Casino KYC in Canada: why your withdrawal stalls and which documents clear it

Why does the withdrawal trigger checks the deposit did not?

Money leaving a casino is the point where the operator carries the most legal risk. Paying the wrong person, or paying into a third party's account, is exactly the pattern anti-money-laundering rules are written to stop. That is why many sites let you register and deposit after an automated check, then ask for documents only when you request a payout.

In Ontario the rule is spelled out. According to the AGCO's Registrar's Standards for Internet Gaming, withdrawals must be verified and authorized before they are permitted, to make sure the withdrawal is made by the account holder and is being transferred to an account of which the player is a legal holder. The same standards require withdrawals to be processed as soon as is practicable, subject to that authorization and verification. So the check itself is not a sign of trouble. A check that runs for weeks usually means something in your file does not match.

What does FINTRAC actually require from a casino?

The federal law behind casino KYC is the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Paragraph 5(k.1) of the Act brings in a province that conducts and manages a lottery scheme accessible to the public through the internet, which is how provincial gaming sites become reporting entities. FINTRAC is the agency that issues guidance under the Act and enforces it.

FINTRAC's guidance for casinos lists the moments when a casino must verify who you are. The ones that matter for an online player are these:

• Opening an account. The casino must verify the identity of every person for whom it opens an account before any funds are disbursed. This is the rule that bites at the first withdrawal.
• Casino disbursements of C$10,000 or more. Identity must be verified for anyone receiving a disbursement that requires a Casino Disbursement Report.
• Receipts of funds of C$3,000 or more, and electronic funds transfers of C$1,000 or more initiated by the casino.
• Suspicious transactions, regardless of the amount.

Several of these thresholds work on a 24-hour rule: two or more transactions within 24 consecutive hours that the casino knows are linked to the same person are added together. Splitting a C$12,000 win into three withdrawals on the same day does not avoid the C$10,000 threshold.

Private operators in Ontario are covered through the AGCO. The Registrar's Standards require them to implement anti-money-laundering policies and procedures that support obligations under the Act, with internal controls aligned with the designated reporting entity.

How can a casino verify you without seeing you in person?

FINTRAC's guidance on verifying identity describes three accepted methods, and every online verification screen you meet is one of them.

1. Government-issued photo ID. The document must be authentic, valid and current, issued by a federal, provincial or territorial government (or a foreign equivalent), and show your name, photo and a unique identifying number. Remotely, the casino can authenticate it with technology, for example by having you scan it with your phone camera, and must confirm that the photo is yours, typically by a live video check or a selfie compared with the ID photo. FINTRAC says simply viewing a person over video is not enough.
2. Credit file. A file from a Canadian credit bureau that has existed for at least three years, draws on more than one source, and matches your name, address and date of birth. The casino must search it at the time of verification; a copy you upload does not count.
3. Dual-process. Two pieces of information from two different reliable sources, for example name and address from a utility bill and name and date of birth from another document. FINTRAC's examples include utility bills, bank or credit card statements, government benefit statements, property tax assessments and insurance documents. Social media is not an acceptable source.

The credit-file method is the one you rarely notice. PlayNow, for example, says it runs a soft check with Equifax Canada that does not affect your credit rating, and that your registration details must match the name, date of birth and current address on your Equifax profile.

Which documents will you usually be asked for?

The exact list depends on the operator, but provincial sites publish theirs, and they map closely onto the FINTRAC methods above.

Why do verification requests get rejected?

Most rejections come down to a mismatch between what you typed at registration and what the document or credit file says. The published failure messages show the pattern.

• The ID is not valid and current. FINTRAC accepts only an authentic, valid and current document, so an expired driver's licence fails even if every detail on it is right.
• Your address does not match the credit file. PlayNow lists an address that differs from the current address on your Equifax profile as a common cause, and says you may have to correct errors with Equifax Canada before you can continue.
• The credit file is too new. PlayNow cites a credit file less than three years old, which matches FINTRAC's three-year rule for the credit-file method. Anyone who arrived in Canada recently or started using credit only in the last few years can hit this, and the way round it is a document-based check instead.
• The name is not your legal name. PlayNow's guidance is to check that you entered your correct legal first and last name and date of birth. A nickname or a missing middle name on one record and not the other is enough to stop automated matching.
• The bank document is too old or does not show the date. OLG's two-month window and its requirement that the date be displayed are precise; a cheque image without a visible date does not meet them.
• The payout account is not yours. A joint account or a partner's card can fail the AGCO's legal-holder test for withdrawals and the primary-holder rule in player agreements.

How do you prepare before your first withdrawal?

You can do almost all of the work before you ever win anything. This is the order that avoids the usual back-and-forth.

1. Register with your legal name exactly as it appears on your photo ID, your current residential address, and your real date of birth.
2. Check that your ID will still be valid on the day you expect to withdraw. Renew first if it expires soon.
3. Make sure your address is the same on your ID, your utility bill or bank statement, and your credit file. If you moved recently, update the bank and the credit bureau before you upload anything.
4. Deposit only from cards and accounts in your own name. A deposit from someone else's card creates a payment-method problem that no document from you can solve.
5. Prepare a recent bank document for the account you want paid into: a void cheque or a statement that shows your name, the institution, transit and account numbers, and a visible date.
6. Photograph documents flat, in good light, with all four corners visible and nothing covered. Upload in the format the site lists.
7. Complete verification as soon as the site lets you, not on the night you request the payout.
8. Keep a note of what you uploaded and when, so you can answer a support request with dates rather than guesses.

Sites that advertise fast payouts still run these checks; our instant withdrawal guide explains why speed depends on a verified account. If you pay out by Interac, the Interac casino page covers how the bank side works.

What if the casino asks where your money came from?

A source-of-funds request is different from identity verification. It is about the money, not about you, and in Ontario it is part of the standard: the AGCO requires operators to ascertain and reasonably corroborate a player's source of funds at times set by their risk-based policy, and to escalate their response to money-laundering indicators, up to refusing transactions.

The standard does not publish the triggers; each operator sets them in its own risk-based policy, so a request does not mean you are suspected of anything. A short, factual reply with documents works best, for example pay stubs or a notice of assessment for employment income, or a bank statement showing a sale or an inheritance. Answer what was asked and nothing else, and keep copies.

How long should verification take, and when should you push back?

Automated checks are quick when your details match. PlayNow says its verification usually takes less than five minutes, while some accounts can take up to two business days. After approval, the bank transfer is a separate clock: OLG says your bank typically needs three to five business days to process an electronic funds transfer.

On a provincial site or a registered Ontario operator, a verification that drags on past those timelines is a matter for customer support first. In Ontario, the operator is bound by the AGCO's requirement to process withdrawals as soon as is practicable once verification is complete; see our Ontario market overview for how registered sites are identified. An offshore site that keeps asking for new documents after you have supplied a valid set is outside any provincial standard, and you have no Canadian regulator to escalate to. That difference is worth weighing before the deposit, not after the win.