KYC explained: what documents casinos actually want and how long verification takes

[BananaBread]

"We're just processing your KYC" is the single most common reason a casino payout stalls. I've been logging payout speeds at UK-facing casinos for four years, and KYC is what separates an 8-minute cashout from a 4-day one.
This piece is the thing I wish someone had handed me on day one: what documents casinos actually ask for, how long verification really takes, and how to stop KYC from eating your first withdrawal.
If you want the companion speed rankings by brand, that's the Fastest Withdrawal Casinos 2026 Payout Test. This post is the rulebook that sits behind those rankings.

What KYC is, and why casinos must do it​

KYC stands for Know Your Customer. It's the identity and source-of-funds process every regulated casino is legally obliged to run on every depositing account.
In the UK it's enforced by the Gambling Commission under the Money Laundering Regulations 2017 and UK Anti-Money-Laundering rules. Under EU 5AMLD and 6AMLD, it's enforced everywhere from Malta to Germany.
Offshore sites that accept UK players should also run KYC, and the serious ones do.
Three things KYC is actually verifying:

1. You are who you say you are. Legal name, date of birth, current address, nationality.
2. Your money comes from somewhere lawful. Deposits are fine up to a threshold without source-of-funds checks. Above that threshold, they need a paper trail.
3. You are old enough and not self-excluded. Age verification (18+ in UK, 21+ in some US states) and cross-check against GamStop or similar registers.

That's it. The casino doesn't care about your tax status or your politics.
They care that if the regulator audits their books, every deposit and withdrawal on your account has a name, an address, and a document trail attached.

The documents you will be asked for​

There are four standard tiers. Most players only hit the first two.
Big winners and regular high-stakes depositors hit all four.

Tier 1: Identity (ID)​

Any one of:

• Passport (photo page, clear, all four corners visible)
• Driving licence (photo card, both sides for UK licences)
• National ID card (EU member states, Scotland National Entitlement Card is usually not accepted)

Needs to be in date. An expired passport is a hard rejection.
Photo must be clear, document corners must all be visible, no glare across the surface.

Tier 2: Address (POA, proof of address)​

Any one of, dated within the last 90 days (some sites accept 180):

• Utility bill (gas, electric, water, council tax): paper original or PDF from the utility's portal
• Bank statement: paper statement or PDF download (a screenshot of the banking app is usually rejected)
• Tax letter (HMRC letter, council tax bill)
• Mobile phone contract statement (some sites accept, some don't: check first)

Not accepted: driving licence as POA if already used as ID, insurance renewals, internet shopping delivery confirmations.

Tier 3: Payment method verification​

The casino needs to see that the card or wallet you deposited with belongs to you. Usually one of:

• Front of bank card: full name visible, top 6 and last 4 of PAN, rest blanked, CVV blanked
• Back of bank card: signature visible, CVV blanked
• Skrill or Neteller screenshot: logged-in wallet showing your name and a partial account number
• Crypto: usually self-verifies because the payout sends to your address, not someone else's

Tier 4: Source of funds (SoF / SoW)​

Triggered above a deposit total threshold (varies, but £2,000 to £10,000 cumulative is typical) or after a big win. They want evidence your money comes from a legitimate source:

• Recent payslips (3 months)
• Bank statement showing salary deposits
• Pension statement
• Self-assessment tax return (self-employed)
• Letter from accountant (business owners)
• Savings account statement (if funding from savings)
• Proof of sale (property, assets)

This tier is where verification can stretch from hours to weeks. The paperwork has to be recent, consistent with your deposit patterns, and show a plausible ability to fund the gambling you've done.

How long does KYC actually take?​

Real data from my cashout logbook, UK-facing sites, 2025 and 2026 numbers averaged:

• Tier 1 and 2 (ID and POA): 4 to 24 hours, median 9 hours. Automated document-verification services like Onfido or Jumio can clear this in under 2 minutes on a good upload, and 4 to 12 hours if a human reviewer is required.
• Tier 3 (payment method): Usually bundled with Tier 1 and 2 if uploaded together. Same range.
• Tier 4 (source of funds): 2 to 14 business days. Median 5 days. This is the step that causes the most pain because it involves a human compliance officer reading paperwork.

Weekends and bank holidays do not count towards most SLAs. A Friday 6pm document upload realistically gets first-touch Monday morning.
The myth of "instant verification": some brands advertise "instant KYC". What they mean is Tier 1 and 2 can be automated and return a pass/fail in under 2 minutes if your photo and document are high quality.
Tier 4 is never instant at any regulated operator. Anyone who promises it is either unregulated or stretching the truth.

