Enhanced due diligence is no longer a checkbox exercise. For iGaming operators navigating 2026 regulatory expectations, EDD has become a commercial decision with measurable costs on one side and quantifiable risk-reduction value on the other. Understanding that economic equation is the starting point for building a proportionate, defensible compliance programme.
What Triggers Enhanced Due Diligence in iGaming?
EDD obligations arise when a customer or transaction presents elevated money-laundering or fraud risk. In regulated iGaming markets, common triggers include deposits that exceed a defined monetary threshold, customers classified as politically exposed persons, funding sources that cannot be readily verified, and behavioural patterns that deviate sharply from a player's established profile. Regulatory guidance across major jurisdictions, including the UK Gambling Commission, the Malta Gaming Authority, and Dutch KSA, consistently reinforces a risk-based approach: the depth of scrutiny applied must be proportionate to the risk identified, not applied uniformly to every player.
The Economics of Setting EDD Thresholds
Threshold calibration is where compliance and commercial strategy intersect. Set the trigger too low and operators incur unnecessary friction on lower-risk accounts, reducing conversion and lifetime value. Set it too high and genuine high-risk activity escapes adequate scrutiny, creating regulatory exposure and potential licence risk.
A practical way to frame the cost side of the equation is to separate fixed costs from variable costs:
- Fixed costs: technology infrastructure, compliance staffing, training programmes, and third-party identity verification integrations.
- Variable costs: the per-review cost of each EDD case, which typically includes analyst time, document review, source-of-funds verification, and in some cases enhanced screening against sanctions and adverse media databases.
Industry benchmarks suggest that a manual EDD review, end to end, costs an operator between 30 and 120 euros per case depending on complexity and the tools available. An operator processing 500 EDD cases per month at the upper end of that range faces an annual compliance cost exceeding 700,000 euros from EDD alone, before factoring in staff overheads and technology licences.
Where Automation Changes the Calculation
Automated identity verification, AI-assisted document review, and real-time source-of-funds risk scoring can reduce per-case costs significantly. Operators that have integrated purpose-built compliance technology report bringing variable costs down to the 15 to 40 euro range per case, without reducing the quality of the review. The fixed investment in that technology typically ranges from 80,000 to 250,000 euros annually for a mid-tier operator, meaning the return on automation becomes positive once volume exceeds a few hundred cases per month.
Beyond cost reduction, automation delivers two further returns that are harder to quantify but commercially significant: faster review turnaround, which reduces player drop-off during EDD friction, and more consistent decision-making, which strengthens audit trails and reduces regulatory risk.
The Return Side: What Good EDD Actually Prevents
Calculating the return on EDD investment requires operators to think in terms of avoided losses rather than generated revenue. The relevant categories include:
- Regulatory fines: enforcement actions for AML failures in iGaming have ranged from five-figure penalties for smaller operators to nine-figure settlements for large groups. A single serious finding can dwarf years of compliance expenditure.
- Chargeback and fraud losses: EDD processes that confirm source of funds reduce exposure to payment fraud and card-not-present abuse, which remains a material cost for operators accepting card deposits.
- Reputational damage: negative press coverage tied to money-laundering allegations has a measurable impact on player acquisition costs and affiliate partner confidence.
- Licence suspension or revocation: the loss of a primary market licence can be existential for an operator whose revenue is concentrated in one jurisdiction.
Practical Threshold Recommendations for Operators
There is no universal threshold that suits every operator. Risk appetite, player demographics, product mix, and jurisdictional requirements all shape the right calibration. That said, a workable starting framework for most operators in regulated European markets includes a trigger at around 2,000 euros in cumulative deposits within a rolling 30-day window, combined with behavioural flags such as rapid escalation in stake sizes or unusual withdrawal patterns. This framework should be reviewed quarterly and adjusted based on SAR conversion rates, false positive volumes, and any regulatory feedback received during audits.
A compliance programme that cannot demonstrate a clear link between its EDD thresholds, its risk appetite statement, and its SAR filing history will struggle to satisfy a regulator during an inspection, regardless of how much it has spent.
Building a Business Case for EDD Investment
When presenting EDD budgets internally, compliance teams benefit from framing the conversation around expected value rather than cost alone. A simple model compares the probability-weighted cost of regulatory action against the annual cost of the compliance programme. For most licensed operators in 2026, that model returns a compelling case for investment, particularly when automation is factored in as a cost-reduction lever rather than an additional expense.
