Accepted verification documents, and how to photograph them
Verification is a set of separate checks wearing one name. Australian players uploading to an offshore cashier are answering a licensor's anti-money-laundering rules, a payment processor's ownership check and a fraud team's duplicate-account scan at the same time. This page covers what each document has to prove, how to photograph it so a machine can read it, what to send when the document asked for does not exist for you, and what rights you keep afterwards.
Pokies Cashout · Payments and terms referencePublished Last reviewed Promotion figures supplied by site owner: 5 October 2026
Scope
KYC documents only
Claims to satisfy
Identity, address, payment control, liveness
Operators
Offshore - not AU licensed
Audience
18+ only
Three different parties behind one upload box
The upload form sits on the operator's site, but the request rarely originates there. An offshore casino is not an Australian reporting entity, so AUSTRAC is not the body it answers to. Its document list is assembled from three sources: the anti-money-laundering rules of whichever jurisdiction licenses it, the conditions its payment processors impose before they will keep settling transactions, and its own fraud and bonus-abuse controls.
Those three have different appetites, and that is the practical point. A licensor's AML rules care who you are and where the money came from. A processor cares that the card or bank account belongs to the person playing. Fraud control cares whether this account resembles several others. One document can fully satisfy one of them and be worthless to another, which is why a passport clears identity and does precisely nothing for the payment-method check.
None of those obligations are Australian, and terms pages almost never say which obligation a given request is satisfying. So ask, in the account's own message thread: which check is this document for? The answer tells you which substitute will work if the one requested is unavailable, and stops you sending the same file four times.
If you are depositing at Safe Casino or WinCrown, look for the verification or documents wording on the live cashier before you fund the account, and treat whatever list is there as the authority on what gets accepted rather than this page. Document sets get revised without an announcement.
Sponsored partners · Display order is not an independent ranking.
#1SPONSORED PARTNER
200 free spins on selected slots
WinCrown free-spin offer. Check the eligible slots, qualifying deposit and full promotion conditions.
200 free spins · eligible slots apply
Check spin value, expiry and wagering
Read withdrawal and verification rules
9,827
Partner-reported reviews Not independently verified
18+ only. Availability depends on your location and eligibility. Any promotion is subject to the operator's live terms, including wagering, eligible games, maximum bets, expiry and cashout limits where applicable. Deposit and withdrawal methods, processing times and limits are set by the operator and its payment providers and are not guaranteed here. Offshore operator; not licensed to offer online casino services in Australia. Gambling involves financial risk. Checked: 2026-10-05. 18+. Gambling involves financial risk.
#2SPONSORED PARTNER
+250% welcome bonus
Safe Casino welcome offer. Check the qualifying deposit, bonus cap, wagering and eligibility before accepting.
Welcome bonus +250%
Read the wagering basis and game weighting
Check maximum bet, expiry and cashout limits
7,833
Partner-reported reviews Not independently verified
18+ only. Availability depends on your location and eligibility. Any promotion is subject to the operator's live terms, including wagering, eligible games, maximum bets, expiry and cashout limits where applicable. Deposit and withdrawal methods, processing times and limits are set by the operator and its payment providers and are not guaranteed here. Offshore operator; not licensed to offer online casino services in Australia. Gambling involves financial risk. Checked: 2026-10-05. 18+. Gambling involves financial risk.
What each document proves, not what it is called
A request names a file. What matters is the claim the file has to support, and there are four distinct claims behind almost every verification queue.
Identity is the first, and a government photo ID answers it: a passport or a driver licence in most cases. The whole document has to be in frame, edges included, because the reviewer is checking it is a complete document and not a crop of one. Residence is the second, and the work is done by the address, not the name. A document addressed to you at the address on your profile, recent enough to fall inside the operator's stated window, carries it: a utility account, a rates notice, a bank statement. The consequence people miss is that a bill in a partner's name at your address proves the address and fails the document, because the two fields are checked together.
Control of the payment method is the third and the one most often answered wrongly. A card photograph, a statement header, or a screenshot of the sending wallet shows the instrument is yours. It does not show who you are, and your passport does not show the card is yours. These are not interchangeable. Liveness is the fourth, and it is increasingly run live in the browser by a verification vendor rather than uploaded as a selfie, which means a working camera and good light become part of the requirement.
The expensive mistake sits between the second claim and the third. The same bank statement PDF can answer both the address claim and the payment-control claim, but at many operators the two are reviewed separately, sometimes by different people. Upload it against both open requests rather than assuming one submission covers the other. What happens to the withdrawal while all this runs is covered in the guide to withdrawal times.
What each document proves, not what it is called
What the checking software is actually reading
Before a human sees your passport, software does, and it rejects on a narrow set of grounds. Document-checking pipelines run an image-quality gate first and it looks at tilt, blur, cropping, glare and unreadable zones. A rejection that says only "poor quality" is almost always one of those five, which means the fix is photographic rather than documentary.
