Why crypto changes the assessment
When a player deposits by card or bank transfer, several regulated institutions have already looked at the money before it reaches the operator: the player's bank, the card scheme, the acquirer and the processor. Each applies its own checks. When a player deposits cryptocurrency directly to an operator's wallet, many of those intermediaries disappear. The operator receives value from a blockchain address, and its own controls carry more of the weight.
That shift is what payment providers focus on. An operator that accepts crypto is effectively running its own collection channel for part of its revenue. A provider handling that operator's business flows, such as supplier payments funded partly by converted crypto, needs confidence that the crypto channel is controlled as carefully as the fiat channels.
Crypto is not automatically a reason to decline. Many providers will work with crypto-accepting operators, provided the licence permits it, the controls are credible and the conversion path into fiat is clean. Others choose not to. Operators should expect a more detailed review than a fiat-only business would face.
Whether the licence permits crypto
The first question is whether the operator's licence allows it to accept cryptocurrency at all. Regulators take different positions. Some permit crypto deposits subject to conditions, some require prior approval, and some do not permit crypto for licensed gambling. Within a single group, one licensed entity may be allowed to accept crypto while another is not.
A payment provider will ask the operator to show that crypto acceptance is permitted under each relevant licence, and how it is limited. Evidence might include the regulator's rules, written approval, or legal advice that addresses the specific licence. If the operator accepts crypto only on brands run by one entity, the provider will want to see that crypto is switched off for the others.
Market licensing also applies. Crypto does not change where an operator is allowed to take players. A crypto-only brand that accepts players from countries requiring a local licence is in the same position as any other unlicensed operator in those markets. Because crypto deposits carry no card issuer country data, geo-blocking has to rely more heavily on IP checks, KYC and device data. Our guide to geo-blocking and market licensing covers those controls.
Player verification with crypto deposits
Some operators market crypto as a way to play with minimal identity checks. Payment providers treat that as a serious warning sign. Licensed operators are expected to verify players in line with their licence and AML obligations, whatever payment method the player uses.
A credible approach applies the same KYC standards to crypto players as to fiat players, with additional checks where crypto creates specific risks. That means verifying identity and address before withdrawals and at set deposit thresholds, applying enhanced due diligence to high-value players, and asking about source of funds where deposits are large or unusual.
Crypto also makes source of funds questions more nuanced. A player depositing a large amount of a cryptocurrency may have acquired it years ago at a much lower price, bought it recently on an exchange, or received it from another source. Operators should be ready to ask for exchange statements or wallet history where the amounts justify it, and to record what they found.
Wallet screening and blockchain analytics
Public blockchains allow anyone to trace the history of funds between addresses. Specialist blockchain analytics tools use that transparency to assess the risk attached to a given address or transaction. They identify links to sanctioned entities, darknet markets, ransomware, mixers, scams, stolen funds and other high-risk sources, and they attribute many addresses to known exchanges and services.
Operators that accept crypto should screen incoming deposits and outgoing withdrawal addresses with such a tool. In practice, that means setting risk thresholds, defining what happens when a deposit exceeds them, and keeping records of each alert and its resolution. A deposit with direct exposure to a sanctioned address, for example, should be frozen and handled according to the operator's sanctions procedures.
A payment provider will ask which analytics tool the operator uses, how it is configured, who reviews alerts, and how many alerts were raised and resolved over a recent period. It may ask to see examples of alerts and the decisions taken. An operator that cannot describe its screening process, or that relies on a wallet provider to do it without oversight, will struggle to satisfy a provider.
Custody and wallet management
How an operator holds crypto matters too. Some operators run their own wallets. Others use a third-party custodian or payment gateway that receives deposits on their behalf and converts or forwards the funds. Each model has implications.
Self-custody gives the operator control but also responsibility for key management, security and reconciliation. A provider will want to know how keys are protected, who can authorise transfers, and how wallet balances are reconciled to player liabilities. Losses through hacks or mismanaged keys can affect player funds and the operator's solvency.
