Casinos and Online Gambling

1. Why This Topic Matters for the CAMS Exam

Casinos and online gambling platforms sit at the intersection of several high-risk features that money launderers love: large volumes of cash, rapid transactions, a culture of anonymity and privacy, 24-hour operation, the ability to convert cash into other instruments (chips, tickets, checks, wire transfers), and in the online world, cross-border reach with weak or inconsistent identity verification. Because of these characteristics, the Financial Action Task Force (FATF) classifies casinos as Designated Non-Financial Businesses and Professions (DNFBPs), and in the United States casinos and card clubs are treated as financial institutions under the Bank Secrecy Act (BSA). This is a favourite exam area because it tests whether you understand sector-specific vulnerabilities, can recognise red flags in a scenario, and know which regulatory obligations apply.

On the CAMS exam, gambling-related questions typically appear in the 'Risks and Methods of Money Laundering and Terrorist Financing' domain, but they can also surface in compliance program design and investigation scenarios. You should expect scenario-based questions that describe a patron's behaviour and ask you to identify the most likely laundering technique or the most appropriate response.

2. What Casinos and Online Gambling Are (in AML Terms)

Land-based casinos include traditional resort casinos, card clubs, riverboat and cruise-ship casinos, racetrack casinos (racinos), tribal gaming facilities, and slot parlours. Their core AML-relevant activities include:
- Exchanging cash for gaming chips, tokens, or ticket-in/ticket-out (TITO) vouchers and redeeming them back.
- Maintaining front money or deposit accounts for patrons.
- Extending credit through markers (essentially counter-checks or IOUs).
- Issuing checks, wire transfers, and in some jurisdictions holding funds in safekeeping.
- Accepting and sending funds between affiliated casinos in different jurisdictions.
- Working with junket operators who bring in high-rolling (VIP) players, often from abroad, and may extend credit and settle debts outside the casino's view.

Online gambling includes internet casinos, sports betting sites, online poker rooms, lotteries, bingo, fantasy sports, and increasingly crypto-based gambling platforms. These businesses accept deposits through credit and debit cards, bank transfers, e-wallets, prepaid cards, and virtual assets, and pay out winnings through similar channels. Key risk features include remote (non-face-to-face) onboarding, speed, multi-jurisdictional operations, use of third-party payment processors, and in some cases operation from offshore or unlicensed jurisdictions.

3. Why the Sector Is Vulnerable

The FATF report Vulnerabilities of Casinos and Gaming Sector (2009) and subsequent guidance identify the following structural weaknesses:
- Cash intensity: casinos legitimately handle enormous amounts of currency, so large cash deposits do not automatically look unusual.
- Conversion function: cash becomes chips, chips become a casino check or wire transfer; the casino effectively provides banking-like services.
- Culture of discretion: staff are trained to be hospitable and non-intrusive with high-value customers, which conflicts with asking probing source-of-funds questions.
- Speed and volume: thousands of transactions per hour make monitoring difficult.
- Cross-border movement: patrons can deposit funds at one casino and withdraw at an affiliate in another country, or use junkets to move value without transparent trails.
- Uneven regulation: AML standards vary widely between jurisdictions; some gambling hubs have historically had weak supervision, and some online operators are licensed in light-touch jurisdictions or not licensed at all.
- Criminal ownership risk: organised crime has historically sought ownership or control of gambling businesses, which is why FATF Recommendation 28 requires licensing and fit-and-proper tests for casino owners and operators.

4. How Money Laundering Works Through Casinos

Understanding the mechanics is critical because exam questions describe behaviour and ask you to name the technique. Common typologies include:

(a) Buy-in and cash-out with minimal play. The launderer buys chips with illicit cash, gambles very little (or not at all), then redeems the chips and requests a casino check or a wire transfer to a bank account. The casino check appears to be legitimate gambling winnings. This is the classic placement-plus-layering technique and the single most tested gambling scenario.

(b) Structuring (smurfing) chip purchases. Cash buy-ins are deliberately kept below the reporting threshold (in the US, the casino Currency Transaction Report, CTR-C, threshold is more than USD 10,000 in cash in a gaming day). Launderers spread purchases across multiple cages, tables, shifts, or accomplices, or use multiple players who later consolidate chips.

