Casino ID Verification Explained

Casino ID verification is the check a real-money online casino runs to confirm who you are, that you are 21 or older, that you are not on a self-exclusion list and that you are physically inside the state where you are playing. In the United States, online casino gaming is permitted in seven states only: New Jersey, Pennsylvania, Michigan, West Virginia, Connecticut, Delaware and Rhode Island. Every one of them makes this check a condition of the operator’s license, and none of them lets a casino skip it.

What most players do not expect is how little of it involves documents. In all seven states the first step is a database check: you type your name, date of birth, address and Social Security number (usually the last four digits), and the casino matches them against third-party and government records. When the match works, there is nothing to upload. A photo ID, a utility bill or a selfie only come into it when that automatic check fails, or later at a withdrawal. That is the honest version of “no ID”: not a casino without verification, but verification that happens in the background while you sign up.

This guide explains why US casinos verify, what they check and how, which documents they ask for when the database cannot confirm you, how long operators say it takes, and how to keep your documents safe. It is general information, not legal advice. For the wider picture of where online casino play is available, see our no ID casinos USA guide.

Why Casinos Ask for ID Verification

A US online casino does not ask for your details because it wants to. The state rules that let it operate list the reasons, and they are much the same in all seven states.

Age and Location

Every state sets the minimum age for online casino play at 21, and every state requires the operator to confirm it before the account can be used for real money. New Jersey’s rule, N.J.A.C. 13:69O-1.3(b), tells the operator to verify that the patron “is of the legal age of 21, not self-excluded, on the exclusion list, or otherwise prohibited from participation in gaming”. Pennsylvania (58 Pa. Code 812a.2), Michigan (MCL 432.311), West Virginia (179CSR10 7.2.5), Connecticut (Regs. 12-865-12), Delaware (29 Del. C. 4810) and Rhode Island (R.I. Gen. Laws 42-61.2-3.4) say the same in their own words.

Location is the second half. State online casinos are intrastate products: you have to be inside the state’s borders when you play. This is not only a state preference. The federal Unlawful Internet Gambling Enforcement Act of 2006 (UIGEA) binds gambling businesses, not players, and bars them from accepting payments for “unlawful Internet gambling”. Its intrastate exception, 31 U.S.C. 5362(10)(B), covers bets made within a single state that the state expressly authorizes, provided the state’s rules include “age and location verification requirements reasonably designed to block access to minors and persons located out of such State”. In other words, the federal exception that makes state online casinos possible depends on exactly the ID and location checks this page describes. Michigan’s act cites UIGEA by name.

Fraud and Money Laundering

Michigan’s statute is the bluntest: the operator must have systems to “detect and prevent fraud, money laundering, and collusion” (MCL 432.311(3)). Michigan (R 432.642) and Rhode Island (Rule 20.43(D)) also require operators to comply with the federal Bank Secrecy Act, and New Jersey’s DGE requires that the casino’s KYC controls be approved by its anti-money-laundering compliance manager.

Federal rules add their own layer. Under 31 CFR 1010.100(t)(5), a casino licensed or authorized under state law with more than $1 million in gross annual gaming revenue is a “casino” for Bank Secrecy Act purposes, and 31 CFR Part 1021 then applies. That part requires:

• a written anti-money-laundering programme with procedures to verify “the name, address, social security number, and other information” of a customer when required (§1021.210);
• a Currency Transaction Report for cash in or out over $10,000 (§1021.311);
• Suspicious Activity Reports (§1021.320);
• for each deposit account, a record of the customer’s name, permanent address and SSN, verified by examining an identity document (§1021.410).

FinCEN has also said, in a 2019 speech by its then Director, that online gaming sites which are not licensed or authorized as casinos in the United States are not “casinos” under these rules but are likely operating as money transmitters. The distinction matters to players because it explains why a state-authorized casino asks for your SSN at all: the federal recordkeeping rules for casinos are built around it.

