Casinos can be exposed to money laundering because they accept funds, provide gambling instruÂments and pay out winnings, often across digital and physical channels. Risk is not proof: a large deposit, loss or withdrawal may be legitÂimate. InvesÂtiÂgators must reconÂstruct the customer, source of funds, play, payments and ultimate destiÂnation.
Define the casino activity and rules
Identify the operator, legal entity, domain or premises, product, customer location and transÂaction dates. Determine which gambling, AML and reporting rules applied. FATF’s casino risk-based guidance covers land-based and internet casinos but notes that it predates later revisions to FATF standards, so it should be read with current rules.
Build the complete customer timeline
Collect onboarding, identity, source-of-funds, deposits, wagers, game results, transfers, withdrawals, account changes and commuÂniÂcaÂtions. Align timestamps and currencies. A summary balance is insufÂfiÂcient because laundering hypotheses depend on the route and behaviour of funds.
Trace payment methods and ownership
Map cards, bank accounts, e‑wallets, vouchers, crypto wallets, payment agents and third-party deposits. Establish who owned and controlled each method. Apply the chain-mapping approach in our payment-agent invesÂtiÂgation without assuming a processor shared the customer’s intent.
Analyse play, not only deposits
Compare turnover, game choice, opposing bets, minimal-risk strategies, rapid cash-out and transfers between accounts. Consider legitÂimate explaÂnaÂtions such as hedging, bonuses or ordinary high-stakes play. Game and session data should be reconÂciled with the payments rather than interÂpreted in isolation.
Test customer and geographic risk
Review occupation, income, business interests, political exposure, adverse inforÂmation and links to higher-risk jurisÂdicÂtions. The UK Gambling Commission’s 2026 gambling-sector risk assessment rates remote and non-remote casino risk within its sector comparison, while explaining that national cross-sector ratings use a different basis.
Examine alerts and operator decisions
Retrieve monitoring alerts, enhanced due diligence, account restricÂtions, suspiÂcious-activity decisions and management overrides. Determine what inforÂmation was available at each decision point. A later revelation does not prove that staff should have known it earlier.
Follow proceeds beyond the casino
Trace payouts into banks, wallets, assets or related accounts. Separate money lost through gambling from funds returned as apparent winnings. Where companies or foundaÂtions receive value, verify beneficial ownership and purpose through primary records.
Malta Media’s report on gambling revenues moving through corporate layers provides a network-mapping example. Treat its claims as leads, verify internal material and filings indepenÂdently, and obtain responses from the entities and people concerned.
Report red flags as red flags
Create a transÂaction-level table of source, movement, play, destiÂnation, control evidence and alterÂnative explaÂnation. DistinÂguish suspiÂcious activity, regulatory breaches, criminal charges and court findings. Even effective controls cannot detect every laundering attempt, and an alert is never a conviction.