(c) Chip walking. A patron leaves the casino with chips rather than redeeming them. Chips are then transferred to a third party, sold on a secondary market, or redeemed later by someone else, breaking the link between the original cash and the eventual redemption. This is why casinos track large chip redemptions by individuals with little recorded play.

(d) Misuse of front money and deposit accounts. Funds are deposited into a casino account (sometimes by wire from a third party), left for a time, then withdrawn or transferred to another casino or bank, with little or no play. The casino is used as a quasi-bank to add a layer to the audit trail.

(e) Markers and credit abuse. A patron takes a marker (credit), gambles a small amount, and repays the marker with illicit cash or a third-party check. The repayment is recorded as a debt settlement, disguising the origin of funds.

(f) Winning ticket and slot voucher purchases. Criminals buy winning TITO tickets, sports betting slips, or lottery tickets from legitimate winners at a premium and then cash them, obtaining a documented source of 'winnings'.

(g) Collusion at the tables. Two accomplices play against each other in games like poker, with one deliberately losing to the other so that dirty money is transferred and emerges as the winner's gambling proceeds.

(h) Junket operations. Junket operators recruit VIP players, arrange travel and credit, and settle gambling debts across borders. Because settlements can occur outside the casino's books and in different jurisdictions, junkets can disguise who truly owns the funds and allow illicit value to move internationally. Regulators in Macau, Australia, and elsewhere have taken significant enforcement action around junket-related risk.

(i) Casino-to-casino transfers. Chains with properties in multiple countries may allow a patron to deposit in one and withdraw in another, effectively conducting an international funds transfer with limited scrutiny.

(j) Employee complicity. Dealers, cage staff, or hosts may be bribed to ignore structuring, misrecord play, or facilitate chip transfers.

5. How Money Laundering Works Through Online Gambling

Online gambling adds remote onboarding and payment-channel complexity. Key typologies include:

(a) Deposit, minimal play, withdraw. Mirroring the land-based technique, the launderer funds an account with a card, e-wallet, prepaid card, or crypto, places a few low-risk bets, and withdraws the balance (often to a different account or instrument than the one used to deposit). Regulators therefore expect operators to apply 'closed loop' rules, returning funds to the originating source where possible.

(b) Chip dumping and collusive play. In online poker or head-to-head games, one account intentionally loses to another controlled by an accomplice. The 'winner' withdraws apparently legitimate winnings. Operators detect this through game-integrity analytics and unusual win/loss patterns between linked accounts.

(c) Multiple or mule accounts. Launderers open numerous accounts using stolen or synthetic identities, or recruit third parties, to spread deposits below monitoring thresholds and to obscure beneficial ownership of funds.

(d) Use of high-risk payment methods. Prepaid cards, anonymous e-money, peer-to-peer transfers, and virtual assets provide a layer of anonymity at the deposit stage. Payment processors and aggregators may obscure the ultimate source of funds.

(e) Matched betting and arbitrage. Placing offsetting bets across platforms so that the net financial position is near zero while generating 'winnings' records; also exploiting bonus offers across many accounts.

(f) Unlicensed and offshore operators. Sites licensed in weak jurisdictions, or not at all, may perform little or no KYC and may themselves be vehicles for laundering. Funds flowing to and from such operators are a red flag for banks and payment companies, which is why merchant category codes and payment-blocking rules for illegal gambling exist (for example, the US Unlawful Internet Gambling Enforcement Act, UIGEA, requires payment systems to block restricted transactions).

(g) Account takeover and fraud proceeds. Compromised accounts and stolen card data are used to fund gambling accounts, converting fraud proceeds into withdrawable balances.