Self-Exclusion Checks

Each state runs a self-exclusion programme, and the operator has to check new accounts against it before they open. Connecticut’s rule requires the check before an account is opened (Regs. 12-865-12(h)); Delaware’s rule requires the system to check the official Delaware exclusion list before completing registration. Without a confirmed identity, that check would be meaningless: a self-excluded person could simply type a different name. Verification is what makes self-exclusion enforceable online.

Tax Reporting: a Worked W-2G Example

Casinos also need to know who won. For payments made in 2026, the IRS Form W-2G reporting threshold is $2,000, and it is indexed to inflation from 2027 (W-2G instructions, Rev. 01/2026). The change comes from the 2025 federal tax law that raised the general threshold from $600. The older slot ($1,200) and keno ($1,500) figures sit in a Treasury regulation that the IRS has proposed to align at $2,000; we could not confirm whether that proposal is final, but the 2026 instructions already apply $2,000.

Take a Michigan player who hits a $2,400 slot win in 2026. For slots, the wager is not deducted, so the win is over $2,000 and the casino issues a W-2G. To do that it needs the player’s name, address and taxpayer identification number, which is the SSN it verified at signup. The IRS instructions say that a payee who meets the slot, bingo or keno thresholds must present two forms of identification, one with a photo. If the casino has no taxpayer number, 24% backup withholding applies.

Table games work differently. A win is reportable only if it is both at least the threshold and at least 300 times the wager. A $10 blackjack hand would have to pay $3,000 to meet both tests, which is why table-game wins rarely trigger a W-2G. Operators describe the same step from their side: DraftKings says it may ask for a W-9 after a “Big Win”, and Caesars says a tax-reported win starts a claim process that asks for the first five digits of the SSN.

Two points are easy to miss. The W-2G threshold is only a reporting trigger: gambling winnings are taxable income whether or not a form is issued. And from tax year 2026, losses are deductible at 90% of their amount, only up to your winnings, and only if you itemize (IRC §165(d)(1)).

What Casino ID Verification Asks for at Signup

All seven states require the same core data before an account can be used for real money: full legal name, date of birth, residential address and Social Security number, plus email and phone in most of them. The differences are in the detail.

Players from outside the US can use a passport or taxpayer identification number in place of the SSN in most states. Residency is not required: BetMGM’s New Jersey help pages, for example, say you do not have to live in New Jersey, but you must be physically inside the state to register and play.

Operators then build their own forms on top of the state minimum. BetMGM asks for first and last name, current address, date of birth, the last four digits of the SSN and email, and says the name must match your driver’s license or passport. Caesars Palace Online Casino adds two security questions. DraftKings and Golden Nugget ask for the full SSN rather than the last four digits. FanDuel asks for the last four and says it may also ask for the full SSN or a photo ID. Fanatics asks for “all or part” of the SSN.

Database Casino ID Verification: How the Automatic Check Works

The state rules describe the primary method as “multi-source authentication” (New Jersey and Michigan) or “remote multi-sourced authentication” (Pennsylvania and West Virginia): the details you enter are compared against several independent databases, such as credit bureau and government records, rather than against a single source. If the records agree, you are verified without any document changing hands.

New Jersey’s Division of Gaming Enforcement has published the most detailed standard. Its Know Your Customer requirements ask for:

• an exact match on date of birth, Social Security number (the full nine digits, either entered or obtained from the last four) and last name;
• a flexible match on first name and address, where small variations are tolerated (but no PO box);
• authentication of all of this through multi-source checks before any deposit;
• one further authentication step: three knowledge-based questions, a device ID and phone number matched to the KYC data, a government ID, or another method the DGE approves;
• blocking of any account opened with a deceased person’s details.

The knowledge-based questions are the part players notice. They are drawn from public and credit records: a previous address, a car you once owned, a school. Connecticut makes them a requirement unless the regulator approves an equal method, and FanDuel says its users in Pennsylvania, New Jersey and Connecticut must pass them.

