Last checked:
A player requesting a withdrawal from an online casino in Canada can see the transaction put on hold because federal anti-money laundering laws and provincial standards require the operator to confirm identity, player eligibility, and lawful account ownership before releasing any funds.
Under the Alcohol and Gaming Commission of Ontario (AGCO) Internet Gaming Standards, relevant player details must be collected, saved, complete, accurate, and validated before an account is even created. When a payout is requested, those checks tighten. The AGCO standards mandate that an operator must verify and authorise a withdrawal before permitting it. That includes establishing that the request originates from the verified account holder and that the funds transfer to an account the player legally holds.
Understanding why these checks occur requires examining federal anti-money laundering obligations and provincial internet gaming rules.
Online gambling operators do not collect personal data by choice; they operate under mandates established by federal statutes and provincial regulators.
The AGCO Registrar's Standards for Internet Gaming establish that only eligible individuals may create a player account, and only valid account holders may log on and gamble. Under those same standards, individuals under 19 years of age are prohibited from playing games on a gaming site, with only a limited lottery-ticket exception explicitly stated in the standard. To enforce this, the AGCO requires operators to collect, save, and validate a specific baseline of records before opening an account.
At minimum, the AGCO standards require operators to gather:
FINTRAC's published guidance on casinos confirms that identifying information collected on clients includes name, address, telephone number, date of birth, and the individual's occupation or the nature of their principal business. If an operator cannot validate this data, account access and withdrawals are frozen under regulatory directives.
Identity validation is only half of the regulatory requirement. Regulators also require operators to monitor the origin of the capital moving through their systems.
FINTRAC's casino guidance defines "source of funds" as the origin of the particular funds used for a specific transaction. The agency emphasizes that source of funds refers to how the money was acquired in the first place, not merely the financial institution from which it was transferred. According to FINTRAC, legitimate and illegitimate sources of funds can include:
Operators must conduct ongoing monitoring to determine whether a transaction matches a player's declared profile. One specific statutory exception exists in federal guidance: FINTRAC states that casinos do not have to verify identity for a transaction in which they receive $3,000 or more in funds if those funds come directly from a financial entity or public body, or from a person acting on behalf of a financial entity or public body. Outside of designated exceptions, the burden falls on the operator to verify who is wagering and how their bankroll was accumulated.
When seeking to satisfy casino verification documents Canada requirements, players often look for a universal checklist of acceptable paperwork. However, the regulatory documentation reveals distinct boundaries between mandatory disclosures and operational discretion.
The AGCO's official publications explicitly list government-issued identification. The AGCO Internet Gaming Operator Application Guide mandates disclosure materials that include government-issued identification, as well as a recent criminal background check conducted within the previous 12 months for individuals whose primary place of residence is not Canada. The AGCO's registration page similarly lists government-issued identification among core verification materials.
Beyond government identification, published federal and provincial sources do not mandate a uniform, itemised checklist for every compliance scenario. FINTRAC's casino guidance and casino information pages both refer directly to source-of-funds reviews as part of required monitoring, yet neither publication sets out an exhaustive, standardized document list specifying utility bills, bank statements, or payment card photographs. The absence of a single regulatory standard list means operators establish internal processes to satisfy the overarching legal requirement that player data remain complete, validated, and accurate.
The point of withdrawal is where compliance mandates enforce operational delays. A player may open an account and deposit funds with basic details, but funds cannot leave the platform without formal verification.
Under AGCO standards, a withdrawal cannot be completed until the operator verifies and authorises the transaction. The operator must confirm two distinct facts: that the withdrawal is initiated directly by the registered account holder, and that the destination account is legally held by that same player. If a payment method displays a name different from the verified player profile, or if the lawful ownership of the receiving account is unconfirmed, the operator cannot release the funds without violating standard conditions.
Because published guidance stops short of an itemised list, the practical checklist comes from operator compliance policy rather than from a regulation. In the Canadian market a verification request almost always resolves into three groups of documents:
Two consequences follow from this list being operator policy rather than regulation. First, the rejection reasons players actually run into — a utility bill judged too old, a cropped card photograph, a screenshot instead of a statement, a licence that expired last month — are set by the operator's own compliance desk, which is why the same document can clear on one platform and fail on another. Second, there is no appeal to a regulator over document formatting; the escalation route opens only when an operator refuses to release funds it has already verified.
Payout size does change the depth of the review. Ontario's standards require additional verification once a player's winnings reach $10,000 or more. Operators apply that threshold cumulatively on their own platform rather than across the market, because no register ties a player's balances together between operators. Alberta has run its own regulated market since 13 July 2026, and the lottery corporations outside Ontario and Alberta publish their verification rules in their own account terms rather than through a shared provincial standard.
Payout holds remain rooted in a direct compliance mandate: Canadian operators cannot release money until they independently verify that the account holder is of legal age, the profile details are validated, and the payout destination is legally owned by the registered individual.
FINTRAC defines source of funds as how the money was acquired in the first place, not the institution it was transferred from, and operators must monitor on an ongoing basis whether a transaction matches the profile a player declared.
FINTRAC states that casinos do not have to verify identity for a transaction in which they receive $3,000 or more if the funds come directly from a financial entity or public body, or from someone acting on its behalf.
No. Operators apply it cumulatively on their own platform, because no register ties a player's balances together between operators.
Every brand on this site is matched against the regulator that actually licenses it — AGCO with iGaming Ontario in Ontario, AGLC in Alberta, the provincial lottery corporation elsewhere — and we read the payout, bonus and verification terms in full before the page goes up. There is no Canada-wide casino licence, so we name the province each time.
Some outgoing links earn us a commission. It never buys a place in a table or a better score: the order comes from the checks set out in how we rate. Spotted something out of date? Tell the editors.
19+ in most provinces, 18+ in Alberta, Manitoba and Quebec. Free, confidential help in Ontario: ConnexOntario 1-866-531-2600, 24/7. Other provinces: where to get help.