compliance · 7 min read

KYC at Online Casinos — What They Ask, Why, and How to Pass Quickly

Every online casino runs KYC before your first withdrawal. Here's the exact document list, the reasons behind it, and how to avoid the delay loop.

The verification you knew was coming

Every regulated online casino runs Know-Your-Customer (KYC) checks. It is required by AML law in every jurisdiction we track — MGA, UKGC, iGO, DGA, all of them. Even offshore Curaçao and Anjouan operators run their own version, though the standards are looser.

You cannot avoid KYC. What you can avoid is the friction. Almost every “my withdrawal is stuck” post on AskGamblers traces back to KYC not being ready when the withdrawal request went in.

What KYC is actually verifying

The operator is checking four claims:

Identity. You are a real person with the name on the account.
Age. You are above the legal minimum (usually 18, sometimes 21 depending on jurisdiction).
Address. You reside where you say you do, and that jurisdiction permits online gambling.
Payment method ownership. The card, bank account, or e-wallet you deposited from actually belongs to you.

At higher amounts a fifth check kicks in:

Source of funds. The money you’re depositing has a legitimate origin.

The standard document list

Almost every operator will accept some subset of these:

For identity + age

Passport (photo page). Universally accepted.
National ID card (both sides). Accepted for EU-issued cards.
Driving licence (both sides). Accepted almost everywhere, sometimes with an extra document.

For address (proof of residence)

Must be dated within the last 3 months and show your full name and current address:

Utility bill (electricity, gas, water, internet). Preferred.
Bank statement (any recent one).
Tax notice or government correspondence.
Rental contract or mortgage statement.

Screenshots of app-based utility accounts sometimes count and sometimes don’t — it depends on the reviewer. Ask support before assuming.

For payment method

Debit/credit card: photo of card front (with middle 8 digits masked — leaving first 6 and last 4 visible) and photo of the signed reverse (with CVV obscured).
E-wallet: screenshot of the account overview showing your name and account ID.
Bank account: recent statement or a scan of a cheque (US) / IBAN header.
Crypto: a signed message from the depositing wallet (some operators; most crypto casinos skip this).

For source of funds (SoF)

Triggered by cumulative deposits above a threshold (varies: €2,000 at UKGC operators, €10,000 elsewhere) or unusual patterns:

Recent pay slips covering three months.
Bank statements showing salary or business income.
Tax return for self-employed.
Documented savings for one-time large deposits (sale of asset, inheritance).
Trading account statement for crypto SoF.

Operators will sometimes request a written statement of the source of funds in your own words. Keep it factual: “salary from X employer, held in Y bank account for Z months”.

The verification workflow

Upload documents through the operator’s KYC portal. Every legitimate operator has a dedicated portal; if you can only send documents via email, that is a red flag.
Wait for review. Standard SLA is 24-72 hours for identity+age+address. SoF adds 3-7 days. Weekends slow it down.
Respond to clarifications quickly. If the reviewer says “the address in the utility bill doesn’t match”, read the note and reply with a bill that does match. Do not argue.
Get verified status. Once approved, you should see a “verified” flag on your account. This applies to that account permanently — you do not have to re-verify for each withdrawal.

Why casinos re-KYC

Sometimes an already-verified account gets a mid-withdrawal document request. Legitimate reasons:

First withdrawal above a threshold (usually €2,000-5,000). Additional SoF may kick in.
New payment method. If you deposited from card and want to withdraw to a different one, they will verify the new one.
Long dormancy. Six-month gap since last activity often triggers a fresh proof of address.
Compliance audit. Regulators occasionally require operators to re-verify a random sample of accounts.

Not-legitimate reasons:

Demanding a selfie holding your ID for a small withdrawal at a mid-tier operator (this is common at high-risk operators — evidence they are looking for grounds to freeze).
Requesting documents you already submitted, without explanation.
Escalating scope (starting with ID, adding address, adding SoF, adding new SoF documents) at each round.

If a re-KYC request looks like operator stalling, screenshot the request and escalate directly to the ADR named in the T&C.

The pre-deposit checklist

Do this before you fund the account:

Passport OR national ID (with both sides scanned)
Utility bill dated in the last 3 months (JPG or PDF)
Photo of the deposit card front (masked) and back (signed, CVV obscured)
Register the account with your real name matching your ID exactly
Upload the documents to the KYC portal within 24 hours of registration

Do this and your first withdrawal will process in the operator’s stated SLA, without the extra 3-day pause for KYC.

Common KYC mistakes and how to fix them

Address on the bill doesn’t match the account. You moved and didn’t update the operator profile. Update the profile first, then resubmit the bill.

Name mismatch. Account is registered “John Smith” but ID says “John P. Smith”. Add the middle initial to the operator profile and resubmit.

Blurry photo. Rejected instantly. Use a tripod or a scanner app, not a hand-held phone photo in bad light.

Selfie doesn’t match the ID. Retake the selfie in good lighting with your ID clearly visible next to your face. No sunglasses, no hat, no mask.

Utility bill from over 3 months ago. They want current residence proof. Get a fresh bill or a recent bank statement.

Card back not signed. Sign the card, retake the photo. Yes, this is a common rejection reason.

What to do if KYC stalls beyond the SLA

Day 3: polite ping via live chat. Ask for a specific ETA in writing.
Day 5-7: escalate to formal support ticket. Reference the ETA you were given.
Day 10: file a complaint with the operator’s ADR (named in the T&C). Include screenshots of the KYC portal, the documents you submitted, and the support chats.
Day 14+: file with the licensing regulator. See our licensing glossary for the specific regulator per licence type, and our dispute-resolution guide for the escalation flow.

Most cases resolve at step 3. Serious ones need step 4.

Casino withdrawal process guide — how KYC fits into the full cashout flow
Crypto casino safety guide — crypto operators run reduced KYC but the math on trust is the same
Licence tier chart — where the KYC standards actually come from
KYC glossary entry — the vocabulary in one place