KYC in gambling: what identity teams should rethink now

TL;DR: Gambling operators are under rising pressure to verify customers, monitor source of funds, and screen for sanctions as global fines reached at least $184.8 million in 2025, according to SumSub. The real issue is not whether KYC exists, but whether identity controls actually close the gap between onboarding checks and continuous risk monitoring.

NHIMG editorial — based on content published by SumSub: KYC in Gambling Explained: A Practical Operator Guide (2026)

By the numbers:

• Global fines in the gambling industry totaled at least $184.8 million in 2025 alone.
• Only 20% have formal processes for offboarding and revoking API keys, and even fewer have procedures for rotating them.

Questions worth separating out

Q: How should gambling operators reduce fraud without weakening KYC?

A: Use layered verification, not a single check.

Q: Why do no KYC casinos create higher AML and fraud risk?

A: They remove the control that binds an account to a real person and a legitimate funding trail.

Q: How do you know if KYC monitoring is actually working?

A: Look for timely escalation of anomalies, consistent risk re-scoring, and documented FIU reporting when suspicion is reasonable.

Practitioner guidance

• Tie KYC to transaction provenance Require source-of-funds evidence, payment method ownership, and behaviour review to be assessed together so the account cannot pass onboarding while remaining financially unverified.
• Re-score customer risk after behaviour changes Create escalation rules that reopen due diligence when betting patterns, deposit volume, or withdrawal behaviour diverge from the original onboarding profile.
• Use layered identity proofing Combine document verification, liveness detection, and address or payment validation so synthetic identities cannot succeed by defeating only one control.

What's in the full article

SumSub's full article covers the operational detail this post intentionally leaves for the source:

• Jurisdiction-by-jurisdiction KYC and AML obligations for gambling operators that need implementation detail.
• Step-by-step onboarding flow elements such as document checks, age verification, and payment verification.
• Practical guidance on user retention, including how to reduce KYC friction without weakening assurance.
• Vendor evaluation criteria for choosing a casino KYC provider at implementation stage.

👉 Read SumSub's practical guide to KYC in gambling operations →

KYC in gambling: what identity teams should rethink now?

Explore further

View Full Forum →  |  NHI Foundation Course →