When a casino emails you asking for a bank statement, ID or proof of income, it is asking three questions. Who are you? Where does the money come from? Can you afford to play? A casino asking for a bank statement is usually running a check, and the check is normal. A request for a payment is different: that is a warning sign. Which rules apply depends on who licenses the operator.

Which document answers which question?

Each document answers one question. The table adds the country where I found each one documented.

DocumentQuestion it answersWhere I found it
Passport, identity card or driving licenceWho are you?Great Britain, Malta
Proof of addressDo you live where you say?Great Britain, Malta
Bank statementWhere does the money come from?Great Britain, EU rules
Proof of incomeCan you afford to play?Great Britain only

Rules differ by country and by licence, and I read only some of them. Where I found nothing, I say so.

Why does a casino ask for ID and proof of address?

Because some regulators require a casino to know who you are before you gamble. In Great Britain, the Gambling Commission’s licence conditions say that licensees must “obtain and verify information in order to establish the identity of a customer before that customer is permitted to gamble”. At a minimum, its player guide says, that means your name, address and date of birth. These are identity checks, known as KYC (know your customer).

Which documents? The Commission’s player page lists passports, driving licences and household bills as examples. It adds: “We don’t say which types of information gambling businesses should ask for.” The choice is the operator’s, inside the rules.

Malta shows a second example. The procedures of its financial intelligence unit, the FIAU (revised 2 July 2020), ask for an unexpired government-issued document with a photograph. If the address is not on it, a document not more than six months old is needed. A statement from a financial institution is one option, next to a utility bill or a lease.

That is the first reason a casino asks for a bank statement. Sometimes it is proof of address, not a look at your spending.

In my years of checking documents, the most common reasons for rejecting one were ordinary. A cropped photo. An unreadable date. A name or address that did not match the account.

Some operators also ask for a selfie with the document. I found no official explanation. In my experience, it confirms that the person holding the document is its owner. Identity checks also confirm your age. You must be 18 or over, or older if the law where you live sets a higher minimum age. A list of documents from one country is not a list for every country, so the operator’s terms matter.

Why is a casino asking for a bank statement? Source of funds and source of wealth

To check where your money comes from. The Gambling Commission says a bank statement helps “check that your source of funds are legitimate”, as part of a gambling company’s checks against money laundering (AML). Those checks exist to keep crime and money laundering out of gambling.

I do not interpret anti-money-laundering law. Helen Marsden covers what the law and the licence require. One example of the wording: EU directive 2015/849 (consolidated text of 9 July 2024) says ongoing monitoring includes, where necessary, “the source of funds” (Article 13(1)(d)).

Two terms get mixed up. Source of funds is where the money for this deposit came from. Source of wealth is how you built up your money overall. The FIAU describes the first as how the funds used for a particular transaction were obtained. It describes the second as the activities that generate a customer’s net worth. It adds that source of funds is asked about when activity departs from the expected pattern.

When a statement is checked, it is read for ordinary things. The name. The address. Whether your deposits to the casino come from this account. Whether the money coming in fits what you earn. I cannot say what any one casino looks for.

Can you black out (redact) parts of a statement? I found no official source that says which details may be hidden. I return to this in the last section.

When does the request arrive?

Usually at one of three moments: when you register, when your deposits reach a threshold, and when you withdraw. Thresholds differ by country, so a figure always needs a country next to it.

WhenWhat is usually askedWhy
RegistrationName, address, date of birthIdentity before you gamble
A threshold is reachedID, address, sometimes a statementMoney-laundering rules count stakes and winnings
A withdrawalDocuments not yet seenWinnings can reach a threshold

EU law sets a threshold for gambling services at transactions of €2,000 or more, counted when a stake is wagered or winnings are collected (Article 11(d)). Each member state applies it through its own law. Malta’s FIAU procedures (2 July 2020) count deposits since the account was opened, or over a rolling 180 days. I found no newer revision. The UK’s Money Laundering Regulations 2017 (regulation 27) set a threshold of £2,000 for casinos. It covers stakes, including deposits for remote gambling, and the collection of winnings, including withdrawals.

That is why the email often arrives at your first withdrawal. Great Britain adds a second rule. A withdrawal request “must not result in a requirement for additional information to be supplied as a condition of withdrawal if the licensee could have reasonably requested that information earlier”. The same condition makes an exception for information the licensee must obtain at that time because of another legal obligation. It also says that before you deposit, the operator should tell you which documents it may need. The complaint steps are in the guide to what to do when an online casino does not pay out.

Curaçao, Gibraltar, the Isle of Man, Alderney, Ontario and other regulators set their own rules. I found no thresholds for them, so the operator’s terms and the regulator’s website decide.

Why would a casino ask for proof of income?

To judge whether you can afford the deposits. I found this documented only for Great Britain. There, the Gambling Commission says gambling companies can ask for information that may show irregular income patterns in your account, such as a pending house sale. They also look at deposit or loss thresholds based on your income. I found no official source for affordability checks in other countries, so I make no claim about them.

Two checks used in Great Britain are easy to confuse with a document request. The first is the financial vulnerability check. Since 28 February 2025 it applies when deposits minus withdrawals exceed £150 in a rolling 30-day period. It is a check of public records for signs such as bankruptcy. The condition does not ask the customer to supply anything.