Using a third-party gateway shifts some of these responsibilities. The provider will then look at the gateway: where it is based, whether it is registered or licensed as a virtual asset service provider in a recognised jurisdiction, what screening it performs, and what reports it gives the operator. A regulated gateway with good reporting makes the operator's file much easier to review than an unregulated service with limited transparency.
Volatility and accounting
Crypto prices can move sharply within hours. An operator holding player balances or revenue in crypto is exposed to those movements unless it manages them. If player balances are denominated in crypto, the operator's liabilities rise and fall with the market. If balances are denominated in fiat but backed by crypto holdings, the operator carries the price risk.
Many operators reduce this exposure by converting crypto revenue to fiat or to stablecoins promptly, and by holding only enough crypto to meet expected withdrawals. Stablecoins reduce price risk but introduce their own considerations, such as the issuer's reserves and the regulatory treatment of the coin in relevant jurisdictions.
Providers will ask how the operator accounts for crypto, how it measures and reports gains and losses, and how it ensures that player balances are always covered. A clear treasury policy, with limits on crypto holdings and a defined conversion schedule, answers these questions well.
Converting crypto to fiat for operating costs
Most of an operator's costs are payable in fiat. Platform fees, game revenue shares, salaries, licence fees and taxes are almost always invoiced in EUR, USD, GBP or another national currency. A crypto-accepting operator therefore needs a reliable path from crypto into fiat.
The cleanest path runs through a regulated exchange or virtual asset service provider in a recognised jurisdiction. The operator sells crypto on the exchange, and the exchange pays fiat to a bank or payment account held in the operator's own name. That fiat can then be converted between currencies and used to pay suppliers and other costs in the usual way.
A business payments provider receiving that fiat will want to trace it. Expect requests for exchange account statements in the operator's name, records showing which wallets sent crypto to the exchange, and the blockchain analytics reports on those wallets. Fiat arriving from an unregulated over-the-counter desk, from a third party's exchange account, or from a jurisdiction with weak virtual asset supervision is much harder to accept.
As an illustration only: an operator might sweep crypto revenue from its hot wallet to a regulated exchange account every week, sell it for EUR, withdraw the EUR to its operating account, and keep the exchange statement, wallet screening report and bank credit together as a single record for each conversion.
Crypto withdrawals and the travel rule
Withdrawals deserve as much attention as deposits. When a player asks to withdraw in crypto, the operator sends value to an address the player supplies. Without controls, that address could belong to someone other than the player, to a sanctioned party, or to a service used to obscure the trail of funds.
Sensible practice is to screen every withdrawal address before paying, to require that withdrawals go back to addresses the operator can reasonably link to the player, and to apply extra checks when a player changes address or withdraws much more than they deposited. Some operators require crypto withdrawals to return to the same address used for deposit wherever possible, which closes off a common route for laundering.
Many jurisdictions now apply information-sharing rules, often called the travel rule, to transfers between virtual asset service providers. These require originator and beneficiary details to travel with the transfer. Whether and how they apply to a gambling operator depends on its licence and location, but a provider will want to know that the operator has considered them and that its gateway or custodian complies where required.
What to prepare for a provider
A crypto-accepting operator applying for business payment services should prepare, in addition to the standard documents for a licensed operator:
- evidence that each licence permits crypto acceptance, and on which brands;
- a description of the crypto payment flow, including any gateway or custodian;
- details of the blockchain analytics tool, its configuration and recent alert statistics;
- KYC and source of funds procedures as applied to crypto players;
- the treasury policy on crypto holdings, stablecoins and conversion;
- statements from the exchanges or gateways used to convert crypto to fiat, in the operator's name;
- a split of revenue between crypto and fiat channels, by month.
Providers will look at the size of the crypto channel relative to the whole business. An operator where crypto is a modest share of revenue alongside established fiat processing is usually viewed differently from one that relies almost entirely on crypto.
General information, not legal advice
This article is general information about how crypto-accepting iGaming operators are assessed by payment providers. It is not legal advice. Crypto rules differ between gaming regulators and between jurisdictions, and operators should take advice on their own licences.
CCYFX works with licensed operators on fiat business-to-business flows and does not handle player deposits in any form. Our digital assets page explains how we approach businesses with crypto exposure.
