Source of funds requests explained

Scope

Source of funds only

Reviewed by

Offshore operator compliance

Test applied

Documents must reconcile

Audience

18+ only

Source of funds is about one transaction, not about you

The vocabulary is worth getting right, because operators use both terms and they mean different things. Source of funds asks how and where you obtained the money behind one specific transaction. Source of wealth asks where your entire body of assets came from. For the distinction in a regulator's own words, AUSTRAC publishes customer due diligence guidance on austrac.gov.au and draws the same line there. A cashier asking for a payslip is asking the first question. A request that asks how you came to hold a portfolio is asking the second, and it is a far longer piece of work.

That framework binds Australian reporting entities — banks, remitters, land-based casinos. An offshore online operator is not one of them, and online casino services cannot be licensed in Australia at all. What drives its request is its own anti-money-laundering program and the rules of the licensor named in its footer. The practical consequence is that no Australian regulator will adjudicate how the request was framed — but the vocabulary is shared, so the documents a bank would accept are usually the documents the reviewer is looking for.

What the reviewer tests is reconciliation, not sincerity. They hold a list of credits that entered your account and want records showing a lawful origin for that money, in that period, in your name. An explanation without documents fails. Documents that contradict the explanation fail harder, because an inconsistency reads worse than a gap.

The identity stage — photo ID, liveness step, address proof — runs on separate rules and is covered in the <a href="/kyc/id-verification/">ID verification guide</a>. Why a payout waits in general is answered under <a href="/withdrawals/">withdrawals</a>. This page is only the money-origin question.

Sponsored partners · Display order is not an independent ranking.

#1 SPONSORED PARTNER

200 free spins on selected slots

WinCrown free-spin offer. Check the eligible slots, qualifying deposit and full promotion conditions.

• 200 free spins · eligible slots apply
• Check spin value, expiry and wagering
• Read withdrawal and verification rules

9,827

Partner-reported reviews Not independently verified

No independent score.

View current offer Visit WinCrown

18+ · Offer conditions

18+ only. Availability depends on your location and eligibility. Any promotion is subject to the operator's live terms, including wagering, eligible games, maximum bets, expiry and cashout limits where applicable. Deposit and withdrawal methods, processing times and limits are set by the operator and its payment providers and are not guaranteed here. Offshore operator; not licensed to offer online casino services in Australia. Gambling involves financial risk.
Checked: 2026-10-05. 18+. Gambling involves financial risk.

#2 SPONSORED PARTNER

+250% welcome bonus

Safe Casino welcome offer. Check the qualifying deposit, bonus cap, wagering and eligibility before accepting.

• Welcome bonus +250%
• Read the wagering basis and game weighting
• Check maximum bet, expiry and cashout limits

7,833

Partner-reported reviews Not independently verified

No independent score.

View current offer Visit Safe Casino

18+ · Offer conditions

18+ only. Availability depends on your location and eligibility. Any promotion is subject to the operator's live terms, including wagering, eligible games, maximum bets, expiry and cashout limits where applicable. Deposit and withdrawal methods, processing times and limits are set by the operator and its payment providers and are not guaranteed here. Offshore operator; not licensed to offer online casino services in Australia. Gambling involves financial risk.
Checked: 2026-10-05. 18+. Gambling involves financial risk.

What sets a request off, and where the rule is written

Triggers mix amount, pattern and risk flags, and almost none of them are published. Cumulative deposits across a period are more often the trigger than one large transfer, which catches out people who deposit small amounts frequently. A change in pattern will also do it: a dormant account that suddenly funds heavily, a switch to a new rail, or a deposit carrying a name that does not obviously match the account holder.

A win can trigger a request on its own, because a payout is the moment the operator has to decide whether to release money rather than merely accept it. That is why the request so often arrives attached to a withdrawal rather than at registration, and why it feels punitive when it lands. It is also why the same account can deposit for months and be asked nothing.

Risk flags sit on top of amount. A politically exposed person, an adverse-media match on your name, or a jurisdiction flag can push an account into enhanced review at a level that would otherwise pass unnoticed. Name matches are frequently wrong and are still enough to start a review.

