AML software for casinos and iGaming

• Cash and value in, winnings out: deposits that are barely played and then withdrawn can be used to give funds a legitimate-looking source.
• Remote registration at volume: online sign-ups peak around major events, when review capacity is at its thinnest.
• Multi-accounting and synthetic identities: the same person behind many accounts, for bonus abuse or to spread funds.
• Third-party funding: accounts funded with cards or wallets that belong to someone else.
• High-value players: VIP and high-deposit players whose source of funds needs to be understood.
• Politically exposed players: PEPs, their family members and close associates call for enhanced due diligence.

1. 1

   Filter registrations

   Checks on email, phone, IP, device behaviour and sign-up velocity stop bots and repeat registrations before a player is verified.

2. 2

   Verify and screen the player

   Identity verification, then sanctions and PEP screening of every player before they can deposit or withdraw.

3. 3

   Assess source of funds

   Risk-based checks on where a player's money comes from, with enhanced due diligence for high-value and higher-risk players.

4. 4

   Monitor and re-screen

   Monitoring of deposits, play and withdrawals for unusual patterns, and re-screening of the player base when lists change.

5. 5

   Investigate and report

   Reviewing alerts, recording decisions, and reporting suspicious activity to the financial intelligence unit.

The FATF Recommendations treat casinos as designated non-financial businesses and professions: they must apply customer due diligence and record keeping (Recommendation 22) and be licensed and subject to effective AML supervision (Recommendation 28). Targeted financial sanctions apply in addition.

In the UK, the Gambling Commission is the AML supervisor for casinos, including remote casinos, under the Money Laundering Regulations 2017, and other gambling operators are subject to the Proceeds of Crime Act and the Commission's requirements on preventing money laundering. The EU anti-money laundering framework treats providers of gambling services as obliged entities, with member states able to exempt certain lower-risk gambling services but not casinos. Responsible gambling duties sit alongside these rules and remain the licensee's own obligation.

• Real-time screening: sanctions and PEP checks that run inside registration and withdrawal flows without slowing them down.
• Matching quality: fuzzy matching across spelling variants, transliteration and aliases for an international player base.
• False positives: dates of birth and nationality used to rule out namesakes, so the review queue stays manageable at peak.
• Fraud signals at registration: velocity, bot detection and email, phone and IP risk to catch multi-accounting early.
• Re-screening: the whole player base re-checked when lists change, with alerts only on what changed.
• Evidence: every check and decision recorded, so the operator can show its supervisor what it knew and when.