Betting account verification is the identity check an Australian bookmaker must finish before it opens your account. It confirms who you are, usually your full name and date of birth and often your residential address, against reliable, independent data. AUSTRAC, the anti-money laundering regulator, says that since 29 September 2024 every online gambling provider has had to complete it before creating an account or providing any betting service. Until the check passes, there is no account to bet from.
The duty comes from the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (the AML/CTF Act) and measure 3 of the National Consumer Protection Framework. The same law lets a bookmaker check you again later or ask where your money came from.
Why your betting account needs verifying
The AML/CTF Act lists gambling services among its designated services (table 3 in section 6), including accepting a bet, paying out winnings and opening a betting account. Section 28 says a provider must not start providing one until it has established, on reasonable grounds, who the customer is. The Act's stated objects include detecting, deterring and disrupting money laundering, terrorism financing and other serious financial crimes (s 3).
The regulators give three reasons that apply to punters in particular:
- Crime. AUSTRAC says the check helps stop online gambling services being exploited by criminals.
- Self-exclusion. The check lets a provider identify people registered on BetStop, the national self-exclusion register, who must not be given an account.
- Age. The Department of Social Services says underage gamblers and people who have self-excluded are more vulnerable, and that checking identity before betting starts reduces harm for both. A provider that verifies a customer as under 18 must close the account at once and return every deposit.
Betting accounts in Australia sets out an account's other protections, from deposit limits to monthly statements.
The exemptions for TABs and on-course bookmakers
Section 39E switches the duty off for some gambling services: a TAB (the Act's "totalisator agency board") or an on-course bookmaker accepting a bet, or paying out winnings under $5,000, unless enhanced checks apply to that customer. AUSTRAC says the $5,000 threshold applies from 31 March 2026. Opening a betting account has no such exemption, so an online account cannot exist without the check. Bookmaker names are trade marks of their owners. B337 is not affiliated with them.
How the 72-hour verification rule was replaced
The window for verifying a new online customer closed in stages, and the overhaul of the Act that took effect on 31 March 2026 renamed the checks without moving them.
| From | The rule for a new online account | In practice |
|---|---|---|
| Before 26 February 2019 | Verified within 90 days | Up to 90 days could pass before the check |
| 26 February 2019 | Within 14 days, under measure 3 of the national framework | A fortnight's window |
| 2 May 2022 | Within 72 hours, under Chapter 10 of the AML/CTF Rules | An account opened at 8 pm on a Friday had until 8 pm on the Monday |
| 29 September 2023 | Section 10.4 of the Rules repealed; under interim arrangements to 28 September 2024 an account could still be opened first in special circumstances, but no deposit or bet was allowed until the check passed | Verified before the first deposit or bet |
| 29 September 2024 | Identity confirmed before any account exists or any service is provided | No unverified online account at all |
| 31 March 2026 | The reformed Act calls the checks initial customer due diligence; existing providers may keep their earlier procedures for chosen classes of customer until 31 March 2029 | Identity still comes first |
The 2026 change is set out in AUSTRAC's transitional rules guidance. The Department of Social Services still lists measure 3 as requiring verification at registration and before a bet can be placed (checked October 2026).
What a bookmaker checks, and the documents it can ask for
KYC, short for know your customer, is the anti-money laundering term for the details a provider collects about you and then confirms. For an individual punter that starts with your full name, date of birth and residential address, and the Act asks the provider to verify them "using reliable and independent data" to the degree your risk calls for (s 28(3)). The checks can take three routes.
| Route | What happens | What protects you |
|---|---|---|
| Electronic document check | Your licence, passport, Medicare card or other Australian document is matched against the issuer's record through the Australian Government's Document Verification Service, which usually answers yes or no and does not check photos | The business needs your express consent, and cannot assume it or make you opt out |
| Credit reporting body match | A credit reporting body says whether your name, address and date of birth match its records, as one combined assessment (s 35A and 35B) | Only with your express agreement and another way to verify on offer; a failed match must be explained in writing, naming the body (s 35C) |
| Documents you upload | A person checks images of your documents | AUSTRAC says one photo ID showing your full name, residential address and date of birth can be enough in some circumstances, and a digital driver's licence is acceptable ID; each provider says what it accepts |
According to IDMatch, the Document Verification Service can check 14 document types (checked October 2026). Among them are driver licences, passports, Medicare cards, visas and birth certificates, and, generally only for anti-money laundering purposes, address details held by the Australian Electoral Commission. Apart from a record it must keep for 7 years and then delete, the law bars a credit reporting body from holding information about a verification request (s 35D and 35E).
Why an electronic check comes back negative
The service compares what you typed with the issuer's record, so small differences matter. "Jim" where your licence says "James", a middle name your passport carries and your sign-up leaves out, or an address you moved into last month can each fail the match. Give a residential address too: AUSTRAC lists a post office box or business address supplied in place of one among its warning signs for online betting. Fix the details, or send the documents the provider asks for; how to open a betting account covers the sign-up steps around the check.
