Enhanced due diligence thresholds in iGaming have been tightening across multiple regulated markets, and operators who treat these changes as minor administrative updates are taking on significant regulatory and financial risk. Understanding the practical implications of revised EDD triggers is now a core operational competency, not a back-office concern.
What Enhanced Due Diligence Actually Means in a Gaming Context
Enhanced due diligence, commonly abbreviated as EDD, refers to a deeper level of customer scrutiny applied when a player or transaction presents a higher risk profile than standard. In iGaming, EDD goes beyond collecting a passport copy. It involves verifying the source of funds, understanding the nature of a player's wealth, assessing the plausibility of their spending patterns, and maintaining ongoing monitoring that is proportionate to that elevated risk. EDD is distinct from standard KYC; it is triggered by specific risk factors rather than applied universally.
Recent Threshold Changes and Regulatory Signals
Several jurisdictions and supranational bodies have been revising the monetary and behavioral thresholds that require operators to escalate to EDD. The key developments as of early 2025 include:
- Lower deposit and loss triggers: A growing number of regulators have reduced the cumulative deposit or loss amounts that automatically require EDD. Where thresholds once sat at 2,000 EUR or GBP monthly, some frameworks now set the bar at 1,000 EUR or even lower for certain risk categories.
- Behavioral triggers alongside monetary ones: Regulators increasingly expect operators to apply EDD based on play patterns, rapid fund cycling, or unusual bonus-to-deposit ratios, not just on raw deposit figures. Monetary thresholds alone are no longer considered sufficient.
- PEP and adverse media screening at lower tiers: The expectation that politically exposed person screening and adverse media checks apply only to high-value players is fading. Regulators now expect proportionate PEP screening to begin at a much earlier stage of the customer lifecycle.
- Stricter timelines for source of funds evidence: Where operators previously had flexibility in requesting and verifying source of funds documentation, updated guidance in several markets now sets firm windows, sometimes as short as 72 hours, before accounts must be restricted pending verification.
Why This Matters for Day-to-Day Operations
The practical effect of lower thresholds is a significant increase in the volume of players who enter the EDD process at any given time. For a mid-sized operator running 50,000 active accounts, even a modest threshold reduction can push hundreds of additional players into the EDD queue each month. Without adequate staffing, tooling, and documented procedures, that queue becomes a regulatory liability.
Beyond volume, there is a player experience dimension. Operators who apply EDD clumsily, sending generic document requests with no explanation and no timeline, will see elevated churn at exactly the point where players have demonstrated financial commitment. The regulatory requirement and the commercial incentive point in the same direction: EDD must be fast, proportionate, and clearly communicated.
The Risk of Over-Compliance
It is worth noting that setting internal thresholds far below regulatory minimums, in an attempt to appear conservative, carries its own risks. Excessive friction alienates legitimate players, generates a high rate of false positives that overwhelms compliance teams, and can lead to inconsistent application of EDD across customer segments. Calibration matters as much as caution.
Building a Threshold Framework That Holds Up to Scrutiny
OnlineShine works with operators to structure EDD frameworks that are defensible, scalable, and proportionate. The core components of a robust approach include:
- A documented risk appetite statement that defines why specific thresholds are set where they are, with reference to the operator's player demographics and product mix.
- Automated transaction monitoring rules that flag behavioral triggers in real time, rather than relying solely on periodic batch reviews.
- Tiered EDD procedures that distinguish between, for example, a player who has exceeded a deposit threshold with a clean profile and one who has also triggered a velocity alert.
- Regular threshold reviews, ideally quarterly, to incorporate regulatory updates, internal data, and emerging typologies.
- Clear escalation paths to the MLRO when EDD evidence is insufficient or contradictory.
Compliance frameworks that are built around thresholds alone will always lag behind regulatory expectations. The threshold is the trigger; the quality of what happens after the trigger is what regulators actually assess during an audit.
What Operators Should Do Before Q2 2025
With several regulatory consultations expected to conclude and new guidance due in the first half of 2025, now is the right moment to audit existing EDD trigger points, stress-test your team's capacity to handle increased volumes, and review your player communication templates for EDD requests. Operators who treat this window as preparation time will be in a materially stronger position than those who wait for formal enforcement action to prompt a review.
