Funds held pending SAR filing for unusual transaction pattern | Funds held indefinitely with no AML investigation reference | Request regulatory reference number for the hold |
| Source of Funds | SoF request at €5,000 cumulative deposit threshold | SoF demanded at €200 with no regulatory basis | Compare request amount against jurisdiction thresholds |
| Withdrawal Delay | 7–14 day delay while KYC documents are verified | 90+ day delay with no communication or escalation path | Review SLA commitments in casino terms and regulator standards |
Scroll right to see all columns
How Casinos Apply KYC/AML Checks
Modern casino compliance uses automated risk scoring combined with human review for flagged cases.
Registration KYC
Basic identity verification (name, DOB, address) is collected at registration. Full document verification may be deferred until the first withdrawal.
Withdrawal Trigger
Most casinos require full KYC completion before processing the first withdrawal. Documents are checked against databases and the player's stated identity.
AML Transaction Monitoring
Every deposit and withdrawal is scored against AML models. Rapid cycling, unusual amounts, and behavioral flags trigger enhanced review queues.
Enhanced Due Diligence
Players exceeding cumulative deposit thresholds or flagged by risk models are asked for source-of-funds documentation. Failure to provide this may result in account restriction.
Regulatory Reporting
If AML suspicion is confirmed, the casino must file a Suspicious Activity Report (SAR) and may be legally prohibited from disclosing this to the player during the investigation.
How GOOD CASINO Audits These Cases
When a player disputes a KYC/AML-related fund hold, GOOD CASINO reviews the casino's compliance process against regulatory standards.
- Was a formal KYC request sent to the player with clear document requirements and deadline?
- Was the document rejection justified? Was a specific deficiency cited in writing?
- Is the AML hold duration proportionate? Extended holds without a regulatory reference number are a red flag.
- Did the casino follow its own stated verification timeline (usually 3–10 business days)?
- Is there evidence the casino is using KYC/AML selectively against winning players?
A casino may not legally withhold funds indefinitely under KYC/AML grounds without a regulatory reference number or formal SAR filing. If more than 30 days have passed with no resolution and no communication of a regulatory investigation, this is grounds for escalation.
Player Rights During KYC/AML Review
Even during a KYC/AML review, players retain specific rights under most licensing frameworks.
Right to Know Requirements
You must be told exactly what documents are required, in what format, and by what deadline.
Right to Timely Processing
Casinos must process submitted documents within a reasonable timeframe (typically 3–10 business days).
Right to Written Rejection
If documents are rejected, you must receive a written explanation of the specific deficiency.
Right to Escalate
You may escalate unresolved KYC issues to the casino's compliance manager or the relevant licensing authority.
Fund Protection
Your deposited funds must be held in segregated accounts and returned if you close your account (subject to completed AML checks).
If You Believe the Casino Is Misusing KYC/AML
Pretextual use of KYC/AML to withhold legitimate winnings does occur. Here is the recommended path when you believe compliance is being used in bad faith.
Document Everything
Keep records of all KYC requests, documents submitted, rejection notices, and all communications with the casino.
Request Written Explanation
Ask the casino compliance team to provide a written explanation of why your documents are insufficient or why the hold has not been lifted.
GOOD CASINO Review
If the casino fails to respond or provide a legitimate regulatory justification within 10 business days, submit your case for independent review.
Regulator Complaint
File a complaint directly with the casino's licensing authority (MGA, UKGC, Gibraltar Regulatory Authority, etc.) citing the specific grounds of misuse.
Believe your funds are being held improperly?
Submit your case for independent KYC/AML compliance review.
Not sure if your case qualifies? Use our pre-check tool before filing a formal appeal.