In Great Britain, that question should be risk-based. It is not the same as identity verification, source of wealth or the light-touch financial vulnerability check. There is no universal source-of-funds trigger at one published deposit amount. Different operators, products, risks and jurisdictions can therefore produce different requests.

This article explains the British regulatory distinctions using official material checked on 15 September 2026. It cannot determine what evidence an operator lawfully needs in an individual case, and it is not legal advice.

One document can be asked to answer four questions

A bank statement may appear in several review processes, but the label on the request matters. The same file does not turn four different questions into one check.

One document can be asked to answer four questions
CheckThe question it is meant to answerWhat it does not establish by itself
Identity verification or KYCWho is the customer, and do the identifying details match?How the money used for a particular deposit was earned or acquired
Source of fundsWhat activity produced the specific money used in the transaction or gambling relationship?The customer's entire net worth or whether all future gambling is affordable
Source of wealthHow did the customer build their overall body of wealth?The precise path of one deposit without transaction-level evidence
Financial vulnerability checkDo specified public records indicate significant financial vulnerability?That the money is criminal, unaffordable or from a particular source

The United Kingdom's HM Revenue & Customs defines source of funds as the origin of money used in a specific transaction. Source of wealth is broader: it concerns how a person's total wealth was accumulated. Its July 2026 guidance also makes a useful operational point—seeing that money came from a UK bank account establishes a route, not necessarily the activity that generated it. HMRC's source-of-funds and source-of-wealth guidance.

That distinction applies beyond gambling, but it explains why a payment receipt alone may not answer the operator's question. Our comparison of open banking and debit-card gambling payments follows the payment route; a source-of-funds review looks further upstream.

Source of funds follows the money back to an activity

Suppose a customer transfers £2,000 from a current account and says it came from salary savings. The bank statement can show possession and movement of the money. Regular salary credits, a payslip or tax record may help connect that balance to employment. If the explanation is an inheritance, property sale, investment disposal or gift, a different chain of evidence may be relevant.

Those are examples, not a universal document list. HMRC tells supervised businesses to collect and assess evidence in proportion to risk rather than treating document collection as a tick-box exercise. The useful question is whether the explanation and records make sense together—not whether a customer uploaded the largest possible pile of personal data.

Three links can therefore be present in a coherent review:

  1. Origin: the activity that generated the specific funds, such as employment, a sale or an inheritance.

  2. Possession: evidence that the customer controlled the money.

  3. Transit: the route from that source into the payment method and gambling account.

A gap does not automatically prove wrongdoing. It tells the reviewer which part of the story remains unverified. The product should communicate that question precisely enough for the customer to answer it.

Why a gambling business may need to ask

British gambling operators have anti-crime duties, although the detailed legal framework is not identical for every licence and product. The Gambling Commission's Proceeds of Crime Act advice says operators are responsible for keeping crime out of gambling and should assess money-laundering risk in the way their business is structured and operated. The Commission's POCA guidance.

For casino operators covered by the Money Laundering Regulations, enhanced customer due diligence is mandatory in specified higher-risk situations. The Commission lists high-risk-country relationships, politically exposed persons, false identification, unusually large or complex transactions, unusual patterns and transactions without an apparent economic or legal purpose. Depending on the case, enhanced measures can include information about source of funds and source of wealth. The Commission's enhanced due-diligence guidance.

Current risk signals are more concrete than “large deposit”. The Commission's July 2026 remote-casino risk assessment includes third-party funding, spending disproportionate to declared circumstances, a payment method not in the customer's name, withdrawals after minimal play, multiple payment methods, e-wallets, prepaid instruments and cryptoassets. These are risk indicators, not findings that every customer using one of those routes has committed an offence. The 2026 British gambling money-laundering risk assessment.

The operator cannot outsource the conclusion to the bank or payment provider. The Commission has warned that a gambling business remains responsible for sufficient customer checks and should not rely on a third party's KYC or source-of-funds work without scrutiny. Its October 2025 emerging-risks notice.

