KYC (Know Your Customer) is the identity check a licensed casino runs before it trusts you with a real payout: usually a photo ID plus a proof of address, and on most sites you clear it once. A clean submission is often approved inside one to three days. The step is not the operator being nosy for sport. Anti-money-laundering law obliges any licensed platform to know who is moving money through it, and this guide walks you through what that means in practice.
What verification asks of you
At its core, KYC proves three things: that you are who you claim to be, that you are over 18, and that you are not on a sanctions or self-exclusion list. That is the whole job. Everything a casino requests maps back to one of those three checks.
The document set barely changes from one operator to the next. Expect a government photo ID, a recent proof of address, and now and then a selfie to tie your face to the card. If you deposited by bank card, some sites also ask for a photo of it with the middle digits hidden.
- A government photo ID: passport, driving licence or national ID card.
- A proof of address dated within roughly three months, such as a utility bill or a bank statement.
- Sometimes a selfie, occasionally a short video, to match your face to the ID.
- Occasionally a photo of the payment card, front and back, with the middle numbers masked.
When I funded a fresh account for testing, image quality mattered more than anything else on the list. Sharp scans went through fast. The one time I uploaded a utility bill with a shadow across the top corner, the check bounced and cost me an extra day of back-and-forth. A single cropped edge can turn a same-day approval into a week of emails.
Why casinos require it in the first place
Licensed casinos sit under anti-money-laundering rules that oblige them to identify who is moving funds, verify player ages, and screen names against sanctions lists. The framework most regulators build on is the set of FATF recommendations that gambling operators are bound by. Even an offshore Curacao licence carries its own version of that obligation.
So the request is partly law, partly self-protection. Verification lets a casino block underage players, freeze suspected fraud, and hold on to the payment partners who would otherwise cut ties. None of that rescues your evening when a withdrawal stalls, but it explains why the passport request lands on your screen. It is worth understanding the flip side too: an identified account is far easier to escalate if a dispute ever erupts, which is a real protection dressed up as a chore.
The documents, and why each one gets rejected
Most held verifications I have run into come down to one of a handful of avoidable slips. The table below is the honest version: what each document proves, and the rejection reason that trips people up.
| Document | What it proves | Common rejection reason |
|---|---|---|
| Passport or national ID | Identity and that you are 18+ | Glare on the photo page, or a cropped edge that hides the machine-readable strip |
| Driving licence | Identity, sometimes address | Expired card, or the name spelled differently from your account |
| Utility bill or bank statement | Your current residential address | Older than three months, or a post-office box instead of a street address |
| Selfie with ID | That the ID belongs to you | Face too dark to match, or the ID text unreadable in the shot |
| Card photo, front and back | You own the payment method | Middle digits left unmasked, or a name that differs from the account holder |
Read down the rejection column and a pattern jumps out. Almost every failure is about legibility or a mismatched name, not the document itself. Fix those two and you have removed most of the friction before you upload a single file.
When the check usually happens
Verification rarely fires the moment you sign up. On most licensed sites it lands just before your first withdrawal, while the account is still new and the operator wants to confirm who is about to receive the money. Small deposits and light play typically pass without a prompt.
That timing has a logical reason and an awkward side. The logic: there is little point verifying an account that never cashes out, so the casino waits until money is heading the other way. The awkward side: if you leave it to that moment, you can find yourself hunting for a clear utility bill photo with a payout sitting in limbo. As a neutral example, iWild verifies players before releasing the first withdrawal, which is the standard shape for a Curacao-licensed casino rather than anything unusual.
Deferred verification is also why the "no-KYC" label so often oversells itself. A site can advertise anonymous play and still run a check the instant a large payout, a bonus dispute or a fraud flag crosses a threshold buried in the terms. Read any such claim as "not verified until we decide to ask" and you will not get blindsided at the cashier.
How to pass verification the first time
A few habits keep the friction low, and none of them take longer than the failed upload would have cost you.
Verify early if you plan to withdraw anything sizable. Clearing the check on a quiet afternoon beats scrambling under a document request mid-cashout.
Shoot crisp, well-lit images. Fill the frame, kill the glare, keep all four corners visible, and confirm the name on every file matches your account exactly, spelling and all. A driving licence that reads "Rob" against an account opened as "Robert" is a classic same-day-to-next-week downgrade.
Keep your deposit and withdrawal methods consistent. A mismatch between how money came in and how you want it out is one of the most common triggers for a manual review, and it is entirely avoidable. If you deposited by card, cash out to that card; if you used an e-wallet, send it back the same way where the site allows.
Check the dates. A proof of address more than three months old is the single most frequent bounce I see, and it is the easiest to pre-empt: download a fresh statement the day you plan to submit.
What happens to your documents
Handing over a passport scan is a fair thing to feel cautious about. Under data-protection law in most jurisdictions, an operator can only keep identity documents for as long as its licence and anti-money-laundering duties require, and it is supposed to store them securely rather than pass them around. The GDPR framework covering personal data in the EU gives players there rights to ask what is held and, within limits, to have it erased once the legal retention window closes.
In practice, a few sensible habits protect you. Upload through the site's own verification page rather than emailing files, since email is the softer target. Where a form allows it, cross out details you are not required to share on a bank statement, leaving only your name, address and the date visible. And favour sites that verify through a named, established KYC provider over ones that ask you to send documents to a generic support address. If a casino cannot tell you how long it keeps your ID or who processes it, that reticence is itself a small red flag.
Frequently asked questions
What documents does casino KYC need?
The standard set is a government photo ID (passport, driving licence or national ID card), a proof of address dated within about three months such as a utility bill, and sometimes a selfie to match your face to the ID. If you deposited by card, expect a request for a photo of it with the middle digits masked. Sharp, uncropped images clear fastest, often in one to three days, while a blurry or out-of-date document is the usual reason a check loops back.
When does a casino ask me to verify?
Most licensed casinos run the check just before your first withdrawal, while the account is new and the site wants to confirm who is receiving the funds. Small deposits and modest play usually pass without a prompt. Because the request tends to arrive at cash-out, the practical tip is to verify early on a quiet day rather than under time pressure with a payout waiting.
Can I refuse KYC if a casino asks?
You can refuse, but the practical result is usually a blocked withdrawal. Licensed operators are bound by anti-money-laundering rules and will hold funds until you verify, and their terms give them wide latitude to do it. If privacy is a priority, choose a site with a lighter verification model knowingly, rather than depositing a large balance somewhere and hoping the check never comes.
Is it safe to send my passport to an online casino?
It carries a real but manageable risk. A licensed operator can only hold identity documents for as long as its anti-money-laundering duties require and is expected to store them securely. Upload through the site's own verification page rather than email, redact anything you are not obliged to share on statements, and prefer casinos that name an established verification provider. If a site cannot say how long it keeps your ID or who processes it, treat that vagueness as a warning.