A source of funds request is the procedure by which a licensed gambling operator obtains documentation evidencing the origin of the money a player is depositing or wagering. It exists because operators are legally obliged to identify, record, and in some cases report the provenance of customer funds, under anti-money-laundering laws and, increasingly, under separate affordability and safer-gambling rules that sit alongside them.
The short answer to why a casino is asking you for a payslip, a bank statement, or a sale-of-property document is that the casino has, at some level, been told by its regulator that it must. The longer answer depends on the jurisdiction, the operator's internal policies, and the pattern of the account in question. Both answers matter, and the distinction between them is worth getting right.
The Regulatory Architecture
In the United Kingdom, the relevant obligations sit in two places. The Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 require licensees to apply customer due diligence and, in specified circumstances, enhanced due diligence. Separately, the Gambling Commission's Licence Conditions and Codes of Practice (most recently amended in substantive ways in 2022 and 2023) require operators to have effective policies for identifying customers at risk of gambling harm and to verify affordability where appropriate. Source of funds requests arise from both regimes and sometimes from both at once.
Within the European Economic Area, the Fifth Anti-Money Laundering Directive (Directive 2018 slash 843) and subsequent national transpositions establish broadly equivalent obligations. The Malta Gaming Authority, the Swedish Spelinspektionen, the Danish Spillemyndigheden, the Dutch Kansspelautoriteit: each of these regulators imposes source-of-funds obligations on licensees operating under their respective licences. The threshold triggers differ in detail, but the core duty is consistent: above certain deposit or cumulative turnover levels, the operator must obtain and review evidence of the origin of the funds.
In several United States jurisdictions, analogous duties apply under the Bank Secrecy Act and Title 31, with the Financial Crimes Enforcement Network taking the lead role at federal level. Commercial casinos are treated as financial institutions for these purposes and have long-standing currency transaction and suspicious activity reporting obligations. Online operators in regulated states, such as New Jersey and Pennsylvania, inherit the same framework and layer state-specific requirements atop it.
What Triggers A Request
Operators do not, as a matter of ordinary practice, request source-of-funds documentation from every player. The request is triggered by defined criteria that vary by licensee but fall into recognisable categories.
First, aggregate deposit thresholds. A common internal benchmark for United Kingdom licensees is a cumulative deposit level in the range of a few thousand pounds over a rolling window, though thresholds run lower at operators with more conservative risk appetites. Second, rapid escalation in stake size or frequency, which is treated under both AML and affordability lenses. Third, specific payment instruments: deposits funded by third-party cards, cryptocurrency onramps whose provenance is unclear, or cash-equivalent payment vouchers frequently attract earlier review. Fourth, elevated jurisdictional risk, where the player's registered location, nationality, or payment-method origin falls within a higher-risk category under the operator's country risk model.
Fifth, and materially, regulator guidance. When a regulator publicises an enforcement action, licensees across the market adjust their internal thresholds downward. The 2022 settlement with the Entain group in the United Kingdom, and the 2023 proceedings against William Hill under the same regulator, each produced a visible market-wide tightening of source-of-funds triggers in the months that followed.
What The Operator Is Looking For
The licensee's task is to form a reasonable view that the funds being deposited are consistent with the player's stated income and known circumstances, and that the funds are not the proceeds of crime. In practice this means looking for documentation that is contemporary, specific, and attributable to the individual in question.
Acceptable forms vary by operator but commonly include: recent payslips showing employer, net income, and the account to which payment was made; bank statements covering a defined period, typically three to six months, showing both inflows and outflows; evidence of the sale of a specific asset, such as a property or a vehicle, with the sale contract and the corresponding deposit into the named account; documentation of an inheritance, including probate or a solicitor's letter; or, for business owners, audited accounts or corporation-level documentation linking the funds to trading activity.
A consistent example makes the principle concrete. A salaried player depositing two hundred pounds per month for a year may never be asked. The same player depositing twenty thousand pounds in a single session, after a quiet twelve months on the account, will be asked. The operator is not making a moral judgement. It is discharging a duty to be able to explain, to a regulator who may one day ask, why it continued to accept the funds.
Refusal, Escalation, And Exit
If a player declines to provide documentation, the operator's options are defined by its licence. In the United Kingdom and most European regimes, continued service without the required due diligence is not permitted; the account will typically be frozen pending provision, and if documentation is not supplied within a reasonable period, the operator will close the account and return the remaining balance to the originating payment instrument, subject to any ongoing suspicious-activity concerns.
In cases where documentation is provided but does not satisfactorily evidence source, or where the operator develops a suspicion that cannot be resolved, a Suspicious Activity Report will be filed with the relevant financial intelligence unit (the National Crime Agency in the United Kingdom, FinCEN in the United States, equivalent bodies across the Union). The player is generally not informed that such a report has been made. This is a deliberate feature of the regime.
A player who finds the process intrusive has, naturally, the option of declining to provide the documentation and taking their custom elsewhere. That option does not relieve the operator of its obligation, and it does not cause the obligation to migrate to some other licensee with a lighter touch. Within the regulated sector, the duty travels with the licence. The request is not a marketing lapse or a piece of operator overreach. It is, in the plain sense of the word, the law.
