New customers are often surprised — sometimes irritated — by how much documentation a UK gambling site asks for. A passport to open an account, a utility bill to withdraw, bank statements after a few weeks of deposits. None of this is the operator’s whim. It flows from licensing conditions, anti-money-laundering law and a regulatory push to identify customers gambling beyond their means. Understanding the categories of check makes them easier to navigate and explains why some come with no warning.
Know Your Customer (KYC)
Before you can deposit and gamble, an operator must verify your name, address and date of birth. Most of this is automated: the details you provide are checked against credit reference agency records, the electoral roll and other databases. If the match is clean, you may never be asked for a document.
Where the automated check fails — a recent house move, a name change, thin credit history, or simply a typo — the operator will ask for:
- Photo ID: passport, driving licence or national identity card.
- Proof of address: utility bill, bank statement or council tax bill dated within the last three months.
Since 2019, verification must be completed before you gamble, not at the point of withdrawal. The old practice of letting customers deposit and play, then demanding documents before paying out, is no longer permitted on UK-licensed sites.
Anti-money-laundering (AML) checks
Gambling operators are “regulated entities” under UK money-laundering regulations, in the same category as banks and solicitors. They must:
- Monitor transactions for patterns consistent with money laundering — deposits followed by minimal play and withdrawal, for instance.
- Establish the source of funds where the risk warrants it.
- Report suspicious activity to the National Crime Agency.
These obligations explain why a deposit-and-immediately-withdraw pattern often triggers a document request.
Source of funds and source of wealth
If your deposits or losses reach a threshold set by the operator’s own risk assessment — there is no single public figure — you may be asked for evidence where the money came from. Typical requests:
| Request | Acceptable evidence |
| Source of funds | Recent payslips, bank statements showing salary, benefits letters |
| Source of wealth | Evidence of savings, property sale, inheritance, business income |
| Specific deposits | Statements showing the transfers into the account used |
Refusing usually results in the account being restricted or closed, with any balance returned. The operator is not accusing you of anything; it is discharging a legal obligation that would expose it to fines if ignored.
Affordability and vulnerability checks
This is the area that has changed most. The Gambling Commission’s programme, following the 2023 White Paper, introduced two tiers of financial risk check:
| Tier | Trigger (indicative) | What happens |
| Light-touch | Net deposits above a modest monthly threshold | Automated check against public data (bankruptcies, CCJs); frictionless for most customers |
| Enhanced | Net deposits above a higher threshold | Detailed assessment, potentially involving credit reference data or documents |
The thresholds have been the subject of consultation and pilots, with the stated aim of keeping the light-touch checks invisible to the vast majority of customers. The current figures and status of the pilot are published on the Commission’s website and should be confirmed there.
Separately, operators are required to monitor for markers of harm — sudden increases in deposits, play at unusual hours, repeated declined transactions, chasing patterns — and to interact with customers where these appear. That interaction may be an email, a phone call, or a temporary restriction pending a conversation.
Your data
Documents are handled under UK data protection law. Operators must state their retention period and purpose, and you have the right to request what they hold. Upload through the operator’s secure portal rather than by email where possible.
Practical tips
- Register with details that exactly match your ID and bank records — including middle names and the address on your driving licence.
- Keep a recent proof of address to hand.
- Use a payment method in your own name; third-party payments are a red flag and usually prohibited.
- Respond to document requests promptly. Delays hold up withdrawals, not deposits.
- If a request feels disproportionate, ask which regulation it relates to; a licensed operator can tell you.
The other side of the coin
Checks exist partly to protect operators from liability — but also, genuinely, to protect customers. If a source-of-funds request reveals that gambling deposits are a larger share of income than you had realised, that information has value regardless of how it was obtained.
Related reading on site: Bookie Guide; “How to Spot Fair and Secure Online Casinos”.
Verification exists partly to protect you. If checks reveal spending you didn’t expect, that is worth reflecting on.
