Identity Checks at Online Casinos, Step by Step

Why a casino asks who you are at all

The document request almost always arrives at the wrong moment. You have won something, you have clicked withdraw, and instead of a payout confirmation you get a form asking for a passport. It reads like an obstacle invented on the spot. It is not. Identity verification is the one part of an online casino that is driven less by the operator’s preferences than by the rules its payment providers and banking partners impose on it.

Two separate obligations sit behind the request. The first is anti-money-laundering law, which requires any business moving customer funds to establish who those customers are, where their money came from, and whether the pattern of transactions looks consistent with that answer. The second is age verification, which is simpler and absolute: gambling is restricted to adults, and a scan of a date of birth is the only evidence that holds up. Both obligations attach to the payment rails as much as to the casino, which is why even operators with no published regulator still run the checks. Their card acquirers and e-wallet processors insist on it.

Understanding that changes how you handle the request. It is not a negotiation and it is not personal. It is a documentation exercise with a pass mark, and most of the delay players experience comes from failing that pass mark on a technicality rather than from anyone stalling.

The standard document set

Across the industry the request resolves to three categories. A site may ask for one, two or all three, and will sometimes add a fourth for larger sums.

The third category is the one players underestimate. A casino is not only confirming your identity; it is confirming that the instrument the money arrived on belongs to the person it is about to pay out. This is why a deposit made on a partner’s card is such a reliable way to freeze a withdrawal, and why the account name on your payment method needs to match the name on your gambling account exactly, middle names and all.

Lizaro’s published rules as a worked example

Lizaro’s terms are more specific here than many of its peers, which makes them a useful illustration of the general pattern. Three provisions stand out.

• A 30-day window. Documents must be supplied within 30 days of the request. That is a generous deadline by industry standards, but it is a deadline, and missing it has consequences for account access rather than merely delaying a payout.
• A named accepted list. For identity: passport, driving licence or identity card. For address: a utility bill, bank statement or rental agreement. A published list is worth more than it looks, because it removes the guesswork about whether your particular document counts.
• Possible phone or face verification. The terms reserve the right to add a telephone call or a facial check on top of the paperwork. More on what that involves below.

I have not personally submitted documents to Lizaro, so I cannot honestly quote you a turnaround time from its review desk. What its terms set out is the request framework, and that framework is the part you can prepare for in advance. For comparison, its finance department works withdrawal requests within three business days once an account is in good standing, which tells you the payout clock and the verification clock are separate things.

When the request arrives, and why timing varies

There are three common trigger points, and the one a site uses tells you something about how it operates.

The practical lesson is to invert the default. Nothing stops you uploading documents the day you open an account, before a single spin. Do that and the check runs while you are playing rather than while you are waiting on money. It is the single highest-value habit in this whole topic, and it costs ten minutes.

How to photograph documents so they pass first time

Most rejections are photographic, not substantive. The document was fine; the image was not. The rules are mechanical:

• All four corners inside the frame, with a visible margin. A clipped corner is an automatic resubmission on most review desks.
• Flat surface, plain and dark background, document not held in the hand if you can avoid it.
• Daylight from the side. Never the flash, which blows out the laminate on an identity card and erases exactly the data strip being checked.
• No glare across the photo page or the machine-readable zone at the bottom.
• Every character legible at full zoom, including the small print on a utility bill.
• The original file from the camera, not a screenshot of a photo or a scan of a print.
• Colour, never greyscale, and never a photocopy.
• Nothing cropped out “for privacy”. Redacting the middle digits of a card number is usually permitted and sometimes requested; redacting an address or a date of birth will fail.

For a utility bill, the four elements a reviewer looks for are your full name, your full address, the issuer’s name and a date inside the recency window. If one of those is on a second page, send both pages. A bill that opens with a logo and a reference number but puts the address on page two is a classic avoidable rejection.

What causes rejections

Having read a lot of player accounts of this process, the failures cluster into a short and fairly predictable list:

Two of those deserve emphasis because they are structural rather than clerical. A payment method in somebody else’s name is the hardest problem on the list, since no amount of correspondence turns it into yours; the money generally has to go back the way it came. And a profile address that no longer matches your documents because you moved is worth fixing before you request a payout, not after.

