Casino KYC and verification explained
Key takeaway
UK licence condition LCCP 17.1.1 requires identity verification before you're permitted to gamble at all - it isn't a special withdrawal-stage hurdle, though further checks can follow based on your account activity.
KYC ("Know Your Customer") is the identity verification that UK-licensed casinos are required to carry out on their players, before a related but separate set of financial-risk checks can also apply. Neither is optional, neither is a sign you're suspected of wrongdoing, and neither can be switched off by an operator that wants to keep its UK Gambling Commission licence — both are standard conditions of operating legally in Great Britain.
What the rules actually require
A UK Gambling Commission licence condition (LCCP 17.1.1) requires licensees to verify a customer's identity — name, address and date of birth, which is what establishes age — before that customer is permitted to gamble at all. This isn't specifically a withdrawal-stage rule; it's a condition of being allowed to play in the first place.
What you may actually experience
In practice, this basic check is often electronic: your details are checked automatically against identity and age-verification data sources when you register or make your first deposit, and if that check succeeds you may never be asked to upload a document at all. Document requests (a passport or driving licence for identity, a utility bill or bank statement for address) typically appear only when the automatic check can't confirm you, or when your later account activity raises a different kind of flag.
What can happen later
Passing the basic check when you sign up doesn't mean verification is "done" — later activity can trigger further, separate checks: additional identity documents if an earlier automatic check was inconclusive, enhanced anti-money-laundering due diligence for higher-risk activity (operators are required to apply a risk-based approach, meaning more scrutiny for higher-risk customers, not the same level for everyone), a source-of-funds request if your spending pattern warrants it (see our source of funds guide), and, at certain net-deposit thresholds, a financial check may apply — currently the already-live light-touch financial vulnerability check, or in future the newer Financial Risk Assessment framework once it actually starts (see below). Any of these can happen to land around a withdrawal, but what triggers them is your activity and risk profile, not the withdrawal request itself.
What shouldn't happen
A UK-licensed operator must not use your withdrawal request as a chance to ask for information it could reasonably have requested earlier — that's the same LCCP 17.1.1 condition, and it exists specifically because withdrawal-stage document requests are a common source of player frustration. See our casino withdrawals guide for how this plays out in practice.
Common documents and mismatches
- Common documents requested include a passport or driving licence (identity), and a recent utility bill or bank statement (proof of address).
- Verification is usually faster when the name, address and payment method on file match the documents provided — mismatches (e.g. withdrawing to a different card than you deposited with) commonly trigger extra checks.
Financial Risk Assessments — what's actually in force
Two different things get lumped together under "affordability checks," and the Gambling Commission's own current guidance is worth separating carefully rather than quoting a single headline figure:
- Already in force: light-touch financial vulnerability checks have applied since 30 August 2024, using only publicly available data (bankruptcy orders, county court judgments and similar insolvency indicators) rather than documents — the net-deposit threshold that triggers a check was reduced from £500 to £150 (over a rolling 30-day period) from 28 February 2025.
- Announced, not yet in force: a separate, newer "Financial Risk Assessment" framework, using credit-reference-agency data, was announced by the Gambling Commission on 7 July 2026 for staged future introduction — starting with the largest operators only, at a proposed £5,000/24-hour net-deposit threshold for customers 25 and over (£2,500 for under-25s). As of the Commission's own most recent public update, an exact start date for this first stage had not yet been confirmed.
Because this second framework is still being finalised, treat any specific threshold or "since [date]" claim you see quoted elsewhere — including on this site, if it hasn't been kept current — as provisional, and check the Gambling Commission's own current guidance rather than relying on a fixed figure.
Why it can feel slower than expected
Verification and related account checks can become most noticeable at the point of a large or first withdrawal, or when specific thresholds are crossed — the withdrawal itself doesn't trigger anything on its own, but it's often when a later, activity-based check (see above) first becomes visible, even though basic identity verification already happened earlier. This is why the same operator can feel "instant" for a small player and noticeably slower for a high-spending one — the process is triggered by activity and risk signals, not applied identically to everyone from the first login.
Common misconceptions
- "KYC checks mean the casino thinks I did something wrong." No — basic identity verification is a standard regulatory requirement applied to every legitimate player as a matter of course; any further checks you encounter later are usually a response to your account activity or risk indicators, not a judgement about you specifically.
- "I can avoid KYC by not verifying." Basic identity verification is a condition of being permitted to gamble at all, not something you can opt out of and still play — a UK-licensed operator that can't confirm you automatically will ask before letting you continue, and will not release a withdrawal without completing whatever checks are still outstanding.
- "Every operator asks for the same documents in the same way." The specific documents and triggers vary by operator and by your account activity — always check the specific request rather than assuming.
Related content
See UK gambling licensing explained for how licensing itself works, and our source of funds guide for the related but distinct concept of proving where your gambling funds come from.
Frequently asked questions
Why is my casino asking for ID before I can withdraw?
UK Gambling Commission licensees (LCCP 17.1.1) are actually required to verify a customer's identity before that customer is permitted to gamble at all, not specifically at withdrawal - it applies to legitimate players as a matter of course, not as a sign of suspicion. If it happened invisibly (an automatic electronic check when you signed up), a document request at withdrawal usually means a later check - not the original one - needs resolving.
What are the current financial risk checks, and is a Financial Risk Assessment actually in force?
Two different things exist. A light-touch financial vulnerability check has been in force since 30 August 2024 (threshold reduced from £500 to £150 over a rolling 30-day net deposit from 28 February 2025), using only public data such as bankruptcy orders and county court judgments. A separate, newer 'Financial Risk Assessment' framework using credit-reference-agency data was announced by the Gambling Commission on 7 July 2026 for staged introduction, starting with the largest operators at a proposed £5,000/24-hour threshold for players 25+ (£2,500 for under-25s) - but as of the Commission's own most recent public update, its start date had not yet been confirmed. Treat any specific date or threshold you see quoted elsewhere as provisional and check the Gambling Commission's current guidance.
What's the difference between KYC and a source-of-funds check?
KYC verifies who you are. A source-of-funds check verifies where your gambling money specifically came from. See our source of funds guide for detail.
Sources
- regulator LCCP Condition 17.1.1 — Customer identity verification UK Gambling Commission Checked 2026-09-07
- regulator Our position: light-touch financial vulnerability checks UK Gambling Commission Checked 2026-09-10
- regulator Commission to introduce Financial Risk Assessments in staged approach UK Gambling Commission Checked 2026-09-10
- regulator Blog: Financial risk assessments update – July 2026 UK Gambling Commission Checked 2026-09-10
Gambling should be enjoyable and within your means. Responsible Gambling · Affiliate Disclosure