The top 6 reasons KYC fails​

From four years of reading support tickets and player complaints. Ranked by how often I see each one.

1. Glare, crop, or low resolution​

Phone camera, flash on, glossy passport: instant glare across the photo. Automated systems reject it.
Human reviewers also reject it. Fix: natural light, flash off, document on a flat dark surface, all four corners visible, no cropping.

2. Address mismatch​

You registered the casino account with "12a High Street, Flat B" and your utility bill says "Flat B, 12a High Street". Technically the same address, but the automated system compares strings and marks it as a fail.
Fix: make your casino registration address an exact copy of the address on your utility bill.

3. POA older than 90 days​

A utility bill dated 4 months ago will be rejected by most sites. Fix: download a fresh PDF from your utility provider's portal before you upload.

4. Screenshot of banking app (not a statement)​

A lot of players upload an app screenshot because it's easier. Most compliance desks want the PDF statement because it includes an issue date, a logo, and a full account header.
Fix: always use the "download PDF" option, not a screenshot.

5. Document not in the account holder's name​

If your partner pays the water bill, that bill is not proof of your address. You need a document in your own name.
Fix: use a bank statement, phone bill, or council tax bill in your own name.

6. Source-of-funds paperwork that doesn't match deposit patterns​

If your payslips show £2,200 a month take-home and you've deposited £18,000 at the casino in six weeks, compliance will ask where the extra money came from. Fix: only play with money you can document.
If you've used savings, upload a savings account statement showing the drawdown.

How to stop KYC from delaying your first payout​

This is the practical section. Do these five things the day you open the casino account, not the day you click withdraw.

1. Upload ID and POA before you deposit. Most casinos have a "Verify now" link in the account section even before you deposit. Use it.
2. Use the same name and address everywhere. Casino registration, bank account, utility bill. Exact match, including apartment number format.
3. Upload PDFs, not screenshots. PDF from the utility portal, PDF from the bank portal.
4. Check your POA date. Needs to be within 90 days. If the newest bill is older, download a statement instead.
5. If you plan to deposit large sums, upload SoF proactively. Three recent payslips, a bank statement showing salary credits, or a savings account statement. This alone takes 2 weeks off the first big-win cashout.

If you do all five, automated verification will clear you in under 2 minutes at most UK-facing brands, and your first withdrawal clock starts at zero instead of at Day Two.

When KYC goes wrong: your rights​

Casinos can legally delay payouts while verification is pending. They cannot hold your funds indefinitely.
If Tier 4 SoF checks are genuinely not progressing after 14 business days with no new request from compliance, your options:

• Live chat: ask for a status update and a named compliance officer.
• Email to the DPO: under UK GDPR / EU GDPR you have a right to know what data they hold and why.
• Regulator complaint: UKGC, MGA, or your local regulator. For UK players, AskGamblers and Casino Guru both run well-respected dispute mediation services.
• Card chargeback: only if the casino is ignoring regulator-mediated dispute attempts and your deposit is within the chargeback window. This is a last resort and usually ends the player/brand relationship.

For most players at regulated UK-facing sites, you never get anywhere near this. Upload clean documents, play with money you can document, and KYC is a one-off 2-minute interruption rather than a recurring roadblock.

SafeBet: play within limits​

KYC is also the casino's early-warning system for problem gambling. If your deposits spike sharply, SoF will trigger.
That's not a punishment, it's a check to make sure you can afford to play. In the UK, GamCare runs a free helpline at 0808 8020 133 and live chat at gamcare.org.uk.
GamStop is a free self-exclusion register that blocks all UKGC-licensed sites: gamstop.co.uk. If you find yourself trying to obscure your deposit history from a KYC check, that's a signal worth listening to.

One more time, the five-minute summary​

• KYC is mandatory at every regulated casino.
• Four tiers: ID, POA, payment method, source of funds.
• Automated verification clears Tier 1 to 3 in under 2 minutes on clean uploads.
• SoF (Tier 4) can take up to 14 business days at big deposit thresholds.
• Upload everything on day one, not on day of first withdrawal.

For speed rankings by brand, real cashout timestamps, and payout methodology, see the Fastest Withdrawal Casinos 2026 Payout Test.
Questions on any specific document or casino's KYC process? Post below.
I've probably uploaded whatever they're asking for.