Relevance Verified: 20-03-2026
Last updated: 31-03-2026
AML compliance in iGaming is where financial crime law, gambling regulation and real-time operational systems intersect. My work as a compliance director involves building and maintaining the programme architecture that keeps an operator on the right side of PCMLTFA: the risk-based framework, the Customer Due Diligence tiers, the transaction monitoring calibration, the STR and LVCTR filing workflows, and the record-keeping obligations that create the audit trail FINTRAC examines when it conducts a compliance review. The iGaming Ontario market structure creates a unique compliance dynamic: iGO is the PCMLTFA reporting entity — the operator that legally bears the AML reporting obligation — while private operators are its agents who execute the programme on the ground. Since April 2022, iGO has submitted over 80,000 reports to FINTRAC on behalf of Ontario's licensed operators. In January 2025, FINTRAC issued a specific advisory warning that known fentanyl traffickers were using Ontario iGaming platforms to launder funds. The compliance stakes are not theoretical.
What foundational casino and compliance terms does every Canadian player need before understanding AML programme architecture?
| Term | What it means | AML programme dimension |
|---|---|---|
| House Edge / RTP | The operator's mathematical advantage; RTP is independently certified before any game goes live | From an AML perspective: the house edge is the "wash cost" that a money launderer accepts in exchange for converting illicit funds into legitimate-appearing winnings. Low-house-edge games (baccarat Banker at 1.06%, blackjack with basic strategy at ~0.5%) are the preferred laundering vehicles because the conversion cost is minimised |
| Wagering Requirement | Turnover threshold before bonus funds withdraw — capped at 30x at all iGO-licensed operators by AGCO | Rapid, high-volume wagering to complete a WR mimics a layering pattern — the same deposit-to-wagering-to-withdrawal cycle that characterises money laundering. Transaction monitoring systems must distinguish between legitimate bonus completion and suspicious layering; calibration is the compliance challenge |
| KYC | Know Your Customer — identity verification before withdrawal; government ID, proof of address at all iGO-licensed platforms | KYC is the first element of Customer Due Diligence (CDD) — it establishes identity. But KYC alone is not CDD: a complete CDD process also verifies source of funds, assesses risk profile, screens against PEP and sanctions lists, and assigns the customer to a risk tier that governs ongoing monitoring intensity |
| Bankroll | Dedicated gambling budget; set deposit limits before any session at all iGO-licensed platforms | From compliance: a player's declared income and bankroll are the baseline against which spending patterns are assessed for affordability and source-of-funds plausibility. A player with self-declared income of C$40,000 per year depositing C$20,000 per month triggers a proportionality flag requiring Enhanced Due Diligence under any well-calibrated system |
| Interac | Canada's bank-to-bank instant transfer — the optimal payment method at all iGO-licensed platforms | Interac deposits are the most AML-compliant payment method available to Canadian players: every transaction links to a verified Canadian bank account with an owner known to the banking system. This traceability is why Interac is the preferred method from a compliance standpoint — and why cash-equivalent or anonymous deposit methods attract elevated scrutiny |
| iGO as Reporting Entity | Under PCMLTFA, iGaming Ontario is the designated reporting entity for Ontario's regulated market — private operators are its agents | This is the structural centrepiece of Ontario's AML framework. iGO bears the legal FINTRAC reporting obligation; it submitted 80,000+ reports since April 2022. When the FINTRAC portal was offline from March 2024 to March 2025 following a cyberattack, iGO administered its AML programme using alternative methods while building a backlog — an operational test of AML programme resilience |
What AML programme architecture and FINTRAC reporting vocabulary do Canadian players and compliance professionals need?
