The United States iGaming and sweepstakes industry has experienced explosive growth over the past several years, attracting millions of players to online platforms that offer casino-style entertainment through innovative dual-currency models. However, this rapid expansion has simultaneously attracted the attention of regulators, law enforcement, and financial crime professionals who recognize that these platforms present significant anti-money laundering (AML) and financial crime vulnerabilities.
As we navigate 2026, the regulatory landscape is shifting dramatically. States are enacting sweeping legislation to ban unregulated sweepstakes casinos, federal agencies are tightening Bank Secrecy Act (BSA) oversight, and the industry stands at a crossroads between compliance and extinction. For AML professionals, compliance officers, and financial institutions servicing gaming operators, understanding these developments is not just important — it is essential.
The Sweepstakes Casino Model: A Compliance Blind Spot
Sweepstakes casinos have operated in a legal grey zone by using a dual-currency system — typically “Gold Coins” for free play and “Sweeps Coins” that can be redeemed for real cash prizes. This model allowed operators to argue they were not offering traditional gambling, thereby avoiding the rigorous licensing, KYC (Know Your Customer), and AML requirements imposed on regulated casinos.
The problem? These platforms have historically lacked the robust compliance infrastructure that regulated casinos maintain. Weaker KYC protocols, minimal transaction monitoring, and limited Suspicious Activity Report (SAR) filing obligations have made sweepstakes casinos prime targets for money launderers, fraud rings, and other financial criminals seeking to exploit regulatory gaps.
Under the Bank Secrecy Act, any casino with annual gross gaming revenue exceeding $1 million is classified as a “financial institution” and must comply with FinCEN’s comprehensive AML program requirements, including Currency Transaction Reports (CTRs) for transactions over $10,000 and SARs for suspicious activities. Many sweepstakes operators, however, have sidestepped these obligations by arguing their platforms fall outside the regulatory definition of a “casino.”
The 2025–2026 Regulatory Crackdown
The regulatory environment shifted decisively in 2025, with multiple states taking aggressive action against sweepstakes casino platforms:
New York: Senate Bill S5935 was enacted on December 5, 2025, immediately prohibiting platforms using dual-currency systems that mimic casino gaming or sports wagering. Enforcement extends to operators, technology providers, payment processors, financial institutions, media affiliates, and geolocation vendors.
California: Assembly Bill 831 took effect January 1, 2026, explicitly banning online sweepstakes casinos that simulate real-money gambling through dual-currency models.
Other States: A growing number of states have introduced or are considering similar legislation, signaling a nationwide trend toward eliminating the sweepstakes grey zone.
At the federal level, BSA and AML compliance remained a top priority for the American Gaming Association (AGA), which released updated Best Practices in 2025 mandating that AML programs be approved at the board level and that qualified AML Officers be empowered with the authority to influence corporate decision-making. FinCEN has continued to emphasize risk-based approaches and has signaled increased scrutiny of the gaming sector’s compliance posture.
Key Financial Crime Risks in iGaming & Sweepstakes
The convergence of digital gaming platforms and financial services creates a fertile environment for various financial crime typologies:
Layering through gaming accounts: Criminals deposit illicit funds, place minimal bets, and withdraw “winnings” as seemingly legitimate income, obscuring the money trail.
Structuring and smurfing: Breaking large amounts into smaller transactions below CTR thresholds across multiple accounts or platforms.
Identity fraud and synthetic identities: Weak KYC processes allow criminals to open accounts using stolen or fabricated identities, creating untraceable channels for fund movement.
Cryptocurrency integration: Many iGaming platforms accept cryptocurrency deposits, adding an additional layer of anonymity and complicating transaction monitoring.
Third-party payment processor abuse: Unlicensed operators frequently rely on complex payment chains involving multiple processors, making it difficult for banks and compliance teams to trace the origin and destination of funds.
Enhanced Due Diligence: The New Standard
The 2026 regulatory environment demands that both gaming operators and the financial institutions that service them adopt Enhanced Due Diligence (EDD) measures. This includes comprehensive Source of Wealth (SOW) and Source of Funds (SOF) documentation for high-risk patrons, including tax filings, investment histories, and employment verification.
For banks and payment processors working with iGaming operators, the expectation is clear: you must understand not only your direct customer (the operator) but also the operator’s customers — the players. This “KYCC” (Know Your Customer’s Customer) approach requires robust data sharing agreements, real-time transaction monitoring, and a willingness to file SARs proactively when suspicious patterns emerge.
FinCheck’s Perspective & the Way Forward
At FinCheck LLC, we view the current regulatory evolution as a necessary and overdue correction. The unregulated sweepstakes sector has been a compliance blind spot for too long, and the coordinated state and federal response we are witnessing is the natural consequence of an industry that outpaced its regulatory framework.
Here is what we recommend for stakeholders navigating this rapidly shifting landscape:
iGaming operators must proactively build BSA/AML programs that meet FinCEN standards — even if state law has not yet caught up. Waiting for enforcement is not a strategy; it is a liability.
Financial institutions must treat iGaming clients as high-risk and apply EDD from onboarding through ongoing monitoring. The reputational and regulatory risk of servicing non-compliant operators is significant.
Compliance professionals should invest in technology-driven transaction monitoring solutions capable of detecting gaming-specific typologies, including velocity patterns, chip dumping indicators, and cross-platform structuring.
Regulators should work toward a unified federal framework for iGaming AML compliance rather than the current patchwork of state-level legislation, which creates jurisdictional arbitrage opportunities for bad actors.
The iGaming and sweepstakes industry is at an inflection point. Those who embrace compliance as a competitive advantage will survive and thrive in the regulated market that is emerging. Those who resist will find themselves on the wrong side of history — and the wrong side of the law.