Where to read the rule: the terms, under a heading such as anti-money-laundering, verification, or account security. Look for three things — whether the clause names document types, whether it lets the operator hold funds while a review runs, and whether it permits closure if a request is not satisfied. A clause that reserves the right without naming anything is the common case, and it tells you the request will be defined when it arrives, not before.

The documents that actually evidence provenance

An identity document proves who you are and evidences nothing about money. Provenance evidence has three features: a named source, a date, and a visible connection to the funds that reached the operator. A document missing any one of the three is not evidence, however official it looks.

For salary or wages, that means a payslip naming the employer alongside a bank statement showing the matching credit arrive; the pair reconciles, and either one alone usually does not. For business income, the entity's statement plus something establishing your entitlement to draw from it — business money claimed as personal funds raises a second question rather than answering the first. For a one-off sum, the instrument that created it: a settlement statement on a property sale, a contract of sale, an estate or inheritance letter, a redundancy or insurance statement. For investments, the broker or registry statement showing the disposal and the proceeds landing. For crypto, the exchange's own transaction or tax report rather than a wallet screenshot.

Where you obtain them matters as much as what they are. A statement downloaded as a PDF from internet banking carries the bank's own formatting and is treated differently from a photograph of a screen. Your own tax records sit behind myGov; sign in and see which income statements and notices of assessment your account actually exposes before you promise a reviewer anything. An exchange's reporting export is retrievable from the account itself. The time to collect all of this is while every account is open and you can still log in. Formatting rules for the files themselves sit on the <a href="/kyc/accepted-documents/">accepted documents</a> page.

A gift or a private loan is the hardest ordinary case, because the evidence is not yours to produce. You need the transfer arriving in your account and material from the person who sent it: their own statement showing it leaving, and a signed statement of what it was. If that person will not provide it, the route cannot be evidenced, and no amount of explanation substitutes for the document.

The chain has to close, and one unevidenced hop breaks it

Money that reaches a casino account rarely travels there directly from its origin. The reviewer is tracing a chain, and every hop needs a document. The usual shape, as an illustration rather than a template: an employer pays salary into a bank account, the bank account funds an e-wallet or an exchange, and that funds the deposit. Three hops, three documents, and the amounts have to stay recognisable from one to the next.

The common break is a hop you cannot produce records for. A closed account. An e-wallet whose statement export no longer works because the provider retired the product. A prepaid voucher bought over a counter with cash — cash is the ancestral problem in this entire field, because its origin is undocumentable by design. If one hop is cash, the chain breaks at that point no matter how clean the rest of it is.

Crypto breaks differently. A regulated exchange purchase is well documented and a chain transfer is publicly verifiable, so that pairing is often easier than people expect. What breaks is the middle: a peer-to-peer purchase, a transfer through an intermediate wallet with no account behind it, a swap on a service that issues no statement, or coins acquired years ago with no acquisition record kept. Each is a hop with nothing to show for it.

The rule that follows is a funding decision rather than a verification one. Before depositing, pick a route where every hop between your income and the operator produces a statement you can download in your own name. You make that choice once, at the deposit, and it decides whether a request months later is an afternoon of paperwork or an unanswerable question. That choice is yours to make before you register anywhere, Safe Casino and WinCrown included: the question to settle on the <a href="/go/partner/">live page</a> is not which rails appear in the cashier, but whether the one you would actually use leaves a statement you can download in your own name months later.

How the review runs, and the clock that actually matters

Treat two periods as separate. There is whatever review window the operator publishes, which you read in the terms or in the request message itself, and there is the number of rounds your submission takes. The second is the one you control, and it is usually what sets the total wait.

A source-of-funds review is read by a person, generally in a compliance function that is not the support team you have been chatting to. That has consequences you can plan around. Front-line chat often cannot tell you why a submission was rejected, only that it was. Replies arrive in the business hours of a jurisdiction you may not know. And a reviewer who finds one gap tends to return the whole submission rather than ask for the missing pieces one at a time.

So the useful move is to make the first submission complete, and to ask three things in writing before sending anything: which documents are required, which period they must cover, and whether a partial release of any unaffected balance is possible while the review runs. The third is usually answered no. It is worth asking because it occasionally is not.

Each incomplete round restarts the review rather than continuing it. That is why a submission dribbled out one document at a time can run longer end to end than one you held back until it was complete. What a stalled payout means in general is covered under <a href="/kyc/verification-delays/">verification delays</a> and <a href="/withdrawals/">withdrawals</a>; this section is only about the rounds.