What phone and face verification involve

These additional steps alarm people more than they need to. A telephone check is typically a short call to the number on your profile, confirming your name, date of birth and that you recognise a recent transaction. Nobody asks for a password, and nobody should; a caller who does is not the casino.

A facial check, often called a liveness check, is run through the browser or a provider’s app. You look at the camera and follow a prompt to turn your head or blink, and software compares the result with the photo page of the document you already submitted. It takes under a minute. It exists because document images can be stolen and faces are considerably harder to borrow.

Lizaro’s terms reserve the right to run either. Treat them as belonging to the same exercise rather than as a sign that something has gone wrong with your account.

Source-of-funds requests, and when they appear

This is the heaviest request in the set and the least understood. A source-of-funds check asks you to document where the money you gambled with came from. It is not an accusation. It is the enhanced due diligence step that anti-money-laundering frameworks require once a customer relationship passes certain thresholds or shows certain patterns.

It commonly appears when cumulative deposits reach a sizeable figure, when a single transaction is unusually large relative to your history, when funds arrive from several unrelated methods, or when deposits do not match the economic profile you declared. What satisfies it is ordinary paperwork: recent payslips, a tax return, bank statements showing the salary credit, a contract of sale if the money came from selling something, pension or dividend statements.

The way to make this painless is to answer the question that was asked. If a reviewer wants to see €4,000 of deposits accounted for, a statement showing the corresponding credits closes the matter. A long explanatory e-mail with no documents attached does not, and typically starts a second round. Send the paperwork, keep it to the point, and send it once.

Realistic expectations about timing

Inventing a turnaround figure for any operator would be dishonest, because the real answer depends on three things: the review desk’s queue, whether your first submission was clean, and whether the automated stage escalated to a human. Across the industry, a complete and well-photographed submission at a mid-sized casino is usually handled within a few days. An incomplete one restarts the clock at whatever point the reviewer sends it back, which is the real reason some players report a fortnight.

What you can control is narrower but decisive. Submit early, submit complete, send colour originals, make the names match, and reply to a request for more within hours rather than days. Players who do all five rarely talk about verification afterwards. Players who do none of them write the forum posts.

What happens to your documents afterwards

You are handing over a passport scan, so it is fair to ask. Under European data-protection law a copy of an identity document is personal data processed for a legal obligation, which means it should be held only as long as the anti-money-laundering retention period requires, kept secured, and not used for marketing. You retain the right to ask an operator what it holds about you and to ask for deletion of anything outside that legal basis.

Two practical habits follow. Upload through the account’s own secure form rather than attaching documents to ordinary e-mail where you can, since e-mail sits in two inboxes indefinitely. And keep a note of what you sent and when. If a request repeats months later, that note saves you reconstructing it from memory.

A pre-emptive checklist

Ten minutes on the day you register removes nearly every problem described above:

• Register in the exact name printed on your identity document, including middle names if they appear there.
• Enter the address that matches your current bills, not an old one you remember better.
• Photograph your identity document and a current utility bill or statement in daylight and save both.
• Check your payment method is in your own name before the first deposit, not before the first withdrawal.
• Upload everything immediately, before you play.
• Keep the files somewhere you can resend them in a minute.

The whole point is to move the check off the critical path. Verification that happens while you are playing costs you nothing. Verification that happens while you are waiting for a payout costs you the wait.

Related reading

Verification sits directly in front of a payout, so the two topics interlock. Our breakdown of which cashier rails clear fastest and what they cost covers the step after this one. If you are weighing a bonus before funding anything, the rollover maths explainer is the other number worth reading first, and the safer-play guide covers the controls to set in the same sitting. The guides hub lists the rest.

Frequently asked questions

Sources

• EU Directive 2015/849: the anti-money-laundering framework behind customer due diligence (1)
• FATF Recommendations: the international standard on identification and source of funds (2)
• GDPR, Regulation 2016/679: lawful basis and retention limits for identity copies (3)
• BeGambleAware: independent advice if verification pressure is a symptom of something larger (4)