6. Red Flags You Must Recognise

Land-based casino red flags:
- Large cash buy-ins followed by minimal play and a request for a check or wire.
- Multiple buy-ins just under the reporting threshold, especially across different cages, tables, or shifts.
- Patrons who refuse to provide identification or become evasive when a CTR or identification is required, or who abandon a transaction when asked for ID.
- Redemption of chips by someone with no recorded play, or chips presented that exceed what the patron's tracked play would justify.
- Third parties funding a patron's account or repaying markers.
- Frequent use of front money accounts with little gambling activity.
- Patrons requesting that winnings be paid to a third party or to multiple instruments.
- Unusual activity associated with junket players, including settlements by unrelated parties.
- Employees processing an unusually high share of near-threshold transactions.

Online gambling red flags:
- Deposits followed quickly by withdrawals with negligible wagering.
- Requests to withdraw to a payment method different from the deposit method.
- Numerous accounts sharing IP addresses, devices, payment instruments, or personal details.
- Consistent win/loss transfers between the same accounts in peer-to-peer games.
- Use of VPNs or location masking to disguise jurisdiction.
- Deposits inconsistent with the customer's known profile or stated income.
- Funding through numerous prepaid cards or virtual-asset wallets.

7. Regulatory Framework and Controls

FATF standards: Recommendation 22 requires casinos to conduct customer due diligence when customers engage in financial transactions equal to or above USD/EUR 3,000. Recommendation 23 extends reporting, internal controls, and higher-risk-country measures to casinos. Recommendation 28 requires that casinos be licensed, that competent authorities take legal or regulatory measures to prevent criminals or their associates from holding significant ownership or management roles, and that casinos be effectively supervised for AML/CFT compliance. FATF also expects countries to apply these measures to internet and ship-based casinos.

United States: Casinos and card clubs with annual gaming revenue above USD 1 million are financial institutions under the BSA. Obligations include: a written, risk-based AML program with internal controls, independent testing, a designated compliance officer, training, and procedures for using automated data processing systems to assist compliance; filing CTR-Cs for cash transactions over USD 10,000 (aggregated per gaming day); filing Suspicious Activity Reports (SARC) for suspicious transactions aggregating USD 5,000 or more; recordkeeping for front money, credit, and large transactions; and customer identification for reportable transactions. Casinos must also comply with OFAC sanctions screening. FinCEN has issued significant penalties against casinos for failing to file SARs on high-rolling patrons with unexplained wealth and for weak controls over junket and high-limit room activity.

Other jurisdictions: The EU Anti-Money Laundering Directives bring all providers of gambling services into scope (with limited member-state exemptions), requiring CDD at EUR 2,000 for winnings or wagers. The United Kingdom Gambling Commission enforces licence conditions requiring risk assessments, source-of-funds checks, and affordability considerations. Macau, Singapore, Australia, and the Philippines have each tightened casino AML regimes, including junket licensing and enhanced due diligence for VIP players.

Core controls a compliant operator should have:
- Risk-based KYC and CDD, with enhanced due diligence (including source of wealth and source of funds) for high rollers, junket players, PEPs, and customers from high-risk jurisdictions.
- Player tracking and surveillance systems that link cash activity to actual play, enabling detection of minimal play and chip walking.
- Aggregation of cash transactions across the gaming day and across the property to detect structuring.
- Monitoring of front money accounts, marker repayments, third-party payments, and casino-to-casino transfers.
- Policies restricting payment of winnings to third parties and enforcing closed-loop withdrawals online.
- Device, IP, and payment-instrument linking analytics for online operators, plus game-integrity monitoring for collusion.
- Independent testing, staff training (including front-line hosts and dealers), and a culture that does not allow VIP status to override compliance.
- Due diligence on junket operators and payment processors as third parties.

8. How to Approach Exam Questions on This Topic

CAMS questions on casinos and online gambling are usually scenario-driven. Read the stem carefully and identify three things: the stage of laundering (placement when cash enters, layering when value moves between instruments or jurisdictions, integration when a casino check is deposited at a bank as 'winnings'), the technique being described, and the role of the person in the question (casino compliance officer, bank investigator, regulator). The best answer is almost always the one that is risk-based, documents the activity, and follows the formal reporting path, rather than one that confronts the customer, tips them off, or ignores the behaviour because the customer is valuable.

