Why Some Bonuses Are Restricted by Country

When I was working fraud cases in the 1990s, one pattern kept emerging: criminals needed to move money. They had stolen it, earned it through trafficking or extortion, and they needed it to look clean. Banks were the first choice, but banks had begun filing Suspicious Activity Reports (SARs). Then casinos became the vehicle. A criminal would walk in with a stack of cash, play some hands, cash out with a check. The casino would file a Currency Transaction Report (CTR), but CTRs lacked the analysis that flagged the underlying criminality.

Bonus structures complicate this picture. If a casino offers a bonus, and a criminal takes the bonus and plays through it, the casino's records show legitimate gambling activity rather than obvious money washing. This is the AML (Anti-Money Laundering) problem that regulatory bodies now try to prevent.

The Regulatory Landscape

The UKGC (UK Gambling Commission) restricts bonuses for certain customer segments. New customers from certain countries cannot claim certain bonuses. This is not because the UKGC is being mean. It is because they have identified countries where the risk of money laundering is higher. Bonus restrictions are a control. They force the casino to document customer KYC (Know Your Customer) data and source of funds before releasing bonus credits.

The MGA (Malta Gaming Authority) has similar restrictions. Operators licensed in Malta face penalties if they offer unrestricted bonuses to customers in high-risk jurisdictions. Curaçao eGaming, which licenses smaller operators, has fewer such restrictions, which is why you see less-regulated operators offering bonuses to virtually anyone.

In the United States, where gambling is regulated state-by-state, bonuses are restricted differently. New Jersey and Nevada allow bonuses, but they are heavily documented. Pennsylvania allows them, but the documentation is tighter. Each state has worked out (or is working out) what they consider an acceptable bonus structure.

The Specific Restrictions

Here is what you will see in actual bonus terms:

1. No bonuses for players from sanctioned jurisdictions. If you are from Iran, North Korea, or other countries under UN sanctions, no bonus for you. This is compliance with OFAC (Office of Foreign Assets Control), the U.S. agency that administers sanctions.

2. No bonuses for high-risk countries. Operators often use a list of about 20-30 countries designated as higher-risk by their regulator. These are typically countries with weak AML controls or high crime rates. If you are from one of these countries, you might be able to play, but not with a bonus.

3. No bonuses for repeat bonus takers. Some operators restrict bonuses to once per customer. This is to prevent a pattern of people claiming bonuses, playing minimal games, and cashing out. The pattern is a fraud indicator.

4. Higher documentation requirements for bonus claims. Some operators ask for additional proof of address or source of funds before releasing a bonus. This is pure AML screening.

5. Slower withdrawal times for bonus-related winnings. Some operators hold deposits and bonus winnings for 24-48 hours. This gives them time to run the transaction through their AML filter.

Bonus restrictions exist because criminals tried to exploit them. Each restriction is a patch on a hole in the AML system.

The Economics

For an operator, a bonus is a cost. The operator pays out the bonus (say, a 100 dollar bonus) and hopes the player will gamble it away, at which point the operator keeps the money. But if the bonus is used to launder money, the operator becomes liable. If the UKGC or MGA discovers that an operator failed to restrict bonuses to suspicious accounts, the fines are severe. In 2015, the UKGC fined Betfair 11 million pounds for AML failures. In 2021, it fined 32Red 13 million pounds for inadequate money-laundering controls, which included insufficient screening of bonus claims.

So operators learned to restrict bonuses. They learned to document them. They learned to flag accounts claiming multiple bonuses from the same IP address or payment method. This is systems thinking: every control you add makes the system more expensive to run, but less legally risky.

From a player's perspective, the restrictions mean less free money. But from an AML perspective, the restrictions mean the system is actually trying to keep criminals out, which is the entire point of the regulatory apparatus.

The irony is that truly sophisticated money laundering does not use bonuses. It uses sports betting on fixed matches, or play-through at very low stakes, or just the deposit-and-withdrawal mechanism itself. The bonus restrictions are aimed at unsophisticated criminals and fraudsters. By the time you are talking about a serious money-laundering operation, bonuses are irrelevant.

But from a compliance perspective, that does not matter. The regulator is not trying to catch everyone. The regulator is trying to make the house position clear: we see the risks, we have designed controls, and we will enforce them. The bonus restrictions are the visible part of that design.