Sportsbooks run identity verification, KYC, before they pay out, because regulators require it and because bonus abuse rings run on fake identities. The check usually asks for a government ID, a selfie, and proof of address. Accounts that fail it, or that share a device fingerprint with a limited account, get shut down.
Why the check comes at withdrawal, not signup
The book lets you deposit and bet before it knows who you are, because the deposit is the point. The check comes when you try to take money out, because that is the moment the book has something to lose. Regulators require it, and the book has every incentive to enforce it: a payout to a fake identity is a payout the book cannot recover, and a payout to a bonus abuser is a payout the book was tricked into making.
The delay is the feature, not a bug. A book that verified every account at signup would lose customers at the door. A book that verifies at withdrawal keeps the signup fast and puts the friction where the money is. The bettor who planned to withdraw eventually has to pass the check either way. The bettor who was never going to pass it is the one the book is trying to catch.
Related reading on this site: Home and Promo Abuse Bots: How a Sign-Up Offer Gets Drained in an Hour cover the neighbouring problems in more depth.
What the book is actually checking
The check has three parts. First, the government ID proves a real person exists with that name and date of birth. Second, the selfie proves the person holding the account is the person on the ID, sometimes with a liveness check that asks you to blink or turn your head. Third, the proof of address, usually a utility bill or bank statement, proves you live in a legal jurisdiction. Each part closes a gap the others leave open.
The common reasons for delay are boring: a blurry photo, a mismatched name, an expired ID, or a bill that is more than a few months old. The check usually takes minutes to a few days, depending on the book and whether the documents are clear. A clean submission with a current ID and a recent bill usually passes fast. A sloppy one goes to a manual queue, and manual queues are where withdrawals go to wait.
The device fingerprint behind the selfie
The selfie is not the only check, and it is not the one that catches the most fraud. Behind it sits a device fingerprint: the browser, the operating system, the screen, the fonts, the network, and the history of the device. A new account on a device that has already hosted a limited account, or five accounts that all share the same fingerprint, looks different from a new account on a clean device. That fingerprint is why a second account gets shut down faster than the first.
The same fingerprinting is what catches bonus abuse rings. A ring that opens twenty accounts to collect twenty welcome bonuses has to run them on devices, and those devices leave traces. The book does not need to catch the ring at signup. It needs to catch it at the first withdrawal, when the ring tries to take the money out. The selfie proves you are a person. The fingerprint proves you are not the same person as the last twenty accounts.
Frequently asked questions
What is KYC at a sportsbook?
Know Your Customer checks. The book verifies that you are who you claim to be, that you are old enough to bet, and that you are in a legal jurisdiction. Regulators require it, and it is the main defense against bonus abuse rings and multi-accounting.
Why does my sportsbook want a selfie?
To match your face to the ID you submitted. A photo of an ID alone does not prove the person holding the account is the person on the ID. The selfie, sometimes with a liveness check, closes that gap.
How long does KYC verification take?
Minutes to a few days, depending on the book and whether the documents are clear. Blurry photos, mismatched names, and expired IDs are the usual reasons for delays.
Can a sportsbook refuse to pay me after KYC?
It can refuse to pay if the account fails verification, if the account shares a device fingerprint with a previously limited account, or if the terms of service were breached. Balances on closed accounts are usually returned, but the timeline varies.