Large operators have dedicated EDD teams, proprietary data feeds and long-standing relationships with screening vendors. Smaller licensees often assume they cannot match that depth when a high roller walks through the door. In practice, a well-designed process beats raw headcount, and this article shows how to build one.
Why Source of Wealth and Source of Funds Are Distinct Obligations
Regulators and auditors treat these two concepts separately, and operators should do the same. Source of funds (SOF) answers the narrow question: where did the money used in this transaction originate? Source of wealth (SOW) answers the broader question: how did this person accumulate their overall net worth? For a high-value player, both questions must be answered to a standard that satisfies your licensing authority, whether that is the MGA, UKGC, Curacao or another jurisdiction.
Failing to distinguish them is a common gap. A player who wire-transfers funds from a personal bank account has demonstrated SOF, but that tells you nothing about whether the underlying wealth is legitimate. Regulators expect operators to go further, and enforcement actions in 2025 repeatedly cited this precise shortcoming.
Setting the Right Triggers for Small Operators
Large operators can afford continuous transaction monitoring across millions of accounts. Smaller operators should instead define precise, documented thresholds that automatically escalate a player file for enhanced due diligence (EDD). Practical starting points include:
- A single deposit or a rolling 30-day deposit total that exceeds a defined monetary threshold aligned to your risk appetite and licence conditions.
- A withdrawal request that is disproportionate to the player's verified income profile on file.
- A sudden change in deposit frequency or average bet size, flagged by even basic rules-based monitoring.
- Any mismatch between stated occupation and observed spending patterns.
Document every threshold in your AML/CTF policy and review them at least annually. A well-calibrated trigger system means your compliance team focuses effort where it matters most, without drowning in low-risk alerts.
Building an Affordable EDD Toolkit
Small operators often believe sophisticated EDD requires expensive bespoke tooling. The reality is more accessible. A practical toolkit for 2026 typically combines three layers.
Open-Source and Public Record Evidence
Company registries, land registry records, published accounts for directors of private firms, court records and adverse media searches are often free or very low cost. Training a compliance officer to conduct structured open-source intelligence (OSINT) searches takes days, not months. The key is recording the methodology, sources consulted and conclusions reached so the audit trail is defensible.
Proportionate Third-Party Verification
Several vendors now offer pay-per-search SOW and SOF verification rather than requiring annual enterprise contracts. For an operator handling a modest number of high-roller EDD cases per month, this unit-cost model is far more economical. Services can confirm employment with major employers, cross-reference declared property ownership, and scan politically exposed person (PEP) and sanctions lists in real time.
Player-Supplied Documentation with a Structured Review
Requesting documentation from players is standard practice, but many small operators fail at the review stage. A payslip, tax return, business sale agreement or inheritance letter must be assessed for internal consistency, not simply filed. Build a short checklist: does the income figure align with the player's deposit history? Does the document appear unaltered? Does the employer or solicitor named actually exist? These are checks any trained compliance officer can perform without specialist software.
Communicating EDD Requests Without Losing the Player
Large brands lean on VIP host relationships to make EDD feel routine. Smaller operators can do the same at lower cost by assigning a named account contact for every player who crosses an EDD threshold. A personal, clear communication, explaining that verification protects both the player and the platform, reduces friction and abandonment rates significantly. Frame requests around timelines, be specific about what documents are needed and confirm receipt promptly.
A proportionate, well-documented EDD process is more defensible to a regulator than an expensive system that is inconsistently applied.
Where Managed Services Close the Gap
For operators without a full-time MLRO or a compliance team of more than one or two people, outsourcing the EDD workflow to a managed-services partner allows access to specialist expertise, vendor relationships and audit-ready documentation without the overhead of building it in-house. This is particularly relevant for operators in growth phases, where compliance infrastructure often lags commercial expansion. The marginal cost of getting an EDD case wrong, in regulatory fines, licence suspension or reputational damage, consistently exceeds the cost of external compliance support.
