Online Casinos and Money Laundering: How Technology and Regulation Are Racing to Keep Up
Report: Online Casinos, Alternative Payment Mechanisms and the Associated Financial Crime Risks (UNLV International Center for Gaming Regulation, February 2022)
Executive Summary (The Elevator Pitch)
The global online gambling market is exploding toward $100 billion by 2026, powered by apps, cryptocurrencies, and alternative payment systems like e-wallets and prepaid cards—but this digital convenience creates perfect conditions for money laundering. While well-regulated jurisdictions like the UK and Isle of Man have robust anti-money laundering controls, many operators exploit gaps by registering in loosely-regulated "grey market" jurisdictions while serving customers worldwide, making it difficult to verify where dirty money originates. Regulators are fighting back with hefty fines (up to millions of dollars), new rules requiring payment providers themselves to be regulated, and a shift from regulating where casinos are located to regulating where their customers actually gamble.
Authors & Institutions
Author: Amanda Gore
Institution: University of Nevada, Las Vegas (UNLV) International Centre for Gaming Regulation
Funding: 2021 UNLV ICGR research fellowship
Conflicts of Interest: None explicitly declared; acknowledged input from industry experts and multiple gaming jurisdictions
How Technology Changed Online Betting
Payment Innovation Creates Laundering Opportunities:
- Online gambling moved from traditional credit cards to e-wallets (Skrill, NETeller), cryptocurrencies (Bitcoin, Ethereum), prepaid cards (Paysafecard), mobile money (WeChat), and anonymous voucher systems—each layer making it harder to trace the original source of funds.
Apps Made Gambling Ubiquitous:
- Mobile apps and improved internet speeds transformed gambling from a desktop activity to something you can do anywhere, anytime, dramatically expanding the market and making it harder for regulators to monitor activity across borders.
Crypto Casinos Emerged:
- Some jurisdictions like Isle of Man now permit cryptocurrency deposits for gambling, while others ban it entirely; this creates opportunities for "regulatory arbitrage" where operators choose the most permissive jurisdiction.
Technology Blurred Physical and Digital Lines:
- "Cashless gaming" systems with QR codes now let even land-based casinos operate more like online platforms, while online casinos offer live dealers that replicate the in-person experience—the two worlds are converging.
How Regulation Changed in Response
Shift from "Where It's Licensed" to "Where Customers Are":
- Regulators moved from Point of Establishment (POE) regulation—where the casino servers sit—to Point of Consumption (POC)—where gamblers actually play; this means casinos must now register in multiple jurisdictions where their customers live, not just one friendly offshore location.
Payment Providers Now Under Scrutiny:
- Well-regulated jurisdictions now require that payment methods themselves (e-wallets, processors) must be regulated by financial authorities; casinos in Alderney can use Skrill because it's regulated by UK authorities, but cannot use cryptocurrency because Guernsey hasn't regulated it yet.
Massive Fines Send Messages:
- Regulators increasingly impose multi-million dollar penalties for anti-money laundering failures (William Hill: £6.2M, 888 Holdings: £7.8M, Annexio: £612K) plus administrative sanctions like license suspension or revocation.
Blacklists and Public Shaming:
- Many jurisdictions now maintain public blacklists of illegal operators and enforcement registers showing suspended/revoked licenses, making it easier for consumers and banks to avoid problematic casinos.
Multi-Agency Coordination:
- Gaming regulators, financial regulators, financial intelligence units (FIUs), police, and tax authorities now work together rather than in silos; suspicious transaction reports (STRs) are shared across agencies.
Emergence of Three-Tier Market:
- The report identifies "white markets" (legal and regulated, like UK), "grey markets" (legal but weakly regulated, like Curacao), and "black markets" (illegal operations)—regulators focus enforcement on moving operators from grey/black to white.
Key Strengths of the Research
Comprehensive Jurisdictional Comparison:
- The report examined multiple regulatory regimes (UK, Malta, Gibraltar, Isle of Man, Alderney, Antigua, Philippines, Curacao, Costa Rica) providing a global perspective rather than single-country focus.
Mixed Methods Approach:
- Combined policy document review, expert interviews with gaming authorities, case studies of enforcement actions, and actual "walk-through" testing of live casino payment systems—this triangulation strengthens credibility.
Practical Risk Framework:
- The Gibraltar risk assessment model (internal controls, licensing integrity, customer risks, product risks, payment method risks) provides a clear, actionable framework that other jurisdictions could adopt.
Real-World Case Studies:
- Inclusion of actual enforcement cases (NETeller, Wirecard, Full Tilt Poker) and specific regulatory actions with dollar amounts makes the risks concrete rather than theoretical.
Forward-Looking on Emerging Trends:
- The report identifies nascent issues like social gaming, crypto casinos, and NFT blockchain games before they became mainstream regulatory concerns.
Detailed Payment Method Taxonomy:
- Breaking down six categories of payment methods with specific examples and vulnerabilities is genuinely useful for understanding how money moves in this ecosystem.
Key Weaknesses and Limitations
Limited Quantitative Data on Actual Money Laundering:
- While the report describes vulnerabilities extensively, it provides little data on how much money laundering actually occurs through online casinos versus other channels—we get anecdotes but not systematic measurement.
Selection Bias in Casino Testing:
- Only two casinos were tested in the walk-through simulation, both selected "at random"—this tiny sample size and vague selection method means findings may not be representative.
Incomplete Analysis of Law Enforcement Success:
- The report lists enforcement actions but doesn't assess whether these penalties actually deter bad behavior or whether they're just "cost of doing business" for large operators.
Cryptocurrency Analysis Lacks Technical Depth:
- While mentioning blockchain analysis tools and pseudo-anonymity, the report doesn't fully explain how mixers, privacy coins, or decentralized exchanges could complicate tracking—the crypto discussion stays surface-level.
Missing Cost-Benefit Analysis:
- No discussion of whether enhanced AML controls actually reduce crime enough to justify their costs, or whether they simply push criminals to other methods—regulation is presented as unambiguously good.
Conflation of Different Crimes:
- Money laundering (cleaning existing dirty money) gets confused with other issues like fraud, tax evasion, and illegal gambling operations—these are different problems requiring different solutions.
Western-Centric Perspective:
- Focus on European and Caribbean jurisdictions with limited deep dive into Asian markets (especially China/Macau junket operators) where different cultural and regulatory dynamics apply.
"Tech Will Fix It" Optimism:
- The report suggests cashless gaming and blockchain tracking will improve oversight, but doesn't seriously engage with how determined criminals will adapt or how privacy-enhancing technologies could undermine traceability.
Limited Discussion of False Positives:
- AML systems generate enormous numbers of suspicious activity reports, most of which turn out to be legitimate transactions—the report doesn't address the burden this creates or how to improve signal-to-noise ratio.
Regulatory Arbitrage Not Fully Explored:
- While mentioned, the report doesn't deeply analyze why jurisdictions compete to offer gambling licenses or what would motivate a "race to the top" rather than "race to the bottom" in regulatory standards.
Key Takeaway for Dinner Table Discussion
The online gambling industry found itself in a cat-and-mouse game: Technology (apps, crypto, e-wallets, global internet) made it incredibly easy to move money across borders for gambling, but also incredibly hard to track where that money came from. Regulators responded by shifting focus from "where is the casino's server" to "where is the customer sitting," requiring that payment systems themselves be regulated, and imposing penalties large enough to hurt. The unanswered question is whether these new rules actually stop sophisticated money launderers or just create compliance paperwork while pushing criminals to the next innovation—like crypto mixers, NFT games, or unregulated jurisdictions willing to look the other way for tax revenue.