Why submissions are rejected, and the cause behind each label

Rejection messages are terse and the labels hide the actual defect. The pattern worth internalising is that nearly all of these are reconciliation failures, not honesty failures.

Statement not acceptable usually means a screenshot or a photo of a banking app rather than the bank's own PDF, or a document with the bank's identifying header cropped away. Insufficient period means the statement does not cover the window in which the money accumulated — a single month showing a balance does not show where that balance came from. Over-redacted is the failure people create for themselves: masking the payer name, the credit amount or the running balance removes exactly the data that evidences provenance. Redact what does not evidence origin, and keep what does.

Third-party funds means money arrived from a name that is not yours. At most operators that breaches the terms independently of any anti-money-laundering rule, and no document fixes it after the fact. Does not reconcile means the payslip's net figure and the statement credit do not match, or the dates do not line up; a salary sacrifice, an allowance or a second employer explains that, and the explanation needs its own document. Entity mismatch means business income presented as personal income with nothing showing your entitlement to draw it.

Then there is the outcome nobody plans for: the documents are accepted and the account stays restricted. An anti-money-laundering clause and a general discretion clause operate separately, so satisfying the first does not oblige an operator to release under the second. If that happens, ask for the clause relied on and the facts, in writing, and read <a href="/kyc/account-closure-and-funds/">account closure and funds</a> for where a closed account leaves a balance. Never answer a request by fabricating a document, borrowing someone else's statement, or asking another person to present themselves as your source of funds. That converts a paperwork dispute into a fraud allegation and forfeits every remaining avenue at once.

What you are handing over, and the one party that owes you access

An identity document reveals your name and date of birth. A run of bank statements reveals your income, your employer, your rent, your medical payments, your other gambling and everyone you send money to. Those two uploads are not remotely the same act, and the second deserves a pause: this is the most sensitive document set you will ever send an offshore company, and you are sending it under time pressure, to free a payout.

Three practical rules. Upload through the operator's own secure channel inside the logged-in account — never as an email attachment to an address someone handed you in chat, and never through a messaging app. Ask what must remain visible before you redact, so you are not sending a second, less redacted copy a week later. And keep your own log of which document went where and on what date, because that log is the only record you will hold of your own exposure.

On rights, be realistic. Australian privacy law does reach past the border in some circumstances — the extra-territorial provision is section 5B of the Privacy Act 1988, and the place to read what it covers is the Act itself on legislation.gov.au and the regulator's own explanation on oaic.gov.au, not an affiliate page summarising it for you. Whether it reaches a particular offshore operator is a legal question no terms page settles, and enforcement against a business already supplying a service Australian law prohibits is a separate problem again. Do not build your plan on it.

What is reliable sits on the other side of the transaction. Your Australian bank is bound by that Act, it holds the records you need, and the right to ask it for your own personal information is Australian Privacy Principle 12 — the OAIC sets out what the bank must do with such a request, and the bank's own privacy policy tells you where to lodge it. That is where your evidence comes from, and it is the only part of this process with a real obligation behind it. Ask the operator's privacy policy two questions in return — how long documents are retained after a review, and which third-party verification provider receives them — and treat an unanswerable policy as information about the operator.

Four things to settle before the deposit

A source-of-funds request is not a problem to solve when it arrives. By then the funding route is fixed, the money is already in, and your options are limited to whatever documents happen to exist. Everything useful happens earlier.

First, read the anti-money-laundering clause in the terms and note whether it permits holding funds during a review and closure if a request goes unsatisfied. Second, trace your own chain from income to deposit and confirm that every hop produces a statement you can download in your own name. Third, collect the documents that evidence your usual funding route now, while every account involved is still open. Fourth, decide how much financial detail you are willing to send an offshore company, and size the balance you leave on the account accordingly.

The fourth is the one people skip, and it reframes the whole question. If you would not hand over months of your banking history to resolve a dispute, do not accumulate a balance large enough to make the request likely. A stalled source-of-funds review is one of the few payout problems that is genuinely cheaper to prevent than to argue, and the prevention costs an hour before the first deposit. Check the live verification terms on an operator's own cashier page before the money goes in, not after a win makes the answer urgent.

Read next