Suspected money laundering through gambling should be invesÂtiÂgated as a traceable flow of funds, not as a collection of dramatic red flags. Unusual play, rapid withdrawals or multiple accounts can have legitÂimate explaÂnaÂtions. The invesÂtiÂgaÂtor’s task is to preserve the records, establish the customer and business context, reconÂstruct the money trail and document why each conclusion is supported.
Define the allegation and legal authority
Start with a written scope: the people, accounts, operators, payment methods, jurisÂdicÂtions and dates under review. Confirm who is authoÂrised to access personal and financial inforÂmation. Preserve complete account, know-your-customer, payment, game, device and commuÂniÂcation records under an auditable chain of custody. Do not tip off a customer or disclose a suspiÂcious activity report.
The UK Gambling CommisÂsion’s anti-money-laundering hub brings together current responÂsiÂbilÂities, risk assessÂments and guidance for gambling businesses. The CommisÂsion’s 2026 assessment notes that remote and non-remote casinos have additional obligÂaÂtions under the Money Laundering RegulaÂtions. InvesÂtiÂgators should use the rules that apply to the operator, product and jurisÂdiction at the relevant time.
Build the entity and payment map
Identify the licensed operator, platform provider, payment-service providers, account holder, source account and withdrawal benefiÂciary. Verify legal names, ownership and control rather than relying on brands. Compare customer declaÂraÂtions and expected activity with bank stateÂments, income evidence, corporate records and the operaÂtor’s risk assessment.
Then reconÂstruct each material flow from deposit through wagering to withdrawal. Record amount, currency, timestamp, payment instrument, game activity, value retained and destiÂnation. Our guide to analysing transÂaction patterns explains how a timeline and network view can reveal relationÂships that isolated alerts miss. The role of interÂmeÂdiÂaries is covered in our review of payment-service-provider risk.
Treat indicators as questions, not verdicts
Patterns worth examining include large deposits followed by minimal play, rapid cash-out, third-party funding, linked accounts, coordiÂnated or opposing bets, repeated movement across jurisÂdicÂtions and withdrawals to a different instrument. Test each against customer history, product behaviour and known technical issues. Use reproÂducible queries, retain the underÂlying data and have another analyst review material findings.
Older sector guidance can still supply useful context, but its date must be explicit. The FATF casino risk-based guidance was issued in 2008 and FATF warns that it does not reflect later revisions to its standards. Its central principle remains useful: controls should follow identified risk, with enhanced checks and monitoring in higher-risk situaÂtions, but it should be read alongside current law and current FATF recomÂmenÂdaÂtions.
Separate intelligence, evidence and decisions
InterÂviews should normally follow the documentary review so questions can be specific and inconÂsisÂtencies tested. Maintain an evidence schedule stating what is verified, what is inferred and what remains uncorÂrobÂoÂrated. Malta News Online has reported allegaÂtions concerning illegal gambling and financial intelÂliÂgence in Malta; such reporting is a useful lead, but allegaÂtions and intelÂliÂgence are not court findings and require independent corrobÂoÂration.
If suspicion remains, the authoÂrised reporting function should decide whether a suspiÂcious activity report is required and submit it to the competent financial intelÂliÂgence unit. Our overview of financial intelÂliÂgence units explains how reports are analysed and shared. A defenÂsible invesÂtiÂgation ends with a documented rationale, preserved evidence and proporÂtionate escalation—not a conclusion based solely on unusual behaviour.