Why withdrawals wait for verification
Money can reach an account before it is allowed to leave. The national framework's policy statement bars withdrawing winnings before your identity is positively verified. AUSTRAC's guidance on delayed checks adds that where a provider has put off any part of its checks, it must finish them before it transfers money to you or otherwise makes it available. When a provider refunds a customer it will not keep, AUSTRAC says electronic deposits should go back to the account they came from where possible.
A new online account can no longer open unverified, so a verification hold on a withdrawal now points to a later check. The Act requires a provider to review your details at a frequency that suits your risk, and whenever it doubts them, and to update and re-verify them where appropriate (s 30(2)(c)). Asking for winnings to be paid into a bank account in someone else's name, or into a different account from the one your deposits came from, is one trigger: AUSTRAC lists both among its indicators for online betting. Betting withdrawals covers the timing once a request is approved.
Source of funds requests
A source of funds request asks how you came to have the money you bet with: wages, business income, the sale of an asset, a gift or an inheritance. AUSTRAC says it does not mean the bank account the money was sent from. A source of wealth question goes further, to how you came to own everything you have.
The Act requires enhanced customer due diligence when a customer's money laundering risk is high (s 32), and the AML/CTF Rules add customers who seek unusually large or complex transactions or an unusual pattern of them (rule 6-20). Where your risk is rated high, the provider must hold information on your source of funds and wealth if it is relevant to that risk (rule 6-21). AUSTRAC's public guidance adds that higher risk can prompt the question even from a long-standing customer.
Example: Illustrative figures. You deposit about $150 a week, roughly $600 a month (150 x 4). Then $2,000, $3,500 and $4,000 go in over one week: $9,500, close to 16 times a normal month (9,500 / 600 = 15.8). AUSTRAC lists a rise in the number or value of deposits, and several deposits in a short time, among its indicators, so a question about where the money came from is a predictable next step. A payslip summary showing a bonus, or the contract for a car you sold, answers it; a screenshot of the transfer from your own bank account does not.
AUSTRAC's examples of acceptable evidence include a payslip summary or a letter from your employer, and a signed letter from your accountant. An executor's letter confirming an inheritance, or the sale record or title deed from a property sale, is on its list too. AUSTRAC also lists a customer who will not provide proof of source of funds or wealth when asked among its indicators for online betting, though it stresses that one indicator on its own may not suggest anything.
Do not expect a full explanation of why you were asked. If a provider has reported a suspicion to AUSTRAC, section 123 of the Act makes it an offence to disclose that where the disclosure could prejudice an investigation.
Your privacy when you hand over ID
The Office of the Australian Information Commissioner (OAIC) says every business with AML/CTF obligations must follow the Privacy Act when it handles your information for those checks, whatever its size. The business must collect only what is reasonably necessary (OAIC guidance updated 28 August 2026). The OAIC adds that from 31 March 2026 the Act does not require a business to keep scanned copies of identity documents, and that copies should be destroyed once no longer needed. In their place, it says, a business should keep details such as your name, date of birth, document number and the check's outcome. Your rights along the way:
- You can ask a bookmaker for the personal information it holds about you, and ask it to correct anything inaccurate, out of date, incomplete, irrelevant or misleading. The OAIC treats 30 days as a reasonable time to answer, and a correction costs nothing.
- A business that checks you through the Document Verification Service must not use that information to build a profile of you, advertise to you or do market research.
- A breach of the credit reporting rules above is an interference with your privacy under the Privacy Act (AML/CTF Act s 35L).
Complain to the bookmaker first. If it has not answered within 30 days, or you are unhappy with the answer, you can lodge a written complaint with the OAIC. Protecting the account itself, with a unique password and two-factor login, is covered in betting account security.
Mistakes that slow verification or cost you the account
| Mistake | What it costs |
|---|---|
| A nickname, a shortened name or an old address at sign-up | The electronic match fails, so the account waits on a manual document check |
| Opening or using an account in someone else's name | Each account is verified to one person, and AUSTRAC lists accounts opened under a fake name among its indicators; expect closure under the bookmaker's terms |
| Moving house or changing your name without updating the account | Your details stop matching, so the next re-check or withdrawal can stall |
| Answering a source of funds request with a transfer screenshot | It shows where the money moved from, not how you earned it, so the request stays open |
| Uploading ID through a link in an unexpected text or email | The link may lead to a fake site that keeps your documents; go to the bookmaker directly, through its app or the web address on its ACMA register row |
Risk: Betting involves risk. Passing an identity check confirms who you are; it does nothing to limit what you can lose, so set a deposit limit when the account opens and see responsible gambling for BetStop and other tools. For free and confidential support call 1800 858 858 or visit gamblinghelponline.org.au.