FATF Just Made Your Casino a Money Laundering Suspect

The Financial Action Task Force has published new risk indicators specifically targeting gaming and gambling sectors, and the language is not ambiguous. Casinos and betting operations are named as top money laundering exposure points. Not payment processors. Not crypto exchanges. Casinos and betting operations.

If you run an iGaming platform with a European licence, your regulator reads FATF guidance. Your bank reads FATF guidance. Your PSP's compliance team reads FATF guidance. What FATF publishes becomes the baseline against which your AML programme will be judged, and the new indicators raise that baseline significantly.

This is not a theoretical threat. The MGA, UKGC, Spelinspektionen, and every other serious European gambling authority will be pressure-tested by their own governments to demonstrate they are implementing FATF standards. That pressure flows directly onto operators.

What the New Indicators Actually Say

FATF's updated guidance identifies specific behavioural and transactional patterns that regulators and financial institutions should treat as red flags in gambling contexts. The indicators focus on several areas: large cash or crypto deposits followed by low-risk play and withdrawal; customers who consistently lose small amounts across extended sessions without identifiable income sources; accounts showing frequent beneficiary changes or third-party funding; and operators themselves who lack adequate source-of-funds verification at meaningful thresholds.

That last point matters most. FATF is not just flagging player behaviour. It is flagging operator conduct. If your enhanced due diligence triggers are set too high, if your source-of-funds requests are inconsistent, or if your transaction monitoring rules have not been reviewed against current typologies, the new indicators give regulators a clear framework for finding you non-compliant.

The distinction between casino and sports betting risk profiles is also sharpening. FATF now treats high-frequency, low-margin betting as a specific layering vehicle, which puts sports betting operators firmly in scope alongside casino operators who already carry the heavier AML burden.

Why European Operators Are the Primary Target

The US has a fragmented regulatory structure that makes FATF implementation inconsistent at best. In Europe, that fragmentation does not exist in the same way. The EU's Sixth Anti-Money Laundering Directive and the incoming AML Regulation are already designed to align with FATF standards, and the European Banking Authority has made clear that it expects financial institutions to use FATF typologies when assessing client risk.

This creates a direct chain. FATF publishes new indicators. The EBA incorporates them into supervisory expectations. National AML authorities update their guidance. Banks and PSPs update their merchant risk models. Gambling operators flagged under the new indicators face account reviews, enhanced monitoring requests, or termination.

Operators licensed in Malta, the Isle of Man, Gibraltar, or Curaçao and banking in Europe are not insulated by their licensing jurisdiction. The bank's compliance team operates under its own regulator's expectations, which are increasingly FATF-aligned. Your MGA licence does not protect your euro account.

The Compliance Gap That Will Get Operators Debanked

Most operators running a mid-tier iGaming operation have AML programmes that were designed to satisfy their licensing authority at the point of application. That is not the same as an AML programme that satisfies current FATF typologies.

The specific gaps that will draw scrutiny under the new indicators:

• Source-of-funds thresholds set at levels that were reasonable three years ago but now sit below what regulators expect for the risk profile of the customer base
• Transaction monitoring rules that flag individual transactions but miss patterns across sessions, accounts, or payment methods
• Third-party payment controls that rely on self-certification rather than verification
• Crypto-to-fiat flows that are treated as a payment method question rather than an AML question
• Staff training that covers the theory of AML without covering the specific typologies FATF has now named

None of these gaps are unusual. Most operators have at least two of them. The question is whether you find them first or your regulator does.

What Your Banking Relationships Will Look Like in Six Months

Banks that service gambling operators are already operating under elevated scrutiny from their own prudential regulators. BaFin, the FCA, and the De Nederlandsche Bank have all signalled in the past eighteen months that gambling sector exposure requires demonstrable risk management at the bank level, not just reliance on operator licensing.

The FATF publication gives those regulators a concrete reference point. When a bank's supervisor asks whether the bank's gambling clients present money laundering risk consistent with FATF typologies, the bank needs an answer. If the operator cannot provide documentation that their AML controls address the specific indicators FATF has named, the bank has a problem it will solve by exiting the relationship.

The operators most at risk are those who treat banking as a counterparty management problem rather than a compliance demonstration problem. Your bank does not want to understand your business. It wants to see evidence that your AML programme maps onto current regulatory expectations. The FATF publication just changed what that evidence needs to cover.

The Licensing Review Risk Nobody Is Talking About

Beyond banking, there is a licensing exposure that deserves attention. European gambling regulators conduct periodic licence reviews, and several, including the UKGC and Spillemyndigheden, have moved towards more frequent interim assessments rather than waiting for renewal cycles.

FATF guidance informs what regulators look for in those reviews. An operator whose AML programme does not reflect current FATF typologies is not just at risk of a fine. It is at risk of a licence condition being added, an audit being triggered, or a public statement of non-compliance being issued. Any of those outcomes affects your banking relationships, your PSP relationships, and your ability to operate in other jurisdictions that check regulatory history.

The Spectrum Gaming report on Evolution that circulated earlier this month is a useful reminder of how quickly compliance failures become public record. Evolution's issues were specific to its supply chain, but the lesson is general: regulators are publishing more, sharing more across borders, and treating AML non-compliance as a reputational matter for the entire sector, not just the individual operator.

Review your AML programme against the specific FATF indicators published this week. Not at your next scheduled review date. Now. Map each indicator to a control in your current framework and document where the gap is. That document is what your bank, your regulator, and your PSP will expect to see when they ask how you responded to FATF's updated guidance, and they will ask.