Sector assessment
9 laundering methods apply to this sector. 4 are rarely covered in standard AML training. The sector assessment uses 6 cases.
Operators have to distinguish a customer losing money badly from one losing it deliberately, on the same account activity.
AML and safer-gambling monitoring watch for harm, and harm looks like volatility, chasing and escalation. The launderer presents as the opposite: disciplined, unemotional, indifferent to outcome. The customer your affordability checks are least worried about is the one this typology describes.
The Gambling Commission publishes a money laundering and terrorist financing risk assessment for the British gambling industry — the 2026 assessment rates remote and non-remote casinos and betting at the highest risk and flags AI-driven pressure on due diligence controls — and has taken repeated enforcement action against operators for AML failings.
Casino operators are relevant persons under the Money Laundering Regulations. Other licensed operators sit outside those regulations and under the Gambling Commission's licence conditions instead, which impose their own source of funds and third-party payment duties. The obligation therefore comes from a different instrument depending on your licence, and the detection question in this assessment is the same either way.
Not one case. Every case that exercises a typology on your list is part of your mark, weighted by how much of your exposure it carries. The weights are derived from the register rather than chosen, so adding a case re-derives them instead of leaving the old ones wrong.
| Case | Your typologies | Share of your mark |
|---|---|---|
| The Betting Accountwritten for your desk | 7 | 41% |
| The Verification Desk | 5 | 29% |
| The Collection Network | 2 | 12% |
| The Exchange Desk | 1 | 6% |
| The Incoming Payment | 1 | 6% |
| The Payment Trail | 1 | 6% |
£99one payment, 12 months, nothing renews
£750pilot, up to 25 people, invoiced
Drawn from the full register and filtered to this sector. Each entry states what the typology looks like inside your own systems, and names the source it came from. 9 of the 9 are currently exercised by an assessment case; the rest are documented here and not yet built into one.
Accounts are opened or handed over by recruited individuals, increasingly sourced through social media and messaging platforms, and used for a short burst of receipt-and-forward activity before abandonment.
Newly opened accounts with immediate inbound-outbound throughput and no other life, device and IP reuse across unconnected customers, and a demographic skew toward students and young adults.
Small test transactions are run to establish where a firm's rules and thresholds sit, and activity is then shaped to stay just inside them. Automation makes the probing cheap and the adaptation continuous.
Sequences of small value-varying transactions preceding a step change in volume, activity that settles just below alerting thresholds across several distinct rules at once, and customers whose behaviour changes within days of a rule being retuned.
Funds are staked and withdrawn with minimal play, or bet across correlated outcomes so that losses are accepted as the cost of converting cash into documented winnings.
Operator settlements to customers whose deposits and withdrawals net close to zero over time, betting patterns designed to minimise variance rather than to win, and third-party funding of accounts.
Statements, identity documents and supporting evidence are generated rather than obtained, and are internally consistent in ways genuine documents are not.
Statements with no fees or charges across months, running balances consistent to the penny, logos at incorrect aspect ratio, institution codes in the wrong format, identity photographs internally inconsistent or inconsistent with stated age, third-party webcam plugins during liveness checks.
Rather than holding a fake face up to the camera, the attacker bypasses the camera entirely: virtual-camera software injects a pre-rendered or real-time face-swapped video stream directly into the onboarding app, so the liveness check is validating a video file rather than a person.
Emulator and virtual-camera artefacts in the capture stream, device and app-integrity signals that contradict a genuine handset, repeated onboarding attempts from the same device fingerprint under different identities, and capture metadata inconsistent with the phone the customer claims to hold.
A person who does not exist is assembled from a mixture of real and fabricated data, passed through onboarding, allowed to build a credit and transaction history, and then used as durable laundering infrastructure rather than for a single fraud.
Thin-file customers who behave impeccably for months, clusters sharing partial attributes such as address, device or contact details, credit files that begin abruptly in adulthood, and accounts whose only real purpose emerges long after onboarding.
Value is loaded onto prepaid or gift instruments, moved physically or as codes, and redeemed or resold, breaking the account-to-account chain entirely.
Bulk purchases of stored-value products at retail, card-load patterns inconsistent with any consumer use, and programme manager settlement accounts with volumes exceeding the plausible cardholder base.
A digital asset with no objective value is traded between wallets under common control at escalating prices, manufacturing a sale record that converts funds into apparent trading profit.
Marketplace settlement receipts where buyer and seller are ultimately the same interest, and gaming or marketplace platform accounts with volumes unrelated to any player base.
Capability is rented rather than built. Subscription platforms supply mule account provisioning, KYC-bypass tooling, synthetic identity generation, deepfake kits and end-to-end laundering, so an operator needs money rather than skill.
The same tooling signature across customers with no other connection: identical document templates, shared device or capture characteristics, and mule accounts appearing in coordinated batches rather than individually.
The Betting Account carries 7 of the 9 typologies above and 41 per cent of your mark. Full debrief, no account, no card.
Start The Betting AccountRun the full Gambling benchmark across up to 25 people for £750.
No integration · No customer data · Confidential cohort available
One documented case each week. One decision. The answer and the source afterwards.