| Term | Category | Definition and iGaming compliance relevance |
|---|---|---|
| STR (Suspicious Transaction Report) | FINTRAC Reporting | A mandatory FINTRAC filing when there are "reasonable grounds to suspect" a transaction relates to money laundering or terrorist financing — no monetary threshold; any amount can trigger an STR. Must be filed within 30 days of when suspicion was first formed. The "reasonable grounds to suspect" standard is deliberately low: if a reasonable person in similar circumstances would suspect, the STR must be filed |
| LVCTR (Large Virtual Currency Transaction Report) | FINTRAC Reporting | Mandatory FINTRAC filing for any single virtual currency transaction of C$10,000 or more received — the crypto equivalent of the Large Cash Transaction Report. Requires full collection of name, address, date of birth and occupation of all parties. iGO-licensed operators do not currently accept direct crypto deposits, making LVCTR less immediately relevant than STR for Ontario's licensed market |
| Structuring | ML Typology | Breaking a single large transaction into multiple smaller ones to avoid triggering reporting thresholds — explicitly flagged by FINTRAC in its iGaming-specific typology bulletin as a pattern used by criminals at Ontario platforms. Transaction monitoring systems must detect deposits of C$9,500 repeated across sessions that aggregate to reportable amounts |
| Risk-Based Approach (RBA) | Programme Framework | The PCMLTFA-mandated principle that AML controls should be calibrated to the assessed risk of each customer and transaction — higher-risk relationships receive more intensive due diligence, lower-risk relationships receive proportionate but lighter controls. FINTRAC expects the RBA to be documented in the compliance programme, reviewed regularly for effectiveness, and auditable on examination |
| Transaction Monitoring (TM) Calibration | System Architecture | The process of setting alert thresholds in the automated monitoring system — too low produces false positives that overwhelm compliance analysts; too high misses genuine suspicious patterns. iGaming-specific TM must distinguish legitimate high-volume players from money launderers, which requires game-type awareness: a player running C$50,000 through baccarat at minimum stakes looks very different from a recreational slot player at the same deposit amount |
| False Positive Rate | TM Efficiency | The percentage of TM alerts that, on investigation, turn out to be legitimate activity — industry benchmark is typically 95–99% false positives in early-stage programmes. High false positive rates exhaust analyst capacity and increase the risk of genuine suspicious activity being missed in the noise. Calibration tuning is an ongoing compliance programme activity, not a one-time setup |
| FATF Recommendations | International Standard | The Financial Action Task Force's 40 international AML/CFT standards — Canada is a FATF member and its PCMLTFA framework aligns to these recommendations. FATF Recommendation 22 specifically extends CDD and record-keeping obligations to designated non-financial businesses and professions including casinos; Recommendation 10 covers the CDD framework that underpins Canada's iGaming AML requirements |
| Compliance Programme Five Pillars | PCMLTFA Requirement | PCMLTFA mandates five documented elements in every reporting entity's AML programme: (1) written compliance policies and procedures; (2) appointment of a designated compliance officer; (3) written risk assessment; (4) ongoing compliance training for staff; (5) documented effectiveness review of the programme. FINTRAC examiners test all five on any compliance examination — absence of any one is a material finding |
| Record-Keeping Obligation | PCMLTFA Requirement | Under PCMLTFA, reporting entities must retain identity records, transaction records, STR copies and business relationship records for a minimum of 5 years from the date of the last transaction. These records must be available to FINTRAC examiners on request. For iGO-licensed operators, player transaction histories and the supporting documentation for all risk decisions must meet this retention standard |
What are the key iGaming-specific AML red flags — and how does FINTRAC's typology guidance apply to Canadian players?
FINTRAC has published specific guidance on money laundering indicators for online gambling, and in January 2025 issued an advisory warning that known fentanyl traffickers were believed to be using Ontario iGaming platforms to move funds. The iGaming-specific red flags are distinct from those in retail banking — the speed of transactions, the availability of multiple game types at different house edges, and the platform's global accessibility create specific laundering vectors that general AML typologies don't capture.
The single-star ratings in the scorecard for Risk Assessment implementation effectiveness and Transaction Monitoring implementation effectiveness are the two areas where Ontario iGaming operators most frequently underperform relative to the design quality of their written programmes. A well-written risk assessment document that references iGaming-specific FINTRAC typologies (structuring, rapid deposit-withdrawal cycling, baccarat laundering patterns) scores well on design. Translating that risk assessment into calibrated TM thresholds that actually fire the right alerts on the right player activity is where the programme often falls short — and where FINTRAC examiners focus their examination. The Effectiveness Review being a single star across both design and implementation reflects a broader industry gap: many operators review their programme compliance posture annually, but independent effectiveness reviews — specifically testing whether the TM thresholds and CDD escalation processes produce the outcomes the policies describe — remain underimplemented relative to the standard FINTRAC expects.
You must be 19+ to play at all iGO-licensed Ontario platforms (18+ in Alberta, Manitoba and Quebec). If gambling is causing concern, ConnexOntario is free and available 24/7 at 1-866-531-2600. Explore Wildz's full range of iGO-licensed games and payment options — all operated within Ontario's fully compliant AML framework — at the home page, or log in to review your account settings and deposit limits.