There is no universal £150 source-of-funds rule

The £150 figure now visible in British gambling rules belongs to a different control. Under Licence Condition 3.4.4, relevant remote licensees must conduct a financial vulnerability check when deposits minus withdrawals exceed £150 in a rolling 30-day period, unless a qualifying vulnerability check or financial risk assessment was completed within the previous 12 months.

That is a light-touch public-record check. At minimum, it looks for specified indicators such as bankruptcy orders, County Court Judgments, Individual Voluntary Arrangements and Debt Relief Orders. The condition requires the operator to consider the result alongside other information and take proportionate action where risk is identified. It does not say that crossing £150 automatically requires a customer to upload bank statements or prove source of funds. The current financial vulnerability check condition.

A vulnerability check and a source-of-funds review may occur around the same account activity, but they are not interchangeable:

  • one asks whether particular public records indicate financial vulnerability;

  • the other asks where specified gambling money came from;

  • a separate customer-interaction process may consider whether behaviour suggests gambling harm.

Collapsing all three into “affordability” leaves both the customer and the support team guessing about the evidence required.

Why source-of-funds checks appear at withdrawal

The awkward moment is familiar: deposits were accepted, play continued, and a detailed information request arrived only after the customer tried to withdraw. A new legal concern can arise at that point, so not every late request is improper. But the timing is not supposed to be a commercial trap.

Licence Condition 17.1.1 requires relevant remote licensees to verify identity before the customer is permitted to gamble. It also says a withdrawal request must not create a demand for additional information that the licensee could reasonably have requested earlier, while preserving requests required by another legal obligation at that time. The customer identity verification condition.

The Gambling Commission's 2024 withdrawal review applies that principle directly to source-of-funds and source-of-wealth requests. Operators should monitor accounts on an ongoing, risk-sensitive basis and seek proportionate evidence when necessary. They should not accept deposits indefinitely and then use an AML process to frustrate a withdrawal where the information should have been sought earlier. The Commission's account-withdrawal expectations.

Our guide to why gambling withdrawals take longer than deposits maps the other clocks around account release and payment rails. A source-of-funds review is one possible clock, not a blanket explanation for every delay.

A good request asks for an evidence chain, not “everything”

Regulation can limit what an operator may disclose when an explanation would prejudice an investigation or tip someone off. Outside that boundary, the Commission expects operators to make proper efforts to explain checks and restrictions rather than hide behind “regulatory purposes”.

That creates a product-design test. A clear source-of-funds request should tell the customer, as far as the operator lawfully can:

  • which check is being performed;

  • which payment, period or account activity needs explanation;

  • what part of the source, possession or transit chain is missing;

  • which document types are acceptable for the stated source;

  • where the evidence can be uploaded securely;

  • whether access, deposits, play or withdrawals are restricted while review continues; and

  • how the customer can challenge or escalate a decision.

This is an editorial checklist, not a statement that every case requires all seven fields. Its purpose is to separate a usable request from an unexplained demand for a customer's entire financial life.

The customer should use the operator's authenticated upload route, check that the request comes from the genuine business and avoid sending sensitive records to an unofficial address. If the scope is unclear, asking which transaction, time period and source must be evidenced is more useful than guessing. Documents should not be altered to conceal a material fact; questions about permitted redaction belong with the operator or an appropriate adviser.

The review belongs in the same chronology as the payment

For an operator, source-of-funds work fails when compliance, payments and support each see a different story. The case needs stable links between the deposit, customer explanation, evidence received, review decision, account restriction and any eventual withdrawal release. That chronology should preserve what was known at each point rather than rewriting the original transaction.

It also needs a different status from a payment dispute. A source-of-funds review investigates provenance; a gambling chargeback asks whether a card-scheme dispute condition applies. One should not silently close, reverse or prove the other.

The durable answer is simple: source of funds means the origin of the specific money used to gamble, not the mere existence of a bank account and not a survey of every asset the customer owns. The harder operational job is to ask that question at the right time, for a documented risk reason, and in language that tells a real person what gap must be filled.