Last updated: 3 September 2026
Most complaints about online casinos begin at the same point. Not the games, not the bonus — the moment a first withdrawal is requested and the operator asks for documents. This page explains what is normally requested, why, how long it takes and how to make it painless. One caveat first: these requirements are set by the operator and its licensing regime, not by us. We describe standard practice; the operator decides the specifics for your account.
Why verification exists at all
A licensed operator carries legal obligations that have nothing to do with making your life difficult. It must confirm you are who you say you are, that you are over 18, that you live somewhere it is permitted to serve, and that money moving through the account is not being laundered. These are conditions of holding a licence, and an operator that skipped them would risk losing it.
There is a second, quieter reason: verification protects the account. Once documents are on file and the payout method is tied to a verified name, someone who steals your password still cannot redirect a withdrawal to their own card.
Documents you should expect to be asked for
Most accounts are cleared with the first two rows below. The rest appear when something needs explaining — a large withdrawal, a newly added payment method, a mismatch between the details on file.
| Document type | What usually qualifies | What is being checked |
|---|---|---|
| Photo identification | Passport, Australian driver licence (both sides), or a state photo card. | Name, date of birth, and that the document is current and unaltered. Age 18+ is the hard gate. |
| Proof of address | Utility bill, council rates notice, bank statement or telco bill issued within the last three months, showing your name and address. | That you live where you say you do, in a country the operator may serve. Mobile bills are sometimes rejected; a utility or bank document is the safer choice. |
| Proof of payment method | A photo of the card with the middle digits covered and only the last four visible, or an e-wallet screenshot showing your name and account ID. | That the card or wallet belongs to you and matches the account name. Third-party payments are refused almost universally. |
| Selfie or liveness check | A photo of you holding your ID, or a short in-browser face scan. | That the person behind the account is the person on the document, rather than someone holding a copy of it. |
| Source of funds | Payslips, an ATO notice of assessment, a bank statement showing salary, or documentation of a sale or inheritance. | Requested only for larger sums or unusual patterns: that the money entering play came from a legitimate source. |
Send full-page images, in colour, with all four corners visible and nothing cropped or blurred. A large share of rejections come down to a clipped corner or glare across a photo rather than anything substantive.
How long it takes
A complete, legible set of documents is usually reviewed within 24 to 72 hours. Incomplete submissions restart the clock, which is why a withdrawal that “took a week” has often been sitting in a loop of resubmissions rather than in a queue. Verify early — on the day you register, not on the day you win — and the first payout behaves like every payout after it. How this interacts with cashout timing is covered on our payout verification page.
Anti-money-laundering obligations
AML rules require a licensed operator to monitor patterns as well as identities: money that arrives and leaves with little play in between, sudden jumps in stake size, several payment instruments at once, accounts that look connected to each other. Where something looks unusual, the operator is entitled — and sometimes required — to request further evidence before releasing funds, and in serious cases to report the matter rather than warn the customer.
Two practical rules follow. Fund the account only from instruments in your own name; a deposit made on a partner’s card is the single most common cause of a frozen payout. And keep one account only — duplicates are treated as an integrity breach, and typically end in closure with the balance forfeited.
Source of funds, in plain terms
A source-of-funds check asks where money came from before it reached the casino, not how much you have altogether. Salary, savings, a property sale and an inheritance are all ordinary answers, and each has an ordinary document behind it. Cash without a paper trail is the hard case. Nothing is being alleged when the question is asked — it is a threshold, and the sums that trigger it are set by regulation, not by a suspicious staff member.
Protecting the account yourself
The operator secures its own side; the weak link is almost always the login. A password used nowhere else, stored in a password manager rather than a browser note, defeats the most common attack — credential reuse harvested from an unrelated breach. Turn on two-factor authentication if the platform offers it.
Never act on a request that arrived by email or SMS by clicking the link inside it. Open the site yourself and check your account from there. Support staff do not ask for passwords, and legitimate operators do not send urgent links demanding documents within the hour. That pattern is phishing, and gambling accounts are a favourite target precisely because they hold verified identity data.
If you think the account has been compromised
Change the password immediately, then contact live chat and ask for the account to be locked pending review. Check whether the registered email address, phone number or withdrawal method has been altered — changing the payout destination is the whole point of most account takeovers. Ask for a session and transaction history, and report unauthorised transactions to your bank as well. Do it the same day; disputes raised weeks later are far harder to resolve.
What we can and cannot tell you
Everything above is standard practice under a Curaçao licence, checked against the operator’s published terms. Thresholds, accepted document formats and review times remain the operator’s call and can change without notice. The Spinline casino Australia page summarises what the platform currently states, but its own support team is the only authority on what will be asked of your particular account.