In practice this looks like a few extra screens at signup. FanDuel describes a third-party agency checking the data and a screen that says “You’re verified” on success, with three attempts allowed; it also says the private information is deleted once verification is complete. BetMGM calls it “automated verification” and allows up to five attempts. Golden Nugget says “Most customers are verified automatically”. DraftKings says that “in most cases, you’ll be verified automatically”.

One detail worth knowing before you start: some operators warn that these checks touch your credit file. The New Jersey terms of Hard Rock Bet and Caesars both say verifications “may result in a negative impact on your credit report”, and BetRivers’ terms say background checks “could include credit checks”.

Why does the check fail? Operators do not publish failure rates, but the rules make the usual causes clear. An exact match on last name, DOB and SSN means a typo in any of them fails the check. A recent move, a married name not yet updated with the credit bureaus, or a thin credit file can leave the databases with nothing to match. That is when the document route begins.

Casino Verification Documents

When the automatic check cannot confirm you, every state allows a fallback. Pennsylvania and Michigan let the operator examine a government-issued credential and record its number; Rhode Island’s rules describe a “Confirmation Process” using documents such as a driver’s license or passport. The documents fall into three groups.

Photo ID. A valid, unexpired government-issued photo ID. Most operators accept a driver’s license, state ID card or passport, but not all: FanDuel accepts only a driver’s license or state identity card and says passports are not accepted. BetMGM and Borgata accept a passport photo page, passport card, military ID or Permanent Resident Card, though a US driver’s license or state ID is their first choice because it proves identity and address at once. Fanatics lists a state ID, driver’s license, passport book or passport card.

Proof of address. Needed when the ID does not show your current address. BetMGM and Borgata accept a bank statement or utility bill issued in the last three months, or an IRS tax notification, tenancy agreement or mortgage statement issued in the last 12 months. DraftKings and Golden Nugget want a utility, phone or internet bill, bank statement or lease showing your name, address and an account number, dated within 90 days. bet365 asks for proof of address dated within the last six months.

Selfie. Increasingly part of the same step. BetRivers runs ID checks through Veriff: a photo of the front of a driver’s license or passport, a scan of the barcode on the back, then a selfie. DraftKings and Golden Nugget may ask for a “self-certified ID”, a photo of you holding your ID next to your face. FanDuel says a selfie may be taken during its ID Scan.

Some operators also ask for proof of the payment method. BetRivers’ terms list it, and its card check asks for a photo showing only the last four digits, the name and the expiry date.

Format rules are strict. DraftKings and Golden Nugget do not accept scans, PDFs, temporary IDs, digital IDs or expired IDs for the identity document. BetMGM sets a 5 MB limit per file. bet365 wants all four corners visible and the name, date of birth and address to match the account.

Step by Step: When the Database Check Fails

Here is how the fallback runs at three operators, as their own help pages describe it.

At FanDuel, after three unsuccessful attempts you are prompted to “ID Scan”: you photograph the front and back of your driver’s license or state ID, and a selfie may be taken. If you are locked out, support is reached by chat.

At BetMGM, after the automated attempts fail, you upload documents for manual review by the operations team: either a US driver’s license or state ID card, or another photo ID plus an address document. BetMGM says you must complete verification before depositing.

At Caesars Palace Online Casino, the privacy policy says a player who does not pass the automated screening goes to an additional review run by GeoComply, using IDVerse or Incode ID checks. Caesars asks for two documents, a government-issued photo ID and a utility bill, uploaded through My Account and Secure Document Upload, and emails the player once they are verified.

The pattern is the same everywhere: the account exists, but you cannot deposit or play for real money until a person or an ID-scanning service has matched your documents to what you typed.

