Source of Funds: Why Does My Casino Want to See My Payslips?

I promised this piece a few weeks back, when I wrote about withdrawal holds and said source-of-funds requests deserved a proper article of their own. They do, because nothing else in the UK gambling experience produces the same cocktail of confusion and low-level outrage. One day you’re spinning slots like anyone else. The next, an email arrives asking for three months of bank statements, your last few payslips, and an explanation of a deposit you made in March. Your account may be frozen while they wait. And the first question everyone asks is the right one: can they actually demand this?

The short answer is yes, they can, and in some cases the law gives them no choice. The longer answer, and the one that actually helps you, is that there’s a real difference between a lawful, proportionate check and an operator using compliance language to go fishing through your finances. This piece is about telling those two apart, and about handing over what’s needed without handing over more than that.

Why this check exists at all

I’ll start with the uncomfortable truth: gambling is an efficient way to launder money. Deposit dirty cash, play a little, withdraw it as “winnings”, and it comes out looking clean. Every licensed UK operator sits under anti-money-laundering duties designed to stop exactly that, with online casinos carrying some of the heaviest obligations in the industry. When your account activity raises risk questions, the operator isn’t just allowed to establish where your money comes from. In the serious cases, it’s legally required to, and failing to check is precisely the sort of thing regulators fine operators millions for. I’ve covered enough of those enforcement actions on this site to tell you the pressure on operators here is substantial and growing.

So the check itself isn’t the issue. What matters is that it’s meant to be risk-based, not random and not universal. The typical triggers are large or unusual deposits, spending that jumps sharply or doesn’t sit comfortably with what the operator knows about you, big withdrawals, mismatched or newly changed payment methods, and patterns their monitoring systems flag as odd. A casual player wagering small sums may never see one of these requests in years of play. If you have, something about the account’s size, speed or shape put it in the risk pile.

One clarification before we go further, because I know some readers will have my affordability checks piece in mind. This is a different animal. The automated financial checks I wrote about in June look at public record distress flags and never ask you for anything. A source-of-funds request is the opposite: a human process, aimed at crime prevention rather than affordability, and it’s the one situation where the casino legitimately does want to see inside your finances. Don’t confuse the two, and don’t let an operator blur them either.

What they’ll ask for, and what’s reasonable

The documents requested should match the story of your money. If your deposits come from your wages, recent payslips and a bank statement showing that salary landing are the natural fit, and the easiest case to clear. Savings usually mean a statement showing the balance and, sometimes, how it built up. A property or vehicle sale means completion documents or the sale record. An inheritance means probate paperwork or a letter from the estate. Self-employment tends to mean tax returns or business accounts. None of these should surprise you: the operator is trying to draw a line from a legitimate origin to the money in your casino account, and the paperwork simply is that line.

Where I start narrowing my eyes is when the request stops matching the story. If you’ve deposited £400 over two months and someone wants six months of full statements plus tax returns, the proportionality isn’t there. If the operator could and should have asked earlier but only discovered its curiosity the moment you tried to withdraw a win, that timing deserves challenge, and regular readers will remember the rule from my withdrawal piece: operators aren’t supposed to spring checks at cash-out that they could reasonably have run before. And if the request arrives with no explanation of which obligation it’s under, that’s not compliance; that’s a form letter, and you’re entitled to ask what specifically triggered it.

That point deserves sitting with for a moment, because it changes the emotional weight of the whole exercise. A bank statement is a diary. It shows your therapist, your debts, your subscriptions, the pub you were in on a Tuesday. None of that is the casino’s business, and none of it is needed to prove your salary is your salary. Redact the noise, leave the signal: your name, the account header, the income and the deposits in question. Do it cleanly rather than obliterating half the page, because over-redaction is the most common reason documents bounce and the process drags. But do it. Handing a gambling company an unedited window into your entire life because a template email asked you to is a habit worth breaking.

A few practical notes from watching these processes go wrong. Send documents in the format asked for, usually original PDFs rather than photographed screens, and make sure the name and address match your casino account exactly, because mismatches cause the most delays. Use the operator’s secure upload portal where one exists rather than ordinary email. And keep copies of everything you send, along with the request itself, because if this ever becomes a dispute, that paper trail is your best friend.

What happens if you refuse

Here’s the part nobody enjoys hearing, but I’ll say it straight. You can refuse, and the operator can’t march you to a scanner. But if the request is a genuine anti-money-laundering obligation, the operator can’t lawfully wave you through without it either, and the likely outcome of refusal is a restricted or closed account and a frozen withdrawal until the check completes. That’s not the casino being vindictive. An operator that pays out money it has been unable to verify is committing the exact failure regulators exist to punish. In a legitimate AML case, “no documents, no payout” is the system working, however maddening it feels from the receiving end.

Which is why the fight, when there is one, shouldn’t be about whether checks can ever happen. It should be about whether this check, on this account, with these documents, is justified and proportionate. Ask what triggered the review. Ask which obligation it falls under. Ask precisely which documents are needed and why each one is relevant. Ask for a timescale. A well-run operator can answer all four without breaking stride. An operator that responds to reasonable questions with silence or boilerplate is telling you something about how the rest of the process will go, and it’s the point at which I’d start building the complaint file: request, replies, dates, everything. If the process stalls unreasonably or the demands balloon beyond the stated purpose, it becomes a formal complaint, then a matter for the operator’s ADR provider, the same escalation ladder I’ve walked through in previous pieces.

Where your paperwork goes afterwards

The question almost nobody asks until it’s too late: what happens to those documents once the check clears? You’ve now given a gambling company your payslips and statements, which is some of the most sensitive personal data you own. Under UK data protection law, the operator can only use it for the purpose it was collected, has to store it securely, and can only keep it as long as legitimately needed, though be aware that anti-money-laundering rules themselves require records to be retained for years, so “delete it all tomorrow” isn’t an option they can grant. What you can do is ask questions: how long they retain verification documents, who can access them, and whether anything is shared with third parties. You also have the right to request a copy of everything they hold on you.

One protective habit I’d urge for anyone going through this: watch what happens next. If, shortly after clearing a source-of-funds check, you notice your VIP invitations warming up or your bonus offers swelling, remember the operator now holds a rather detailed picture of what you can afford. Documentation handed over for crime prevention should never become marketing intelligence, and if you suspect it has, that’s a complaint worth making to the operator first and to the Information Commissioner’s Office if it comes to it.

Why does your casino want to see your payslips, then? Because the law makes it responsible for proving your money is clean, and in a genuine risk case it can’t pay you out without doing so. That much deserves your cooperation, given calmly and with good copies of the right documents. What it doesn’t deserve is your entire unedited financial life, your patience with vague form letters, or your compliance when the demands outrun any reason the operator can name. Comply with the lawful version, redact like someone who values their privacy, question the timing when curiosity only arrives at cash-out, and escalate the moment proportionality leaves the room. The check is legitimate. Your scrutiny of it is too.