A passport carries your name and date of birth in two places: the visual zone you read, and the machine-readable zone, the lines of evenly spaced characters across the bottom. Checking systems parse the machine-readable zone and cross-check it against the visual one. That inverts the instinct about glare. A reflection across your photograph is survivable; a reflection across those bottom lines removes the field the parser depends on. When you see glare, angle the document away from the light, rather than moving the camera.
Set it on a flat, matte surface. Even indirect daylight, no direct flash, phone held square above the document rather than at an angle. The most common avoidable fault is the shadow cast by your own hand or by the phone itself, which an automated check reads as an unreadable zone.
Then do not improve it. Auto-enhance, filters, conversion to black and white, straightening in an editor, retyping details: each can read as tampering to a reviewer whose job is spotting alteration. Cropping tightly to the document edge is its own trap, because the detector uses the surrounding margin to confirm where the document ends. Send the original file the camera produced. For anything from a bank, a PDF downloaded from internet banking beats a photo of a screen, because it arrives machine-readable rather than as a picture of text.
Sponsored · WinCrown · 18+
200 free spins on selected slots
WinCrown free-spin offer. Check the eligible slots, qualifying deposit and full promotion conditions.
Redaction decisions are asymmetric. Covering too much costs you a resubmission cycle; covering too little cannot be undone once the file has left your device. So the default leans toward covering, with one firm exception.
On a card, the standard instruction is to obscure the middle digits and the entire security code on the reverse. The security code is the exception that is not a judgement call: no verification check legitimately needs it, and a request for it is the clearest signal to stop and confirm who you are actually talking to.
On a statement, what gets checked is the identifying header: your name, the address as the bank prints it, the account identifier as presented, and the statement period. Individual transaction lines are generally not the subject of an address or ownership check, and covering them is accepted at many operators. Covering the header defeats the document entirely. When you do redact, say in the same message what you removed and why, so a reviewer does not read the gap as concealment.
The things that never go into an upload at all: account passwords, internet banking logins, one-time codes, a full security code, and the handwritten-note selfie in which someone has been talked into writing a password on paper. The decision rule is short. If removing something would stop the document answering the one claim it was requested for, leave it. If it would not, remove it.
Conditions are published by the operator and change without notice. Read the live page before you act on anything here.
When the document they want does not exist for you
A document list assumes a householder with bills in their own name, a current passport in a drawer and a card in their own wallet. Plenty of Australian players are not that person. Name the circumstance in the message thread and ask what substitutes, rather than uploading something off-list and waiting for it to be refused.
No utility account in your own name is the usual gap, and it is ordinary rather than suspicious: sharehouses, rentals where the bills sit with one tenant, anyone still in a family home. The substitutes that tend to be considered are documents issued by bodies that verify an address themselves. A bank or credit-union statement, a government agency notice, an insurance policy schedule, an electoral enrolment document. Ask which of those the list accepts before you send one, because the exclusions vary and mobile phone accounts are excluded more often than people expect.
Recently moved, so nothing recent carries the new address: say that, and ask whether the profile address can be updated to the one printed on your identity document instead. That pair has to agree before any address proof will clear, so moving the profile is often the shorter road.
Neither a passport nor a driver licence: ask what the list accepts in place of a photo ID rather than guessing. There is usually something, and a guess costs a review cycle.
A deposit made with a prepaid voucher or a cash-code rail is the awkward case, because the payment-ownership document the check is built around does not exist for it. Say how the deposit was funded and ask what the operator treats as evidence of control for that method. Getting that answer before a withdrawal is requested is cheaper than discovering it afterwards.
When the document they want does not exist for you
The request that stops being about identity
At some point the questions stop being about who you are, and the document set changes with them. A source-of-funds request asks where this particular money came from immediately before it reached the account. A source-of-wealth request is broader, asking how your holdings accumulated at all. Terms pages use the two phrases loosely, so read which one you were sent before assembling a folder.
The documents that answer it sit outside the four claims above: payslips, an employer letter, a notice of assessment, bank history showing the money arriving, dividend or superannuation statements. The part almost everyone gets wrong is linkage. A payslip proves income without connecting that income to the deposits, unless the account the salary lands in is the account the deposits were made from. If the money took a route through a second account, that account's history is part of the answer, and leaving it out reads as a gap.
When these requests arrive, and how to narrow one in writing before you start scanning, is the subject of the source-of-funds guide. The only thing worth doing in advance: know which account your deposits leave from, and keep that the account your income arrives in.
Sponsored · Safe Casino · 18+
+250% welcome bonus
Safe Casino welcome offer. Check the qualifying deposit, bonus cap, wagering and eligibility before accepting.
Most refusals come down to a chain of three names that have to match: the name on the profile, the name on the ID, and the name on the payment method. Each link is compared separately. A shortened first name, an omitted middle name, a maiden name surviving on one document, a hyphenated surname rendered with a space: any of these is enough. It is not a judgement about honesty but a string comparison, often made by software.
