Every UK-licensed casino has to know who you are before it takes a penny from you. That is not the site being difficult — it is a licence condition, and an operator that skipped it would lose the licence. This guide covers what they must check, what to send, how long it should take, and what to do when a withdrawal is sitting unpaid because verification has stalled.
KYC stands for Know Your Customer. In practice it means proving three things: that you are who you say you are, that you are over 18, and — sometimes — that the money you are gambling with is legitimately yours. The first two apply to everybody. The third applies at higher amounts and is where most of the frustration lives.
Why It Is Not Optional
The Gambling Commission’s licence conditions require operators to verify a customer’s age and identity before that customer can deposit, bet or access any gambling product. An older allowance that let sites verify within 72 hours of signup has been removed, so the check now sits at the front of the process rather than after it.
Behind that sit two separate legal obligations. One is preventing under-18s from gambling, which is the single hardest line in UK gambling regulation. The other is anti-money-laundering law — principally the Proceeds of Crime Act 2002 and the Money Laundering Regulations 2017 — which treats a licensed casino much as it treats a bank. That is why the questions feel financial rather than recreational: legally, they are.
Read this first
If a site offers you casino play with no identity checks at all, that is not a better site — it is a site that is not licensed to serve Great Britain. No UK licence means no Gambling Commission oversight, no access to the free dispute service, and no obligation on the operator to pay you. The verification you are being asked for is the consumer protection.
What They Will Ask For
Most checks run automatically against public and credit-reference data and complete in seconds without you uploading anything. When that fails — a recent house move, a thin credit file, a name mismatch — you are asked for documents.
| Check | What’s accepted | Common reason it fails |
|---|---|---|
| Identity | Passport, driving licence, or national identity card | Expired document, glare on the photo page, cropped edges |
| Address | Utility bill or bank statement, normally dated within the last three months | Mobile phone bills are often rejected. Online statements without the full header too |
| Payment method | Card image with middle digits obscured, or an e-wallet screenshot | Depositing from a card that is not in your name |
| Source of funds | Payslips, bank statements, or evidence of a specific one-off sum | Sending a partial statement, or a screenshot instead of the full document |
Two practical points. Photograph documents flat, in daylight, with all four corners visible — a huge share of rejections are simply unreadable uploads. And the name and address on every document must match your account exactly, so update the casino before you send anything if you have moved.
Why It Bites At Withdrawal
The most common complaint about verification is that it appeared only when the player tried to take money out. There is a reason for that, and it is not that the casino is stalling.
Age and basic identity are checked at registration. But full verification — including any source-of-funds request — is triggered by thresholds: cumulative deposits, the size of a single withdrawal, or an unusual pattern. Deposit £20 at a time for six months and nothing happens. Win £4,000 and request it, and the threshold trips.
The practical lesson is to get verified early. Most casinos let you upload documents from your account area on day one rather than waiting to be asked. Doing it while you have no money pending removes the entire problem.
Do this on day one
Upload your ID and proof of address as soon as you open an account, before you deposit anything. Verification with nothing at stake is an administrative task. Verification with a £4,000 withdrawal pending is a stressful wait — same process, entirely different experience.
Source Of Funds: The Bigger Ask
A source-of-funds request goes further than identity. The operator is asking you to demonstrate that the money you are gambling with came from a legitimate source, and it is an obligation the casino cannot waive however long you have been a customer.
It is normally triggered by the amount you have deposited over time rather than by anything suspicious about you. Typical evidence is a few months of payslips, bank statements showing income arriving, or documentation of a specific event — a property sale, an inheritance, a redundancy payment.
Two things are worth knowing. The casino must handle these documents under data protection law and cannot use them for anything else. And if you are unwilling to provide them, the operator will generally return your deposited balance and close the account rather than continue — which is the correct outcome under the rules, not a punishment.
How Long It Should Take
Automated checks are instant. Manual document review at a well-run UK casino typically completes within 24 hours, and often within a few hours during working days. Source-of-funds reviews take longer, commonly two to five working days, because a human has to read what you sent.
Anything beyond that without a clear explanation is worth chasing. Delays that are genuinely the operator’s fault — rather than a document problem at your end — are a service failure, and they are one of the things worth weighing when choosing where to play. Our rating method covers what we test.
Where the time actually goes
Nearly every genuinely long verification is a resubmission loop, not a slow reviewer. One clear, complete, in-date document on the first attempt is the difference between hours and a fortnight.
Verification Is Not An Affordability Check
These two get conflated constantly and they are different things with different triggers.
Verification asks who are you. It is mandatory, applies to everyone, and is a legal requirement before you can play.
Affordability asks can you afford this. It is part of the operator’s duty to spot and act on signs of harm, and it is triggered by patterns of spend rather than by identity. It is also the more contested of the two, and the rules around it have moved several times.
Being asked for a payslip could be either, so it is worth asking the operator which it is — the answer determines what you are being assessed against. Our guide to affordability checks covers that side in full, and the wider safer gambling section covers the protections that sit alongside it.
Check first How To Choose A Safe Casino Every UK-licensed casino carries a Gambling Commission account number you can look up on the public register in under a minute. This guide walks through that check and the others worth doing before you deposit. Read the guide →When A Withdrawal Is Stuck
If verification has stalled and money is sitting unpaid, there is a defined route and it works better than arguing in live chat.
- Ask exactly what is outstanding. Get a specific list in writing — which document, for which check. “Further verification required” is not an answer.
- Fix the likely cause first. Most rejections are readability, an out-of-date document, or a name mismatch. Re-send flat, in daylight, with all corners visible.
- Raise a formal complaint. Not live chat — the complaints process. UK-licensed operators must handle it within a set timeframe and give you a final written position.
- Escalate to the ADR provider. Every licensed operator must belong to an approved alternative dispute resolution service. It is free to you and its decision binds the operator.
- Report a pattern to the regulator. The Gambling Commission does not settle individual disputes, but it does use reports as intelligence about how an operator behaves.
A Worked Case
Worked example: two players, same casino
Player A registers, deposits £20, and plays. The automated check passes on the electoral roll in under a second. She never uploads anything. Six months later she withdraws £180 and it is paid the same day.
Player B registers, deposits £20, and the automated check fails because he moved house two months ago. He ignores the prompt and plays anyway — the site lets him, because age was confirmed.
Four months and £3,000 of deposits later he wins £5,200 and requests it. That trips both the address check he never completed and a source-of-funds threshold.
He photographs a bank statement at an angle with the top cut off. Rejected. He re-sends a mobile phone bill as proof of address. Rejected. By the time he sends a full, flat, in-date utility bill, eleven days have passed.
Nothing here was the casino stalling. The same two checks that took Player A one second took Player B eleven days, and the only variable was when and how the documents were sent.
Your Data, And What Happens To It
You are handing a gambling company a passport scan and a bank statement, and it is reasonable to want to know where that goes.
UK data protection law applies in full. The operator can use the documents for verification and its legal obligations, and not for marketing or anything else. You retain the right to ask what is held about you and to have it deleted once the retention period ends — though anti-money-laundering rules require records to be kept for a set period after an account closes, so deletion is not immediate.
Practical advice: send documents through the casino’s own upload tool inside your account, never by email, and never through a live-chat window. If a site asks you to email a passport scan to a generic address, that alone is a reason to reconsider playing there. Compare how operators handle this in our casino reviews.