How Long Casino ID Verification Takes

No state rule sets a time limit for verification. Database checks are designed to finish during signup, and how long the document route takes is up to each operator. What operators say on their own pages:

• Hard Rock Bet: a sign-up check “that usually takes just a minute or two”.
• Golden Nugget: “usually takes a few minutes, but can take up to 48 hours” if a manual review is needed.
• BetMGM: “Normal verification time will be between 24 & 48 hours” once all information is submitted, for the manual route.
• Borgata: the same 24 to 48 hours, with a warning that repeated update requests within 48 hours may delay approval.
• BetRivers and bet365: documents are reviewed “as soon as possible”, with no time stated.
• Caesars, FanDuel, DraftKings and Fanatics: no document review time is stated on the pages we checked.

These are the operators’ own statements, not guarantees, and they apply to New Jersey help pages unless noted. The quickest route is always the database match: if your details are entered exactly as they appear on your ID and your credit file is current, there may be no waiting at all. The slowest is a document set that gets rejected and has to be sent again.

When a Casino Asks for ID at Withdrawal

Passing the signup check does not end verification. Many operators check again when money leaves the account, and their terms reserve the right to ask for documents at any time.

• BetMGM says it requires “an official photo ID for your first payout”, and that approval may depend on documents about the deposit and withdrawal methods used.
• bet365 says that to make a withdrawal, “your account needs to be fully verified”, and that enhanced checks apply when financial thresholds are reached.
• FanDuel reviews every withdrawal first: most within 24 hours, first withdrawals up to 48 hours.
• DraftKings requires two-factor authentication through your registered email for the first withdrawal or a withdrawal to a new method.
• BetRivers’ terms say it may verify identity before paying any withdrawal and deny it if verification fails.
• Golden Nugget says that when requesting a withdrawal, “you may be asked to verify your identity”.
• Caesars says it “may occasionally request additional documentation before approving a withdrawal”.

A useful habit follows from this. If a casino verified you automatically at signup, expect a document request at the first cashout at some operators, and have a clear photo of your ID ready. Payout speed and verification are linked, which is why our no ID casino instant withdrawal guide covers the withdrawal side in detail.

Geolocation: the Other Half of Casino ID Verification

The states treat location as part of the same verification. New Jersey requires the system to detect your location when you log in (N.J.A.C. 13:69O-1.2(e)). Pennsylvania requires it at login and dynamically throughout the session (58 Pa. Code 809a.7). Connecticut checks at login, when the app opens, before the first wager and periodically after that (Regs. 12-865-9). West Virginia and Michigan require a geofence that blocks wagers from outside the state. Delaware’s statute says no internet lottery game may be offered unless the equipment can verify the player “is physically present in the State”. Rhode Island refuses wagers from anyone outside the state, though out-of-state players may still log in to deposit, withdraw or change settings.

Operators use specialist services for this: GeoComply (named by BetMGM, Caesars, Golden Nugget and Hard Rock) or XPoint (bet365 and BetRivers). On a desktop that usually means installing a location plug-in; on a phone it means location services on and, at several operators, Wi-Fi switched on as well. Caesars says desktop location is confirmed from IP address and Wi-Fi signal, and play is refused if either is not confirmed.

The operators are also clear about what breaks the check. BetMGM, FanDuel and BetRivers all state that VPNs and remote-desktop software cause geolocation to fail, and FanDuel and BetRivers add that a wired Ethernet connection cannot be located accurately. BetMGM says border areas are checked more often, and FanDuel says players near a border may need to move further inside the state. These rules exist because state law only authorizes play inside the state, and the federal exception depends on it.

Pay N Play: Casino Verification Without a Form

Searches for casino verification without a form often lead to Pay N Play. It is a European model: in markets such as Sweden, Estonia and Germany, casinos authorized there can verify players through bank identification at the first deposit. The bank confirms who you are as the payment goes through, so there is no registration form and no document upload, but verification still happens in full.

It is not how any US state works. All seven states require the casino to collect and verify name, date of birth, address and SSN itself, against multi-source databases, before real-money play. The closest US equivalent is the automatic database check described above, which, when it succeeds, is just as invisible to the player.

Protecting Your Documents

A photo of your driver’s license, a bank statement and your SSN together are enough to open accounts in your name. Treat any verification request with the same care as a bank login.

