AML · responsible gambling
AML for Online Gambling Operators — FATF, KYC & SAR Guide 2026
AML isn't a jurisdiction question — it's the floor everywhere. Malta, the UK, Curaçao and Anjouan all expect a FATF-aligned programme: a designated MLRO, customer due diligence, sanctions screening and suspicious-transaction reporting. Operators that bolt it on after launch stall at review. Build it first.
Anti-money-laundering (AML) for online gambling is the set of FATF-aligned controls an operator must run — customer due diligence (KYC), beneficial-ownership and source-of-funds checks, sanctions screening, transaction monitoring, suspicious-transaction reporting (SAR/STR), and a designated Money Laundering Reporting Officer — to detect and prevent money laundering through gambling accounts.
Quick facts
| Parameter | Value |
|---|---|
| Standard | FATF Recommendations (global baseline) |
| Key role | Designated Money Laundering Reporting Officer (MLRO) |
| Customer checks | KYC, beneficial ownership, source of funds |
| Screening | Real-time sanctions screening (OFAC, EU, UN) |
| Reporting | Suspicious-transaction reports to the national FIU |
| Crypto | On-chain monitoring + address sanctions screening |
AML is the floor everywhere
Whatever jurisdiction you license in, the AML expectation is the same baseline: a FATF-aligned programme. Malta, the UK, Curaçao under the LOK, and Anjouan all expect it. The difference between jurisdictions is supervision intensity, not whether AML applies. So treat it as a fixed cost of operating, not a jurisdiction variable.
The core controls
A working programme has a few non-negotiable parts. A designated MLRO who owns compliance and files reports. Customer due diligence at onboarding — KYC, beneficial ownership, source of funds for larger deposits. Real-time sanctions screening against OFAC, EU and UN lists. Transaction monitoring for gambling-specific red flags: rapid deposit-withdraw cycles, deposits inconsistent with declared income, multi-account structuring. And suspicious-transaction reporting to the national FIU.
Crypto adds, never subtracts
For crypto-payment casinos, the same controls apply — plus on-chain transaction monitoring and sanctions screening on wallet addresses. Crypto doesn’t lower the bar. It raises it, because the monitoring surface is larger.
Build it before you apply
Here’s the rule that saves the most pain: stand up the AML programme before you submit. Regulators test it at licensing and keep testing it throughout operations. Operators who defer the build to post-licence stall at review, or get caught at the first supervisory check — and then rebuild under pressure.
Pitfalls and nuances
1 Deferring AML to post-licence
The most common, most expensive mistake. Regulators expect a working programme at application. Bolting it on later means stalled reviews and rushed, weak controls.
2 Treating sanctions screening as a one-off
It's continuous. Lists change, customers change, and crypto addresses need ongoing monitoring. A point-in-time check at onboarding isn't enough.
Frequently asked questions
What AML controls must a gambling operator run?
A FATF-aligned programme: customer due diligence (KYC), beneficial-ownership and source-of-funds checks, sanctions screening, transaction monitoring, suspicious-transaction reporting, training and audit, led by a designated MLRO.
What does an MLRO do?
The Money Laundering Reporting Officer owns AML compliance and files suspicious-transaction reports to the national FIU. Most regulators require the role to be named and accountable.
Is AML different for crypto-payment casinos?
The controls are the same, plus on-chain transaction monitoring and sanctions screening on wallet addresses. Crypto doesn't lower the bar — it adds to it.
When should I build the AML programme?
Before you apply, not after. Regulators test AML at licensing and throughout operations; operators that defer the build stall at review or at the first supervisory check.
Get matched
Working through a gambling-licensing decision?
Compare the firms in our index by jurisdiction, specialisation, and GLRI score — editorial, methodology-driven, and not influenced by sponsorship.
Browse the firm ranking →Sources cited
- FATF Recommendations — official document
- UK Gambling Commission — AML guidance — regulator