KYC and source of funds at crypto casinos: what gets asked and when

The worst time to discover what a casino wants from you is the day you try to withdraw a large win. That is also when it usually happens, because verification is triggered by amounts and patterns, not by the calendar.

Here is what gets asked, what sets it off, and how to make sure it never becomes the reason your money is sitting still.

Two different things wearing the same name

People say KYC and mean one process. Casinos run two.

Identity verification answers who you are: name, date of birth, address, a document with a photograph. It is routine, it is fast, and most players clear it once.

Source of funds answers where the money came from. It is not routine, it is slower, and it is where withdrawals actually get stuck. A payslip, a bank statement, an exchange history, a contract of sale. The casino is not being nosy. Under anti-money-laundering rules it has to be able to show a regulator why it accepted the deposit.

The distinction matters because the preparation is different. Identity documents you either have or you do not. Source of funds evidence sometimes takes weeks to obtain, and nobody thinks about it until it is requested.

What sets it off

Verification is event-driven. The usual triggers:

A withdrawal above a threshold, which is the most common one by far. Cumulative deposits crossing a limit over time, even in small amounts. A change of payment method between depositing and withdrawing. A win that is very large relative to your stake history. Logins from a country the licence does not cover. Patterns that look like structuring, meaning many deposits just under a round number. And sometimes nothing at all, because most terms allow checks at any point, including before registration is complete.

Vavada is unusually explicit about this in its terms, allowing checks before or after registration, during play, and before or after a deposit or a withdrawal, along with enhanced due diligence for politically exposed persons. That is not a warning sign. It is a properly written AML chapter, and the alternative is worse.

What they ask for

Category	Typical documents	Notes
Identity	Passport, national ID or driving licence	All four corners visible, in colour, not cropped
Address	Utility bill or bank statement, usually within three months	Mobile phone bills are often rejected
Liveness	Selfie holding the document, or a short video	Increasingly standard rather than exceptional
Payment ownership	Card photo with the middle digits covered, or a wallet screenshot	Proves the method belongs to you
Source of funds	Payslips, bank statements, exchange history, sale contract	Requested on larger sums, slowest to satisfy
Wallet control	Test transaction or a signed message	Now part of the Curaçao rules rather than a courtesy

That last row is new. Curaçao’s regulator now requires licensees to verify that a customer actually controls the wallet they are transacting from, using a test transaction, a signed message or an equivalent method. We covered the full rulebook in what the new Curaçao crypto policy changes.

Where “no KYC” is true and where it is marketing

Plenty of crypto casinos let you register with an email address and start playing in a minute. That part is real, and it is the whole appeal of the operators on our no KYC list.

What is not real is the idea that you can win large and cash out anonymously. Read almost any of those operators’ terms and you will find a full identity chapter reserving the right to ask, at any time, on a risk basis. The accurate description is not “no KYC”. It is “no KYC up front”.

Treat the difference as a feature with a condition attached. Low friction to start, and an obligation that can arrive later, usually at the least convenient moment. Stake is a good example: the signup is light, and the terms are explicit that verification can be required.

How to make it a non-event

Verify early. The single highest-value habit in this whole article. Do it after your first deposit, while nothing is pending and no clock is running. A verified account withdraws at the speed of the cashier. An unverified one withdraws at the speed of your document scanner plus a review queue.

Register with your real details. Names that do not match the document are the most common rejection, and a mismatch created at signup is painful to correct later.

Keep the payment route symmetrical. Deposit and withdraw with the same method, the same coin and the same wallet where you can. Asymmetry is a monitoring flag everywhere, and under the new Curaçao guideline the same-wallet route is the stated default anyway. The practical steps are in our withdrawal guide.

Photograph documents properly. Flat surface, daylight, no flash, all corners in frame, nothing cropped, colour rather than greyscale. Most rejections are quality problems, not judgement calls, and each rejection costs a review cycle.

Keep source of funds evidence to hand if you play at size. Six months of statements and an exchange export, saved somewhere you can find them, turns a two-week hold into an afternoon.

Use one account. Multiple accounts at the same operator is the fastest route to a confiscated balance and appears in every set of terms.

What is reasonable and what is not

Reasonable: asking for standard documents before a first large withdrawal. Asking for source of funds on an unusually large sum. Holding a payout while a specific named check completes. Refusing a document that is blurred or expired.

Not reasonable: requesting documents only after you win, when the same amounts moved freely on the way in. Repeated requests for material you have already supplied. Refusing to name which check is open. Indefinite review with no timescale. Sudden demands that appear immediately after a large win and not before.

The distinction is whether the process is consistent. A casino that verifies at deposit as well as at withdrawal is running a policy. A casino that only remembers its policy when it owes you money is running a delay tactic. This is one of the things we weigh in how we test and rate, and it is a large part of what separates a trustworthy operator from one with a good bonus.

If a withdrawal is being held

Ask one specific question in writing: which check is open, and which document closes it. Vague answers to a specific question tell you something.

Send exactly what was requested, in one message, correctly photographed. Partial submissions restart the queue.

Keep everything. Screenshots of the request, timestamps, ticket numbers, copies of what you sent.

Escalate to the dispute body if it stalls. A properly licensed operator names one and it is free to the player. Vavada names CADRE with a certificate number that can be checked. The Curaçao Gaming Authority also takes complaints about its licensees directly.

The uncomfortable truth

Verification exists because gambling sites move money and money laundering is real. The rules that make a payout slow are the same rules that make a licensed operator worth using over one that answers to nobody.

The part you control is timing. Verify on a quiet Tuesday when nothing is at stake, and the process becomes an administrative afternoon. Leave it until the day of a big win and it becomes the reason you are refreshing a support ticket instead of spending your winnings.