1. Check the site first. Before entering any personal data, confirm the casino appears on the state regulator’s list of authorized sites: the NJ DGE list, the PGCB list, the MGCB list, the WV Lottery license list, Connecticut DCP or the Delaware Lottery. New Jersey’s DGE says that any site not on its list is not approved to offer internet gaming in the state. Compare the domain in your address bar with the one the regulator lists.
2. Upload only inside the casino’s own site or app, in your logged-in account. Operators name the place: My Account and Identity Documents at BetRivers, Secure Document Upload at Caesars, the Document Upload Center at DraftKings, My Account and Verification at bet365.
3. Be wary of links in emails or texts that ask you to “verify” by uploading elsewhere. Log in directly instead.
4. Cover what is not needed. For a card check, BetRivers asks only for the last four digits, the name and the expiry date.
5. Send clear originals. A sharp photo with all four corners visible passes faster than a scan; several operators reject scans and PDFs for the ID itself.
6. Keep a note of what you sent and when.

Offshore casinos are not licensed in any US state, so no state regulator oversees them. They are not on any of the regulator lists above, so none of the protections described on this page apply to the documents you would send them.

Casino ID Verification FAQ

Responsible Gambling and Casino ID Verification

Verification protects against fraud and underage play, and it is what makes self-exclusion work online. It does not protect anyone from losing more than they can afford. Set deposit and time limits in your account before you play.

If gambling has stopped being fun, free and confidential help is available:

• National: the National Problem Gambling Helpline, 1-800-MY-RESET (1-800-697-3738), by call, text or chat via ncpgambling.org.
• New Jersey, Pennsylvania, Michigan and West Virginia: 1-800-GAMBLER (800gambler.org, pacouncil.com, 1800gambler.net).
• Connecticut: 1-888-789-7777 (DCP help page).
• Delaware: 1-888-850-8888 (deproblemgambling.org).
• Rhode Island: 1-877-9GAMBLE (rilot.com).

Self-exclusion programmes covering online casino play: New Jersey DGE, Pennsylvania, Michigan, West Virginia, Connecticut and Delaware (in person). Our responsible gambling page lists more tools. You must be 21 or older to play at a US online casino. For an overview of the site, start at the noid.casino home page.

References

• New Jersey Division of Gaming Enforcement, Internet Gaming Authorized Sites
• New Jersey DGE, Know Your Customer (KYC) Requirements
• N.J.A.C. 13:69O-1.3 (accounts and KYC) and N.J.A.C. 13:69O-1.2 (location)
• Pennsylvania Gaming Control Board, Interactive Gaming Operators; 58 Pa. Code 812a.2; 58 Pa. Code 809a.7
• Michigan Gaming Control Board, authorized platform providers; acts and rules
• West Virginia Lottery, i-Gaming License List (1 October 2026); 179CSR10 Interactive Wagering Rule
• Connecticut DCP, Legal Gaming in CT; Regs. Conn. State Agencies 12-865
• Delaware Lottery, iGaming; Internet Lottery Rules; 29 Del. C. Chapter 48
• Rhode Island Lottery, Rules and Regulations; R.I. Gen. Laws 42-61.2-17
• 31 U.S.C. 5362 (UIGEA definitions and intrastate exception)
• FinCEN, 31 CFR 1010.100 and 31 CFR Part 1021; Director Blanco remarks, 13 August 2019
• IRS, Instructions for Forms W-2G and 5754; Internal Revenue Bulletin 2026-19; 26 U.S.C. 165
• National Council on Problem Gambling, Help and Treatment
• Operator help pages (New Jersey): BetMGM, How long does verification take and documents for verification; FanDuel, Why am I unable to verify and Casino 101: getting started; Caesars Palace Online Casino, My Account and terms and conditions; BetRivers, ID verification guide; DraftKings, document upload criteria; Golden Nugget, verification time; Hard Rock Bet, casino page and NJ terms; Borgata, verification time; bet365, verification documents; Fanatics, Why do I have to verify my identity