Repair order matters here and gets reversed constantly. Change the profile to match the identity document, not the other way round, because the identity document is the fixed point. Expect the profile change to need review itself, a reason to get it right at registration rather than mid-withdrawal.
The other recurring causes are mechanical. Address proof older than the operator's stated window. A document type the list specifically excludes, which is why it is worth reading rather than guessing. A bill in someone else's name at the right address. An expired ID, checked against the submission date, which catches anyone who renewed a licence but photographed an older copy still on their phone. And a deposit made from an instrument that is not in your name, which breaches most terms outright and surfaces at exactly this point rather than at deposit.
Rejection messages are generic almost everywhere, and that is the thing to push back on. "Document rejected" is not information. Ask which field failed, and which documents have been accepted so far, by name, so you are not re-supplying something already cleared.
Where the clock actually runs
There are four separate waits inside verification, and only the first responds to you being quick about it. Your own submission is one. The vendor's automated check is the second, and it either resolves immediately or routes the file to a person. The manual queue is the third and it runs on the compliance team's working hours in their timezone. A re-request is the fourth.
The fourth is where the real cost lives, because a re-request restarts rather than resumes. A document refused on one field re-enters the back of the same queue as a new submission, with no credit for the wait already served. Fixing one field at a time, round after round, can take longer than the original review did. That is the whole argument for being slow and careful on the first upload.
Two rules follow. Verify on the day you register, while nothing is riding on the outcome. And if you are past that point, close every open request in one session rather than one at a time, because some operators hold a partial set until it is complete and do not say so in the interface.
Do not read silence as a problem or as progress. Ask which items are outstanding and which are cleared. If the money is already requested and sitting still, the diagnosis of which stage it is stuck in belongs on the failed-withdrawal guide, not here.
Your rights over the file after you send it
You are handing the most sensitive document set you own to an organisation that is not in Australia. Your position is not nothing, but it is worth understanding before the files leave rather than after.
The Privacy Act 1988 can reach an overseas organisation that has an Australian link, which turns broadly on carrying on business in Australia; the additional requirement that the information be collected in Australia was removed by a 2022 amendment. Whether a particular offshore operator meets that test is a legal question this page does not decide. Where the Act does apply, the relevant principles are APP 11 on security, including taking reasonable steps to destroy or de-identify information no longer needed, APP 12 on access, APP 13 on correction, and APP 8 on steps before disclosing information across a border. Complaints go to the OAIC.
The licensing jurisdiction may also impose its own data rules, and the verification vendor is a distinct holder of your passport image with its own policy. Count the copies: the operator, the vendor, and potentially the processor. A deletion request to one is not a deletion request to the others. AML regimes generally require identity records to be kept for a period after the relationship ends, so closing an account and deleting the documents are two different requests, and the first can usually be granted while the second usually cannot. Ask what the retention period is and which rule imposes it, and keep the written answer.
Four questions are worth asking before you upload, not after: who processes the documents, in which country, how long they are retained, and what the privacy contact address is. A refusal to answer is itself an answer. More important in practice: a document request is not evidence that the requester is legitimate. Log in to the account and find the request inside it rather than following a link from an email. Never upload identity documents into a chat window, a messaging app, or an email address outside the operator's own domain. No genuine verification check asks for a banking password, and none asks for a fee to release a withdrawal.
Three different parties behind one upload box — at a glance
Questions people actually ask
What documents does a casino ask for verification?
Typically four categories: a government photo ID for identity, a recent document addressed to you at your profile address for residence, evidence that the payment method is yours, and a liveness or selfie check. A source-of-funds request can follow later and is a separate question. The operator's verification page lists its own accepted types and exclusions.
Why was my verification document rejected when it looked fine?
Most refusals are either an image-quality fail (tilt, blur, cropping, glare or an unreadable zone) or a name mismatch between the profile, the ID and the payment method. Ask which field failed rather than resubmitting the same file, and ask which documents have already been accepted.
Should I scan or photograph my ID for a casino check?
Either works if the whole document is in frame, flat, evenly lit and unedited. For bank documents, a PDF downloaded from internet banking is preferable to a screenshot or a photo of a screen. Do not auto-enhance, filter, convert to black and white or crop to the document edge.
What should I cover on a card or bank statement before uploading?
The usual instruction is to obscure the middle card digits and the entire security code on the reverse; the security code is never needed. On a statement the identifying header must stay readable, and transaction lines can generally be covered. Say in the same message what you removed.
What if I have no utility bill in my own name?
Say so in the message thread and ask which substitute the operator's list accepts before sending anything. Documents from bodies that verify an address themselves are the usual alternatives, and guessing off-list costs you a review cycle.
Can I have my verification documents deleted afterwards?
Closing an account and deleting the documents are different requests. AML regimes generally require identity records to be kept for a period after the relationship ends. Ask what the retention period is, which rule imposes it, who else holds copies, and keep the written answer.
