Across regulated iGaming markets, source of wealth and source of funds checks for high-value players have moved from a box-ticking exercise to a front-line compliance priority. Regulators in the UK, Malta, and several emerging European jurisdictions have sharpened their expectations significantly over the past twelve months, and operators who still rely on informal thresholds or loosely documented procedures are carrying real licence risk into 2026.
Understanding the Distinction: Source of Funds vs. Source of Wealth
These two terms are related but distinct, and conflating them is one of the most common compliance errors operators make. Source of funds refers to the specific origin of money deposited or wagered, for example, a salary payment, a property sale, or an investment withdrawal. Source of wealth refers to the broader picture of how a player accumulated their overall net worth. Both must be established for high-risk and high-value players, but the evidence required for each differs considerably.
For source of funds, operators typically request recent bank statements, payslips, or transaction receipts that directly link the deposited money to a legitimate activity. For source of wealth, the documentation is more extensive: business ownership records, audited accounts, inheritance documentation, or a combination of these. Regulators now expect operators to verify, not merely collect, this documentation.
What Has Changed in 2025
Several regulatory developments have redefined the practical standard for high-roller due diligence this year:
- Lower trigger thresholds: Both the UK Gambling Commission and the Malta Gaming Authority have signalled through enforcement actions and guidance updates that operators should not wait for arbitrarily high deposit amounts before initiating enhanced due diligence. Risk-based triggers, including velocity of play, rapid account balance escalation, and geographic risk factors, are now expected to prompt checks far earlier than a fixed monetary threshold alone.
- Verification, not just collection: Accepting a document at face value is no longer sufficient. Operators are expected to cross-reference submitted evidence against open-source intelligence, Companies House or equivalent business registries, and where appropriate, third-party data providers. Passive document storage is explicitly called out in recent enforcement notices as inadequate.
- Contemporaneous record-keeping: Regulators expect operators to document not only what evidence was collected but when it was requested, how long the player had to respond, what internal review took place, and what business decision followed. This audit trail is examined closely during licence reviews.
- Ongoing monitoring obligations: A completed source of wealth check is not a permanent clearance. If a player's spending pattern changes materially, or if new adverse media surfaces, operators are expected to re-verify. Static, one-time EDD is increasingly viewed as non-compliant.
Operational Implications for Operators
The practical challenge for most operators is balancing thorough due diligence with player experience. A high roller who faces a clumsy, intrusive documentation request may simply move to a competitor. Getting this balance right requires both process design and staff competence.
Tiered Documentation Frameworks
Leading compliance teams now operate tiered frameworks where the depth of evidence required scales with the player's risk profile and cumulative deposits. A player depositing within a moderate band might need payslips and a bank statement. A player with a seven-figure annual turnover requires a fuller wealth picture. Defining these tiers clearly in your AML policy and training staff to apply them consistently is the baseline expectation.
Player Communication Matters
How operators request documentation shapes the player's response. Framing the check as a routine account verification, explaining that it protects both parties, and offering multiple submission options reduces friction and increases cooperation rates. Operators who treat this as an adversarial process create unnecessary churn and incomplete files.
Third-Party Data Integration
Several specialist providers now offer real-time wealth screening that can pre-populate risk assessments with publicly available financial data on high-net-worth individuals. Integrating these tools into the onboarding and ongoing monitoring workflow reduces manual effort and strengthens the evidentiary basis for decisions.
Regulators are not simply asking whether you collected documentation. They are asking whether you understood it, challenged it where necessary, and made a defensible decision based on it.
Where Operators Most Commonly Fall Short
- Setting fixed monetary triggers rather than risk-based ones, missing players who spread deposits across accounts or time periods.
- Accepting self-certification from players without any corroborating evidence.
- Failing to re-trigger checks when behavioural patterns change post-onboarding.
- Inadequate staff training, particularly among VIP account managers who prioritise retention over compliance.
- Incomplete audit trails that cannot demonstrate the decision-making process to an examiner.
The OnlineShine Perspective
At OnlineShine, we work with operators across multiple jurisdictions to build source of wealth and source of funds procedures that are both regulator-ready and commercially sustainable. The operators who handle this best treat EDD not as a compliance cost but as a risk management tool that protects their licence and their reputation simultaneously. Getting the process right now, before the next wave of enforcement actions, is considerably less expensive than remediating it under regulatory scrutiny.