The second is the financial risk assessment, which the Commission decided on 7 July 2026 to introduce in stages. Once fully in place, it will apply to customers aged 25 or older with net deposits above £1,000 in 24 hours or £3,000 in 90 days. Under 25, the thresholds will be £750 and £2,000. The first stage starts higher: £5,000 in 24 hours for customers aged 25 or older and £2,500 for those under 25. The Commission calls the assessment “frictionless, document-free”, run by credit reference agencies, with no impact on a credit score. It says this should reduce reliance on document checks. As of 5 October 2026, I found no start date.

Is the request genuine?

Ask three questions: who is asking, what they ask for, and how they ask. A document is a check. A payment is a warning sign.

Who is asking?

Find the operator in the regulator’s own register, not through a seal on the page. A seal is only an image. The register steps are in the guide to how licensed online casinos are regulated. If you cannot find who runs the site, stop there. Australia’s Scamwatch lists “it’s not clear who runs the service” among its warning signs.

What do they ask for?

A document, never a payment. Scamwatch, in a page dated 13 July 2026, lists being told to pay extra fees, charges or taxes before you can access winnings as a warning sign. It advises: “Do not keep paying money to unlock winnings, recover losses or prove your identity.” A “verification fee” fits that pattern, and so does a “tax” before a withdrawal.

From my years of checking documents, a document check never needs your online banking password, your PIN, your full card number with the security code, or remote access to your device. That is my experience, not a rule from a regulator’s text.

How do they ask?

Upload through your logged-in account, or through the channel named in the terms. Be careful with a link in an unsolicited email or a chat in a messaging app. Scamwatch advises against sharing identity documents unless you are certain you are dealing with a regulated business. Even a message that seems to come from a regulator can be forged: in September 2026 the Curaçao Gaming Authority confirmed unauthorised access to its online gaming portal. The wider list of red flags is in the guide to the warning signs of an online casino scam.

How do you send documents, and what if they are rejected?

Prepare before you send, and keep a record. Sending documents does not guarantee that a withdrawal will be paid.

  1. Before your first deposit, read the terms for the documents the operator may ask for.
  2. Check that your name, address and date of birth in the account match your document exactly.
  3. Send the whole document, readable, uncropped and valid. A proof of address needs a date. In Malta’s rules, it must be not more than six months old.
  4. Upload it through your account or the channel in the terms. Write down the date and time you sent it.
  5. If a document is rejected, ask in writing for the reason and the exact requirement.
  6. If requests keep repeating, or a withdrawal is stuck, use the steps in the guide to what to do when an online casino does not pay out.

The operator’s terms may say how long checks take. I found no official time limit to quote. Never send an edited document or someone else’s document, and never open a second account to avoid a check. A VPN does not fix a rejected document either.

Does paying in crypto change anything?

No. I found no rule that lets a licensed operator skip its checks because you pay in cryptocurrency. In my view, a withdrawal in USDT, a stablecoin linked to the US dollar, is not anonymous. If a site promises play without identity checks, ask who supervises it and where you can complain. The risks are covered in the guide to the risks of crypto casinos for players.

Free support if gambling is causing harm

Affordability checks aim to spot gambling with money a person does not have. Gambling Therapy is a global online service. It offers free practical advice and emotional support to anyone affected by gambling. In England and Scotland, the National Gambling Helpline is 0808 8020 133. In Wales, the Gambling Commission lists 0808 2819 265, the free 24/7 helpline of the NHS All Wales Gambling Treatment Service.

One thing I could not find out: what you may black out

I read the Gambling Commission’s player pages and Malta’s FIAU procedures on 5 October 2026. Neither says which details a player may black out on a bank statement. In a reply to a Freedom of Information request, dated 26 February 2025, the Commission says that for online operators it has “not specified any policy or any expectations in respect of redacted documents”. So I would ask the operator in writing which pages and details it needs, and keep the reply. A casino asking for a bank statement should be able to say which details it needs. This guide gives general information. I am not a lawyer, and this is not legal advice.

Questions about casino document requests

Is a casino asking for a bank statement normal?

From a licensed operator, yes. The Gambling Commission says a statement helps check that your source of funds is legitimate. A normal request names a document and arrives through your account. A request for a fee, or one from an unknown sender, is not.

Why is a casino asking for ID only when I want to withdraw?

Winnings count towards the thresholds some rules use, so the check often happens at the first withdrawal. In Great Britain, a casino should not add requests it could reasonably have made earlier, unless another legal obligation applies.

Can a casino ask for proof of income or a payslip?

In Great Britain, the Gambling Commission says companies can ask for information about income patterns in your account. Whether an operator asks for a payslip depends on its terms. I make no claim for other countries.

Do I have to pay a fee to verify my casino account?

No. A document is a check, and a payment is a warning sign. Scamwatch lists extra fees, charges or taxes before you can access winnings as a scam sign. Stop, and check who runs the site.

Is it safe to send a casino my passport or bank statement?

I cannot promise safety. You can lower the risk with three checks: who is asking, which you find in the regulator’s register; what is asked, a document and never a payment or a password; and how, by upload in your logged-in account. If one check fails, do not send.

Sources

All sources used for this guide were accessed on 5 October 2026.