High-roller accounts represent both a significant revenue opportunity and one of the most scrutinised compliance obligations an iGaming operator faces. Regulators across Malta, Gibraltar, the Isle of Man and the UK have sharpened their expectations around source of wealth (SoW) and source of funds (SoF) checks, and banking partners are increasingly using the quality of these checks as a criterion for maintaining payment rails. Getting this right is not optional.
Understanding the Distinction: SoW vs SoF
Operators sometimes conflate these two concepts, which creates gaps that regulators are quick to identify. Source of funds refers to the specific origin of the money a player deposits and wagers, meaning the particular account, transaction or income event that generated the funds in play. Source of wealth is the broader picture: how the player accumulated their total net worth over time.
Both are required for a complete high-value customer profile. A player may legitimately transfer funds from a personal savings account (SoF) while the underlying wealth derives from the sale of a business five years ago (SoW). Each requires separate documentation and a separate risk assessment.
What Regulators Expect to See
Licensing authorities have moved well beyond accepting a player's verbal declaration. Based on current supervisory guidance and enforcement outcomes visible across major jurisdictions as of mid-2025, regulators expect operators to maintain the following for any customer whose cumulative deposits or losses exceed internal EDD thresholds:
- A completed and documented SoW/SoF review, not merely a request sent to the player
- Independent corroboration of the declared source, such as tax returns, company accounts, dividend certificates, property sale completion statements or inheritance probate documents
- A written risk assessment that weighs the evidence against the player's betting patterns and account history
- Clear records of who reviewed the file, when, and what decision was reached
- Periodic refresh of the assessment for ongoing high-value relationships, typically annually or following a material change in the player's profile
Regulators have fined operators specifically for treating a payslip as sufficient evidence for a player whose deposits far exceeded any plausible salary. The adequacy of the evidence must be proportionate to the size and pattern of the spend.
What Banking Partners Require
Acquiring banks and payment processors that service iGaming operators conduct their own periodic reviews of merchant compliance programmes. They are directly exposed to regulatory and reputational risk if a merchant's AML controls are found to be inadequate. In practice, banking partners increasingly ask to see:
- Written EDD policies with defined monetary thresholds for triggering SoW and SoF checks
- Evidence that those policies are actually applied, through sample case files or compliance audit summaries
- The escalation path when documentation is unsatisfactory or when a player refuses to provide it
- Confirmation that suspicious activity reports are filed where appropriate and that accounts are suspended pending review when risk is elevated
A bank that is not satisfied with an operator's SoW/SoF framework may restrict processing volumes, require a compliance deposit or, in the worst cases, terminate the merchant relationship with short notice. The commercial consequence of weak compliance is therefore not limited to regulatory fines.
Building a Defensible Process
The most common compliance failure is not the absence of a policy but the inconsistent application of one. Operators should build their high-roller EDD process around three practical principles.
Define Thresholds in Writing
Set clear, documented monetary triggers for SoW and SoF checks. These may be based on single-session loss, cumulative monthly deposits or a combination of both. Thresholds should be reviewed annually and adjusted to reflect changes in player base and regulatory guidance.
Verify, Do Not Just Collect
Receiving a document is not the same as verifying it. Compliance teams must assess whether the document is consistent with the player's stated profile, check for signs of alteration, and where necessary seek a second independent source. Where documents cannot be independently verified, the risk assessment must reflect that limitation explicitly.
Document the Decision Trail
Every SoW and SoF review should produce a written record that explains what evidence was obtained, what gaps exist, what risk rating was assigned and who approved the decision to continue, restrict or close the account. This documentation is what regulators and banking partners will ask to see first during any audit or review.
A complete SoW and SoF file is not a collection of documents; it is a reasoned conclusion supported by evidence. Regulators and banking partners are looking for the reasoning, not just the paperwork.
