Your casino withdrawal carries a risk score. Here is who reads it

You withdraw your winnings to your own wallet. A few days later you send them to an exchange to cash out, and the deposit sits in review, or the account gets a questionnaire, or in the worst case the coins stop moving entirely. Nothing you did was illegal. The problem is where the coins had been before they reached you.

Two things published in September put numbers on how big that problem has become, and they are worth reading together.

The numbers

On 12 September the blockchain analytics firm Bitrace published its crime report for the first half of 2026. The headline figure is that more than $174.9 billion in stablecoins flowed into addresses it classifies as high risk, across gambling, laundering, fraud, grey-market trade, sanctions and frozen funds.

The gambling slice is the one that concerns anyone reading this site. Addresses flagged as high-risk online gambling on Ethereum and Tron received more than $57.4 billion in USDT in six months. Tron carried $40.4 billion of that and Ethereum $17 billion, which matches how players actually behave: Tron is where the cheap repeated deposits live.

Then the part that reaches your account. Major exchanges received more than $2.3 billion in USDT that Bitrace traced back to high-risk gambling addresses. Binance, OKX, Bybit and HTX together took more than $1.7 billion of it, about 73 percent. Those exchanges can see the same chain data Bitrace can. They are receiving billions in funds their own analytics tools flag, and they are under growing pressure to do something about it.

Four days before that report, on 8 September, Tether froze 50 addresses holding roughly $45 million, more than 21 of them operational addresses linked to a single guarantee platform. Tether does this regularly and it does not require a court order, which is the point we made when we wrote about the lawsuit over a $42.4 million USDT freeze. A stablecoin issuer can immobilise a balance at the contract level, and no wallet, no exchange and no casino can undo it.

What “flagged” actually means

It is worth being precise, because this gets overstated in both directions.

An address flagged as high-risk gambling is not an address accused of a crime. Bitrace’s category covers unlicensed gambling operations, payment intermediaries serving them, and the guarantee platforms that run deposit and withdrawal channels for grey-market sites, mostly through Telegram. A licensed casino’s own hot wallet is not automatically in there. But the payment processors sitting between casinos and players frequently are, and you do not choose your casino’s payment processor.

The mechanism that affects you is proximity, not guilt. Chain analytics tools score an address by what it has touched and how recently. Coins that came from a flagged cluster carry that history into your wallet, and then into the exchange deposit you make afterwards. Compliance teams see a risk score attached to incoming funds, and the score does not distinguish between a player who won money and someone laundering it. It says the coins passed through an address of a certain type.

Most of the time nothing happens. Sometimes you get asked where the money came from, which is answerable. Occasionally an account is restricted while somebody looks, which is slow. Rarely the coins themselves are frozen by the issuer, which is not reversible by the exchange.

Why this is getting worse in 2026, not better

Three pressures are converging, and all of them push in the same direction.

The first is Curacao. Since June, licensees have been required to screen wallets, monitor transactions at both deposit and withdrawal, refuse funds from mixers and sanctioned addresses, and keep player, operational and treasury wallets strictly separate. Full compliance is due by June 2027. We covered the timetable in our piece on the new Curacao crypto rules. The effect is that your own casino now runs the same kind of analytics on your deposit that an exchange runs on your withdrawal.

The second is that regulators have stopped chasing domains and started chasing payments. Brazil published a rule on 14 September giving banks 24 hours to block an unauthorised operator’s accounts. Nigerian regulators told banks, fintechs and payment providers to cut ties with Stake on 10 September. When the fiat rails close, volume moves onto the chain, and the chain is where the analytics already are.

The third is the concentration of the market itself. On-chain tracking of 23 crypto casinos put deposits at $44.7 billion through roughly May 2026, up 84 percent year on year, with Stake, Roobet and Shuffle accounting for 75.5 percent of that between them. Stake alone took $22.1 billion across 32.5 million individual deposits. In June it took $2.26 billion in a single month, more than the next eight operators combined. A market this concentrated means a small number of wallet clusters carry enormous volume, which makes them trivially easy to identify and label.

One honest note on the data. You will see confident claims that stablecoins are now three quarters of all crypto casino deposits. That figure appears to be a misreading of the 75.5 percent above, which is the share held by three operators, not by stablecoins. Serious estimates of the stablecoin share of casino deposits currently range from roughly 35 to 40 percent up to around 60 percent depending on methodology, and anyone quoting a precise number is guessing. The direction is clear. The decimal place is not.

What reduces your exposure

None of this is a reason to stop withdrawing to a wallet. It is a reason to stop treating the path the coins take as irrelevant.

• Withdraw to a wallet you control before sending anywhere else. The extra hop does not erase history, but it separates your exchange deposit from the casino’s payout address by one clear step and gives you a record you own.
• Keep gambling funds and savings in different wallets. If a balance does get questioned, you do not want it sitting in the same address as the rest of your money.
• Do not consolidate. Sweeping several casino payouts into one address and then sending the lot to an exchange creates exactly the pattern compliance systems are built to notice.
• Never use a mixer on gambling proceeds. It converts a low score into a high one, and under the Curacao rules your own casino is now required to refuse funds coming from one.
• Keep the paper trail. Deposit records, withdrawal confirmations and transaction IDs from the casino. If an exchange asks about source of funds, a clean answer with evidence closes it fast. Our guide to KYC and source of funds covers what documentation actually satisfies these requests.
• Prefer casinos that publish their payout addresses and withdraw consistently from them. Opaque payout routing through rotating processor wallets is what generates the worst scores.

The wider point

The pitch for crypto gambling was always that it removes the intermediary who can second-guess you. There is no bank to decline the transfer and no processor to reverse it.

That was true, and it is becoming less true, but not in the way people expected. The intermediary did not come back. It was replaced by scoring. Nobody blocks the transaction at the moment you make it. The judgment arrives afterwards, at whatever point you try to convert coins into money you can spend, and by then the history is already attached.

It is a weaker form of control than a bank refusing a payment, and it is also harder to argue with, because there is nobody to argue with until something has already stopped.

Frequently asked questions