Ksa wants to block suspicious bank deposits
On 8 October 2026, the Kansspelautoriteit published new guidance on verifying bank accounts and payment methods used at online casinos. The measures are intended to prevent minors, self-excluded players and unauthorised persons from using accounts that do not belong to them.
Minors managed to bypass bank checks
Investigations revealed that some minors were able to gamble using bank accounts intended for young people. More concerning still, accounts belonging to minors could be linked to adult player profiles on certain legal platforms.
In April 2026, the regulator had nevertheless stated that its research had identified only a limited number of failures in bank account verification. The new clarification published in October provides a clearer picture of the risks that were identified.
These shortcomings do not concern minors alone. According to the Ksa, they may also make it easier for people registered in the Dutch player exclusion system, known as Cruks, as well as people under court-appointed financial administration, to access gambling.
The authority also highlights the risk of one person creating multiple accounts, particularly to circumvent player limits or fraudulently benefit from promotional offers.
The player’s full name becomes essential
To address these loopholes, the Ksa has clarified the checks expected from licensed operators. Verification should no longer be limited to the information visible during a bank transfer. Casinos must ensure that all first names and the surname shown on the player’s identity document exactly match the details of the bank account holder.
This verification must take place before or during the first deposit. It must also be carried out again when a player wants to use a new bank account.
According to the regulator, transaction information generally includes only the account holder’s initials. It is therefore impossible to confirm a person’s full identity based on those details alone. An approximate match is no longer sufficient to establish with certainty that the bank account belongs to the player registered on the platform.
Three possible outcomes during verification
The Ksa recalls that a beneficiary verification system has been mandatory for payments between European banks since October 2025, in accordance with European regulations.
This mechanism makes it possible, among other things, to verify the account holder’s full identity, whether the account is personal or business-related, and how many people own it.
Casinos can rely on this system to check their customers’ payment methods. When the information matches, the account can be accepted. If the data does not match, the deposit must be rejected. In the event of a partial match, an additional manual check is required before the account can be approved.
The regulator does not, however, impose a single technical system. Other methods remain permitted, provided they make it possible to verify all of the player’s first names and surname.
Bank cards and e-wallets under scrutiny
The new guidance also covers payments made by methods other than bank transfer. Operators must be able to link every deposit to an identified player, including when the player uses Paysafe, PayPal or a credit card.
For Paysafe and PayPal, certain information about the account holder can be provided to the casino, which must then carry out its own checks.
The situation is more complex with credit cards. According to the Ksa, the systems currently available do not yet make it possible to verify all of the cardholder’s first names and surname. Operators must therefore make the fullest possible use of the available information in order to reduce the risk of use by a third party.
Business accounts are also affected
The Ksa recalls that only private individuals may register as players with licensed operators. The use of business accounts should therefore be avoided, including when they belong to sole proprietorships.
For limited liability companies and certain forms of partnerships, the problem lies in the fact that the bank account cannot be unambiguously attributed to a single natural person.
In the case of a sole proprietorship, the link to the owner is generally easier to establish. Even so, the regulator considers the use of this type of account to be “absolutely undesirable”.
This position is explained in particular by the risk of greater financial harm linked to gambling and by concerns about money laundering.
Will existing accounts need to be verified again?
The guidance does not apply only to new players. Casinos must also review accounts that are already registered if the bank identity was not verified using all of the account holder’s first names.
Operators can carry out a bulk review of their data or perform these checks the next time the player is active.
However, operators that already comply with the requirements clarified by the Ksa are not required to verify their entire customer base again.
The authority is therefore seeking to correct existing shortcomings without imposing additional checks on operators whose procedures are already compliant.
And in Belgium, how do casinos verify payments?
In Belgium, licensed online casinos are also subject to strict player identification requirements. Since 1 May 2025, identity verification has been mandatory before any deposit is made or play begins. This procedure is intended in particular to prevent fraud, identity theft and money laundering.
Players can confirm their identity using the itsme app or their electronic identity card. Operators may also request a bank statement, a photograph of a bank card or a bank certificate to verify that the payment method does indeed belong to the holder of the player account.
A Belgian casino may temporarily suspend a withdrawal and request additional supporting documents. This can happen, for example, when a player uses an account belonging to a relative or a business. Additional checks may also be carried out on a first withdrawal or when a request involves a large amount.

