Compliance
AML (Anti-Money Laundering)
Anti-Money Laundering
Definition
The body of regulation, internal policy, and tooling operators must implement to detect and prevent the use of gambling products to launder the proceeds of crime.
Why it matters
AML is the largest and most consequential compliance discipline in modern iGaming. Regulators view gambling products as inherently attractive to money launderers because they offer rapid conversion of cash into electronic balances, easy structuring of transactions, and the appearance of legitimate winnings. The discipline spans customer due diligence at onboarding, enhanced due diligence on higher-risk customers, transaction monitoring, sanctions and PEP screening, source-of-funds and source-of-wealth checks on significant deposits, and Suspicious Activity Report filings to financial intelligence units.
Major fines for AML failings have shaped operator behavior across the sector. UKGC enforcement actions in particular have run into nine figures cumulatively over recent years for AML weaknesses, often combined with responsible gambling shortcomings. Boards now treat AML as a top-tier risk, with dedicated MLRO functions, independent assurance, and direct reporting lines. The cost of running a serious AML program is substantial and is a structural barrier to entry for smaller operators in regulated markets.
Frequently asked questions
Who is the MLRO and what do they do?
The Money Laundering Reporting Officer is the senior individual at an operator responsible for AML compliance, including the operator's filing of Suspicious Activity Reports and ongoing engagement with regulators and law enforcement. In most regulated markets the MLRO is a regulated role with personal license requirements.
What triggers an AML investigation of a specific player?
Patterns flagged by transaction monitoring rules, such as unusual deposit patterns, deposits followed by minimal play and rapid withdrawal, deposits from high-risk countries, mismatch between declared income and gambling spend, and matches against PEP or sanctions lists. Operators also receive law enforcement requests on specific accounts.