Exam Tips: Answering Questions on Casinos and Online Gambling

Tip 1 - Minimal play is the key phrase. If a scenario mentions large buy-ins with little or no gambling followed by a request for a check or wire, the answer concerns laundering through chip conversion. The casino is being used as a conversion and placement vehicle.

Tip 2 - Spot structuring by the numbers. Repeated transactions just under USD 10,000 (or the local threshold), split across tables, cages, shifts, or associates, point to structuring. Remember that the casino's obligation is to aggregate transactions across the gaming day.

Tip 3 - Know the thresholds and their purposes. FATF: CDD at USD/EUR 3,000 for casino financial transactions. US: CTR-C above USD 10,000 cash; SARC at USD 5,000 or more when suspicious. EU: CDD at EUR 2,000 for gambling. Do not confuse the CDD threshold with the reporting threshold.

Tip 4 - Casinos are financial institutions in the US and DNFBPs under FATF. A question asking which businesses are DNFBPs or which non-bank entities have full BSA AML program obligations frequently includes casinos as a correct answer.

Tip 5 - Third parties signal risk. Winnings paid to a third party, markers repaid by someone else, or deposits funded by an unrelated party are classic red flags. The correct response usually involves enhanced due diligence and consideration of a suspicious activity report.

Tip 6 - For online scenarios, think payment-channel and identity. Deposit-and-withdraw with little play, mismatched deposit and withdrawal methods, linked accounts, chip dumping, and prepaid or crypto funding are the recurring themes. The right control answer often involves closed-loop payment rules and device/IP linking.

Tip 7 - Junkets equal cross-border and beneficial ownership risk. When junkets appear, the issue is usually that the casino cannot see the true source of funds or who ultimately settles debts. Enhanced due diligence on the junket operator and the underlying players is the expected answer.

Tip 8 - A casino check is not proof of clean funds. From a bank's perspective, a customer depositing casino checks inconsistent with their profile, or claiming winnings without evidence of play, warrants inquiry. Do not assume a casino-issued instrument has already been fully vetted.

Tip 9 - Never choose tipping off or commercial deference. Answers that involve telling the patron a SAR will be filed, waiving procedures because the patron is a VIP, or allowing a host to vouch for a high roller instead of conducting source-of-funds checks are wrong.

Tip 10 - Remember the ownership angle. FATF Recommendation 28 is about preventing criminals from owning or controlling casinos and ensuring effective supervision. If a question asks what a country must do about the casino sector as a whole, licensing and fit-and-proper vetting of owners is the answer.

Tip 11 - Identify the laundering stage correctly. Cash into chips is placement; chips into a check, wire, or transfer to another casino is layering; the check deposited into the banking system and spent as legitimate wealth is integration. Many questions reward correctly matching the activity to the stage.

Tip 12 - Eliminate answers that are not risk-based. Options that apply identical treatment to every patron, or that rely on a single control (for example, only filing CTRs), are weaker than options describing a documented, risk-based program with monitoring, EDD, and reporting.

9. Quick Revision Summary

- Casinos and online gambling are high-risk because of cash intensity, conversion of value, speed, anonymity, cross-border reach, and a hospitality culture.
- Key land-based typologies: buy-in and cash-out with minimal play, structuring, chip walking, front money abuse, marker abuse, buying winning tickets, collusion, junkets, casino-to-casino transfers, employee complicity.
- Key online typologies: deposit-minimal play-withdraw, chip dumping, multiple and mule accounts, high-risk payment methods, matched betting, unlicensed operators, account takeover.
- Framework: FATF R.22, R.23, R.28; US BSA treats casinos as financial institutions with CTR-C (over USD 10,000) and SARC (USD 5,000 or more); EU AMLD covers gambling with CDD at EUR 2,000.
- Controls: risk-based CDD/EDD, player tracking linking cash to play, day-level aggregation, third-party payment restrictions, closed-loop withdrawals, junket and processor due diligence, training, independent testing.
- Exam approach: identify the stage, the technique, and the role; choose documented, risk-based, non-tipping-off responses; remember thresholds and the DNFBP classification.