Source of Funds, Source of Wealth and KYC: What Casinos Ask For

Three checks that get confused

Players tend to lump every document request under the label KYC, but compliance teams separate them because each answers a different question and is triggered by something different.

The distinction comes straight from the federal anti-money-laundering regulator. FINTRAC defines source of funds as the origin of the particular funds used to carry out a specific transaction, meaning how they were acquired rather than where they were last transferred from. Source of wealth is the origin of a person's total assets that can be reasonably explained, rather than what might be expected. A salary explains both a C$500 deposit and a modest net worth; a single C$80,000 deposit may be explained by a house sale (source of funds) while the person's overall wealth is explained by decades of employment and investments (source of wealth).

Why an online casino in Canada has these duties at all

Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, FINTRAC treats a casino as a government, organization, board or operator authorized to do business in Canada that conducts and manages certain gaming. That list includes online lottery schemes accessible through the internet, although online bingo and lottery ticket sales are excluded. FINTRAC's guidance adds that provinces and territories delegate the legal authority to conduct and manage gaming, that entity carries the obligations, and it can delegate the day-to-day reporting while remaining responsible for compliance. You can read the sector overview on FINTRAC's casinos page.

In practice, that means the checks you meet on a provincial site or an Ontario-registered site are shaped by the same federal framework. Offshore sites licensed elsewhere answer to their own regulators; our comparison of Ontario-registered and offshore casinos covers that difference.

The thresholds written into the rules

FINTRAC's identity-verification guidance for casinos lists the situations that require a check. The ones most relevant to players are these:

• Cash or virtual currency worth C$10,000 or more received in a transaction.
• Casino disbursements of C$10,000 or more where a casino disbursement report is required.
• Any suspicious transaction, of any amount, before a suspicious transaction report is sent.
• Extending credit or receiving funds of C$3,000 or more, and foreign currency exchange of C$3,000 or more.
• Opening an account: account holders and persons authorised to give instructions are verified before funds are paid out.

Several of these are subject to the 24-hour rule, which means related transactions can be treated together. The full list sits on FINTRAC's page on when to verify identity at casinos. A small deposit below those amounts is not on that list, which is one reason a casino may let you play before asking for documents and then ask later: the operator's own risk policy, not only the statute, decides when.

Where source of wealth enters

Source of wealth is tied mainly to politically exposed persons and heads of international organizations. For casinos, FINTRAC requires a determination on whether a person is such a person, a family member or a close associate when the casino receives cash or an equivalent amount of virtual currency of C$100,000 or more, or initiates or finally receives an international electronic funds transfer of that size. The casino has 30 days after the day the transaction is conducted to make the determination and, where it applies, establish the source of funds and source of wealth and have a member of senior management review the transaction.

An example of the arithmetic, using our own dates: if such a transaction took place on 3 March, the 30-day window would end on 2 April. Outside these cases, source of wealth questions come from the operator's own risk rating rather than a fixed dollar trigger, and they are most common after a run of deposits that does not match the profile you gave at sign-up. The detailed duties are set out in FINTRAC's guidance on politically exposed persons for account-based sectors.

What the Ontario regulator expects on top

The AGCO's standards for internet gaming add an operator-side layer. They require operators to maintain mechanisms to identify and prevent unlawful activity, including periodic risk assessments and monitoring of player transactions, and to set risk-based policies that state when they will verify and reasonably corroborate a player's source of funds. They also provide that withdrawals are made only after verification, including confirmation that the withdrawal goes to an account the player legally holds, and that the operator's anti-money-laundering controls support its federal obligations. Registered operators therefore have a written reason to ask, and a written trigger for it. The standards are published on the AGCO website.

This also explains the common complaint that a first withdrawal triggers checks that did not happen at deposit. The withdrawal is the point at which the operator must be satisfied that the money is going to the account holder. Matching names on the payment method matters here; the differences between interbank methods are covered in our payment methods guide.

Documents that usually answer the question

The rules we read set triggers and duties, not a list of documents a player must supply, so operators decide for themselves. The pattern below is common, but it is an illustration of the logic, not a rule:

Documents that show the same name, a date, and a clear link between the cash and the account tend to close the matter quickest. Cropped screenshots that hide the account holder's name give the reviewer little to match against.

How to respond without losing days

The checklist below is practical rather than legal. Answer what was asked, not more, and keep what you send consistent with what you declared at registration.

• Verify your identity documents early, before you have a balance you want to withdraw.
• Use payment methods in your own name and keep statements from the period of the deposits.
• Reply through the secure upload in your account, not by email, and keep copies of what you sent.
• If a request seems to be beyond what the stated reason requires, ask the operator in writing which rule or policy it relies on.
• If it is not resolved, escalate within the operator, then to the regulator that licenses the site; the AGCO's player information describes the route for Ontario.

A request for documents is not evidence of an accusation; it is more often routine risk management applied to a large or fast-moving balance. If gambling feels like it is getting out of control, our responsible gambling page lists support lines, including ConnexOntario on 1-866-531-2600. For the broader picture of what to look for in a site, see the safe casino checklist, and for how fast withdrawals can move once checks are done, compare payout speeds.